Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email email@example.com
From: pwnd.security.pwnd (pwnd.security.pwndgmail.com)
Date: Mon Jul 23 2007 - 21:14:09 CDT
They claimed they took down Internet access to the servers but it's
still there. Read their advisory on their Unicenter System Help Pages:
07/23/2007 05:37 pm
The Enterprise Technology Services Help Center has been advised
effective immediately, outside internet access to the following
servers has been removed due to widespread publishing of
vulnerabilities to these systems:
HELPDESK.STATE.AK.US is our state internal USD system. The
vulnerability would allow the unrestricted viewing of any USD within
this system, as well as obtaining USERID and contact information of
anyone in LDAP. Removing internet access to this system will affect
mainly state contractors such as GCI, ACS, WWT, and telephone
INTRA1.ADMIN.STATE.AK.US is also known as the "DOA intranet site" and
contains many applications written over time to many DOA divisions.
There are known vulnerabilities on this server and until we can
remediate these vulnerabilities we will continue to block this server
from internet access. If you discover applications that are not
working, or not working correctly because of this action please
contact the ETS helpcenter at 907-465-4801 or
help_centeradmin.state.ak.us. ETS will continue to work this
vulnerability and issue regular updates. We apologize for the
inconvenience and would not take this action if the vulnerability was
not severe. For more details, please review USD so35497.
On 7/23/07, pwnd. security. pwnd <pwnd.security.pwndgmail.com> wrote:
> Bypasses LDAP.
Full-Disclosure - We believe in it.
Hosted and sponsored by Secunia - http://secunia.com/