full-disclosure - ntpd stack evasion exploit

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <002401c6164e$80f4e0f0$6901010a@lifebitch>
Date: Wed Jan 11 01:27:40 2006
From: sean01 at accnet.com.au (Sean Crawford)
Subject: ntpd stack evasion exploit

Wednesday, January 11, 2006 9:30 AM Stan Bubrouski wrote.............

>>(no offense intended, this is a list to discuss the full
>> disclosure of vulnerabilities).

And judging from the original email I would say the Federal Reserve Bank of
Minneapolis may well be full of said vulnerabilities.

Just the fact a bank employee is posting on a public list asking for help is
insane, but this list!...WHOA

If I read a post from someone at my bank asking such things I would be
making my way to the nearest branch with a withdrawal form and a copy of the
email for the manager.

$0.02
Sean

'Shit........meet fan'