Re: Apache Exploit

From: Randy Taylor (rtaylorat_private)
Date: Thu Jun 20 2002 - 11:31:25 PDT

Next message: David Bernick: "Re: apache chunked encoding"

Previous message: Artur Byszko / bikero: "Re: procmail heap overflow"
In reply to: Blue Boar: "Re: Apache Exploit"
Next in thread: Michal Zalewski: "Re: Apache Exploit"
Next in thread: 3APA3A: "Re: Apache Exploit"
Reply: Michal Zalewski: "Re: Apache Exploit"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

At 09:48 AM 6/20/2002 -0700, Blue Boar wrote:
>Stefan Esser wrote:
>>i heard several people looking at the gobbles exploit and believing it
>>can only be fake:
>
>I can't tell if you are trying to say that you think it works or it 
>doesn't.  For the record, Gobbles' exploit does work.
>
>                                                 BB

Yep it works. Not only that, but preliminary indications are that those OS'es
not specifically supported in the GOBBLES 'sploit can be DOS'ed by it.
I've totally hosed RH Linux and FreeBSD boxen with it so far. More carnage to
come - film at 11.

Best regards,

Randy Taylor
Enterasys Networks
R&D
Dragon Team

Next message: David Bernick: "Re: apache chunked encoding"
Previous message: Artur Byszko / bikero: "Re: procmail heap overflow"
In reply to: Blue Boar: "Re: Apache Exploit"
Next in thread: Michal Zalewski: "Re: Apache Exploit"
Next in thread: 3APA3A: "Re: Apache Exploit"
Reply: Michal Zalewski: "Re: Apache Exploit"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Thu Jun 20 2002 - 13:45:19 PDT