OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

 
Re: [Full-Disclosure] Vulnerability in sourceforge.net

From: Buick Sk (buickmicrolink.com.br)
Date: Wed Jul 21 2004 - 13:31:32 CDT

Hi,

> It's not a mis-configuration, this does not allow you to look at any
> secret file, only the files that the user nobody can read.

  this not vulnerability.. only read system (capture for attack??)....
I sugestion for (others) administrator test/verify if missing configuration in
yours self... ;)

http://btmgr.sourceforge.net/index.php3?body=../../../../../../proc/{cpuinfo,version,...

/etc/passwd, /etc/{fs,mtab and etc.. information into site...

good /proc/uptime this machine ;)

Buick Sk

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

 
[Full-Disclosure] Re: mi2g - fud, lies and libel

gadgeteerelegantinnovations.org
Date: Wed Jul 21 2004 - 13:52:33 CDT

On Tue, Jul 20, 2004 at 06:11:13PM -0700, Thor Larholm (tlarholmpivx.com) wrote:
> > From: Eric Paynter
> > > On Tue, July 20, 2004 4:17 pm, not-mi2ghushmail.com said:
> > > This is a blatant lie from Matai and mi2g, nothing more.
> >
> > Or maybe it's also a hoax?
>
> http://www.mi2g.com/cgi/mi2g/press/200704.php

Maybe the dark hearted criminals have de-faced the mi2g website?
--
Chief Gadgeteer
Elegant Innovations

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

 
[Full-Disclosure] Re: mi2g - fud, lies and libel

gadgeteerelegantinnovations.org
Date: Wed Jul 21 2004 - 13:51:06 CDT

mi2g == 'many idiots glued 2gether'

I like it.
"Hey, Mikey! I think he likes it."
--
Chief Gadgeteer
Elegant Innovations

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

 
[Full-Disclosure] Re:

From: Http-equiv (http-equivexcite.com)
Date: Wed Jul 21 2004 - 15:31:30 CDT