`
[ http://www.rootshell.com/ ]
Date: Wed, 10 Feb 1999 14:24:55 -0800 (PST)
From: Gregory Taylor <[email protected]>
To: [email protected]
Subject: Re: New Exploit - DCCsnoop.txt
Discovered by Gregory Taylor
Febuary 5th, 1999
It is possible to snoop a user's Linux connection through IRC..
DCC Sending the device files /dev/ttyp1 - ? while someone is logged in on
that ttyp to an outside client will send all information sent from that user
to the target client, making it possible to snoop his connection, password
and login
The drawback is the user will not see his own information typed in and may
disconnect, but for those with auto-login scripts, it is possible to recieve
login/passwords, and even /dev/tty1 - etc. can be snooped for those logging
in as root.. I would like some feedback on anyone who may have any ideas or
comments about this.
Gregory Taylor
UNIX Systems Engineer
American Digital Online Services
---------------------------------------------------------------------------
- (877) ADOS.COM -- http://www.ados.com -- [email protected] ------------------
---------------------------------------------------------------------------
`
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation