full-disclosure - Update: iDEFENSE Security Advisory 11.19.02b: Eudora Script Execution Vulnerability

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <3DDB6666.16167.62285B@localhost>
From: dendler at idefense.com (David Endler)
Subject: Update: iDEFENSE Security Advisory 11.19.02b: Eudora Script Execution Vulnerability

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

After speaking with Magnus Bodin [magnus@...in.org], it is clear that
he had already discovered various components of this vulnerability.  

     http://online.securityfocus.com/archive/1/262704
     http://online.securityfocus.com/archive/1/282631
     http://online.securityfocus.com/archive/1/282993
     http://online.securityfocus.com/archive/1/283018
     http://online.securityfocus.com/archive/1/287896

The CREDIT section of http://www.idefense.com/advisory/11.19.02b.txt
has been properly updated.  Thanks to Paul Szabo for bringing this to
our attention.

- -dave

David Endler, CISSP
Director, Technical Intelligence
iDEFENSE, Inc.
14151 Newbrook Drive
Suite 100
Chantilly, VA 20151
voice: 703-344-2632
fax: 703-961-1071

dendler@...fense.com
www.idefense.com

-----BEGIN PGP SIGNATURE-----
Version: PGPfreeware 6.5.8 for non-commercial use <http://www.pgp.com>

iQA/AwUBPdurr0rdNYRLCswqEQJCDgCg7yZDdR0VstiGp/nY6CWF0LGqoLoAn3z9
0g6PHFQ9J14WMWnSseTeO90h
=g8FT
-----END PGP SIGNATURE-----