Re: [Security400] Fw: Hack Attack - Let's guess mail file names (in Domino). -- DOMINO400

Subject: Re: [Security400] Fw: Hack Attack - Let's guess mail file names (in Domino).
From: rob@xxxxxxxxx
Date: Mon, 27 Oct 2008 09:50:18 -0400
List-archive: <http://archive.midrange.com/domino400>
List-help: <mailto:domino400-request@midrange.com?subject=help>
List-id: Lotus Domino on the iSeries / AS400 <domino400.midrange.com>
List-post: <mailto:domino400@midrange.com>
List-subscribe: <http://lists.midrange.com/mailman/listinfo/domino400>, <mailto:domino400-request@midrange.com?subject=subscribe>
List-unsubscribe: <http://lists.midrange.com/mailman/listinfo/domino400>, <mailto:domino400-request@midrange.com?subject=unsubscribe>

You're right. I found out it was from benevolent hacking from IBM that my
boss has a contract for. Those messages were the "good" messages.
Apparently there is a lot of databases out there that have anonymous
access that they let us know so we can make a decision as to whether or
not this concerns us.
Among them is names.nsf and several others.

"IMPACT:
Unauthorized users can gather sensitive information, such as
authentication certificates for users, custom database names, logfiles and
schedules, by stealing the database."

Rob Berendt

As an Amazon Associate we earn from qualifying purchases.

This mailing list archive is Copyright 1997-2024 by midrange.com and David Gibbs as a compilation work. Use of the archive is restricted to research of a business or technical nature. Any other uses are prohibited. Full details are available on our policy page. If you have questions about this, please contact [javascript protected email address].

Operating expenses for this site are earned using the Amazon Associate program and Google Adsense.