OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: Netmeeting Bug?
From: Erick Perez (EPerezGRUPOTSLC.COM)
Date: Mon May 29 2000 - 07:16:30 CDT

Using netmeeting (a remote control program for Microsoft boxes) 3.01
(4.4.3388) to connect to a NT PD running desktop sharing opens a dialog box
asking for username, password and domain name. You must supply the user and
pass but you can type anything you want (or leave blank) the domain field
and your client will always conect to the host.
The client netmmeting was winnt workstation 4.0 sp6 and has no login or user
priviledges on the domain.
It may not be a cause for a future exploit but it certainly shows poor
validation of input fields in the host part.
This same info was posted by me 3 weeks ago but it seems I get screened. I
never saw mi mail posted.

Erick A. Perez H.
Gerente General
Grupo TSLC International S.A.
Panama, Republica de Panama
Tel. (507) 223-8327 / Fax (507) 214-9209
email: ventasgrupotslc.com
           eperezgrupotslc.com
PGP Key: http://www.grupotslc.com/Erick_Arturo_Perez_Huemer.asc