On Tue, Aug 08, 2000 at 07:05:18AM -0000, John Conover wrote:
> Does anyone know if Brown Orifice,

>     http://www.zdnet.com/zdnn/stories/news/0,4586,2612676,00.html?chkpt=zdhpnews01

> is capable of reading certain dot directories?

        The simple answer is, it certainly is.  There seem to be some
complicating issues though, and it doesn't always display the contents
of the directory.

        Be EXTREMELY careful about tinkering with the critter!  The
web server that gets started up displays an image retrieved from the
authors site.  That request reports back the IP address and port number
of the compromised machine and the IP address of the individual browsing
the compromised server.  He's gathering some significant intelligence
on the propagation of the exploit!

>       Thanks,

>       John

> -- 
> 
> John Conover        Tel. 408.370.2688  [EMAIL PROTECTED]
> 631 Lamont Ct.      Cel. 408.772.7733
> Campbell, CA 95008  Fax. 408.379.9602  http://www.johncon.com

        Mike
-- 
 Michael H. Warfield    |  (770) 985-6132   |  [EMAIL PROTECTED]
  (The Mad Wizard)      |  (770) 331-2437   |  http://www.wittsend.com/mhw/
  NIC whois:  MHW9      |  An optimist believes we live in the best of all
 PGP Key: 0xDF1DD471    |  possible worlds.  A pessimist is sure of it!

Reply via email to