Full Disclosure mailing list archives

Re: Re: CORE-2003-0403: Axis Network Camera HTTP Authentication Bypass


From: Shawn McMahon <smcmahon () eiv com>
Date: Mon, 2 Jun 2003 15:53:21 -0400

On Tue, May 27, 2003 at 08:34:27PM -0400, Kee Hinckley said:
you turn on the function without configuring the addresses, older 
cameras will default to sending email to mail () somewhere com "from" 
olga () somewhere com.  We get on the order of ten to fifteen thousand 
of these every day.  On occasions when we've bothered to look, we've 

I suggest auto-bouncing them to the manufacturer as punishment for gross
stupidity.


-- 
Shawn McMahon     | Let every nation know, whether it wishes us well or ill,
EIV Consulting    | that we shall pay any price, bear any burden, meet any
UNIX and Linux    | hardship, support any friend, oppose any foe, to assure
http://www.eiv.com| the survival and the success of liberty. - JFK

Attachment: _bin
Description:


Current thread: