OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: [Dailydave] Double bonus "advisory" day!

From: David Maynor (dave0dayspray.com)
Date: Fri Nov 21 2003 - 10:57:36 CST


On Fri, Nov 21, 2003 at 12:40:13PM -0500, Dave Aitel wrote:
> As you may remember, AOLserver (aolserver.com) is an open source web
> server that runs such illustrious sites as...AOL! Actually, I think
> aol.com runs Apache, like any other major site, but someone somewhere
> must run Aolserver 4.0. OpenACS runs Aolserver 3.3, which is not
> vulnerable, to my knowledge. (Aolserver 3.4 is, I think) But installing
> AOLServer can be a pain, so I encourage everyone else to go find out for
> themselves. I don't encourage everyone to go out and crash every
> AOLServer running in the wild. That's just lame. Like in Good Will
> Hunting when the blond pony-tail dude one-ups Ben in the bar as he's
> hitting on a chick. You just don't do that. If you have to crash
> someone's web server, go crash SCO.com.
>
I seem to notice a trend in your posting today. I can't quiet put my
finger on it but it seems.....SCO like...

> I'm adding my exploit to the standard build of CANVAS. So if you're too
> lazy to even run SPIKE, have your employer buy a copy of CANVAS. In
> fact, do that anyways. :>
>
You gotta start plugging the book as well..