Re: Is your security 6/6/6 ready?

["Aaron Gray" <angray () beeb net>]

Well thanks for the reply.

AutoUpdate aint been working as it shows up in the 'Update History' on 
Windows Update. And doing updates fails on "The Genuine Advantage" doobry 
whatsit.

And IE is eating 96% CPU time ! Thats all I know without looking deeper.

Aaron

----- Original Message ----- 
From: "HTRegz" <htregz () aoaddicts net>
To: "'Aaron Gray'" <angray () beeb net>; "'Andrew Farmer'" <andfarm () gmail com>; 
"'Full Disclosure'" <full-disclosure () lists grok org uk>
Cc: <Valdis.Kletnieks () vt edu>
Sent: Monday, June 05, 2006 4:52 AM
Subject: RE: [Full-disclosure] Is your security 6/6/6 ready?


> I'm not usually one to reply on FD... but I'm gonna have to respond to 
> this
> one.
>
> A) How do you know that your "AutoUpdate" isn't working... There hasn't 
> been
> an update pushed out since the last Patch Tuesday (May 9th).
> B) KB913580 references MS06-018 which was released during the May Patch
> Tuesday (Again, May 9th... so you would have been updated at this time)...
> C) I've got through the source for that page and the included javascript 
> and
> have found nothing out of the ordinary... I've also loaded in it multiple
> browsers and watched what happened... there was no malicious behaviour..
>
> Plenty of Advertising sites are flagged by anti spyware these days... 
> solely
> because they leave behind cookies..
>
> Peace,
> HT
>
> -----Original Message-----
> From: full-disclosure-bounces () lists grok org uk
> [mailto:full-disclosure-bounces () lists grok org uk] On Behalf Of Aaron Gray
> Sent: Sunday, June 04, 2006 8:24 PM
> To: Andrew Farmer; Full Disclosure
> Cc: Valdis.Kletnieks () vt edu
> Subject: Re: [Full-disclosure] Is your security 6/6/6 ready?
>
> It may be because my system was not updated since May 14th as AutoUpdate 
> has
>
> not worked since then, BUT has not warned me (nice one Microsoft). There 
> has
>
> been a MS update since then, KB913580, which may have closed the
> vulnerability; possibly.
>
> 'adserving.budsinc.com' is being flagged up by anti-spyware.
>
> Aaron
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
>
> --
> No virus found in this incoming message.
> Checked by AVG Free Edition.
> Version: 7.1.394 / Virus Database: 268.8.1/355 - Release Date: 6/2/2006
>
>
> --
> No virus found in this outgoing message.
> Checked by AVG Free Edition.
> Version: 7.1.394 / Virus Database: 268.8.1/355 - Release Date: 6/2/2006
>
>
>
>
> --
> No virus found in this incoming message.
> Checked by AVG Free Edition.
> Version: 7.1.394 / Virus Database: 268.8.2/356 - Release Date: 05/06/2006

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/