full-disclosure - Vulnerability in sourceforge.net

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <410044C9.8030003@kallisti.se>
From: hdw at kallisti.se (Anders B Jansson)
Subject: Vulnerability in sourceforge.net

nobody:*:32767:32767:Unprivileged user:/nonexistent:/sbin/nologin


Todd Towles wrote:
> Does OpenBSD do that?
> 
> -----Original Message-----
> From: full-disclosure-admin@...ts.netsys.com
> [mailto:full-disclosure-admin@...ts.netsys.com] On Behalf Of Gregory A.
> Gilliss
> Sent: Thursday, July 22, 2004 3:31 PM
> To: full-disclosure@...ts.netsys.com
> Subject: Re: [Full-Disclosure] Vulnerability in sourceforge.net
> 
> Really...FreeBSD comes with user nobody set to /sbin/nologin out of the
> box. Maybe they should have chosen a better host OS?
> 
> G
> 
> On or about 2004.07.22 07:49:53 +0000, Todd Towles
> (toddtowles@...okshires.com) said:
> 
> 
>>Sounds like they should have configured that page a bit different...made
> 
> it
> 
>>run under a little less access...or said I say..it is a mis-configuration.
>>=)
> 
>