what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 2 of 2

Files from Chris Adams

MacOSXAFP.txt

Posted Feb 27, 2004

Authored by Chris Adams

Paper discussing how the the standard Apple Filing Protocol (AFP) does not use encryption to protect transfered data. Login credentials may be sent in cleartext or protected with one of several different hashed exchanges or Kerberos. There does not appear to have been any serious third-party security review of Apple's client or server implementations.

tags | advisory, protocol

systems | apple

SHA-256 | 16feb9364a339129da505a3e12219691b666acf40377cf696c052a27ed62f5aa

Download | Favorite | View

cobalt.cgiwrap.txt

Posted Nov 9, 1999

Authored by Chris Adams

There is a problem (actually several) with the "cgiwrap" program on Cobalt RaQ2 servers. This can be used to break other sites on a RaQ2 in several ways.

tags | exploit

SHA-256 | 8105413f2c7ca65abc0278ea5141490cab31082aacbbd3cad6b8e1ff4e4a5ffb

Download | Favorite | View