Re: [Full-disclosure] Earthlink TotalAccess ActiveX Unsafe Methods Vulnerability

-------- Original Message --------
Subject: [Full-disclosure] Earthlink TotalAccess ActiveX Unsafe
Methods Vulnerability
Date: Fri, 26 Jan 2007 02:23:51 +0800
From: Ethan Hunt <m34r@xxxxxxxxxxxxxx>
To: full-disclosure@xxxxxxxxxxxxxxxxx

Title:
-------------------
Earthlink TotalAccess ActiveX Unsafe Methods Vulnerability


A number of teams at EarthLink have reviewed both this claim and our
code. We have concluded that this exploit does not exist. While we
can not go into the details of our proprietary code, we can confirm
validation methods are in place that would prevent an outsider from
gaining access to the spamBlocker whitelist via these APIs.

Thanks,
Michael Strutton
Director Product Management, Client Software
EarthLink

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/