Lucene search
K

dccsnoop.txt

🗓️ 17 Aug 1999 00:00:00Reported by Packet StormType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 30 Views

Snooping Linux connections via IRC could expose user credentials to outside clients.

Code
`  
[ http://www.rootshell.com/ ]  
  
Date: Wed, 10 Feb 1999 14:24:55 -0800 (PST)  
From: Gregory Taylor <[email protected]>  
To: [email protected]  
Subject: Re: New Exploit - DCCsnoop.txt  
  
Discovered by Gregory Taylor  
Febuary 5th, 1999  
  
It is possible to snoop a user's Linux connection through IRC..  
  
DCC Sending the device files /dev/ttyp1 - ? while someone is logged in on  
that ttyp to an outside client will send all information sent from that user  
to the target client, making it possible to snoop his connection, password  
and login  
  
The drawback is the user will not see his own information typed in and may  
disconnect, but for those with auto-login scripts, it is possible to recieve  
login/passwords, and even /dev/tty1 - etc. can be snooped for those logging  
in as root.. I would like some feedback on anyone who may have any ideas or  
comments about this.  
  
  
Gregory Taylor  
UNIX Systems Engineer  
American Digital Online Services  
  
---------------------------------------------------------------------------  
- (877) ADOS.COM -- http://www.ados.com -- [email protected] ------------------  
---------------------------------------------------------------------------  
`

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

17 Aug 1999 00:00Current
7.4High risk
Vulners AI Score7.4
30