full-disclosure - Re: Hackery Channel 01-09-01-LOLZ: Cat Spoofing against Flow Control

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <fb0927a80902020527n19e14a4ev486927f2f922b2a5@mail.gmail.com>
Date: Mon, 2 Feb 2009 08:27:02 -0500
From: Shawn Merdinger <shawnmer@...il.com>
To: full-disclosure@...ts.grok.org.uk
Cc: Valdis.Kletnieks@...edu
Subject: Re: Hackery Channel 01-09-01-LOLZ: Cat Spoofing
	against Flow Control

On Fri, Jan 30, 2009 at 12:07 PM,  <Valdis.Kletnieks@...edu> wrote:
> On Thu, 29 Jan 2009 17:04:53 CST, hack ery said:
>>
>> Security Risk:  High
>> Exploitable: Local
>> Vulnerability: Arbitrary Flow Control Control, Cat Spoofing
>> Discovered by: The Hackery Channel
>
> Note the additional possibility of a brute force attack:
>
> http://icanhascheezburger.files.wordpress.com/2009/01/funny-pictures-your-cat-is-ready-to-admit-he-gained-weight.jpg

There's also potential for a low-silhouette piggyback attack vector:

http://loganbay.org/wp-content/uploads/2007/10/thundercat.jpg

Cheers,
--scm

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/