full-disclosure - Re: sendmail exploit

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <4283A1CE.8020601@ori.net>
Date: Thu May 12 19:35:07 2005
From: mandreko at ori.net (Matt Andreko)
Subject: Re: sendmail exploit

Not to sound like a smartass, but there are such things as blind 
pen-tests...



Dave Korn wrote:
> ----Original Message----
> 
>>From: migalo digalo
>>Message-Id: 433ee3d9050510145060008332@...l.gmail.com
> 
> 
>>hi all;
>>
>>this my first post in this mailing list;so please ...
>>
>>i am doing same pen-tests ,to apply the bit of theorical knowledge i
>>have ,and  nessus show me same 'Critical' vulnerabilities:
>>sendmail 8.8
> 
> 
> 
> ----Original Message----
> 
>>From: migalo digalo
>>Message-Id: 433ee3d9050511042222a87a5b@...l.gmail.com
> 
> 
>>i think it's really a 8.8 (redhat6.2) and not a honeypot or thing like
>>that
> 
> 
> 
>   So can we conclude that the reason why you don't actually know if it's a
> honeypot or not because it is not your system and you're actually trying to
> break in to it, not "pen-test" it?
> 
> 
>     cheers,
>       DaveK