Re: lug-bg: Fwd: QNX FIle Read Vulnerability

[jhs@xxxxxx (Ivan Petrov)]

abe...zagatnati sa dosta dobri idei, koito naj-veroiatno sa mnogo dobre
realizirani v comersialnia variant.
kojto obache struva dosta dolarcheta :-(

kato demo sravniavajki go s demoto na BeOS e po-slabo funkcionalno (imho).

i mislia, che ne si struva da se razduva tozi offtopic za niakakvo si demo.

pozdravi
------------------------
Ivan Petrov

----- Original Message -----
From: "Stanislav Lechev" <firedust@xxxxxxx>
To: <lug-bg@xxxxxxxxxxxxxxxxxx>
Sent: Monday, April 23, 2001 1:22 PM
Subject: Re: lug-bg: Fwd: QNX FIle Read Vulnerability

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> hmm
> znachi ne si ocharowan
> shtoto nqkoj go hwaleshe tuka i za twa pitah
>
>
>
> On Monday 23 April 2001 12:59, you wrote:
> > Tova deto go imash, ako e DEMO-to - mnogo e oriazano.
> > za da go pusnesh v mreja - polovinata ot nestata samo ot console,
drugite -
> > samo ot GUI, i nakraia sled reboot niama kak da si pazi nastrojkite.
> > Prostete, ama tova deto ot kosole ne mojesh da mu add-nesh route daje i
za
> > preview version ne stava.
> >
> > Znam, che ne ti otgovariam na vaprosa, no si poigrah s nego i naistina
samo
> > ostavia golemi
> > vazdishki za tova, koeto bi bilo palnoto distro :)))
> >
> > ----------------------
> > Ivan Petrov
> >
> > ----- Original Message -----
> > From: "Stanislav Lechev" <firedust@xxxxxxx>
> > To: "Linux Users Group - Bulgaria" <lug-bg@xxxxxxxxxxxxxxxxxx>
> > Sent: Monday, April 23, 2001 12:40 PM
> > Subject: lug-bg: Fwd: QNX FIle Read Vulnerability
> >
> > > -----BEGIN PGP SIGNED MESSAGE-----
> > > Hash: SHA1
> > >
> > > qnx-a samo na fat li se installwa ?
> > > nqkoj da go e slagal ?
> > >
> > >
> > >
> > > - ----------  Forwarded Message  ----------
> > > Subject: QNX FIle Read Vulnerability
> > > Date: Sat, 21 Apr 2001 03:59:32 -0400
> > > From: teknophreak <killbill1@xxxxxxxx>
> > > To: VULN-DEV@xxxxxxxxxxxxxxxxx
> > >
> > >
> > > QNX 2.4 FILE READ VULNERBILITY
> > > - ------------------------------------------
> > > BY: Teknophreak (klllbill1@xxxxxxxx)
> > >
> > > QNX 2.4 is a mini-linux based Operating System which can be downloaded
> > > for free at www.qnx.com. QNX 2.4 is made to install on a FAT
partition. A
> > > vulnerabilty exist which allows you to read any file on the system.
> > >
> > > example:
> > >
> > > $ more /etc/shadow
> > > Permission Denied
> > >
> > > if you try to view a file which you don't have read access to, DUH!
you
> >
> > wont
> >
> > >  be able to read it.
> > > Well, If you find out where the FAT filesystem is mounted usually
/fs-dos
> > >  then you can do this.
> > >
> > > $ more /fs-dos/linux/etc/shadow
> > >
> > > then....
> > > booyah!
> > > you can read a file you won't be able to read under normal
circumstances.
> > >
> > > - -------------------------------------------------------
> > >
> > > - --
> > > - -===============================================================-
> > > - - Regards,                                            AngelFire -
> > > - -     Stanislav Lechev                    <firedust@xxxxxxx>    -
> > > - -    PGP Key: http://firedust.vega.bg/pgp/StanislavLechev.asc   -
> > > - -===============================================================-
> > > -----BEGIN PGP SIGNATURE-----
> > > Version: GnuPG v1.0.4 (GNU/Linux)
> > > Comment: For info see http://www.gnupg.org
> > >
> > > iD8DBQE64/iD8RPXBhiMqewRAm6aAJ0Zw3GZrgZZ1S1/CM4WEKh55d+5FwCggQrx
> > > +1opOdKOjNXazW1uDHtnNDo=
> > > =ZkgL
> > > -----END PGP SIGNATURE-----
> >
> >
===========================================================================
> >
> > > A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers)
> > > http://www.linux-bulgaria.org/ Hosted by Internet Group Ltd. - Stara
> >
> > Zagora
> >
> >
> >
===========================================================================
> > A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers)
> > http://www.linux-bulgaria.org/ Hosted by Internet Group Ltd. - Stara
Zagora
>
> - --
> - -===============================================================-
> - - Regards,                                            AngelFire -
> - -     Stanislav Lechev                    <firedust@xxxxxxx>    -
> - -    PGP Key: http://firedust.vega.bg/pgp/StanislavLechev.asc   -
> - -===============================================================-
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.0.4 (GNU/Linux)
> Comment: For info see http://www.gnupg.org
>
> iD8DBQE65AKE8RPXBhiMqewRArH7AJoCB0KdgAFIvc0Z7PPhNMf3kl16BACgivsB
> NsFuhTnuq5PIZyVt/fqlwkQ=
> =eXTN
> -----END PGP SIGNATURE-----
>
===========================================================================
> A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers)
> http://www.linux-bulgaria.org/ Hosted by Internet Group Ltd. - Stara
Zagora
>

===========================================================================
A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers)
http://www.linux-bulgaria.org/ Hosted by Internet Group Ltd. - Stara Zagora