full-disclosure - Windows 2000 Remote Buffer Overflow by class101

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <20041023130558.W12015@ubzr.zsa.bet>
From: measl at mfn.org (J.A. Terranson)
Subject: Windows 2000 Remote Buffer Overflow by class101

On Fri, 22 Oct 2004, Danny wrote:

> > "Stack based overflow, bug discovered by Luigi Auriemma
> > aluigi.altervista.org
> > Tested working on Win2K, This public version crash on any WinXP, read
> > the code why.
> > The exploit bind a shellcode on the victim port 101."
>
> What does Microsoft say in response?

In a news conference where Mr. Bill was approached with this very
question, he is reported to have stated that "The Windows Operating System
is the most secure piece of crap, er, um, code ever written.  Micro$loth
emphatically denies that this is anything but the most minor of issues,
and doesn't even rise to the level of threat necessary to achieve public
commentary.  Therefore, Micro$loth has no comment.  Thank you, and good
night.".

-- 
Yours,

J.A. Terranson
sysadmin@....org
0xBD4A95BF

	"An ill wind is stalking
	while evil stars whir
	and all the gold apples
	go bad to the core"

	S. Plath, Temper of Time