Penetration Testing mailing list archives

Re-opening an old thread: NetWare-Enterprise-Web-Server/5.1 --As sistence requested.


From: "Ralph Los" <RLos () enteredge com>
Date: Wed, 18 Dec 2002 15:28:34 -0500

Hey - let me re-open a thread again, if you folks don't mind.  I've found a
server at one of our pen-test clients with this NetWare HTTP/HTTPS server.
I've been trying to figure out a way to make it tango, but have been having
some problems.  Here's what I've tried and where I left off, maybe someone
can toss some suggestions out.

Attempt:  http://address/perl/-v
Result:         NetWare port Copyright 1998 Novell Corporation.
                All rights reserved.

Attempt: http://address/perl/-h
Result: Page not found

Attempt: http://address/perl/-e%20print%20%22hello%20world%22;
Result: IE just hangs there "DONE"

Attempt: http://address/perl/-e%20print%201;
Result: IE just hangs there "DONE"

So what's up?  Is this box "patched" against this form of attack somehow?
Could someone throw me another idea maybe?

Thanks a bunch.


----------------------------------------------------------------------------
This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
Service. For more information on SecurityFocus' SIA service which
automatically alerts you to the latest security vulnerabilities please see:
https://alerts.securityfocus.com/


Current thread: