bugtraq - Re[2]: Automatically passing NTLM authentication credentials on Windows XP

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <BAY22-F22FRaqbC8wSA0000dde7@hotmail.com>
Date: Wed, 29 Sep 2004 18:10:42 +0900
From: "Hidenobu Seki" <urity_friday@...mail.com>
To: 3APA3A@...URITY.NNOV.RU
Cc: full-disclosure@...ts.netsys.com, Secure@...rosoft.com,
   bugtraq@...urityfocus.com
Subject: Re[2]: Automatically passing NTLM authentication credentials
 on Windows XP

>From: 3APA3A <3APA3A@...URITY.NNOV.RU>
>
>I  don't  think  problem  reported  by you is different issue, it's just
>another exploit scenario for the same problem. I know few more tricks to
>redirect user to UNC share.

I see your meaning. So, I agree.

I hope Microsoft fundamentally address the issue in the future.
In the meantime, I expect you (Microsoft) to do something for their problems 
piece by piece.
Don't leave "img src=file://..." as it is for 7 years.
I think many people use Windows by default but get WindowsUpdate. They 
aren't aware that they use weak LM authentication.

Kind regards,
Urity

_________________________________________________________________
MSN 8 helps eliminate e-mail viruses. Get 2 months FREE*. 
http://join.msn.com/?page=features/virus

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html