full-disclosure - [Fwd: ASN vulerability question]

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

From: dan at losangelescomputerhelp.com (Daniel H. Renner)
Subject: [Fwd: ASN vulerability question]

William,

I know that on a 98 system you can rename the file with no adverse
effects - the one we did it to is running IE v5.5, Access 97 &
QuickBooks 2002 just fine.

However, if you do this on a WinXP system, you'd first have to deal with
the dllcache file (which I don't suggest you do) and then the system32
file - which I also don't suggest you do - because you will BSOD your
computer when you try to reboot...

Cheers,
Dan

-----Forwarded Message-----

From: William Warren <hescominsoon@...anuelcomputerconsulting.com>
To: Full_Dsiclosure <full-disclosure@...ts.netsys.com>
Subject: [Full-Disclosure] ASN vulerability question
Date: 11 Feb 2004 17:50:20 -0500

A user of a much less technical list I am a member of asked a very 
interesting question I quote it below:

I am well aware that Windows Update and the Microsoft Security bulletins do
 > not indicate that Win98 is affected by this ASN vulnerability.  But I 
did
 > read that on an NT4.0 system, searching for msasn1.dll would let you 
know
 > if you were affected.  Well, for grins, I did this on my 98se
 > machine.  Bam; I have it.  So my question is this: Is there not an 
update
 > because the implementation of asn is different in Win98, or is it 
because
 > the product life cycle for Windows 98 has ended, and the vulnerability
 > really does affect 98 users--there's just nothing they can do about it?

What's the verdict on this one?
-- 
May God Bless you and everything you touch.

My "foundation" verse:
Isaiah 54:17 No weapon that is formed against thee shall prosper; and 
every tongue that shall rise against thee in judgment thou shalt 
condemn. This is the heritage of the servants of the LORD, and their 
righteousness is of me, saith the LORD.

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html