full-disclosure - 3 new MS patches next week... but none fix 0x01!

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <008601c3d694$31f8aaf0$0b041fac@UMBRELLA2>
From: liudieyuinchina at vip.sina.com.cn (Liu Die Yu)
Subject: 3 new MS patches next week... but none fix 0x01!

0x01 URL spoofing works on up-to-date en Win2k3 with evaluation product key.
so, it's still there: 
http://www.safecenter.net/UMBRELLAWEBV4/ie_unpatched/index.html

so, i doubt whether your XP SP2 is an internval version of microsoft. :-)
 


----- Original Message ----- 
From: "Poof" <gui@...dessmoon.org>
To: "'Michael Renzmann'" <security@...anic.de>; "'Exibar'" <exibar@...lair.com>
Cc: <full-disclosure@...ts.netsys.com>
Sent: Friday, January 09, 2004 3:09 PM
Subject: RE: [Full-Disclosure] 3 new MS patches next week... but none fix 0x01!


> Actually- the 01 bug is fixed in XP SP2... So I think it may be hidden in
> one of them...
> 
> They don't always disclose 'everything' in the patches...
> 
> ~
> 
> > -----Original Message-----
> > From: full-disclosure-admin@...ts.netsys.com [mailto:full-disclosure-
> > admin@...ts.netsys.com] On Behalf Of Michael Renzmann
> > Sent: Friday, January 09, 2004 1:21 AM
> > To: Exibar
> > Cc: full-disclosure@...ts.netsys.com
> > Subject: Re: [Full-Disclosure] 3 new MS patches next week... but none fix
> > 0x01!
> > 
> > Hi.
> > 
> > Exibar wrote:
> > >   Heck if 3rd parties can write a fix for the darned thing, why the heck
> > > can't Microsoft????  What are they thinking over there?
> > 
> > "When others do the work for us, why should we bother to spend money in
> > that?"
> > 
> > Bye, Mike
> > 
> > _______________________________________________
> > Full-Disclosure - We believe in it.
> > Charter: http://lists.netsys.com/full-disclosure-charter.html
> 
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.netsys.com/full-disclosure-charter.html
> 
>