Nmap Security Scanner
*Intro
*Ref Guide
*Install Guide
*Download
*Changelog
*Book
*Docs
Security Lists
*Nmap Hackers
*Nmap Dev
*Bugtraq
*Full Disclosure
*Pen Test
*Basics
*More
Security Tools
*Pass crackers
*Sniffers
*Vuln Scanners
*Web scanners
*Wireless
*Exploitation
*Packet crafters
*More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:
edgeos network security services platform







Bugtraq: Re: Motorola Timbuktu's Internet Locator Service real-time data exposed to public.

Re: Motorola Timbuktu's Internet Locator Service real-time data exposed to public.

From: Juha-Matti Laurio <juha-matti.laurio_at_netti.fi>
Date: Wed, 8 Oct 2008 23:58:41 +0300 (EEST)

The vendor fixed the issue remarkable quickly, but

Additionally, the Last modified field in directory listings disclosed the timestamp of location information too.
Addresses like firstname.surname_at_domain.com disclosed confidential information about the people working in specific organizations too.

Juha-Matti

artful38_at_yahoo.com wrote:
> Looks like they closed the hole. Even using the hard-coded password, you can no longer get directory listings of email addresses (nor can you do so without credentials)
>
Received on Oct 08 2008

[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]