[VIM] 0day to sell (fwd)

Steve Tornio steve at vitriol.net
Thu May 31 10:25:42 UTC 2007


security curmudgeon wrote:
> 
> 
> Notice the X-Originating-IP:
> 
> forced ~$ whois 192.6.111.74
> 

Looks like HP may need to do an audit of their proxy settings.

[rogue:~] steve% host 192.6.111.74
74.111.6.192.in-addr.arpa domain name pointer 
grewebdproxy2.net.external.hp.com.

> OrgName:    Hewlett-Packard Company
> OrgID:      HP
> Address:    3000 Hanover Street
> City:       Palo Alto
> StateProv:  CA
> PostalCode: 94304
> Country:    US
> 
> NetRange:   192.6.22.0 - 192.6.142.255
> CIDR:       192.6.22.0/23, 192.6.24.0/21, 192.6.32.0/19, 192.6.64.0/18, 
> 192.6.128.0/21, 192.6.136.0/22, 192.6.140.0/23, 192.6.142.0/24
> NetName:    HP-3
> NetHandle:  NET-192-6-22-0-1
> Parent:     NET-192-0-0-0-0
> NetType:    Direct Allocation
> NameServer: PALOALTO.AMERICAS.HP.NET
> NameServer: ATLANTA.AMERICAS.HP.NET
> Comment:
> RegDate:
> Updated:    2003-01-23
> 
> RAbuseHandle: NAR-ARIN
> RAbuseName:   Network Abuse Response
> RAbusePhone:  +1-650-857-5120
> RAbuseEmail:  abuse at hp.com
> 
> RTechHandle: AI2-ORG-ARIN
> RTechName:   Hewlett Packard Company
> RTechPhone:  +1-800-524-7638
> RTechEmail:  ipaddr at hp.com
> 
> OrgTechHandle: HH15-ORG-ARIN
> OrgTechName:   Hewlett-Packard Company
> OrgTechPhone:  +1-800-524-7638
> OrgTechEmail:  hostmaster at hp.com
> 
> 
> 
> ---------- Forwarded message ----------
> From: toto toto <snacker at linuxmail.org>
> X-Originating-IP: 192.6.111.74
> To: full-disclosure at lists.grok.org.uk
> Date: Thu, 31 May 2007 16:55:00 +0800
> Subject: [Full-disclosure] 0day to sell
> 
> hi,
> 
> some 0day to sell : sap, excel, linux and many other (0day vulns and/or 
> exploits too)
> 
> contact by mail
> 
> 
> regards,
> 
> 
> t0t0 t0t0
> 
> =
> Cummins Natural Gas Generators
> Cummins Power Generation designs, manufactures and maintains power 
> generation equipment, standby and prime power systems, diesel and 
> natural gas generators and switch gear.
> http://a8-asy.a8ww.net/a8-ads/adftrclick?redirectid=411dac8e5815b1f82b5855882b63786f 
> 
> 
> 



More information about the VIM mailing list