full-disclosure - Unsecure file permission of ZoneAlarm pro.

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

From: dufresne at winternet.com (Ron DuFresne)
Subject: Unsecure file permission of ZoneAlarm pro.

yet, if I read this properly it wasnpt simply and open e-mail attachment
issue was it, it was open attachment then make suggested changes to the
system issue wasn't it?  If I understood the problem, then it really
requres more then a simple luser, it requires the most stupid of lusers
for it to take.  and in that case, we're perhaps better off with them
DOS'ed? <smile>

thanks,

Ron DuFresne

>
> However, this would still make it prime for a DoS attack by the next
> strain of e-mail virus.  And most users who are not knowledgeable (those
> who would be opening the attachment in the first place) would probably
> not understand why they, now, cannot connect to the Internet.
>
> Matt
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
"Cutting the space budget really restores my faith in humanity.  It
eliminates dreams, goals, and ideals and lets us get straight to the
business of hate, debauchery, and self-annihilation." -- Johnny Hart
	***testing, only testing, and damn good at it too!***

OK, so you're a Ph.D.  Just don't touch anything.