full-disclosure - Is your security 6/6/6 ready?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <023601c68853$87b8dbe0$3201a8c0@desktop>
Date: Mon Jun  5 04:51:54 2006
From: htregz at aoaddicts.net (HTRegz)
Subject: Is your security 6/6/6 ready?

I'm not usually one to reply on FD... but I'm gonna have to respond to this
one.

A) How do you know that your "AutoUpdate" isn't working... There hasn't been
an update pushed out since the last Patch Tuesday (May 9th).
B) KB913580 references MS06-018 which was released during the May Patch
Tuesday (Again, May 9th... so you would have been updated at this time)... 
C) I've got through the source for that page and the included javascript and
have found nothing out of the ordinary... I've also loaded in it multiple
browsers and watched what happened... there was no malicious behaviour.. 

Plenty of Advertising sites are flagged by anti spyware these days... solely
because they leave behind cookies.. 

Peace,
HT

-----Original Message-----
From: full-disclosure-bounces@...ts.grok.org.uk
[mailto:full-disclosure-bounces@...ts.grok.org.uk] On Behalf Of Aaron Gray
Sent: Sunday, June 04, 2006 8:24 PM
To: Andrew Farmer; Full Disclosure
Cc: Valdis.Kletnieks@...edu
Subject: Re: [Full-disclosure] Is your security 6/6/6 ready?

It may be because my system was not updated since May 14th as AutoUpdate has

not worked since then, BUT has not warned me (nice one Microsoft). There has

been a MS update since then, KB913580, which may have closed the 
vulnerability; possibly.

'adserving.budsinc.com' is being flagged up by anti-spyware.

Aaron

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

-- 
No virus found in this incoming message.
Checked by AVG Free Edition.
Version: 7.1.394 / Virus Database: 268.8.1/355 - Release Date: 6/2/2006

-- 
No virus found in this outgoing message.
Checked by AVG Free Edition.
Version: 7.1.394 / Virus Database: 268.8.1/355 - Release Date: 6/2/2006