Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security FullDisclosure
[Top] [All Lists]
<prev [Date] next>
[Advanced]
 <prev [Thread] next>

Re: [Full-disclosure] Solaris telnet vulnberability - how many on your n

from [Thierry Zoller] Network Security [Permanent Link]
Subject: Re: [Full-disclosure] Solaris telnet vulnberability - how many on your network?
Date: Wed, 14 Feb 2007 01:33:05 +0100 
Dear Casper Dik (Casper.Dik@Sun.COM),

I wasn't crying wolf about a Backdoor, heck I am not Steve Gibson. I
was asking whether somebody will investigate why this hasn't been
caught by audits or simply Q&A ?

CDSC> And one which was too easy to discover;
You said it, it's "easy to discover", so who has discovered it? Sun ? 
Considering
it's that easy to catch, why hasn't SUN ? Maybe you can give us a
heads up on that ?

CDSC>  real back doors are better
I like that tautologie, "real backdoors", what makes a backdoor more
real than another one ? Is it the coolness, the stealth ? Or is it
simply the fact that it gives back door access ?

CDSC> masquared as buffer overflows you might not chance upon.
Nobody doesn't that anymore, everybody does code audits now and catches
bufferoverflows, right? I think other overflows are more interesting
to hide access.

-- 
http://secdev.zoller.lu
Thierry Zoller
Fingerprint : 5D84 BFDC CD36 A951 2C45  2E57 28B3 75DD 0AC6 F1C7

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/
[More messages with this same subject...]




<Prev in Thread] Current Thread [Next in Thread>
Previous by Date:  [Full-disclosure] iDefense Security Advisory 02.13.07: Hewlett-Packard HP-UX SLSd Arbitrary File Creation Vulnerability, iDefense Labs NO-REPLY
Next by Date:  Re: [Full-disclosure] Torpark breaks with DEP enabled, and how to break it further so that it works, KJKHyperion
Previous by Thread:  [Full-disclosure] iDefense Security Advisory 02.13.07: Hewlett-Packard HP-UX SLSd Arbitrary File Creation Vulnerability, iDefense Labs NO-REPLY
Next by Thread:  Re: [Full-disclosure] Solaris telnet vulnberability - how many on your network?, v3dt3n
Indexes:  [Date] [Thread] [Top] [All Lists]