full-disclosure - Odd Behavior - Windows Messenger Service

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

From: Bojan.Zdrnja at LSS.hr (Bojan Zdrnja)
Subject: Odd Behavior - Windows Messenger Service


> -----Original Message-----
> From: morning_wood [mailto:se_cur_ity@...mail.com] 
> Sent: Saturday, 19 July 2003 4:16 p.m.
> To: Bojan.Zdrnja@....hr; full-disclosure@...ts.netsys.com
> Subject: Re: [Full-Disclosure] Odd Behavior - Windows 
> Messenger Service
> 
> 
> >
> > So, Mr. Donnie, with your default installation Slackware box, you
> certanly
> > won't get pop-up spam, but if your ftp server has a bug or 
> SMTP server is
> > misconfigured (allowing relay), you might find various 
> thing, *when* you
> log
> > in.
> 
> KEY PHRASE IN YOUR STATEMENT = but if your ftp server has a bug or SMTP
> server is misconfigured

So, you're absolutely 101% sure that ftp or smtp servers have no bugs?

Besides, originally you were talking about *ANY* service being started
before login. Let's see one of your posts:

Message-ID: <Law11-OE25U6xfPTeip00007d8a@...mail.com>

Morning_wood wrote:

>> imho it is iresponsible default behaivor for a workstation OS to allow
>> remote resources / services / enumeration
>> before any interactive user or administrative login.

Is Slackware irresponsible as well? Don't just tell me it's not a
workstation OS. Or any Linux/BSD/whatever distro?

> IF    and are most "user level" ( which XP most certainly is ) installs
> running services that can be directly accessed and a remote manipulation
> possible?

What manipulation? Spam? You got spam over a message? Your SMTP server on
Slackware will allow that and even more.

Bojan