Re: ATENTIE Sendmail !!!
Alexandru Balan <[email protected]> 05 Mar 2003 12:00:56 +0200
| Newsgroups | gmane.org.user-groups.rlug.whitehat |
|---|---|
| Message-ID | <1046858456.1736.12.camel@JayHome> |
strings `which sendmail` |grep invalid |grep comments daca nu output nimic.. you have a problem Enjoy -- J On Tue, 2003-03-04 at 11:54, SUBREDU Manuel wrote: > On Tue, Mar 04, 2003 at 11:46:41AM +0200, anton wrote: > > On Tuesday 04 March 2003 11:32 am, you wrote: > > > Stiti de vre-un scanner de sendmail care sa tipe daca gaseste > > > versiune vulnerabila ? > > > > telnet target-ip 25 > > daca versiunea e mai mica de 8.12.8 tipi tu singur > > (exista si patch pt 8.11 la sendmail.org) > > eu mi-am pus patch la 8.12.7 deci telnet target 25 ; if $version lt "8.12.7" > echo "Scream" else echo "Shut up" nu mere :-P > > > > > > > > Eventual sa si simuleze exploit-ul ? > > > > Eventual si exploitul, nu? > > nu. chiar nu ma intereseaza exploit-ul, doar sa vad daca am clienti cu > versiuni vulnerabile. > > > (oricum exploitul nu este inca in wild) > > > > Anton > > > > --- > > Pentru dezabonare, trimiteti mail la > > [email protected] cu subiectul 'unsubscribe whitehat'. > > REGULI, arhive si alte informatii: http://www.lug.ro/mlist/ > > > > -- > > > ...they said that we are thinking in bits , but ... > --- > Pentru dezabonare, trimiteti mail la > [email protected] cu subiectul 'unsubscribe whitehat'. > REGULI, arhive si alte informatii: http://www.lug.ro/mlist/ > -- Attached file included as plaintext by Listar -- -- File: signature.asc -- Desc: This is a digitally signed message part -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.7 (GNU/Linux) iD8DBQA+ZcrYXj/84bdgpDIRAm+/AKCnzOpofFVCFDZFLgdolbpwbY7NrwCeIS+D 5/8+UePMViYoslktuNWq9vg= =NdOn -----END PGP SIGNATURE----- --- Pentru dezabonare, trimiteti mail la [email protected] cu subiectul 'unsubscribe whitehat'. REGULI, arhive si alte informatii: http://www.lug.ro/mlist/