Re: [Full-disclosure] Apache suEXEC privilege elevation / information disclosure

2013-08-13 Thread terry white
... ciao: : on 8-13-2013 Reindl Harald writ: : and so stop trying to be a smartass in topics you are clueless : : Please no personal insults : truth != insult it is perhaps just me, but when i see smartass in an otherwise reasoned dialogue, the TRUTH, is seldom if ever, my first

Re: [Full-disclosure] Apache suEXEC privilege elevation / information disclosure

2013-08-11 Thread terry white
... ciao: : on 8-10-2013 Gichuki John Chuksjonia writ: : most of the Admins who handle webservers : in a network are also developers name , just a few : most of the organizations will always need to cut on expenses, history suggests, security breaches, are NOT a profit center.

Re: Facebook Information Disclosure

2013-06-25 Thread terry white
... ciao: : on 6-24-2013 Jeffrey Walton writ: : On Fri, Jun 21, 2013 at 5:40 PM, Packet Storm : bugt...@packetstormsecurity.org wrote: : From the write-up: : ]] It was clear that Facebook attacked the disclosure flaw properly, but : ]] concerns still remain about the fact that dossiers are

Re: Vulnerabilities in NovaBoard

2010-04-23 Thread terry white
... ciao: : on 4-21-2010 MustLive writ: and about which, i find me confused. : you can saw the letter which was posted last week by one developer of : one such vulnerable web application --- from my reading of that exchange, i thought the author a 'system administrator', rather

Re: Sun M-class hardware denial of service

2008-09-10 Thread terry white
... ciao: : on 9-9-2008 B 650 writ: : I think it's a bit of a leap to call this a DoS vulnerability. : The power cycle of the remainder of the frame can be done at your leisure which, convenient if nothing else, still has to be done. so, at some point, all 'mission critical applications',

Re: Has anyone implemented double forward DNS?

2008-09-03 Thread terry white
... ciao: : on 8-30-2008 Duncan Simpson writ: : The major problem ... in ISP's dynamically allocated address pools ISPs that offer static address blocks, which do not reverse map would present a more significant problem ... -- ... i'm a man, but i can change, if i have to , i guess