bugtraq - RE: Windows Server 2003 Security Guide available

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <1051600581.7933.11.camel@localhost.localdomain>
Date: 29 Apr 2003 08:16:21 +0100
From: paul <xml@...landnews.com>
To: bugtraq@...urityfocus.com
Subject: RE: Windows Server 2003 Security Guide available


Jason Coombs wrote:

> Anyone interested in downloading these guides must be aware that they
> are distributed by Microsoft in the form of self-extracting .exe's
> bearing digital signatures embedded in the Portable Executable file's
> header section.

Obviously use self-extracting .exes is a ludicrous idea from a security
point of view, however, at least you don't have to run them:

$ wget
"http://download.microsoft.com/download/3/7/f/37fcf915-c19e-4c09-8b05-1573ea58b164/W2KHG 1.1.exe"
$ unzip W2KHG%201.1.exe
Archive:  /arch/W2KHG%201.1.exe
  inflating: Windows 2000 Hardening Guide.doc
  inflating: Templates/installSceregvl.bat
...

Paul