Home page logo
/

basics logo Security Basics mailing list archives

Creating file on login
From: Fausto <fausto () pix com br>
Date: Thu, 27 Nov 2003 08:34:46 -0300

I have a system that when one try to login it create a file with the name of the user that tried to log. The problem is that if the do not exists the system creates the file with the invalid user...
   Can we do some exploit in this case...??
   Is this problem dangerous...
   Fausto Catvalho


---------------------------------------------------------------------------
----------------------------------------------------------------------------


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]