Re: ATMSNMPD Vulnerable but not Addressed

2002-05-13 Thread Emre Yildirim
. The patches are also not listed under http://sunsolve.sun.com/pub-cgi/show.pl?target=patches/xos-8nav=pub-patches which is the Recommended Security Patches for Solaris page. Why is it not on there? I have no clue. I guess it is not a security issue or it isnt a recommended patch. Cheers Emre

RE: URGENT SECURITY ADVISORY FOR SSH SECURE SHELL 3.0.0

2001-07-24 Thread Emre Yildirim
SSH Secure Shell 3.0.0 does not ship with any of the operating systems mentioned, nor does the announcement specify that it does. However, if a user has explicitly installed SSH Secure Shell 3.0.0 on any of the listed operating systems, they are vulnerable to this potential exploit. I

Re: Two birds with one worm.

2001-07-19 Thread Emre Yildirim
It looks like the Code Red worm has the added side effect of crashing Cisco (675/678) DSL CPEs running any CBOS prior to 2.4.1. The GET it sends looking for IIS servers hardlocks any modem with the web management interface enabled. CBOS v2.4.2 is unaffected. Also, turning off the web

RE: 'Code Red' does not seem to be scanning for IIS

2001-07-19 Thread Emre Yildirim
the worm just tries port 80 on ip's. doesnt care if its IIS or not. This is weird. I just checked the www logs of one of our webservers, and found about 144 hits in a 5 hours time span. There seems to be no pattern either; the IPs are all random (although there were a lot of .cn and .tw as

Re: Security flaw in Telocity's Gateway Modem

2001-02-22 Thread Emre Yildirim
On Tuesday 20 February 2001 18:29 US Central Time, Kras Hish wrote: Telocity provides DSL to their customers through what they call the Telocity "Gateway Modem". In the modems, you can connect to them through your web browser to view usage statistics, your assigned IP, the DHCP server IP