Home page logo
/

fulldisclosure logo Full Disclosure mailing list archives

Re: Blogger bug?
From: "Peter Dawson" <slash.pd () gmail com>
Date: Mon, 9 Oct 2006 10:20:13 -0400

Symantec is report the same flaw

http://www.symantec.com/enterprise/security_response/weblog/2006/10/host_overflow_application_exce.html


On 10/8/06, Peter Dawson <slash.pd () gmail com> wrote:

 Host Overflow Application eXception vulnerability is in the wild – any
blog that supports RSS and MetaWeblogAPI can be h4x0red.

We don't have confirmed vectors yet for this incident


 On 10/8/06, Mike McMan <mikemcman2033 () hotmail com> wrote:
>
> Looks like there was a bug in blogger that let someone make a fake post
> on
> the official Google blog.
>
> http://googleblog.blogspot.com/2006/10/about-that-fake-post.html
>
> http://www.techcrunch.com/2006/10/07/strange-things-afoot-at-the-google-blog/
>
> Anyone have any details on the bug?
>
> _________________________________________________________________
> Be seen and heard with Windows Live Messenger and Microsoft LifeCams
> 
http://clk.atdmt.com/MSN/go/msnnkwme0020000001msn/direct/01/?href=http://www.microsoft.com/hardware/digitalcommunication/default.mspx?locale=en-us&source=hmtagline
>
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
>




--
http://peterdawson.typepad.com
PeterDawson Home of ThoughtFlickr's
"This message is printed on Recycled Electrons."
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]