OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: Re: Firewall-1 Session Agent, DOS and password thief
From: Dug Song (dugsongMONKEY.ORG)
Date: Mon Aug 07 2000 - 08:02:28 CDT


On Fri, 4 Aug 2000, gregory duchemin wrote:

> 220 FW-1 fake session authentication
> 331 User:
> 331 *FireWall-1 p4ssw0rd pleazzz:
> 200 User has now a clone, c3rb3r
> 230 OK

this was originally reported to BUGTRAQ two years ago, with an exploit.

        http://msgs.securepoint.com/cgi-bin/get/bugtraq/687/1.html

-d.

---
http://www.monkey.org/~dugsong/