full-disclosure - MS03-039 has been released

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

From: pete.ryan at thomson.com (Ryan, Pete)
Subject: MS03-039 has been released - critical

After reading this again, and again, and again it seems that they are
talking about an exploit for 039 not 026 like I first thought.  Crap have to
patch super quick now....

-Pete

-----Original Message-----
From: Ryan, Pete 
Sent: Wednesday, September 10, 2003 6:31 PM
To: 'full-disclosure@...ts.netsys.com'
Subject: RE: [Full-Disclosure] MS03-039 has been released - critical

They are talking about MS03-026 in that case correct?  Sounds like it to me.

-Pete 

-----Original Message-----
From: Bobby, Paul [mailto:paul.bobby@...o.com]
Sent: Wednesday, September 10, 2003 3:47 PM
To: 'full-disclosure@...ts.netsys.com'
Subject: RE: [Full-Disclosure] MS03-039 has been released - critical

According to ISS, http://xforce.iss.net/xforce/alerts/id/152, they claim
that functional exploit code is already in use on the Internet.

anyone know of a 'sploit for this one yet?  Or even proof of concept code?