SecurityFocus

WMF round-up, updates and de-mystification Jan 03 2006 08:28AM
Gadi Evron (ge linuxbox org) (4 replies)

Re: WMF round-up, updates and de-mystification Jan 03 2006 10:36PM
Adam Shostack (adam homeport org)

Re: [funsec] WMF round-up, updates and de-mystification Jan 03 2006 11:47AM
Pierre Vandevenne (pierre datarescue com) (2 replies)

RE: [funsec] WMF round-up, updates and de-mystification Jan 03 2006 11:59AM
Larry Seltzer (larry larryseltzer com) (1 replies)

Re[2]: [funsec] WMF round-up, updates and de-mystification Jan 03 2006 01:42PM
Pierre Vandevenne (pierre datarescue com)

Good Day,

Tuesday, January 3, 2006, 12:59:22 PM, you wrote:

GE>> The "patch" by Ilfak Guilfanov works, but by disabling a DLL in Windows.
PV>> I wouldn't say it does that. If you really want to simplify it in the
LS> extreme, it hides the vulnerable function.

LS> Think of it as a "White Hat Rootkit"

Or merely a TSR hooking an interrupt vector. It doesn't hide itself.
It doesn't allow any kind of remote access to anything.

I can't see how it could even be remotely described as a rootkit.

--
Best regards,
Pierre mailto:pierre (at) datarescue (dot) com [email concealed]

[ reply ]

Re: WMF round-up, updates and de-mystification Jan 03 2006 11:56AM
Gadi Evron (gevron gmail com)

Re: [Full-disclosure] WMF round-up, updates and de-mystification Jan 03 2006 11:34AM
InfoSecBOFH (infosecbofh gmail com) (1 replies)

RE: [Full-disclosure] WMF round-up, updates and de-mystification Jan 03 2006 11:49AM
Larry Seltzer (larry larryseltzer com)

Re: [Full-disclosure] WMF round-up, updates and de-mystification Jan 03 2006 10:35AM
Nancy Kramer (nekramer mindtheater net)