bugtraq - RE: Unfiltered escape sequences in filenamescontained in ZIP archives wouldn't be escaped on displaying orlogging, and can also lead to bypass AV scanning

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Tue, 15 Mar 2005 22:58:26 +0530
From: "Debasis Mohanty" <mail@...kingspirits.com>
To: "'bipin gautam'" <visitbipin@...oo.com>,
	"'Dr. Peter Bieringer'" <pbieringer@...asec.de>,
	<full-disclosure@...ts.grok.org.uk>
Cc: bugtraq@...urityfocus.com
Subject: RE: Unfiltered escape sequences in
	filenamescontained in ZIP archives wouldn't be escaped on
	displaying orlogging, and can also lead to bypass AV scanning

>> i guess, companies should know learn how to treat ppl.
>> who write to them. For this, i've always admired
>> Microsoft.   (O;   (no flames) 
>> -bipin

This is something I must agree with you Bipin. Microsoft has always been
polite and responsible atleast to whatever I have posted them in the past.
To all my posting they have replied back withing 24 to 30 hrs and I believe
it would have been much faster unless there would have been a time zone
difference of 10 to 12 hrs between my location and Redmond. :) 

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://www.secunia.com/