Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security FullDisclosure
[Top] [All Lists]
<prev [Date] next>
[Advanced]
 <prev [Thread] next>

[Full-disclosure] parallels Desktop file permission notice

from [Fabio Pietrosanti (naif)] Network Security [Permanent Link]
Subject: [Full-disclosure] parallels Desktop file permission notice
Date: Fri, 27 Oct 2006 17:21:09 +0200 
While testing the useful parallels for osx, i noticed that this piece of
software:
root      2818   0.0  0.0    31780    152  ??  Ss    5:33PM   0:01.57
/Library/StartupItems/Parallels/prl_dhcpd

wrote this file:
xxxxx:~ xxx$ ls -al /Library/Parallels/.dhcpd_configuration

with the following permission:
-rw-rw-rw-   1 root  wheel  0 Oct 26 17:32
/Library/Parallels/.dhcpd_configuration

The parallels release is: Parallels Desktop for Mac - Build 1940
(October 12, 2006)

Bye

-naif

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/
[More messages with this same subject...]




<Prev in Thread] Current Thread [Next in Thread>
  • [Full-disclosure] parallels Desktop file permission notice, Fabio Pietrosanti (naif) <=
Previous by Date:  [Full-disclosure] MHL-2006-003 Public Advisory: "ezOnlineGallery" Multiple Security Issues, Mayhemic Labs Security
Next by Date:  Re: [Full-disclosure] [ Capture Skype trafic ], Exibar
Previous by Thread:  [Full-disclosure] MHL-2006-003 Public Advisory: "ezOnlineGallery" Multiple Security Issues, Mayhemic Labs Security
Next by Thread:  [Full-disclosure] ZDI-06-035: Novell eDirectory NDS Server Host Header Buffer Overflow Vulnerability, zdi-disclosures
Indexes:  [Date] [Thread] [Top] [All Lists]