full-disclosure - Re: Backdoor within popular security software.

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date: Sun, 8 Apr 2007 21:32:35 +0000
From: "Anonymous User" <aserfgjgmdf@...il.com>
To: full-disclosure@...ts.grok.org.uk
Subject: Re: Backdoor within popular security software.

Hello,
I have found a backdoor in a popular piece of security software which works
in a way similar to a rootkit, allowing a remote attacker to access the
system fully.
I first attempted to contact the company/person to see if they knew anything
about it, to find whether it was intentional or a hacker had accessed there
code. However I have still not heard back from the company/person in
question after 2 weeks of sending the email.
I am not out to damage the reputation of this company or person which is why
I am being vague about details; however if the software is not updated
within a week, with the backdoor removed, I will post here the name of the
company or person with the accompanying code proving this backdoor.
I will not be responding to comments regarding this issue.

--I wish to remain anonymous, and this email account is not the email
account I normally use to post to mailing lists.

Content of type "text/html" skipped

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/