full-disclosure - Correction to latest Colsaire advisories

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <000901c49a66$81468280$d4f0bb51@vegetabl3.org>
From: advisories at corsaire.com (advisories)
Subject: Correction to latest Colsaire advisories

> I see no results of your work: a list of vulnerable products.

Did you try Google? ;)

http://www.uniras.gov.uk/vuls/2004/380375/mime.htm

Admitedly it is a bit thin at the moment (and many names are conspicous by
their absense). This should improve as more vendors provide a statement.

> Of cause, poor, busy and tired 3APA3A can not do it alone.

You never had to; NISCC, CERT/CC?

> How this information helps vendors to secure their products?

Any vendors (who have not already been involved so far) who wish to get more
detail are encouraged to contact the NISCC team and request a copy of the
test suite.

Regards,
Martin O'Neal