full-disclosure - another filename bypass vulnerability

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <200511172018.jAHKIGeF001706@turing-police.cc.vt.edu>
Date: Thu Nov 17 20:18:32 2005
From: Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu)
Subject: another filename bypass vulnerability - from
	cmd.exe 

On Thu, 17 Nov 2005 17:07:53 -0300, =?ISO-8859-1?Q?Hern=E1n_M=2E_Racciatti?= said:
> On 11/17/05, Peter Ferrie <pferrie@...antec.com> wrote:
> > But this is old and well-known.
> Sure Peter! this is very old issue! and this is only my 2 cent to first mail!
> I was just showing this ;)

Maybe we need something similar to rec.humor.funny.reruns so people who just
fell off the back of the truck can re-post old well-known misfeatures.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 226 bytes
Desc: not available
Url : http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20051117/ba4d6b70/attachment.bin