full-disclosure - Secuirty Hole Found In Dave's Sock

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date: Thu Sep  8 18:14:52 2005
From: ghamblin at gmail.com (Glenn Hamblin)
Subject: Secuirty Hole Found In Dave's Sock


I've black listed all communication with the Dave system until I can be
assured that this hole has been properly patched. A scan of my system
has found no such vulnerability. I am however also considering complete
un-installation of all sock from my system. While I wait for the vendor(s)
assurance that this problem has been solved.

Glenn


At 09:10 AM 9/8/2005, you wrote:

>Date:           9/8/2005
>
>Vulnerability Found:    Hole In Dave's Socket
>
>Affected System:                Dave's Right Sock
>
>Severity:                       Rating: Moderately Critical
>                                 Impact: System access
>                                 Where:  Foot
>
>Description of Vulnerability:  This morning while putting my socks
>on I found a small (1/4 inch) hole by my big toe. This could be
>exploited by a virus through the bottom of the foot or under the
>toe nail. This could be used to compromise Dave's entire system.
>
>Solution: No permanent solution is currently available. A work
>around is to wear the sock on the other foot to have the hole
>above the small toe where it will not be furthur enlarged, it
>will proboably fold over and partially cover the vulnerability.
>Permanent solution coming in either a sock darning or upgrading
>the unit to a new sock.
>
>Time Table:             Found at 7:48am on Sept 8th, 1005
>                         Work around figured out at 7:49am on Sept 8th,
>2005
>                         Permanent Solution Pending
>
>Credits:                Found by Dave
>
>References:             No references available.
>
>
>***************************************************************
>Dave D. Cawley           |
>High Speed Internet      |    The number of Unix installations
>Duryea, PA               | has grown to 10, with more expected.
>(570)451-4311 x104       |  - The Unix Programmer's Manual,1972
>dave.cawley@...lphia.com |
>***************************************************************
>                   URL => http://www.adelphia.net
>_______________________________________________
>Full-Disclosure - We believe in it.
>Charter: http://lists.grok.org.uk/full-disclosure-charter.html
>Hosted and sponsored by Secunia - http://secunia.com/
>
>
>
>--
>No virus found in this incoming message.
>Checked by AVG Anti-Virus.
>Version: 7.0.344 / Virus Database: 267.10.19/93 - Release Date: 9/8/2005


-- 
No virus found in this outgoing message.
Checked by AVG Anti-Virus.
Version: 7.0.344 / Virus Database: 267.10.19/93 - Release Date: 9/8/2005