full-disclosure - Re: [VulnWatch] Re: phpbb 2.0.15 released

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <E1DWa4q-000Fdg-00.phased-mail-ru@f16.mail.ru>
Date: Fri May 13 14:19:51 2005
From: phased at mail.ru (phased)
Subject: Re: [VulnWatch] Re: phpbb 2.0.15 released -
	patches high critical vuln

omg, do you think you superman? what sort of bullshit message is this

-----Original Message-----
From: Paul Laudanski <zx@...tlecops.com>
To: Paul Laudanski <paul@...tlecops.com>
Date: Thu, 12 May 2005 18:13:42 -0400 (EDT)
Subject: [VulnWatch] Re: phpbb 2.0.15 released - patches high critical vuln

> 
> As expected, today was supposed to be full-disclosure on this
> vulnerability.  On further evaluation, another vendor must be contacted as
> the vulnerability permits a users computer to be hijacked.  Surely there
> is enough of that going on with current spyware/adware.  That vendor has
> been sent an email today, and we'll respond back to the lists with a
> followup shortly.
> 
> Eventually we'll get to releasing the full disclosure, however, at this 
> stage, it is a much bigger issue than just phpbb and we want to play it 
> safe for the greater community-at-large.
> 
> On Sun, 8 May 2005, Paul Laudanski wrote:
> 
> > re: http://www.phpbb.com/phpBB/viewtopic.php?f=14&t=288194
> > 
> > A high risk bbcode.php vulnerability is patched with this version, at the
> > very least please patch it via the link above.  It was discovered by
> > Papados and patched by myself.  In agreement with phpbb.com, we'll
> > (CastleCops) release the full details in five days.  A CVE has been
> > obtained.
> 
> -- 
> Paul Laudanski .. Computer Cops, LLC.
> Microsoft MVP Windows-Security 2005
> CastleCops(SM)... http://castlecops.com
> CC Blog ......... http://blog.castlecops.com
> Staff Blogs ..... http://busterbunny.castlecops.com
> Our Vision ...... http://castlecops.com/postt63382.html
> 
> http://cuddlesnkisses.com http://justalittlepoke.com http://zhen-xjell.com
> 
> 
> ________ Information from Computer Cops, L.L.C. ________
> This message was checked by NOD32 Antivirus System for Linux Mail Server.
> 
>   part000.txt - is OK
> http://castlecops.com
>