full-disclosure - The new Microsoft math: 1 patch for 14 vulnerabilities, MS04-011

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

From: geoincidents at getinfo.org (Geoincidents)
Subject: The new Microsoft math:  1 patch for 14 vulnerabilities, MS04-011

> Exactly the point of full disclosure.  If someone with a serious axe to
grind would have stumbled onto the ASN.1 flaw before the Eeye notice, it
could have been an ELE* for MS and some major corporations.
>
> Let's see, unpatched ASN.1 + Flash Worm = ?

I think you seriously underestimate the hacking skills of eeye, there are
very few who could turn the bugs they find into full blow root level
exploits.

Geo.