full-disclosure - info about recent Ms issue

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Fri Apr 14 17:43:51 2006
From: ad at heapoverflow.com (ad@...poverflow.com)
Subject: info about recent Ms issue

if you are looking about this

http://www.securityfocus.com/archive/1/430871/30/0/threaded

this is not a vulnerability for MS because the .hlp file is a script 
file and they believe that's not secured at all, c0ntex just posted a 
fresh advisory of something wich has been found years ago, disclosed 
hundred of times, but he looks to have time to loose.

snowmo@...ine.ie wrote:
> Hi,  I recently read an exploit for an MS issue in which the author 
> apologised to some people he had met at a sec. conference for not 
> disclosing the vulnerability at that time because he was holding out 
> for the iDefense bounty.
>   I can't find the exploit now and was wondering if anyone else had 
> read this and can point me in the right direction.
>
> thanks.
> Moe.
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
>
>
>