| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-ID: <4282181C.90108@digitalmunition.com> Date: Wed May 11 15:32:23 2005 From: kf_lists at digitalmunition.com (KF (lists)) Subject: BakBone NetVault last warning They do mention "Progress continues toward making the required assessment under Section 404 of the Sarbanes-Oxley Act of 2002 and the related rules" but of course this has nothing to do with the security of their products. =] -KF class wrote: >-----BEGIN PGP SIGNED MESSAGE----- >Hash: SHA1 > >have been also surprised to not see the word "security" in their open >letter > >http://phx.corporate-ir.net/phoenix.zhtml?c=67723&p=irol-newsArticle&t=Regular&id=704547& > >:> > >KF (lists) a ?crit : > > > >>"when a man such as you reports a security hole we can not put all >>works on the ground and say yes: we are fixing it" >> >>What kind of bullshit is that! I am glad I am not a customer of >>theirs. >> >>What kind of man must you be to make them say "yes: we are fixing >>it". Perhaps you have to be a sexy woman instead. =] >> >>-KF >> >>class wrote: >> >> >> > > > >>As a recall, there is now two months, the Hat-Squad has published 2 >>high security risks still UNPATCHED for BakBone NetVault 6.x/7.x >>all versions. In an Open Letter: >> >>http://phx.corporate-ir.net/phoenix.zhtml?c=67723&p=irol-newsArticle&t=Regular&id=704547& >> >> >> >>Bakbone announce a new NetVault Q4 2005, and a new MACOSX version. >>My suggestion to BakBone is to review their whole code because Im >>aware that another Heap overflow has been found by a friend without >>to be published. >> >>We won't republish this warning as soon as BakBone choosed to wake >>up, but we recommand to assest BakBone products if you are seeking >>for security bugs, this is a nice peace of cheese. >> >>BakBone NetVault 6.x/7.x Remote Heap Buffer Overflow advisory >> >>class101.org/netv-remhbof.pdf >> >>BakBone NetVault 6.x/7.x Remote Heap Buffer Overflow exploit >> >>class101.org/36/55/op.php >> >>BakBone NetVault 6.x/7.x Local Stack Buffer Overflow advisory >> >>class101.org/netv-locsbof.pdf >> >>BakBone NetVault 6.x/7.x Local Stack Buffer Overflow exploit >> >>class101.org/36/55/op.php >> >> >> >> >>> >>> >_______________________________________________ >Full-Disclosure - We believe in it. >Charter: http://lists.grok.org.uk/full-disclosure-charter.html >Hosted and sponsored by Secunia - http://secunia.com/ > > >>> >>> >>> > > > > > > >>_______________________________________________ Full-Disclosure - >>We believe in it. Charter: >>http://lists.grok.org.uk/full-disclosure-charter.html Hosted and >>sponsored by Secunia - http://secunia.com/ >> >> > >-----BEGIN PGP SIGNATURE----- >Version: GnuPG v1.4.1 (MingW32) > >iD8DBQFCghRrLyZ8K9aT7rARAgDuAJ4tYTFK7wN3XCYjveXSxJ2NHda3DACfQ4RL >yFuS6o9Ch70AvcCR6Hwo8fs= >=CfAp >-----END PGP SIGNATURE----- > > > > > > >
Powered by blists - more mailing lists