Re: More (more) SSH Fun (X11 forwarding)

2002-07-13 Thread James Nord
Tom Hoover wrote: I have a related question. I have no trouble using X11 forwarding from within my LAN, but how do I punch thru my firewall using ssh? Here's my setup: a = firewall/router running potato b = desktop running woody c = laptop running woody If the laptop (c) is connected

Re: DSA-134-1

2002-06-25 Thread James Nord
i unterstand it as remote chrooted nobody exploit, this is much more better than a remote root-exploit. better in what way? Theo de Raadt said in a post to Bugtraq the exploit won't work on sshd with privilege seperation enabled, however even if it did work it'd be better to have

new www vulnerablity

2002-04-08 Thread James Nord
Hi, Is anyone aware of a vulnerablity that is characterised by the following against a www server? or is the ^E etc just a way of trying to hide the variuos attempts below? [Sat Apr 6 02:44:07 2002] [error] [client 24.101.140.253] Invalid method in request ^E^A [Sat Apr 6 02:44:07 2002]

new www vulnerablity

2002-04-08 Thread James Nord
Hi, Is anyone aware of a vulnerablity that is characterised by the following against a www server? or is the ^E etc just a way of trying to hide the variuos attempts below? [Sat Apr 6 02:44:07 2002] [error] [client 24.101.140.253] Invalid method in request ^E^A [Sat Apr 6 02:44:07 2002]

Re: FTP and security

2001-11-09 Thread James Nord
Adam Spickler wrote: Is there a decent Windows FTP application that supports sftp? Unfortunately, I have to use Windows at work. :/ PSFTP http://www.chiark.greenend.org.uk/~sgtatham/putty/download.html development snapshots only but still very useable. (also a pscp for scp) /James --

Re: FTP and security

2001-11-09 Thread James Nord
Adam Spickler wrote: Is there a decent Windows FTP application that supports sftp? Unfortunately, I have to use Windows at work. :/ PSFTP http://www.chiark.greenend.org.uk/~sgtatham/putty/download.html development snapshots only but still very useable. (also a pscp for scp) /James

Re: Is snort-stat and 5snort really broken in sid?

2001-09-12 Thread James Nord
[EMAIL PROTECTED] wrote: What version are you using?? make sure the following line is in your snort.conf -- I think the debian equiv is snort-lib: output alert_syslog: LOG_AUTH --sjk On 12 Sep, Andrew Pollock wrote: Even if I run snort-stat manually on auth.log (after I've made snort start

Re: Is snort-stat and 5snort really broken in sid?

2001-09-12 Thread James Nord
[EMAIL PROTECTED] wrote: What version are you using?? make sure the following line is in your snort.conf -- I think the debian equiv is snort-lib: output alert_syslog: LOG_AUTH --sjk On 12 Sep, Andrew Pollock wrote: Even if I run snort-stat manually on auth.log (after I've made snort start