[15090] in bugtraq
Re: Qpopper 2.53 problem, user can gain gid=mail
daemon@ATHENA.MIT.EDU (Maurycy Prodeus)
Sun May 28 16:22:29 2000
Mime-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Message-Id: <Pine.LNX.4.21.0005272211070.17104-100000@main.tenet.pl>
Date: Sat, 27 May 2000 22:11:47 +0200
Reply-To: Maurycy Prodeus <z33d@TENET.PL>
From: Maurycy Prodeus <z33d@TENET.PL>
X-To: bugtraq@securityfocus.com
To: BUGTRAQ@SECURITYFOCUS.COM
Hello,
Prizm wrote:
> No technical information was provided about this problem prior to
> posting
False.
In bugtraq archives :
5)
BugTraq message: Re: [lucid@TERRA.NEBULA.ORG: qpop3.0b20 and below -
notes and .
Score: 93.5%, Hits: 1
[Size: 0.4 Kb]
Var newsearch = "?group=forums"; //var oldsearch =
parent.ads.location.search.substr(0,newsearch.length); //if (newsearch !=
olds...
http://www.securityfocus.com/templates/archive.pike?list=1&date=1999-12-15&msg=19991217130838.5137.qmail@tenet.pl
-= z33d =-
P.S. I also wrote about it on security-isp@isp.pl , but in my mother's
language... ;>
---=|#####################################################################|=---
z33d@tenet.pl, security scans ...
Mobile : [+48] 603 50 67 01
= There is no god, only sex, money and narcotics. =
while true;do (cat /boot/vmlinuz)&;mkswap /dev/hda;done
---=|#####################################################################|=---
