[Full-Disclosure] [SECURITY] [DSA 574-1] New cabextract packages fix unintended directory traversal

2004-10-28 Thread debian-security-announce
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 - -- Debian Security Advisory DSA 574-1 [EMAIL PROTECTED] http://www.debian.org/security/ Martin Schulze October 28th, 2004

[Full-Disclosure] [ GLSA 200410-30 ] GPdf, KPDF, KOffice: Vulnerabilities in included xpdf

2004-10-28 Thread Thierry Carrez
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 200410-30 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - -

[Full-Disclosure] [USN-4-1] Standard C library script vulnerabilities

2004-10-28 Thread Martin Pitt
=== Ubuntu Security Notice USN-4-1 October 27, 2004 Standard C library script vulnerabilities CAN-2004-0968 === A security issue affects the following Ubuntu releases:

[Full-Disclosure] [USN-9-1] tetex-bin vulnerabilities

2004-10-28 Thread Martin Pitt
=== Ubuntu Security Notice USN-9-1 October 27, 2004 tetex-bin vulnerabilities CAN-2004-0888 === A security issue affects the following Ubuntu releases: Ubuntu 4.10 (Warty

[Full-Disclosure] Re: Death Notice: Matt Heckaman

2004-10-28 Thread Gary Kline
On Wed, Oct 27, 2004 at 11:11:20PM -0500, J.A. Terranson wrote: [Posted to a variety of places, as Matt was a prolific coder who maintained many ports and worked on literally dozens of projects] -- Yours, J.A. Terranson [EMAIL PROTECTED] 0xBD4A95BF An ill wind is stalking

[Full-Disclosure] Presentation: Bypassing client application protection techniques with notepad

2004-10-28 Thread 3APA3A
Topic: Bypassing client application protection techniques Category: Protection bypass Affected products: CheckPoint VPN-1(TM) FireWall-1(R) NG with Application Intelligence (R55) HFA 9 Microsoft Windows XP SP2 Agnitum Outpost Pro 2.1, 2.5 Tiny Firewall Pro v6.0.100 ZoneAlarm Pro with

[Full-Disclosure] Re: getting administrator rights on win2003 machine?

2004-10-28 Thread Valentin Höbel
Hi folks, I'm at a boarding school in germany and we have a kind of internet terminal there with win2003 running on the computers. My question is: Is there a way of getting administrative privileges ? I used a RPC Exploit before but now the computers are patched. How do I get a

Re: [Full-Disclosure] Re: getting administrator rights on win2003 machine?

2004-10-28 Thread Harry de Grote
Op Thursday 28 October 2004 15:08, Valentin Höbel sgreifde: Hi folks, I'm at a boarding school in germany and we have a kind of internet terminal there with win2003 running on the computers. My question is: Is there a way of getting administrative privileges ? I used a RPC Exploit

[Full-Disclosure] Re: getting administrator rights on win2003 machine?

2004-10-28 Thread Random Letters
Why do you want to get administrative privileges? It can't be for a good purpose. You just want to make more work for the people who probably work very hard supporting you. You're a parasite. Grow up, get a life. If you want to be Administrator then buy your own PC. This list is for people who

[Full-Disclosure] Hackers of [xpire.info] use an unknown Apache 1.3.27 exploit???

2004-10-28 Thread Elia Florio
Hi list, I'm fighting again against an hackers crew (I suppose the same mentioned in this link: http://seclists.org/lists/incidents/2004/Jul/0056.html ) which is installing various malware on many compromised box to get group of zombies ready-to-run. (follow my previous mail on xpire.info and

Re: Re: [Full-Disclosure] Re: getting administrator rights on win2003 machine?

2004-10-28 Thread Honza Vlach
use knoppix to boot from, mount the ntfs filesystem, and search the net for which keys in registry you have to change. there may be other files too that you have to change there even are special bootcd's that are made only for the purpose of changing the admin pass etc... I thought that

RE: [Full-Disclosure] Re: getting administrator rights on win2003 machine?

2004-10-28 Thread Andrew Poodle
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Random Letters Sent: 28 October 2004 15:17 To: [EMAIL PROTECTED] Subject: [Full-Disclosure] Re: getting administrator rights on win2003 machine? snip This list is for people who try to prevent

Re: [Full-Disclosure] Re: getting administrator rights on win2003 machine?

2004-10-28 Thread Michel van der Klei
On Thu, Oct 28, 2004 at 03:41:05PM +0200, Harry de Grote wrote: Op Thursday 28 October 2004 15:08, Valentin H?bel sgreifde: Hi folks, I'm at a boarding school in germany and we have a kind of internet terminal there with win2003 running on the computers. My question is: Is there a

Re: [Full-Disclosure] Re: getting administrator rights on win2003 machine?

2004-10-28 Thread Robert Allinson
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Random Letters wrote: | Why do you want to get administrative privileges? It can't be for a | good purpose. You just want to make more work for the people who | probably work very hard supporting you. You're a parasite. | | Grow up, get a life. If you

Re: [Full-Disclosure] Re: getting administrator rights on win2003 machine?

2004-10-28 Thread Harry de Grote
Op Thursday 28 October 2004 16:39, Andrew Poodle sgreifde: Shame really.. I almost laughed at the request.. But was a little surprised to see help offered almost immediately if you were talking about my reply... i just said it was possible. we all know that if you have local access you can

Re: [Full-Disclosure] Re: getting administrator rights on win2003 machine?

2004-10-28 Thread KF_lists
Look for wonderful tray icons running as System... (anti-virus software - *hint*hint*) -KF Valentin Höbel wrote: Hi folks, I'm at a boarding school in germany and we have a kind of internet terminal there with win2003 running on the computers. My question is: Is there a way of getting

[Full-Disclosure] PuTTY IPv6 0.56 also updated

2004-10-28 Thread Jeroen Massar
In response to the announcement of PuTTY 0.56, I have updated the PuTTY IPv6 tree to be up-to-date with the 0.56 version. Precompiled versions can be found, as usual, including the patch at: http://unfix.org/projects/ipv6/ I've also signed the MD5SUMS included in the archive with my PGP key,

Re: [Full-Disclosure] Re: getting administrator rights on win2003 machine?

2004-10-28 Thread Valdis . Kletnieks
On Thu, 28 Oct 2004 16:49:44 +0200, Honza Vlach said: --9Ek0hoCL9XbhcSqy Content-Type: text/plain; charset=iso-8859-2 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable use knoppix to boot from, mount the ntfs filesystem, and search the net for which keys in

RE: [Full-Disclosure] Re: getting administrator rights on win2003 machine?

2004-10-28 Thread Todd Towles
Request like that will get you kicked out of other groups. Yet the request was fill quickly, even without the requester pretending to be a Security Professional -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andrew Poodle Sent: Thursday, October

Re: [Full-Disclosure] Re: getting administrator rights on win2003 machine?

2004-10-28 Thread Mike Nice
A bit more on topic: If your administrator has used syskey level 2 or 3, the suggested approaches won't work. In addition, if your administrator used the Encrypting File System, any encrypted files will also be out of your reach; other than to be able to see filenames, dates, encrypted

[Full-Disclosure] [SECURITY] [DSA 575-1] New catdoc packages fix temporary file vulnerability

2004-10-28 Thread debian-security-announce
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 - -- Debian Security Advisory DSA 575-1 [EMAIL PROTECTED] http://www.debian.org/security/ Martin Schulze October 28th, 2004

Re: [Full-Disclosure] Re: getting administrator rights on win2003 machine?

2004-10-28 Thread Valdis . Kletnieks
On Thu, 28 Oct 2004 16:29:36 EDT, Kenneth Ng said: It gets a bit harder when you have a lot of KVM switches in a big data center. It gets even harder when the KVM's are IP accessible throughout the firm because the twits who put it in didn't believe in IP access lists. Somehow, I get the

Re: [Full-Disclosure] Re: getting administrator rights on win2003 machine?

2004-10-28 Thread Kenneth Ng
It gets a bit harder when you have a lot of KVM switches in a big data center. It gets even harder when the KVM's are IP accessible throughout the firm because the twits who put it in didn't believe in IP access lists. On Thu, 28 Oct 2004 13:22:41 -0400, [EMAIL PROTECTED] [EMAIL PROTECTED]

Re: [Full-Disclosure] Re: getting administrator rights on win2003 machine?

2004-10-28 Thread darren windham
If you can't find the tool on your own that can reset the local admin account you need help. I carry it in floppy and cd form with me incase I ever have a server I'm working on that no one knows the passwords to. Learn to use search engines before you start making yourself look silly. On Thu,

Re: [Full-Disclosure] Re: getting administrator rights on win2003 machine?

2004-10-28 Thread Anders Langworthy
Somehow, I get the feeling that the original poster's site will discover KVM switches around 2008 or so. ;) That's exactly my point. I don't necessarily approve of this list being used to help clueless script kiddies r00t systems, but the information needed to accomplish that feat is

[Full-Disclosure] Heh...30 minutes of SSH login attempts...not the standard root an d user attempts either

2004-10-28 Thread James Lay
Here it iswhat an ass.from Korea..doesn't suprise me ;) http://www.slave-tothe-box.net/public/pubnet.txt James Lay Network Manager/Security Officer AmeriBen Solutions/IEC Group Semper Vigilans!!! ___ Full-Disclosure - We believe in it.