Re: GHH Portal 1.1 (passwd.txt) Remote Password Disclosure Vulnerability

To: "crazy_king@xxxxxxxx" <crazy_king@xxxxxxxx>
Subject: Re: GHH Portal 1.1 (passwd.txt) Remote Password Disclosure Vulnerability
From: "Jamie Riden" <jamie.riden@xxxxxxxxx>
Date: Mon, 30 Apr 2007 17:20:38 +0100
Cc: bugtraq@xxxxxxxxxxxxxxxxx
Dkim-signature: a=rsa-sha1; c=relaxed/relaxed; d=gmail.com; s=beta; h=domainkey-signature:received:received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=BRIbS4GzCvNhzlLtwcOCqHE6vygIBNVswumRa2+hwfYFooM4XIPHp46ceyO8FDyKPlqJf/odxAmsxQ8Jin5hSvuU7H7nFSIImnRrfWUECr4jITNZ6DttYOAGP10VCCALFf6oQ0DI0zAEjgyhmHukIaR40P2gKupl0sg85E3Z9tI=
Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=beta; h=received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=AwE+fMaVVRFdDW3wGil0t3cwDxzbP00xhH8Nv6pjwfoWionEwXK7jLhFjIbF4o5cK92olY6GMn2ZT4Chj5jVvnrZVVZlo6YyzRAzgnWGuBofGYQ/38leJNK2b/IbkPsn3oPtfMdRctCbtPv4uurf9GCkvsdykIg2h4zcIZy+JmQ=
In-reply-to: <20070430111051.3295.qmail@xxxxxxxxxxxxxxxxx>
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm
References: <20070430111051.3295.qmail@xxxxxxxxxxxxxxxxx>

On 30 Apr 2007 11:10:51 -0000, crazy_king@xxxxxxxx <crazy_king@xxxxxxxx> wrote:

By Cr@zy_King

crazy_king@xxxxxxxx

Biyosecurity.Net & Expw0rm.Com

Thanks : Liz0 & DarkXBoyZ & Eno7 & ApAci & Uyuss & Crackers_Child & Th3_43k1R & 
Xoron & Ajannn

Portal : GHH


Hi there,

GHH is a honeypot, not a portal, and it is meant to expose this
information. The file passwd.txt is actually a PHP script which
generates a random password.
http://ghh.sourceforge.net/introduction.php describes briefly how GHH works.

cheers,
Jamie
--
Jamie Riden, CISSP / jamesr@xxxxxxxxxx / jamie@xxxxxxxxxxxxxxx
UK Honeynet Project: http://www.ukhoneynet.org/

References:
- GHH Portal 1.1 (passwd.txt) Remote Password Disclosure Vulnerability
  - From: crazy_king

Prev by Date: 3proxy[v0.5.3g]: (linux/win32 service) remote buffer overflow exploits.
Next by Date: iDefense Security Advisory 04.27.07: VMware Workstation Shared Folders Directory Traversal Vulnerability
Previous by thread: GHH Portal 1.1 (passwd.txt) Remote Password Disclosure Vulnerability
Next by thread: 3proxy[v0.5.3g]: (linux/win32 service) remote buffer overflow exploits.
Index(es):
- Date
- Thread