Re: [Full-Disclosure] Xfree86 video buffering?

2005-02-26 Thread evilninja
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 oh, i forgot: > On Sat, 26 Feb 2005 21:17:43 +0100, _evil <[EMAIL PROTECTED]> wrote: >> i've had a similiar issue with a 3dfx "banshee" videocard and some >>(beta)driver under win2k (or win98?). this card had 16MB video-ram - -

Re: [Full-Disclosure] this is fun?

2005-02-21 Thread evilninja
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Jeffrey Denton wrote: > > Sometimes you have to have to use a sniffer. Grabbed with lynx and > ethereal: >> oh, yes. i forgot about sniffing for a while. thanks for the hint, christian. - -- BOFH excuse #69: knot in cables caused data stream to bec

Re: [Full-Disclosure] Gmail anomaly

2004-11-19 Thread evilninja
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 GuidoZ schrieb: > I agree - the default cookie manager leaves much to be desired. I've > found a very useful extension called "CookieCuller" that handles them [...] > > On Fri, 19 Nov 2004 00:10:33 -0500, Micheal Espinola Jr > <[EMAIL PROTECTED]> wrot

[Full-Disclosure] question regarding CAN-2004-0930

2004-11-16 Thread evilninja
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 hi, don't know if this is the right place to ask, but here it goes: i was notified by one of my users (!) about the recent samba vulnerability (CAN-2004-0930 [1]) that this is indeed easily "exploitable" by just issuing commands with long wildcard-pa

Re: [Full-Disclosure] could use some help with this logging

2004-11-11 Thread evilninja
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 [EMAIL PROTECTED] schrieb: > Hi > > I was hoping someone could kinda help me.. I have some reporting from our > firewall that produces the following output. I have to analyze this traffic > but i have to confess that i can not make out if this traffi

Re: [Full-Disclosure] ntpd segfaults accessing IPv6 hosts

2004-11-04 Thread evilninja
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Bernhard Kuemel schrieb: > Hi full-disclosure! > > ntpd 1:4.2.0a-11 (as in debian testing/sarge and unstable/sid) segfaults > when accessing ntp servers on IPv6 hosts. I don't know whether this bug you forgot to Cc: [EMAIL PROTECTED] who is the maint

Re: [Full-Disclosure] [OT] unarj dir-transversal bug (../../../..)

2004-10-12 Thread evilninja
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Cedric Blancher wrote: > There was a time when arj archiver was not available under Debian, for > licensing/distribution problems, and only unarj package was available. > As you can see, stable has only unarj 2.43 in non-free section : ah! i *thought*

Re: [Full-Disclosure] unarj dir-transversal bug (../../../..)

2004-10-12 Thread evilninja
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Chris Umphress wrote: >>...somehow i don't expect programs to mess with /usr. not as a user and >>not as root. > > I just picked /usr, it could have been /etc, /var or any other > standard directory that every *nix distribution has. Regardless, if I >

Re: [Full-Disclosure] unarj dir-transversal bug (../../../..)

2004-10-12 Thread evilninja
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 [EMAIL PROTECTED] wrote: > On Mon, 11 Oct 2004 16:29:40 -0700 evilninja <[EMAIL PROTECTED]> wrote: > >>[EMAIL PROTECTED]:~$ unarj x test.arj >>ARJ32 v 3.10, Copyright (c) 1998-2004, ARJ Software Russia. [27 >>Jun 2004

Re: [Full-Disclosure] unarj dir-transversal bug (../../../..)

2004-10-11 Thread evilninja
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Chris Umphress wrote: > [EMAIL PROTECTED]:~/test$ unarj x test.arj > UNARJ (Demo version) 2.30 Copyright (c) 1991 Robert K Jung > > Processing archive: test.arj > Archive date : 2012-11-10 27:44:04 > Can't open ../../usr/local/bin/tes

Re: [Full-Disclosure] magic trick ... voila 100% cpu

2004-08-12 Thread evilninja
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 kf_lists wrote: > I really could not find a use for this... can anyone else? > > rename it to .html and double click it. You must have msoffice installed > I believe. -KF whatever the JS code in your attachement does - at least it crashes my Mozilla T

Re: [Full-Disclosure] Re: Mozilla Firefox Certificate Spoofing

2004-08-01 Thread evilninja
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Peter Besenbruch wrote: > This was fixed by the July 27 builds in both Firefox 0.9.2( or 1) and > Mozilla 1.7. The Mozilla 1.4 branch was also updated. i was not able to reproduce it in "Gecko/20040719 Firefox/0.9.1" either. all i get is the real http

Re: [Full-Disclosure] Antivirus/Trojan/Spyware scanners DoS!

2004-06-13 Thread evilninja
bipin gautam wrote: Hello everybody, I wounder how many Antivirus/Trojan/Spyware scanners will choak to death while having a manual scan of the file: http://www.geocities.com/visitbipin/SERVER_dwn.zip I was woundering, what would be the results if such file gets stucked in an "AV gateway" (O; pleas

Re: [Full-Disclosure] Pentesting an IDP-System

2004-05-29 Thread evilninja
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Marcin Owsiany schrieb: | What does "to pentest" mean? I tried 4 dictionaries, without success. | Is it the same as "to test on paper"? penetration testing, as in http://www.penetration-testing.com/ (just found it with google...) - -- BOFH excuse #172: