full-disclosure - Re: DoS, CSRF and XSS vulnerabilities in ADSL modem Callisto 821+

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Sat, 18 Jun 2011 00:45:50 +0800
From: p8x <l@....net>
To: full-disclosure@...ts.grok.org.uk
Subject: Re: DoS,
 CSRF and XSS vulnerabilities in ADSL modem Callisto 821+

On 18/06/2011 12:17 AM, Valdis.Kletnieks@...edu wrote:
> On Fri, 17 Jun 2011 19:06:52 +0300, MustLive said:
>> Hello list!
>>
>> I want to warn you about new security vulnerabilities in ADSL modem Callisto
>> 821+ (SI2000 Callisto821+ Router).
> Dear MustLive:
>
> Please check the configuration of your MUA - your copy of Outlook Express
> appears to have posted this same e-mail 11 times so far this month.  Looks
> suspiciously like the problem described in RFC1047.  It's also duplicated your
> posting regarding WordPress at least 3 times.

Those emails did get a bit tiring to sort and delete until I added a 
filter to trash them. A quick look shows that the emails have slightly 
different content and he is just spamming the list.

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/