lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <20040210083343.GA18795@php.net>
From: s.esser at e-matters.de (Stefan Esser)
Subject: XBOX EvolutionX ftp 'cd' command and telnet 'dir' buffer overflow

Morning

> XBOX EvolutionX ftp 'cd' command and telnet 'dir' buffer overflow

beside the fact that EvolutionX is illegal software, because it is
compiled against the leaked Microsoft XBOX XDK, your indepth analysis
lacks the most funny part:

You can crash evolutionX by just connecting to the ftp server and
supplying a long username:password combination.

Ohh and unlike your crashes this one is preauth.

Stefan Esser


-- 

--------------------------------------------------------------------------
 Stefan Esser                                        s.esser@...atters.de
 e-matters Security                         http://security.e-matters.de/

 GPG-Key                gpg --keyserver pgp.mit.edu --recv-key 0xCF6CAE69 
 Key fingerprint       B418 B290 ACC0 C8E5 8292  8B72 D6B0 7704 CF6C AE69
--------------------------------------------------------------------------
 Did I help you? Consider a gift:            http://wishlist.suspekt.org/
--------------------------------------------------------------------------


Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ