Back to list
Re: [Full-disclosure] Unpatched IIS Vulnerabilities / Microsoft July Security Bulletin
Jul 16 2012 05:54PM
Thor \(Hammer of God\) (thor hammerofgod com)
Right - if you've compromised the server to the point you can alter
directory structures/names, the you've already bypassed the ACLs required
in order to "exploit" the vulnerability that allows you to bypass the
ACLs. I don't get it.
On 7/16/12 10:47 AM, "Ð?Ñ?Ð¸Ð³Ð¾Ñ?Ð¸Ð¹ Ð?Ñ?Ð°Ñ?Ð¸ÑÐ»Ð°Ð²Ð°" <musntlive (at) gmail (dot) com [email concealed]> wrote:
>On Mon, Jul 16, 2012 at 1:24 PM, king cope
><isowarez.isowarez.isowarez (at) googlemail (dot) com [email concealed]> wrote:
>> Hi Lists,
>> it seems Microsoft doesn't want to patch the vulnerabilities I posted
>> back in June,
>> at least not in the July update.
>Hello Full Disclosure!! !! !!
>Is like to introduce you to SchrÃ¶dinger's Cat and Wigner's Friend in
>is Computer Security. 'The Wigner's Friend thought experiment posits a
>friend of Wigner who performs the SchrÃ¶dinger's cat experiment after
>Wigner leaves the laboratory. Only when he returns does Wigner learn
>the result of the experiment from his friend, that is, whether the cat
>is alive or dead. The question is raised: was the state of the system
>a superposition of "dead cat/sad friend" and "live cat/happy friend,"
>only determined when Wigner learned the result of the experiment, or
>was it determined at some previous point?'
>IIS is neither vulnerable or not vulnerable. Is until you is exploit
>it and verify!
>Full-Disclosure - We believe in it.
>Hosted and sponsored by Secunia - http://secunia.com/
[ reply ]
Copyright 2010, SecurityFocus