full-disclosure - More NASA.GOV HOLES: naade02.msfc.nasa.gov

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

From: nodialtone at comcast.net (Byron Copeland)
Subject: More NASA.GOV HOLES: naade02.msfc.nasa.gov

Welcome to a honey pot putz!

On Tue, 2003-10-14 at 19:21, Lorenzo Hernandez Garcia-Hierro wrote:
> Hi again,
> naade02.msfc.nasa.gov host of nasa is too affected by security holes,
> in this case the stupid hole of maintain sample scripts of iis in the
> webroot.
> 
> http://naade02.msfc.nasa.gov/scripts/samples/
> 
> http://naade02.msfc.nasa.gov/samples/
> 
> http://naade02.msfc.nasa.gov/IISsamples/
> 
> w00w,
> NOTE: attacking possibilities are related with FPExtensions in the
> directories.
> VENDOR NOTICED: No contat info found
> NOTE 2: OPEN AN ACCOUNT FOR SECURITY ISSUES
> 
> Best regards,
> -------------------------------
> 0x00->Lorenzo Hernandez Garcia-Hierro
> 0x01->/* not csh but sh */
> 0x02->$ PATH=pretending!/usr/ucb/which sense
> 0x03-> no sense in pretending!
> __________________________________
> PGP: Keyfingerprint
> 4ACC D892 05F9 74F1 F453  7D62 6B4E B53E 9180 5F5B
> ID: 0x91805F5B
> **********************************
> No Secure Root Group Security Research Team
> http://www.nsrg-security.com
> ______________________
> 
> 
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.netsys.com/full-disclosure-charter.html