Full Disclosure mailing list archives

Re: Warning: BrailleNote Apex Offers Read/Write FTP And Telnet Access To All Comers


From: Sabahattin Gucukoglu <mail () sabahattin-gucukoglu com>
Date: Fri, 1 Oct 2010 23:16:41 +0100

On 1 Oct 2010, at 22:57, Thor (Hammer of God) wrote:
⠠⠊⠋ ⠃⠁⠙ ⠛⠥⠽⠎ ⠁⠗⠑ ⠕⠝ ⠽⠕⠥⠗ ⠝⠑⠞⠺⠕⠗⠅, ⠽⠕⠥ ⠼⠚⠼⠉⠼⠊;⠗⠑ ⠎⠉⠗⠑⠺⠑⠙ ⠁⠝⠽⠺⠁⠽
(If a bad guy is on your network, you're screwed anyway)

With those services closed, it doesn't take a five-second run of nmap and wget to ransack the owner's device, though.  
And since network shares are mounted inside the filesystem, that's a double win for the poor sod who has his corporate 
shares in his stored network places.  No, it can't actually get worse than this.  I'm not even sure it's accidental.  
I'm not taking chances.

Cheers,
Sabahattin

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Current thread: