bugtraq - Netbus 1.x exploit

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <20030509135227.6708.qmail@www.securityfocus.com>
Date: 9 May 2003 13:52:27 -0000
From: sKyZ <sKyZ@...t3d.Tk>
To: bugtraq@...urityfocus.com
Subject: Netbus 1.x exploit

Netbus 1.x server is able to be connected to without a password. you will 
need to open two clients that are compatable with the server being 
connected to. With one client connect to the server and wait until the 
password screen appears. once this happens connect to the same server with 
the other client and it will not ask you for a password. this is done 
because the server thinks you are already connected and notices the same 
IP connected to the same server allowing you to connect.

[I do not know if this has been posted before due to the fact that netbus 
is old. if it has I apologize.]