RE: Re[2]: Solaris telnet vulnberability - how many on your network?

2007-02-23 Thread Roger A. Grimes
@lists.grok.org.uk Subject: Re[2]: Solaris telnet vulnberability - how many on your network? Dear Marc, This is hilarious, should there ever be a Top10 of the most weird bugs, this surely is one of them, repost for pure amusement : Solaris 2.6, 7, and 8 /bin/login has a vulnerability involving

Re[2]: Solaris telnet vulnberability - how many on your network?

2007-02-22 Thread Thierry Zoller
Dear Marc, This is hilarious, should there ever be a Top10 of the most weird bugs, this surely is one of them, repost for pure amusement : Solaris 2.6, 7, and 8 /bin/login has a vulnerability involving the environment variable TTYPROMPT. This vulnerability has already been reported to BugTraq

Re[2]: Solaris telnet vulnberability - how many on your network?

2007-02-22 Thread Steven M. Christey
Cromar Scott said: I know that my initial reaction was haven't I seen this before? but the above two are what I found in my notes when I looked back. There are at least 20 FTP server implementations that have had buffer overflows with a long USER command. HTTP GET directory traversals are

Re[2]: Solaris telnet vulnberability - how many on your network?

2007-02-16 Thread Thierry Zoller
Dear Casper Dik, I wasn't crying wolf about a Backdoor, heck I am not Steve Gibson. I was asking whether somebody will investigate why this hasn't been caught by audits or simply QA ? CDSC And one which was too easy to discover; You said it, it's easy to discover, so who has discovered it? Sun ?

RE: Re[2]: Solaris telnet vulnberability - how many on your network?

2007-02-15 Thread Evans, Thomas
PROTECTED] Sent: Thursday, February 15, 2007 1:49 AM To: [EMAIL PROTECTED] Cc: bugtraq@securityfocus.com Subject: Re: Re[2]: Solaris telnet vulnberability - how many on your network? In some mail from Thierry Zoller, sie said: CDSC real back doors are better I like that tautologie, real backdoors

RE: Re[2]: Solaris telnet vulnberability - how many on your network?

2007-02-14 Thread Roger A. Grimes
updates. Roger A. Grimes -Original Message- From: Thierry Zoller [mailto:[EMAIL PROTECTED] Sent: Tuesday, February 13, 2007 7:32 PM To: bugtraq@securityfocus.com Subject: Re[2]: Solaris telnet vulnberability - how many on your network? Dear Casper Dik, I wasn't crying wolf about