Bugtraq mailing list archives

Re: Personal web server

From: dave () VICTIM COM (Dave Pifke)
Date: Mon, 18 Jan 1999 14:10:17 -0800


-----BEGIN PGP SIGNED MESSAGE-----

On Wed, 17 Jan 1996, kiborg wrote:

I found that the following URL will list the root directory and be able to
download any file you want.
http://www.victim.com/....../


BTW, www.victim.com in the above-quoted text is an EXAMPLE DOMAIN.  It's
like www.yourdomain.com.  And it won't work because I don't have any
Microsoft products installed within fifty feet of my house.

This is a plea to all the script kiddiez to please stop e-mailing
webmaster () victim com asking why you don't have r00t after typing in the
above URL.


- --
Dave Pifke, dave () victim com



-----BEGIN PGP SIGNATURE-----
Version: 2.6.2

iQCVAwUBNqOxSjuW2fOIQC3pAQH9sgP/f+4gQsviFrQjbyMEX4fhrl10EnzVKTax
xshZBzSFh6TzZwHmRr/f4DDDg1xf4ITK57yy4A8o1lKasC3KDHNxsr5bjOdktbxC
sv+O5mpasC9fWuJK5gzM1PsMhQTeqTr0hcephMqnaFjxBv6uEC7dGAIrsvRMPR+l
w3G6ebicJI4=
=oQr7
-----END PGP SIGNATURE-----

Current thread:

Re: Sendmail 8.8.x/8.9.x bugware, (continued)
- Re: Sendmail 8.8.x/8.9.x bugware Alan Brown (Jan 16)
  - Re: Sendmail 8.8.x/8.9.x bugware Michal Zalewski (Dec 12)
    - Re: Sendmail 8.8.x/8.9.x bugware Frank Louwers (Jan 18)
    - Win95/98 SMB Authentication Vulnerability (fwd) tschweik () FIDUCIA DE (Jan 18)
  - [SECURITY] ftpwatch package has major security problems Jamie Fifield (Jan 17)
  - Michal's report and sendmail-8.9.2 GvS (Jan 18)
- Re: Sendmail 8.8.x/8.9.x bugware Jens Hoffmann (Jan 16)
  - Re: Sendmail 8.8.x/8.9.x bugware Alan Brown (Jan 17)
- Re: Sendmail 8.8.x/8.9.x bugware John Mizzi (Jan 17)
  - Personal web server kiborg (Jan 17)
    - Re: Personal web server Dave Pifke (Jan 18)
    - Another web-based mail reader hole Dave Pifke (Jan 18)
    - Re: Another web-based mail reader hole Peter van Dijk (Jan 19)
  - Re: Sendmail 8.8.x/8.9.x bugware Michal Zalewski (Jan 18)
- Re: Sendmail 8.8.x/8.9.x bugware Nic Bellamy (Jan 19)
- NetBSD Security Advisory 1999-001: select(2)/accept(2) race Luke Mewburn (Jan 20)
  - Re: NetBSD Security Advisory 1999-001: select(2)/accept(2) race Alan Cox (Jan 23)
    - Mirc 5.5 'DCC Server' hole Spikeman (Jan 24)
    - Re: Mirc 5.5 'DCC Server' hole Sandro Jurado (Jan 26)
    - Re: NetBSD Security Advisory 1999-001: select(2)/accept(2) race Casper Dik (Jan 25)
    - Announcement: Wietse's FTP site has moved Wietse Venema (Jan 25)

(Thread continues...)