Re: CROSS:Internet napad na PMF

Article View: hr.org.pmf

Article #24

#24

From: holyshoot
Date: Mon, 13 Dec 2004 17:42

19 lines
2281 bytes

Nesi napisa:
> kako moze biti 0-day exploit ako se za njega zna vec preko tjedan dana?

Ima� pravo. I dva tjedna. :) Stvar je na�alost u sporom putovanju 
informacija - makar na www.phpbb.com sve pi�e, ajd' se ti sjeti gledati 
tamo svako malo. :( Newslettera sa takvim informacijama nema.

> e sorry, ali znas li ti da su glavne stranice u banani.... da nit imaju 
> ikakvog admina, nit webmastera, nit ikoga tko bi se imalo brinuo o 
> njima... (pricam barem o MO)
> 
> vjerojatno su 'studentske' bile veci izazov :o)

Glavne stranice PMFa i svih njegovih odsjeka su stati�ni HTML, ne�to �to 
skoro nikad nema sigurnosnih rupa. Tako upasti je puno te�e neko preko 
dinami�no generiranih PHP stranica koje koriste svi studentski forumi 
PMFa (strpat �u Degiorgi u ovu ekipu, makar to ba� i nije istina). HTMLu 
ba� i ne trebaju a�urni administratori, �to se i vidi po datumima zadnje 
promjene tih stranica. Da nije tu�no... :(

Technical Details

Message-ID: <cpkkad$sba$1@ls219.htnet.hr>

Path:

arc1-ca.pugleaf.net!g2news1.google.com!news2.google.com!newsread.com!newsprint.newsread.com!newsfeed00.sul.t-online.de!t-online.de!195.29.150.88.MISMATCH!news2.t-com.hr!not-for-mail

References: <3g36nes9dq7s$.1ibe2xg6tdycu.dlg@40tude.net> <m33bya6zi1.fsf@alex.2e-systems.com> <slrncrrilf.63h.nesi@student.math.hr>

Show Full Headers

Complete Article Headers

X-Google-Thread: 111ce5,df8eb3b85a06f4a9
X-Google-Thread: 10d9bc,df8eb3b85a06f4a9
X-Google-Thread: 114c25,df8eb3b85a06f4a9
X-Google-Attributes: gid111ce5,gid10d9bc,gid114c25,public
X-Google-Language: CROATIAN,Latin2
Path: arc1-ca.pugleaf.net!g2news1.google.com!news2.google.com!newsread.com!newsprint.newsread.com!newsfeed00.sul.t-online.de!t-online.de!195.29.150.88.MISMATCH!news2.t-com.hr!not-for-mail
From: holyshoot <holyshoot@mailinator.com>
Newsgroups: hr.org.pmf,hr.mag.bug,hr.comp.mreze
Subject: Re: CROSS:Internet napad na PMF
Date: Mon, 13 Dec 2004 18:42:41 +0100
Organization: T-Com
Lines: 19
Message-ID: <cpkkad$sba$1@ls219.htnet.hr>
References: <3g36nes9dq7s$.1ibe2xg6tdycu.dlg@40tude.net> <m33bya6zi1.fsf@alex.2e-systems.com> <slrncrrilf.63h.nesi@student.math.hr>
NNTP-Posting-Host: 83-131-13-243.adsl.net.t-com.hr
Mime-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-2; format=flowed
Content-Transfer-Encoding: 8bit
X-Trace: ls219.htnet.hr 1102959758 29034 83.131.13.243 (13 Dec 2004 17:42:38 GMT)
X-Complaints-To: abuse@t-com.hr
NNTP-Posting-Date: Mon, 13 Dec 2004 17:42:38 +0000 (UTC)
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.3) Gecko/20040910 MultiZilla/1.6.4.0b
X-Accept-Language: hr, en-us, en
In-Reply-To: <slrncrrilf.63h.nesi@student.math.hr>

Reply to Parent Message