RE: AS/400 on alt.hacker

["Stone, Brad V (TC OASIS)" <bvstone@xxxxxxxxxxxxxx>]

Maybe they intentionally sent out the message to the hackers group to see if
their system could be busted!  It's a pretty good proof of concept.  

The AS.400 on the other end was really just an old F20 on V3R2 with only the
HTTP server running...hehhehe...  Nothing on it.  

Bradley V. Stone
BVS/Tools
http://www.bvstools.com



> -----Original Message-----
> From: Chuck Lewis [mailto:clewis@iquest.net]
> Sent: Wednesday, September 22, 1999 1:12 AM
> To: MIDRANGE-L@midrange.com
> Subject: Re: AS/400 on alt.hacker
> 
> 
> That would be MY first thought (disgruntled ex-employee) !!!
> 
> Of course it also makes you wonder what this user id and 
> password is. Looks like
> this person set it up BEFORE they left or still had some kind 
> of access (?) if
> "kimad" is taken to mean they are Mad at Kia, although that 
> might be a stretch.
> If it is some sort of "generic" id/pwd, THAT would be sort of scary !!
> 
> Chuck
> 
> OleBlighty wrote:
> 
> > I have e-mail'd all the Kia stuff to my buddy who works 
> there.  They are
> > currently looking for a disgruntled ex-employee !!!
> >
> > ----- Original Message -----
> > From: Chuck Lewis <clewis@iquest.net>
> > To: <MIDRANGE-L@midrange.com>; Bill Paris <bparis@sccmail.com>
> > Sent: Tuesday, September 21, 1999 6:53 AM
> > Subject: Re: AS/400 on alt.hacker
> >
> > > Hey Bill,
> > >
> > > I tried that e-mail address and it kicked back no good. 
> Can't get the
> > phone
> > > number either but that might be something on this end 
> (new phone system).
> > >
> > >
> > > They have a potentially BIG problem. I kept going back to 
> the browser
> > window that
> > > had the CONNECT TO KIA button ( http://207.71.79.41:8043/ 
> ) and you can
> > hit it as
> > > many times as you want and get a NEW browser window with 
> yet another
> > virtual
> > > display...
> > >
> > > Chuck
> > >
> > >
> > > Bill Paris wrote:
> > >
> > > > The address block 207.71.64.x thru 207.71.127.x is 
> owned by Network
> > > > Intensive out of Irvine Ca, 714-450-8410. Kia leases an 
> address block
> > from
> > > > them (207.71.79.32 - 207.71.79.47). Contact Larry Wong 
> "wong@kiausa.com"
> > or
> > > > call 714-470-7000.
> > > >
> > > > Bill Paris
> > > > Sorrento Cheese Co., Inc.
> > > > 716-823-6262 x376
> > > > bparis@sccmail.com
> > > >
> > > > > Lets just say Kia needs to change their account.  The
> > > > > security hole is still
> > > > > there.  Anyone know the e-mail to Kia to tell them?
> > > > >
> > > > > And, no, the password is not valid on the AS/400.
> > > > >
> > > > > Regards,
> > > > >
> > > > > Jim Langston
> > > >
> > > > +---
> > > > | This is the Midrange System Mailing List!
> > > > | To submit a new message, send your mail to 
> MIDRANGE-L@midrange.com.
> > > > | To subscribe to this list send email to 
> MIDRANGE-L-SUB@midrange.com.
> > > > | To unsubscribe from this list send email to
> > MIDRANGE-L-UNSUB@midrange.com.
> > > > | Questions should be directed to the list owner/operator:
> > david@midrange.com
> > > > +---
> > >
> > > +---
> > > | This is the Midrange System Mailing List!
> > > | To submit a new message, send your mail to 
> MIDRANGE-L@midrange.com.
> > > | To subscribe to this list send email to 
> MIDRANGE-L-SUB@midrange.com.
> > > | To unsubscribe from this list send email to
> > MIDRANGE-L-UNSUB@midrange.com.
> > > | Questions should be directed to the list owner/operator:
> > david@midrange.com
> > > +---
> >
> > +---
> > | This is the Midrange System Mailing List!
> > | To submit a new message, send your mail to 
> MIDRANGE-L@midrange.com.
> > | To subscribe to this list send email to 
> MIDRANGE-L-SUB@midrange.com.
> > | To unsubscribe from this list send email to 
> MIDRANGE-L-UNSUB@midrange.com.
> > | Questions should be directed to the list owner/operator: 
> david@midrange.com
> > +---
> 
> +---
> | This is the Midrange System Mailing List!
> | To submit a new message, send your mail to MIDRANGE-L@midrange.com.
> | To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
> | To unsubscribe from this list send email to 
> MIDRANGE-L-UNSUB@midrange.com.
> | Questions should be directed to the list owner/operator: 
> david@midrange.com
> +---
> 
+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---