full-disclosure - MS03-032 Patch Updated or NOT ?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <003101c37739$fc332f80$550ffea9@rms>
From: rms at computerbytesman.com (Richard M. Smith)
Subject: MS03-032 Patch Updated or NOT ?

The patch has *not* been updated.  The Microsoft security bulletin was
changed to acknowledge that the original patch sucks and doesn't work.

Richard

-----Original Message-----
From: full-disclosure-admin@...ts.netsys.com
[mailto:full-disclosure-admin@...ts.netsys.com] On Behalf Of Elv1S
Sent: Tuesday, September 09, 2003 8:16 PM
To: full-disclosure@...ts.netsys.com
Subject: [Full-Disclosure] MS03-032 Patch Updated or NOT ?

on MS website, the security bulletin MS03-032 was updated on sept 8 :

V1.3 (September 8, 2003): Added information regarding reports that the
patch provided does not properly correct the Object Type Vulnerability
(CAN-2002-0532) 

But after applying the patch, rebooting - and making a test on k-otik :

http://www.k-otik.com/MS03-032-TEST/
http://www.k-otik.com/MS03-032-TEST2/

i'm still vulnerable !!!

So updated or not ??

  _____  

Do you Yahoo!?
Yahoo!  <http://us.rd.yahoo.com/evt=10469/*http://sitebuilder.yahoo.com>
SiteBuilder - Free, easy-to-use web site design software

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20030909/05b270f8/attachment.html