Re: [Full-Disclosure] EEYE: Microsoft ASN.1 Library Length Overflow Heap Corruption

From: Philippe (philippe.letrait_at_elios-informatique.fr)
Date: 02/11/04

  • Next message: Martin Mačok: "Re: [Full-Disclosure] Apparently the practice was prevalent"
    To: full-disclosure@lists.netsys.com
    Date: Wed, 11 Feb 2004 11:23:32 +0100
    
    

    Note that nessus or retina should (not tested) detect remotely that flaw.

    See nessus pluging source for exploit ;-):
    - http://cgi.nessus.org/plugins/dump.php3?id=12052

    Or update your security scanners
    - http://www.nessus.org
    - http://www.eeye.com/html/Products/Retina/index.html

    Hope this helps
    Regards

    _______________________________________________
    Full-Disclosure - We believe in it.
    Charter: http://lists.netsys.com/full-disclosure-charter.html


  • Next message: Martin Mačok: "Re: [Full-Disclosure] Apparently the practice was prevalent"