Full Disclosure mailing list archives
Re: Infobot-backdoor
From: w g <xillwillx () yahoo com>
Date: Sat, 14 Jun 2003 23:50:04 -0700 (PDT)
"'Maybe we should have 2 lists instead of 1; full-discolure and full-disclosure-diapers'" i wanna be on the 'full-discolure' list , me no likey diapers... and yes some morons like yourself do install default when they dont know what the fuck they are doing ... so sit down ,shut the fuck up and quit your bitchin. kthnx Vanja Hrustic <vanja () pobox com> wrote: On Sat, 14 Jun 2003 21:05:03 -0700 "morning_wood" wrote:
------------------------------------------------------------------ - EXPL-A-2003-007 exploitlabs.com Advisory 007 ------------------------------------------------------------------ -= infobot =- Vunerability: ---------------- 1. Remote Access
Remote access to what?
by default there are two user names in infobot.users not commented out quote from from the infobot.conf file...
It is infobot.users file, actually, as you mentioned earlier. Quote from README, at the top of the file (can't miss it, if you know how to read): "You will need to update your infobot.config and infobot.users. See the example files." You *really* have to be stupid in order to install default config/users file.
it seems the authors have provided themselves with a nifty backdoor... or any one who can match these credentals in the user database infobot.users
This list seems to be overloaded with children between 13 and 15 years of age. Maybe we should have 2 lists instead of 1; full-discolure and full-disclosure-diapers What's your next advisory? "./configure; make; make install" copies files to predictable location !? _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html --------------------------------- Do you Yahoo!? SBC Yahoo! DSL - Now only $29.95 per month!
Current thread:
- Infobot-backdoor morning_wood (Jun 14)
- Re: Infobot-backdoor Vanja Hrustic (Jun 14)
- Re: Infobot-backdoor w g (Jun 15)
- <Possible follow-ups>
- Re: Infobot-backdoor Donnie Weiner (Jun 16)
- Re: Infobot-backdoor w g (Jun 16)
- Re: Infobot-backdoor Donnie Weiner (Jun 17)
- Fwd: Re: Infobot-backdoor Karl Elgerstedt (Jun 17)
- Re: Fwd: Re: Infobot-backdoor Donnie Weiner (Jun 17)
- Re: Fwd: Re: Infobot-backdoor Karl Elgerstedt (Jun 17)
- Re: Infobot-backdoor Vanja Hrustic (Jun 14)