what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 3 of 3

Files from Thomas Henlich

webftpInclude.txt

Posted Jan 8, 2006

Authored by Thomas Henlich

A file inclusion vulnerability exists in WebFTP version 1.2.6 in webftp.php.

tags | exploit, php, file inclusion

SHA-256 | 5be93b7e1c3861a44e8fd2e42aaf49adbbcf18c9cfd4ded89e929284fa6939f2

Download | Favorite | View

thunderbirdWeak.txt

Posted Oct 27, 2005

Authored by Thomas Henlich

Mozilla Thunderbird SMTP down-negotiation behavior allows a man-in-the-middle (MITM) attack to bypass TLS initialization and/or downgrade CRAM-MD5 to PLAIN authentication, leading to exposure of authentication information. Failure in CRAM-MD5 authentication also leads to exposure of authentication information to a passive eavesdropper. Affected versions: Mozilla Thunderbird 1.0.7 (20050923), Mozilla Thunderbird 1.5 Beta 2 (20051006), possibly other programs using the Mozilla mail component.

tags | advisory

SHA-256 | d7c2c62f53981de1b1e61fbb11de9278cff73769ab86c648b175814f320ba698

Download | Favorite | View

thunderbird-mitm.txt

Posted Oct 21, 2005

Authored by Thomas Henlich

Mozilla Thunderbird SMTP down-negotiation behavior allows a man- in-the-middle (MITM) attack to bypass TLS initialization and/or downgrade CRAM-MD5 to PLAIN authentication, leading to exposure of authentication information. Failure in CRAM-MD5 authentication also leads to exposure of authentication information to a passive eavesdropper.

tags | advisory

SHA-256 | 45fbeadf936771da0e38eba38836f70be1b8a427bb908f4c6addba8fc4fef977

Download | Favorite | View