Re: Reported Kazaa and Morpheus vulnerabilities

From: Qazi M. M. Ahmed (qaziahmedat_private)
Date: Mon Feb 04 2002 - 04:54:12 PST

  • Next message: Andre Mariën: "Re: CSS, CSS & let me give you some more CSS"

    I tried the http put style, didnt work but got the kazaa username with 
    the following info:
    
    HTTP/1.0 501 Not Implemented
    X-Kazaa-Username: some_kazaa_user
    X-Kazaa-Network: MusicCity
    X-Kazaa-IP: xxx.xxx.xxx.xxx:1214
    
    Kazaa username and IP adress is changed for whatever purpose. :)
    
    Qazi M.M. Ahmed
    
    
    HarryM wrote:
    
    >>Well, I think that's what the original poster was getting at.  Anyone
    >>here tried the usual .. bugs and so on?  (Either successfully or not,
    >>we'd like to know.)
    >>
    >>
    > 
    > Exactly. The BBC article claims that someone has, but there's no mention of
    > it on CERT or Securityfocus. I mean obviously if there is one it may not
    > have been posted about.. But I thought someone might have heard something.
    > Certainly simple things such as appending /../ or /..../ to the end of the
    > url don't work, but those funky numeric folder names must mean something.
    > 
    > Harry M
    > 
    > 
    > 
    



    This archive was generated by hypermail 2b30 : Mon Feb 04 2002 - 09:55:46 PST