full-disclosure - Re: HP Tru64 dtmail bug

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date: Sun, 22 Oct 2006 17:22:53 -0500
From: <cdejrhymeswithgay@...h.com>
To: <full-disclosure@...ts.grok.org.uk>,
	<kf_lists@...italmunition.com>
Subject: Re: HP Tru64 dtmail bug - Really exploitable?

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


On Sun, 22 Oct 2006 14:49:22 -0500 "K F (lists)"
<kf_lists@...italmunition.com> wrote:
>Roman Medina-Heigl Hernandez wrote:
>>
>> More or less according to HP advisory ("HPSBTU02163 SSRT061223")

>which
>> marks the impact as POTENTIAL ("Potential Security Impact: Local

>execution
>> of arbitrary code")
>
>Don't mind the smoke and mirrors. HP always says that. Even with
>working
>root exploits in hand HP will release an advisory that say
>'potential'.
>
>don't believe me?
>
>http://archives.neohapsis.com/archives/tru64/2002-q3/0019.html
>http://downloads.securityfocus.com/vulnerabilities/exploits/TRU64_s

>u.pl
>
>funny how that works eh?
>
>-KF
>
>_______________________________________________
>Full-Disclosure - We believe in it.
>Charter: http://lists.grok.org.uk/full-disclosure-charter.html
>Hosted and sponsored by Secunia - http://secunia.com/

Politics should be avoided at all costs.
-----BEGIN PGP SIGNATURE-----
Note: This signature can be verified at https://www.hushtools.com/verify
Version: Hush 2.5

wpwEAQECAAYFAkU77z0ACgkQsGS6s78KOsWm+gQAk607hbBR6SB2kchEbaT4Ie8fnM0F
KGtx1pW8+tlNTgaf4OjJNbzp3bDIvCn3yMk/kP9KjRrK8TMF9mfSQNwLFKfcmdXV1ruw
hsbZfDdPKF3Q6fK8CTBgh4j1vtlMzIkJhd4OAy1HgQxjuG9ie1M1z+ZKJ4aNHBV7Lo3Y
bAt74rE=
=Mlwk
-----END PGP SIGNATURE-----




Concerned about your privacy? Instantly send FREE secure email, no account required
http://www.hushmail.com/send?l=480

Get the best prices on SSL certificates from Hushmail
https://www.hushssl.com?l=485

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/