lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  PHC 
Open Source and information security mailing list archives
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Date: Thu, 12 May 2005 19:50:54 -0400 (EDT)
From: Paul Laudanski <>
Subject: Re: phpbb 2.0.15 released - patches high critical vuln

As expected, today was supposed to be full-disclosure on this
vulnerability.  On further evaluation, another vendor must be contacted as
the vulnerability permits a users computer to be hijacked.  Surely there
is enough of that going on with current spyware/adware.  That vendor has
been sent an email today, and we'll respond back to the lists with a
followup shortly.

Eventually we'll get to releasing the full disclosure, however, at this
stage, it is a much bigger issue than just phpbb and we want to play it
safe for the greater community-at-large.

On Sun, 8 May 2005, Paul Laudanski wrote:

> re:
> A high risk bbcode.php vulnerability is patched with this version, at
> the very least please patch it via the link above.  It was discovered by
> Papados and patched by myself.  In agreement with, we'll
> (CastleCops) release the full details in five days.  A CVE has been
> obtained.


Paul Laudanski .. Computer Cops, LLC.
Microsoft MVP Windows-Security 2005
CC Blog .........
Staff Blogs .....
Our Vision ......

________ Information from Computer Cops, L.L.C. ________
This message was checked by NOD32 Antivirus System for Linux Mail Server.

  part000.txt - is OK

Powered by blists - more mailing lists