full-disclosure - Re: Global HIGH Security Risk

lists.openwall.net		lists / announce john-users owl-users popa3d-users / xvendor oss-security / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4
Open Source and information security mailing list archives

This website is powered by Openwall GNU/*/Linux security-enhanced OS

[<prev] [next>] [<thread-prev] [month] [year] [list]

From: shadown at bariloche.com.ar (^Shadown^)
Subject: Re: Global HIGH Security Risk

Hi,
	I ask for apologize if I was unclear.
	I've seen many people who understood that "bypass" was the meaning of pass trough filtered ports, and I didn't wanted to say that.
	What I've wanted to say is that if a firewall is set up to stop reverse telnet techniques by closing all ports to let the server go to outside, and there were deleted gcc, vi, ed (anything that could be used as a text editor) and uudecode/uuencode (and other en/decoders), it wasn't enough to stop an attacker to upload (xploits, etc) and download files, and obviously execute then on the server. I saw many servers set up like this so I wanted to prevent everybody to this kind of attack. And I thought it was important enough to be posted.
	Again forgive me if I was unclear on what I've wanted to say.
	Best regards,
		^Shadown^