lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Mon Jun  5 04:51:54 2006
From: htregz at aoaddicts.net (HTRegz)
Subject: Is your security 6/6/6 ready?

I'm not usually one to reply on FD... but I'm gonna have to respond to this
one.

A) How do you know that your "AutoUpdate" isn't working... There hasn't been
an update pushed out since the last Patch Tuesday (May 9th).
B) KB913580 references MS06-018 which was released during the May Patch
Tuesday (Again, May 9th... so you would have been updated at this time)... 
C) I've got through the source for that page and the included javascript and
have found nothing out of the ordinary... I've also loaded in it multiple
browsers and watched what happened... there was no malicious behaviour.. 

Plenty of Advertising sites are flagged by anti spyware these days... solely
because they leave behind cookies.. 

Peace,
HT

-----Original Message-----
From: full-disclosure-bounces@...ts.grok.org.uk
[mailto:full-disclosure-bounces@...ts.grok.org.uk] On Behalf Of Aaron Gray
Sent: Sunday, June 04, 2006 8:24 PM
To: Andrew Farmer; Full Disclosure
Cc: Valdis.Kletnieks@...edu
Subject: Re: [Full-disclosure] Is your security 6/6/6 ready?

It may be because my system was not updated since May 14th as AutoUpdate has

not worked since then, BUT has not warned me (nice one Microsoft). There has

been a MS update since then, KB913580, which may have closed the 
vulnerability; possibly.

'adserving.budsinc.com' is being flagged up by anti-spyware.

Aaron

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

-- 
No virus found in this incoming message.
Checked by AVG Free Edition.
Version: 7.1.394 / Virus Database: 268.8.1/355 - Release Date: 6/2/2006
 

-- 
No virus found in this outgoing message.
Checked by AVG Free Edition.
Version: 7.1.394 / Virus Database: 268.8.1/355 - Release Date: 6/2/2006
 

Powered by blists - more mailing lists