|
Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com |
Subject: Problems with FTGate
From: Andrew Lewis (wizdumb
UNIX.ZA.NET)Date: Mon Jun 26 2000 - 13:23:08 CDT
- Next message: der Mouse: "Re: WuFTPD: Providing *remote* root since at least1994"
- Previous message: Georgi Guninski: "IE 5 and Excel 2000, PowerPoint 2000 vulnerability - executing programs"
- Next in thread: Jeremy C. Reed: "Re: Problems with FTGate"
- Reply: Jeremy C. Reed: "Re: Problems with FTGate"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
The Problem:
------------
FTGate's POP3 server responds to invalid USER requests with a -ERR code
and doesn't disconnect you. This means that it is possible to bruteforce
usernames and passwords with ease.
Credit:
-------
Andrew Lewis aka. Wizdumb, One of the many losers from the MDMA crew
<www.mdma.za.net>
- Next message: der Mouse: "Re: WuFTPD: Providing *remote* root since at least1994"
- Previous message: Georgi Guninski: "IE 5 and Excel 2000, PowerPoint 2000 vulnerability - executing programs"
- Next in thread: Jeremy C. Reed: "Re: Problems with FTGate"
- Reply: Jeremy C. Reed: "Re: Problems with FTGate"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]