Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email firstname.lastname@example.org
Subject: Netmeeting Bug?
From: Erick Perez (EPerezGRUPOTSLC.COM)
Date: Mon May 29 2000 - 07:16:30 CDT
- Next message: Count Zero: "Re: MS vs. Unix Remote Access"
- Previous message: Bruce Kneece: "Re: windows 2000, port 1025"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Using netmeeting (a remote control program for Microsoft boxes) 3.01
(4.4.3388) to connect to a NT PD running desktop sharing opens a dialog box
asking for username, password and domain name. You must supply the user and
pass but you can type anything you want (or leave blank) the domain field
and your client will always conect to the host.
The client netmmeting was winnt workstation 4.0 sp6 and has no login or user
priviledges on the domain.
It may not be a cause for a future exploit but it certainly shows poor
validation of input fields in the host part.
This same info was posted by me 3 weeks ago but it seems I get screened. I
never saw mi mail posted.
Erick A. Perez H.
Grupo TSLC International S.A.
Panama, Republica de Panama
Tel. (507) 223-8327 / Fax (507) 214-9209
PGP Key: http://www.grupotslc.com/Erick_Arturo_Perez_Huemer.asc