full-disclosure - BitchX local root

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <20051123134142.16541.qmail@webmaild.fe1.aruba.it>
Date: Wed Nov 23 13:41:51 2005
From: Sha0 at badchecksum.com (Sha0lin)
Subject: BitchX local root

Hi, 

1) BitchX is not setuid by default, so is not dangerous bug,
2) the exploit's date is fake 

you can test the vuln with this exploit:
http://www.securiteam.com/exploits/6J00B2KBFU.html 

regards, 

Sha0