Re: Hackers invade DOJ web site

At 09:03 PM 8/17/96 -0500, you wrote:
>CNN online (http://www.cnn.com) is reporting a "breakin" by "hackers"
>to the DOJ web site.  They don't elaborate exactly how thy did it.
> 
>______c_________________________________________________________________
>Mike M Nally * Tiv^H^H^H IBM * Austin TX * For the time being,
>       m5@tivoli.com * m101@io.com       *    
>      <URL:http://www.io.com/~m101>      * three heads and eight arms.
>
If anyone happens to know which vulnerability(s) this hack exploited I would
be most grateful if they could let me know, either on the list or privately
(stephen@iu.net). I am not asking for someone to publish the attack script
or specifics of what was done to get in, but I would like to know what holes
were used (e.g. cgi script error).

Respectfully...Stephen

Stephen Cobb wrote:
> If anyone happens to know which vulnerability(s) this hack exploited I would
> be most grateful if they could let me know, either on the list or privately
> (stephen@iu.net). I am not asking for someone to publish the attack script
> or specifics of what was done to get in, but I would like to know what holes
> were used (e.g. cgi script error).

The more details the better.

	- Igor.