Bugtraq mailing list archives

Re: Qpopper 2.53 remote problem, user can gain gid=mail

From: scut () NB IN-BERLIN DE (Sebastian)
Date: Thu, 25 May 2000 16:06:47 +0200


Hi.

On Tue, May 23, 2000 at 09:43:33AM +0000, Prizm wrote:

I have attached to this message the advisory with full details +
exploit on this problem.


Known problem since January 2000, first discovered by portal. See
http://www.security.is/ for a working remote exploit.
Nice anyway :-)

Prizm/b0f,


ciao
scut / teso

--
- scut () nb in-berlin de - http://nb.in-berlin.de/scut/ --- you don't need a --
-- lot of people to be great, you need a few great to be the best ------------
http://3261000594/scut/pgp - 5453 AC95 1E02 FDA7 50D2 A42D 427E 6DEF 745A 8E07
-- data in VK/USA Mayfly experienced, awaiting transfer location, hi echelon -

Current thread:

Re: Another hole in Cart32 sert sert (May 22)
- Qpopper 2.53 remote problem, user can gain gid=mail Prizm (May 23)
  - Re: Qpopper 2.53 remote problem, user can gain gid=mail Jose Nazario (May 24)
  - Re: Qpopper 2.53 remote problem, user can gain gid=mail Qpopper Support (May 24)
  - Re: Qpopper 2.53 remote problem, user can gain gid=mail Sebastian (May 25)
- RFP2K05 - NetProwler "Fragmentation" Issue AXENT Security Team (May 23)
- Re: Another hole in Cart32 CDI (May 23)
- <Possible follow-ups>
- Re: Another hole in Cart32 Clover Andrew (May 23)
- Re: Another hole in Cart32 Justin King (May 24)