Nmap Security Scanner
*Intro
*Ref Guide
*Install Guide
*Download
*Changelog
*Book
*Docs
Security Lists
*Nmap Hackers
*Nmap Dev
*Bugtraq
*Full Disclosure
*Pen Test
*Basics
*More
Security Tools
*Pass crackers
*Sniffers
*Vuln Scanners
*Web scanners
*Wireless
*Exploitation
*Packet crafters
*More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:
edgeos



Vulnerability Development: Re: Remote service shutdown in mailenable (newest) Follow up

Re: Remote service shutdown in mailenable (newest) Follow up

From: Knud Erik Højgaard <knud_at_skodliv.dk>
Date: Tue, 19 Nov 2002 18:37:20 +0100

Alexandru Balan wrote:
> Ok, i don't get it. This is supposed to prove what exactly ? That you
> can sniff out plain text passwords sent to the pop3 server ? i didn't
> see any crash there.. so... i don't get it ? what was your point
> there ?

I took a quick look at it, the pop3 service running as localsystem sure does
crash, not that many A's needed though, and i suck at win32 bufferoverflows.

I must agree a memorydump would be more useful than a packetdump. 

--
Knud
Received on Nov 20 2002
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
edgeos