[prev in list] [next in list] [prev in thread] [next in thread]
List: full-disclosure
Subject: Re[2]: [Full-Disclosure] Automatically passing NTLM authentication credentials
From: "Hidenobu Seki" <urity_friday () hotmail ! com>
Date: 2004-09-29 9:10:42
Message-ID: BAY22-F22FRaqbC8wSA0000dde7 () hotmail ! com
[Download RAW message or body]
>From: 3APA3A <3APA3A@SECURITY.NNOV.RU>
>
>I don't think problem reported by you is different issue, it's just
>another exploit scenario for the same problem. I know few more tricks to
>redirect user to UNC share.
I see your meaning. So, I agree.
I hope Microsoft fundamentally address the issue in the future.
In the meantime, I expect you (Microsoft) to do something for their problems
piece by piece.
Don't leave "img src=file://..." as it is for 7 years.
I think many people use Windows by default but get WindowsUpdate. They
aren't aware that they use weak LM authentication.
Kind regards,
Urity
_________________________________________________________________
MSN 8 helps eliminate e-mail viruses. Get 2 months FREE*.
http://join.msn.com/?page=features/virus
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic