On Friday 17 March 2006 03:07 Christoph Gruber wrote: I want to straiten out, that this posting does NOT come from me! A look at the header clarifies that: Return-Path: <full-disclosure-bounces@xxxxxxxxxxxxxxxxx> Received: from mx4.noc.eunet-ag.at (mx4.noc.eunet-ag.at [193.154.160.127]) by imap02 (Cyrus v2.2.12-Red Hat 2.2.12-2tis) with LMTPA; Fri, 17 Mar 2006 04:06:42 +0100 X-Sieve: CMU Sieve 2.2 Received: from lists.grok.org.uk (lists.grok.org.uk [195.184.125.51]) by mx4.noc.eunet-ag.at (8.13.0/8.13.0) with ESMTP id k2H36baA024009 for <list@xxxxxxx>; Fri, 17 Mar 2006 04:06:38 +0100 Received: from lists.grok.org.uk (localhost [127.0.0.1]) by lists.grok.org.uk (Postfix) with ESMTP id 14D5ABA7D; Fri, 17 Mar 2006 02:25:27 +0000 (GMT) X-Original-To: full-disclosure@xxxxxxxxxxxxxxxxx Delivered-To: full-disclosure@xxxxxxxxxxxxxxxxx Received: from guru.at (85-31-186-26.blue.kundencontroller.de [85.31.186.26]) by lists.grok.org.uk (Postfix) with SMTP id D9D93AECF for <full-disclosure@xxxxxxxxxxxxxxxxx>; Fri, 17 Mar 2006 02:07:50 +0000 (GMT) From: Christoph Gruber <list@xxxxxxx> To: <full-disclosure@xxxxxxxxxxxxxxxxx> Best regards > [Advisory] % +Thu Mar 16 21:07:15 EST 2006+ % Local Privilege > Escalation Vulnerability in Microsoft Windows XP > > > > > ---------------------------- > o/ 卍 Background > There had been no identified background commentary on this > vulnerability indentified. ---------------------------- > 卍 \o Description > Microsoft Windows XP incorrectly validates user input, making > privilege escalation possible. > > ---------------------------- > o/ 卍 History > 2/21/2006 o/ Vendor Notification. > 3/16/2006 o/ Public Disclosure. > ---------------------------- > 卍 \o Workaround > There was no workarounds. > ---------------------------- > o/ 卍 Vendor Response > Microsoft Windows XP had extended no identified information. > > > ---------------------------- > Contact > Christoph Gruber lolville@xxxxxxx > 1-888-565-9428 > BEWARE THE JIZZTAPO!!! > > .. > _ .' `. > /\) > / / > / / /\ > \ \ / \ > _ \ \/ /\ \ > (/\ \ / \ \ > \ \ / \ (Y ) > \ \/ /\ \ "" > \ / \ \ > \/ / / > / / > ( Y) > "" > > > CISSP GSAE CCE SSP-CNSA SSP-MPA GIPS CAP SSCP > > _______________________________________________ > Full-Disclosure - We believe in it. > Charter: http://lists.grok.org.uk/full-disclosure-charter.html > Hosted and sponsored by Secunia - http://secunia.com/ -- Christoph Gruber "Das Geheimnis der Freiheit ist der Mut." Perikles (ca.500-429)
Attachment:
pgpPjW2lsW0Fa.pgp
Description: PGP signature
_______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/