lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Mon Jun  5 17:38:31 2006
From: angray at beeb.net (Aaron Gray)
Subject: Is your security 6/6/6 ready?

Well thanks for the reply.

AutoUpdate aint been working as it shows up in the 'Update History' on 
Windows Update. And doing updates fails on "The Genuine Advantage" doobry 
whatsit.

And IE is eating 96% CPU time ! Thats all I know without looking deeper.

Aaron

----- Original Message ----- 
From: "HTRegz" <htregz@...ddicts.net>
To: "'Aaron Gray'" <angray@...b.net>; "'Andrew Farmer'" <andfarm@...il.com>; 
"'Full Disclosure'" <full-disclosure@...ts.grok.org.uk>
Cc: <Valdis.Kletnieks@...edu>
Sent: Monday, June 05, 2006 4:52 AM
Subject: RE: [Full-disclosure] Is your security 6/6/6 ready?


> I'm not usually one to reply on FD... but I'm gonna have to respond to 
> this
> one.
>
> A) How do you know that your "AutoUpdate" isn't working... There hasn't 
> been
> an update pushed out since the last Patch Tuesday (May 9th).
> B) KB913580 references MS06-018 which was released during the May Patch
> Tuesday (Again, May 9th... so you would have been updated at this time)...
> C) I've got through the source for that page and the included javascript 
> and
> have found nothing out of the ordinary... I've also loaded in it multiple
> browsers and watched what happened... there was no malicious behaviour..
>
> Plenty of Advertising sites are flagged by anti spyware these days... 
> solely
> because they leave behind cookies..
>
> Peace,
> HT
>
> -----Original Message-----
> From: full-disclosure-bounces@...ts.grok.org.uk
> [mailto:full-disclosure-bounces@...ts.grok.org.uk] On Behalf Of Aaron Gray
> Sent: Sunday, June 04, 2006 8:24 PM
> To: Andrew Farmer; Full Disclosure
> Cc: Valdis.Kletnieks@...edu
> Subject: Re: [Full-disclosure] Is your security 6/6/6 ready?
>
> It may be because my system was not updated since May 14th as AutoUpdate 
> has
>
> not worked since then, BUT has not warned me (nice one Microsoft). There 
> has
>
> been a MS update since then, KB913580, which may have closed the
> vulnerability; possibly.
>
> 'adserving.budsinc.com' is being flagged up by anti-spyware.
>
> Aaron
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
>
> -- 
> No virus found in this incoming message.
> Checked by AVG Free Edition.
> Version: 7.1.394 / Virus Database: 268.8.1/355 - Release Date: 6/2/2006
>
>
> -- 
> No virus found in this outgoing message.
> Checked by AVG Free Edition.
> Version: 7.1.394 / Virus Database: 268.8.1/355 - Release Date: 6/2/2006
>
>
>
>
> -- 
> No virus found in this incoming message.
> Checked by AVG Free Edition.
> Version: 7.1.394 / Virus Database: 268.8.2/356 - Release Date: 05/06/2006
> 

Powered by blists - more mailing lists