full-disclosure - Windows 98 vulnerable to ASN.1

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <00c401c3f63f$c1cdac00$a105bb0a@corp.ad.timeinc.com>
From: jlevitsk at joshie.com (Joshua Levitsky)
Subject: Windows 98 vulnerable to ASN.1

----- Original Message ----- 
From: "Daniel H. Renner" <dan@...angelescomputerhelp.com>
Sent: Wednesday, February 18, 2004 3:33 AM
Subject: Re: [Full-Disclosure] Windows 98 vulnerable to ASN.1

> _Most_ Win98 users can also simply rename the file
> (%WINDIR%\system\msasn1.dll) without repercusions.

This is true unless you use 98 in a business and have the AD client... which
many of my colegues still have... sadly...

I just found out today that the patch will not be on Windows Update ever,
and you have to call in for it. It's free but you have to call in. I'm
deploying it at work since yesterday.

--
Joshua Levitsky, MCSE, CISSP
http://www.foist.org/
[5957 F27C 9C71 E9A7 274A 0447 C9B9 75A4 9B41 D4D1]