Home page logo
/

fulldisclosure logo Full Disclosure mailing list archives

Re: Splunk Vulnerability
From: JxT <jxt.lists () gmail com>
Date: Thu, 6 Sep 2012 00:18:44 -0600

On Wed, Sep 5, 2012 at 11:30 PM, Zach C. <fxchip () gmail com> wrote:

1.) The tool, Splunk, is designed to index logs
2.) Logs are arbitrary files.
Therefore,
3.) Splunk is designed to index arbitrary files.


Agreed, Splunk is doing exactly what it's designed to do. This is not a
vulnerability within Splunk itself.
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]