bugtraq - Re: [WEB SECURITY] Universal XSS with PDF files: highly dangerous

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Wed, 3 Jan 2007 10:27:26 +0000
From: "pdp (architect)" <pdp.gnucitizen@...glemail.com>
To: "sven.vetsch@...enchant.ch" <sven.vetsch@...enchant.ch>
Cc: full-disclosure@...ts.grok.org.uk, bugtraq@...urityfocus.com,
	"Web Security" <websecurity@...appsec.org>
Subject: Re: [WEB SECURITY] Universal XSS with PDF files: highly dangerous

no worries, the vulnerability details presented on my blog post were
updated. good work.

On 1/3/07, sven.vetsch@...enchant.ch <sven.vetsch@...enchant.ch> wrote:
> Quoting "pdp (architect)" <pdp.gnucitizen@...glemail.com>:
>
> > This finding was originally mentioned by Sven Vetsch, on his blog.
> > This is a very good and quite interesting. Good work.
>
> Sorry about that but that's wrong. All the credits have to go to Stefano Di
> Paola and Giorgio Fedon. They presented that stuff at the 23C3 in Berlin. The
> only thing that I did was an overview and I found out, that it doesn't matter
> how the parameter is called. I "just" forgot to copy paste the credits from my
> original document, to the blog entry. I'm very sorry about that and of course I
> putted it in my entry now.
>
> Regards,
> Disenchant / Sven Vetsch
>
>
>


-- 
pdp (architect) | petko d. petkov
http://www.gnucitizen.org