lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Message-ID: <001701c392aa$8e803b90$050010ac@Estila>
From: lorenzohgh at nsrg-security.com (Lorenzo Hernandez Garcia-Hierro)
Subject: More NASA.GOV HOLES: naade02.msfc.nasa.gov

Hi again,
naade02.msfc.nasa.gov host of nasa is too affected by security holes,
in this case the stupid hole of maintain sample scripts of iis in the
webroot.

http://naade02.msfc.nasa.gov/scripts/samples/

http://naade02.msfc.nasa.gov/samples/

http://naade02.msfc.nasa.gov/IISsamples/

w00w,
NOTE: attacking possibilities are related with FPExtensions in the
directories.
VENDOR NOTICED: No contat info found
NOTE 2: OPEN AN ACCOUNT FOR SECURITY ISSUES

Best regards,
-------------------------------
0x00->Lorenzo Hernandez Garcia-Hierro
0x01->/* not csh but sh */
0x02->$ PATH=pretending!/usr/ucb/which sense
0x03-> no sense in pretending!
__________________________________
PGP: Keyfingerprint
4ACC D892 05F9 74F1 F453  7D62 6B4E B53E 9180 5F5B
ID: 0x91805F5B
**********************************
No Secure Root Group Security Research Team
http://www.nsrg-security.com
______________________



Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ