full-disclosure - Re: CORE-2003-0403: Axis Network Camera HTTP Authentication Bypass

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <Pine.LNX.4.44.0306021535040.27892-100000@kepler.acns.bethel.edu>
From: b-nordquist at bethel.edu (Brent J. Nordquist)
Subject: Re: CORE-2003-0403: Axis Network Camera HTTP
 Authentication Bypass

On Tue, 27 May 2003, Kee Hinckley <nazgul@...ewhere.com> wrote:

> you turn on the function without configuring the addresses, older 
> cameras will default to sending email to mail@...ewhere.com "from" 
> olga@...ewhere.com.  We get on the order of ten to fifteen thousand 
> of these every day.

LOL, oops.  Someone pointed out to me a while back that RFC 2606 reserves 
"example.com" "example.org" and "example.net" for this kind of purpose.

-- 
Brent J. Nordquist <b-nordquist@...hel.edu> N0BJN
Other contact information: http://kepler.acns.bethel.edu/~bjn/contact.html
* Fast pipe * Always on * Get out of the way - Tim Bray http://tinyurl.com/7sti