|
Full Disclosure
mailing list archives
Re: Splunk Vulnerability
From: JxT <jxt.lists () gmail com>
Date: Thu, 6 Sep 2012 00:18:44 -0600
On Wed, Sep 5, 2012 at 11:30 PM, Zach C. <fxchip () gmail com> wrote:
1.) The tool, Splunk, is designed to index logs
2.) Logs are arbitrary files.
Therefore,
3.) Splunk is designed to index arbitrary files.
Agreed, Splunk is doing exactly what it's designed to do. This is not a
vulnerability within Splunk itself.
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/
By Date
By Thread
Current thread:
|