Vulnerability Development mailing list archives

Re: dos commands via iis 4 (TFTP)


From: Matt Zimmerman <mdz () CSH RIT EDU>
Date: Tue, 14 Nov 2000 23:20:02 -0500

On Wed, Nov 15, 2000 at 09:20:51AM +0800, Lincoln Yeoh wrote:

At 12:25 PM 13-11-2000 -0600, MadHat wrote:
So after this, there is a port open (22 in this case as many admins will
leave this open for SSH, but this is an NT box, which as we know rarely
has SSH running on it) that I can telnet to and have a command prompt.

How about port 80? Most firewalls would allow arbitrary stuff through to
that server on port 80, since it's already a webserver.

The web server is already bound to port 80, unless you can knock it out.

-- 
 - mdz

Attachment: _bin
Description:


Current thread: