full-disclosure - mnogosearch 3.1.20 and 3.2.10 buffer overflow

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

From: lwc at vapid.ath.cx (Larry W. Cashdollar)
Subject: mnogosearch 3.1.20 and 3.2.10 buffer overflow

I thought full disclosure meant none of the details would be held back,
any code or information that could possibly be used for malicious purposes
would be posted along with the advisory/discussion content.

My apology if I am mistaken.

-- Larry C$

>
>  5 months...  This is full disclosure?
>  "there was a hole, now its fixed"
>  why even bother posting.. kinda sounds like a idefense tactic..
> FULL DISCLOSURE  means just that dosent it?
>
>  I dont get it?
>
> morning_wood