Full Disclosure mailing list archives
Re[2]: Automatically passing NTLM authentication credentials on Windows XP
From: "Hidenobu Seki" <urity_friday () hotmail com>
Date: Wed, 29 Sep 2004 18:10:42 +0900
From: 3APA3A <3APA3A () SECURITY NNOV RU> I don't think problem reported by you is different issue, it's just another exploit scenario for the same problem. I know few more tricks to redirect user to UNC share.
I see your meaning. So, I agree. I hope Microsoft fundamentally address the issue in the future.In the meantime, I expect you (Microsoft) to do something for their problems piece by piece.
Don't leave "img src=file://..." as it is for 7 years.I think many people use Windows by default but get WindowsUpdate. They aren't aware that they use weak LM authentication.
Kind regards, Urity _________________________________________________________________MSN 8 helps eliminate e-mail viruses. Get 2 months FREE*. http://join.msn.com/?page=features/virus
_______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
Current thread:
- Automatically passing NTLM authentication credentials on Windows XP Hidenobu Seki (Sep 27)
- Re: Automatically passing NTLM authentication credentials on Windows XP 3APA3A (Sep 28)
- Re: Automatically passing NTLM authentication credentials on Windows XP Barrie Dempster (Sep 28)
- <Possible follow-ups>
- Re: Automatically passing NTLM authentication credentials on Windows XP Hidenobu Seki (Sep 28)
- Re[2]: Automatically passing NTLM authentication credentials on Windows XP Hidenobu Seki (Sep 29)
- Re: Automatically passing NTLM authentication credentials on Windows XP 3APA3A (Sep 28)