full-disclosure - ASN vulerability question

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <402AB1AC.5020205@emmanuelcomputerconsulting.com>
From: hescominsoon at emmanuelcomputerconsulting.com (William Warren)
Subject: ASN vulerability question

A user of a much less technical list I am a member of asked a very 
interesting question I quote it below:

I am well aware that Windows Update and the Microsoft Security bulletins do
 > not indicate that Win98 is affected by this ASN vulnerability.  But I 
did
 > read that on an NT4.0 system, searching for msasn1.dll would let you 
know
 > if you were affected.  Well, for grins, I did this on my 98se
 > machine.  Bam; I have it.  So my question is this: Is there not an 
update
 > because the implementation of asn is different in Win98, or is it 
because
 > the product life cycle for Windows 98 has ended, and the vulnerability
 > really does affect 98 users--there's just nothing they can do about it?

What's the verdict on this one?
-- 
May God Bless you and everything you touch.

My "foundation" verse:
Isaiah 54:17 No weapon that is formed against thee shall prosper; and 
every tongue that shall rise against thee in judgment thou shalt 
condemn. This is the heritage of the servants of the LORD, and their 
righteousness is of me, saith the LORD.