Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email email@example.com
From: Matthew Murphy (mattmurphy_at_kc.rr.com)
Date: Sun Nov 24 2002 - 10:55:49 CST
>Provide a little clarification please.
>Can you or can you not access files after giving a bogus password?
>Other than a log issue, are you claiming and real exposure or
>privledge elevation ?
I guess what I'm trying to say is that it *appears* to yield control, but
we know it messes with logging. I was able to log in as users that didn't
exist -- so this could very well be a logging problem only. To be honest,
this software is so messed up that you'd have to be nuts to use it in
Full-Disclosure - We believe in it.