full-disclosure - Re: HelpCtr - allow open any page or run

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <20040210195333.AFBF097B44@cpo.tn.tudelft.nl>
From: emvs.fd.3FB4D11C at cpo.tn.tudelft.nl (Erik van Straten)
Subject: Re: HelpCtr - allow open any page or run

List,

On 10 Feb 2004 12:01:26 -0000 Bartosz Kwitkowski wrote:
> To: BugTraq
> Subject: Re: HelpCtr - allow open any page or run
> Date:  Feb 10 2004 12:01PM
> Author: Bartosz Kwitkowski <bartosz wb pl>
> Message-ID: <20040210120126.19040.qmail@....securityfocus.com>
> In-Reply-To: <20040207214926 28580 qmail www securityfocus com>
>
> It was tested on Win XP Prof (ver 2002) Polish with Hotfixes: KB824146 and KB823980.
>
> hcp://services/layout/contentonly?topic=http://www.securityfocus.com
>
> Help Center opens page with given URL. For sure.

I *do* believe him. Bartosz: please run WU and try again.
(both 823980/MS03-026 and 824146/MS03-039 are RPC fixes).

Sorry for bothering ya FD guyz, back to http-equiv's stuff :(
Erik

Original message archives:
http://www.securityfocus.com/archive/1/353276
or http://seclists.org/lists/bugtraq/2004/Feb/0251.html