full-disclosure - Secuirty Hole Found In Dave's Sock

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <00b501c5b49e$2df94330$1214dd80@corp.emc.com>
Date: Thu Sep  8 18:53:32 2005
From: exibar at thelair.com (Exibar)
Subject: Secuirty Hole Found In Dave's Sock

Because of this hole, SANS have just gone from green to argyle as well....

 exibar

----- Original Message ----- 
From: "Exibar" <exibar@...lair.com>
To: "Dave Cawley" <dave.cawley@...lphia.com>;
<full-disclosure@...ts.grok.org.uk>
Sent: Thursday, September 08, 2005 1:31 PM
Subject: Re: [Full-disclosure] Secuirty Hole Found In Dave's Sock


> I've found out that using Dave's right Sock 1.0 along with Sandals 2.0
will
> cause this vulnerability to become very appearant and much worse.  With
this
> known, Dave's rigth sock 1.0 should never EVER be used with any version of
> Sandals (currently at v2.0).
>
>   exibar
>
>
> ----- Original Message ----- 
> From: "Dave Cawley" <dave.cawley@...lphia.com>
> To: <full-disclosure@...ts.grok.org.uk>
> Sent: Thursday, September 08, 2005 12:10 PM
> Subject: [Full-disclosure] Secuirty Hole Found In Dave's Sock
>
>
> Date: 9/8/2005
>
> Vulnerability Found:   Hole In Dave's Socket
>
> Affected System: Dave's Right Sock
>
> Severity: Rating: Moderately Critical
> Impact: System access
> Where:  Foot
>
> Description of Vulnerability:  This morning while putting my socks
> on I found a small (1/4 inch) hole by my big toe. This could be
> exploited by a virus through the bottom of the foot or under the
> toe nail. This could be used to compromise Dave's entire system.
>
> Solution: No permanent solution is currently available. A work
> around is to wear the sock on the other foot to have the hole
> above the small toe where it will not be furthur enlarged, it
> will proboably fold over and partially cover the vulnerability.
> Permanent solution coming in either a sock darning or upgrading
> the unit to a new sock.
>
> Time Table: Found at 7:48am on Sept 8th, 1005
> Work around figured out at 7:49am on Sept 8th,
> 2005
> Permanent Solution Pending
>
> Credits: Found by Dave
>
> References: No references available.
>
>
> ***************************************************************
> Dave D. Cawley           |
> High Speed Internet      |    The number of Unix installations
> Duryea, PA               | has grown to 10, with more expected.
> (570)451-4311 x104       |  - The Unix Programmer's Manual,1972
> dave.cawley@...lphia.com |
> ***************************************************************
>                   URL => http://www.adelphia.net
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
>
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
>
>