bugtraq - Re: RE: BAD NEWS: Microsoft Security Bulletin M S03-032

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date: Tue, 09 Sep 2003 13:09:45 -0700
From: Rick Updegrove <security@...egrove.net>
To: full-disclosure@...ts.netsys.com, Bugtraq <bugtraq@...urityfocus.com>
Cc: full-disclosure@...ts.netsys.com, http-equiv@...ite.com,
   NTBugtraq <NTBUGTRAQ@...TSERV.NTBUGTRAQ.COM>,
   Microsoft Security Response Center <secure@...rosoft.com>,
   vulnwatch@...nwatch.org
Subject: Re: RE: BAD NEWS: Microsoft Security Bulletin M
 S03-032

Bergeron, Jared wrote:

 >In our testing we found that Virusscan 7 caught this, however 
Virusscan 4.5x with the latest DAT did not. 

In our testing we discovered that McAffee caught it, but the user was 
prompted to respond with some action.  By the time one had read the 
warning text, the .exe had been downloaded and executed.

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html