full-disclosure - Re: NT4 worm

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date: Thu, 31 Aug 2006 17:50:21 +0300 (EEST)
From: Juha-Matti Laurio <juha-matti.laurio@...ti.fi>
To: full-disclosure@...ts.grok.org.uk
Subject: Re: NT4 worm

It is confirmed off-list that this library is included to NT4 installations and exploits work "fine" on NT4 machines.

And ISC Diary has new entry published some minutes ago entitled as NT botnet submitted:
http://isc.sans.org/diary.php?storyid=1657

- Juha-Matti

Juha-Matti Laurio <juha-matti.laurio@...ti.fi> wrote: 
> 
> BTW: Can someone confirm that Netapi32.dll (vulnerable component of MS06-040) is part of fully patched NT4.0 installation.
> Thanks.

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/