full-disclosure - New report on Windows Vista network attack surface

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date: Tue, 13 Mar 2007 15:51:52 -0800
From: Jim Hoagland <jim_hoagland@...antec.com>
To: Bugtraq <bugtraq@...urityfocus.com>,
	Full Disclosure <full-disclosure@...ts.grok.org.uk>
Subject: New report on Windows Vista network attack surface

Greetings,

Some of you may be interested in a new report titled "Windows Vista Network
Attack Surface Analysis" by myself, Ollie Whitehouse, Tim Newsham, and Matt
Conover.

http://www.symantec.com/avcenter/reference/Vista_Network_Attack_Surface_RTM.
pdf ( http://tinyurl.com/2qrglc )

You might recall that an earlier edition of this report was released last
July covering certain beta builds.  This new report is a complete re-test
with the RTM (release) build of Vista.  We have also deepened our research
into Teredo, LLTD, Windows Firewall, MS-RPC, and IPv4/IPv6 fragmentation
reassembly.  However, it is still a very broad paper covering a large number
of topics.

We hope you find this report interesting or useful.

Sincerely,

  Jim Hoagland

P.s. Thanks for Oliver Friedrichs and Symantec for allowing us to conduct
this research and to publish it.  It was an interesting study.

-- 
Jim Hoagland, Ph.D., CISSP
Principal Security Researcher
Advanced Threats Research
Symantec Security Response
http://www.symantec.com/enterprise/security_response/weblog/authors/jim_hoag
land.html

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/