full-disclosure - Re: sendmail exploit

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <d5t281$j5u$1@sea.gmane.org>
Date: Wed May 11 14:57:35 2005
From: davek_throwaway at hotmail.com (Dave Korn)
Subject: Re: sendmail exploit

----Original Message----
>From: migalo digalo
>Message-Id: 433ee3d9050510145060008332@...l.gmail.com

> hi all;
>
> this my first post in this mailing list;so please ...
>
> i am doing same pen-tests ,to apply the bit of theorical knowledge i
> have ,and  nessus show me same 'Critical' vulnerabilities:
> sendmail 8.8


----Original Message----
>From: migalo digalo
>Message-Id: 433ee3d9050511042222a87a5b@...l.gmail.com

> i think it's really a 8.8 (redhat6.2) and not a honeypot or thing like
> that


  So can we conclude that the reason why you don't actually know if it's a
honeypot or not because it is not your system and you're actually trying to
break in to it, not "pen-test" it?


    cheers,
      DaveK
-- 
Can't think of a witty .sigline today....