Oddbean new post about | logout

Notes by d171689a | export

▲ ▼
Taggart :donor: | 1 years ago (raw) | full thread | reply | flag 
 Don't sleep on CVE-2023-40044.

#WS_FTP #CVE_2023_40044
▲ ▼
d171689a | 1 years ago (raw) | root | parent | reply | flag 
 @663e5b60 I am equally concerned about CVE-2023-42657. CVE-2023-40044 only affects those with the ad-hoc file transfer service, but the directory traversal potentially affects everyone. 

That said, I have ready others say the exploit for CVE-2023-40044 is fairly trivial (not sure if that's true), but I have read nothing about reproducing CVE-2023-42657.
▲ ▼
Catalin Cimpanu | 1 years ago (raw) | root | parent | reply | flag 
 From the Retool incident (related to those Okta attacks from last month):

"The caller claimed to...
▲ ▼
d171689a | 1 years ago (raw) | root | parent | reply | flag 
 @14abadff I would be curious to hear more about how Retools' incident is related to the recent attacks on 0kta customers.