full-disclosure - The new Microsoft math: 1 patch for 14 vul nerabilities, MS04-011

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <9AD9D61578B84144912BCB44CBEF9EAD0700E7B8@usnssexc03.us.kworld.kpmg.com>
From: kenng at kpmg.com (Ng, Kenneth (US))
Subject: The new Microsoft math:  1 patch for 14 vul
	nerabilities, MS04-011

Here is the difference: eEye reports the problems to Microsoft.  Truely evil
guys use the exploits to break into banks and keep very quite about the
vulnerabilities.

-----Original Message-----
From: full-disclosure-admin@...ts.netsys.com
[mailto:full-disclosure-admin@...ts.netsys.com]On Behalf Of Dkr. Armand
Geddyn
Sent: Thursday, April 15, 2004 9:04 AM
To: full-disclosure@...ts.netsys.com
Subject: Re: [Full-Disclosure] The new Microsoft math: 1 patch for 14
vulnerabilities, MS04-011

Edward W. Ray wrote:

> If you are confident that no one else will discover those 
> vulnerabilities the next time that MS waits to provide a solution, I
> wish you good luck

These OSes have been around for years, running in hostile labs by evil 
geniuses, and the source code has been examined by admitted Communists 
and monarchists alike. :/ It's naive to assume eEye is the first on the 
scene. (Or paranoid to assume otherwise?)

-- 
"On the moon, we have evolved beyond rules... and manners."
The Ministry of Truth, Austin, TX | http://www.minitru.org

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

*****************************************************************************
The information in this email is confidential and may be legally privileged.
It is intended solely for the addressee. Access to this email by anyone else
is unauthorized. 

If you are not the intended recipient, any disclosure, copying, distribution
or any action taken or omitted to be taken in reliance on it, is prohibited
and may be unlawful. When addressed to our clients any opinions or advice
contained in this email are subject to the terms and conditions expressed in
the governing KPMG client engagement letter.         
*****************************************************************************