full-disclosure - Is your security 6/6/6 ready?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <005a01c688bd$b3461970$0200a8c0@AMDLAPTOP>
Date: Mon Jun  5 17:38:31 2006
From: angray at beeb.net (Aaron Gray)
Subject: Is your security 6/6/6 ready?

Well thanks for the reply.

AutoUpdate aint been working as it shows up in the 'Update History' on 
Windows Update. And doing updates fails on "The Genuine Advantage" doobry 
whatsit.

And IE is eating 96% CPU time ! Thats all I know without looking deeper.

Aaron

----- Original Message ----- 
From: "HTRegz" <htregz@...ddicts.net>
To: "'Aaron Gray'" <angray@...b.net>; "'Andrew Farmer'" <andfarm@...il.com>; 
"'Full Disclosure'" <full-disclosure@...ts.grok.org.uk>
Cc: <Valdis.Kletnieks@...edu>
Sent: Monday, June 05, 2006 4:52 AM
Subject: RE: [Full-disclosure] Is your security 6/6/6 ready?


> I'm not usually one to reply on FD... but I'm gonna have to respond to 
> this
> one.
>
> A) How do you know that your "AutoUpdate" isn't working... There hasn't 
> been
> an update pushed out since the last Patch Tuesday (May 9th).
> B) KB913580 references MS06-018 which was released during the May Patch
> Tuesday (Again, May 9th... so you would have been updated at this time)...
> C) I've got through the source for that page and the included javascript 
> and
> have found nothing out of the ordinary... I've also loaded in it multiple
> browsers and watched what happened... there was no malicious behaviour..
>
> Plenty of Advertising sites are flagged by anti spyware these days... 
> solely
> because they leave behind cookies..
>
> Peace,
> HT
>
> -----Original Message-----
> From: full-disclosure-bounces@...ts.grok.org.uk
> [mailto:full-disclosure-bounces@...ts.grok.org.uk] On Behalf Of Aaron Gray
> Sent: Sunday, June 04, 2006 8:24 PM
> To: Andrew Farmer; Full Disclosure
> Cc: Valdis.Kletnieks@...edu
> Subject: Re: [Full-disclosure] Is your security 6/6/6 ready?
>
> It may be because my system was not updated since May 14th as AutoUpdate 
> has
>
> not worked since then, BUT has not warned me (nice one Microsoft). There 
> has
>
> been a MS update since then, KB913580, which may have closed the
> vulnerability; possibly.
>
> 'adserving.budsinc.com' is being flagged up by anti-spyware.
>
> Aaron
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
>
> -- 
> No virus found in this incoming message.
> Checked by AVG Free Edition.
> Version: 7.1.394 / Virus Database: 268.8.1/355 - Release Date: 6/2/2006
>
>
> -- 
> No virus found in this outgoing message.
> Checked by AVG Free Edition.
> Version: 7.1.394 / Virus Database: 268.8.1/355 - Release Date: 6/2/2006
>
>
>
>
> -- 
> No virus found in this incoming message.
> Checked by AVG Free Edition.
> Version: 7.1.394 / Virus Database: 268.8.2/356 - Release Date: 05/06/2006
>