RE: how do they do it???

["Ken Pfeil" <Ken () infosec101 org>]

Hehe..
U forgot to say "No fix on 0day" or "Local exploit"..

> -----Original Message-----
> From: full-disclosure-admin () lists netsys com
> [mailto:full-disclosure-admin () lists netsys com] On Behalf Of
> morning_wood
> Sent: Thursday, July 10, 2003 4:37 PM
> To: Thor Larholm; full-disclosure () lists netsys com;
> zorkshin () tampabay rr com
> Subject: Re: [Full-disclosure] how do they do it???
>
>
> ----- Original Message -----
> From: "Thor Larholm" <lists.netsys.com () jscript dk>
> To: <full-disclosure () lists netsys com>; <zorkshin () tampabay rr com>
> Sent: Thursday, July 10, 2003 12:42 PM
> Subject: Re: [Full-disclosure] how do they do it???
>
>
> > > From: <zorkshin () tampabay rr com>
> > > http://www.albinoblacksheep.com/text/cupholder.php
> > >
> > > how do you think they do it in PHP?
> >
> > Thank you for confirming that you have NOT installed the MS03-021
> patch [1] for
> > Windows Media Player, which among others removes the ability to
> eject CD drives
> > using the WMP ActiveX control. I can now safely assume that you are
> vulnerable
> > to several vulnerabilities.
> >
> > Do you want an HTML email? ;)
> >
> >
> > [1]
> > http://www.microsoft.com/technet/security/bulletin/ms03-021.asp
> >
> >
> > Regards
> > Thor Larholm
> > PivX Solutions, LLC - Senior Security Researcher
>
>  Replies like this are realy not need are they??? MrSecurity
> Reseacher? I suppose i should lament you on your deficencies, btw I
> dont have the patch installed either... by choice. Dont ass-u-me as we
> all know what that makes you look like.
>
> Donnie Werner
> http://nothackers.org
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.netsys.com/full-disclosure-charter.html


_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html