Re: IBM AS/400 HTTP Server '/' attack

[Thor () HammerofGod com]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


> Since I reported this "non-security" bug so long ago I hope it is fixed
> through the regular set of changes. I cannot confirm this bug was fixed.
> As far as I know this vulnerability was not yet reported to the public.

JD Glaser and Saumil Shah (Foundstone) covered this in their Blackhat 
Session in Hong Kong.  I would think that the materials would be on the 
Blackhat site (www.blackhat.com) at this point if you wanted to check them out.

AD

-----BEGIN PGP SIGNATURE-----
Version: PGP 7.1

iQA/AwUBO+sBSohsmyD15h5gEQKKBQCgrMT7uTCR0JYv47L1SzSb7/lA1cUAoMGq
91VNuoD4NNYuB2Vp080Fh4nI
=7ZNB
-----END PGP SIGNATURE-----