headers
Yong-hak Lee | 1 Dec 2005 01:55
Picon

Re: Support_388945a0 account in Win XP/2003

Hello, everybody.

I has wondered the meaning of "support_388945a0" too,
but not the meaning of the account, but the meaning of "388945a0".

As you may know, it can be interpreted as 4 Bytes hexadecimal number...
So I thought that it may be some kind of IPv4 address...
But if you do whois query, you will find that the address is irrelevant  to MS.

Then... Is there anyone who knows what the meaning of this string sequence is?

Best Regards,
YH Lee.

----- Original Message -----
From: "Raoul Nakhmanson-Kulish (en)" <raoul <at> elforsoft.com>
To: "Adi Pircalabu" <apircalabu <at> bitdefender.com>;
<full-disclosure <at> lists.grok.org.uk>
Sent: Thursday, December 01, 2005 12:48 AM
Subject: Re: [Full-disclosure] Support_388945a0 account in Win XP/2003

> Hello, Adi Pircalabu!
>
> On 30.11.2005 18:39 you wrote:
>
>> http://www.toggit.com/290/290kguide6.asp
> Thanks, yes, Google was the first place where I had looked for :)
>
> I am interested mainly in security treats connected with %subj.
>
(Continue reading)

Permalink | Reply | 1 comment |
headers
Morning Wood | 1 Dec 2005 02:36
Picon
Favicon

Re: Fwd: Report to Recipient(s)


> > Only those with broken AV software, since that line is not the EICAR
test
> > string, according to the definition of the EICAR test string.
>
> As many have pointed out, I realize it's supposed to be an attachment :
>
> http://www.eicar.org/anti_virus_test_file.htm
>

you would be suprised at all the infected returns  this generated when sent

http://archives.neohapsis.com/archives/fulldisclosure/2003-q2/0919.html
http://archives.neohapsis.com/archives/fulldisclosure/2003-q2/0923.html

( note the : This was a text only message with NAMES only. )
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/
Permalink | Reply | 0 comments |
headers
no-reply | 1 Dec 2005 04:08

msdtc exp


http://blog.0x557.org/swan/archives/msdtc.cpp
Permalink | Reply | 3 comments |
headers
Aditya Deshmukh | 1 Dec 2005 06:14

RE: Support_388945a0 account in Win XP/2003


> Hello full-disclosurers,
> 
> Does anyone know anything interesting about Support_388945a0 account 
> which is created by default during Windows XP/2003 installation?
> 
> I have seen MS technet links, maybe someone knows more about?

That is a "help and support account" that you should disable.
Also set very long random password and forget it.

________________________________________________________________________
Delivered using the Free Personal Edition of Mailtraq (www.mailtraq.com)
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/
Permalink | Reply | 2 comments |
headers
Martin Schulze | 1 Dec 2005 06:49
Favicon

[SECURITY] [DSA 913-1] New gdk-pixbuf packages fix several vulnerabilities


--------------------------------------------------------------------------
Debian Security Advisory DSA 913-1                     security <at> debian.org
http://www.debian.org/security/                             Martin Schulze
December 1st, 2005                      http://www.debian.org/security/faq
--------------------------------------------------------------------------

Package        : gdk-pixbuf
Vulnerability  : several
Problem type   : remote
Debian-specific: no
CVE IDs        : CVE-2005-2975 CVE-2005-2976 CVE-2005-3186
BugTraq ID     : 15428
Debian Bug     : 339431

Several vulnerabilities have been found in gdk-pixbuf, the Gtk+
GdkPixBuf XPM image rendering library.  The Common Vulnerabilities and
Exposures project identifies the following problems:

CVE-2005-2975

    Ludwig Nussel discovered an infinite loop when processing XPM
    images that allows an attacker to cause a denial of service via a
    specially crafted XPM file.

CVE-2005-2976

    Ludwig Nussel discovered an integer overflow in the way XPM images
    are processed that could lead to the execution of arbitrary code
    or crash the application via a specially crafted XPM file.
(Continue reading)

Permalink | Reply | 0 comments |
headers
Aditya Deshmukh | 1 Dec 2005 06:53

RE: Support_388945a0 account in Win XP/2003


> I has wondered the meaning of "support_388945a0" too,
> but not the meaning of the account, but the meaning of "388945a0".
> 
> As you may know, it can be interpreted as 4 Bytes hexadecimal 
> number...

It's a randomly generated number that generated for this 
account name

________________________________________________________________________
Delivered using the Free Personal Edition of Mailtraq (www.mailtraq.com)
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/
Permalink | Reply | 0 comments |
headers
Aditya Deshmukh | 1 Dec 2005 07:06

RE: Re: SOX whistleblowers' clause Compliance

> Seeing how my question was ignored.  I will tell you the answer.
> 
> There is no requirement in SOX to do this.

Why cant you use google to find out this ?
-------------------------------------------------------------------
http://www.nonprofitrisk.org/nwsltr/archive/employprac091005-p.htm

*In the para 4*
"Protecting whistleblowers is an essential component of an ethical 
and open work environment."

*In para 6* <----- this is the one that you want 
"Provide Employees Multiple Avenues to Report Concerns"

 While employees will hopefully feel comfortable raising concerns
 directly with their supervisors, many employees are reluctant to
 raise concerns with line management for fear of retaliation, 
 especially where their concerns pertain to unethical or illegal 
 conduct by their line managers. Therefore, nonprofits should provide
 several options for employees to raise concerns, including the 
 option of raising a concern anonymously.  
-------------------------------------------------------------------
If you read the last line in para 6 you will find that anon mailbox
is a requirement for SOX compliance. 

And mailbox was ment for email Michael :)

But I think that "with a post and some concrete" mailbox will be 
Indeed be far more secure.....
(Continue reading)

Permalink | Reply | 5 comments |
headers
MH | 1 Dec 2005 07:53
Picon
Favicon

RE: Hacking Boot camps!

Pfft..

RENEGADE all the way :>

WWIV was great for modding too.  Vision-X, yep.. I remember a lot of the 
'ansi cool-kids' (or whatever...) running that.

-MH

On Wed, 30 Nov 2005, Christopher Carpenter wrote:

> 
> Don't forget WWIV and Vision-X. :)
>
>
> WildCAT BBS Anyone????  :)
>
> I remember playing tradewars and calling who knows where to get new text
> files :)
>
> Used Tone-loC a lot more back then :)
>
> JP
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/
Permalink | Reply | 3 comments |
headers
Raoul Nakhmanson-Kulish | 1 Dec 2005 07:57

Re: Support_388945a0 account in Win XP/2003

Hello, Aditya Deshmukh!

On 01.12.2005 8:14 you wrote:

> That is a "help and support account" that you should disable.
> Also set very long random password and forget it.
I prefer simply delete it. Good choice?

But I heard a rumours that this account can be activated remotely 
without user's aware decision and used for Remote Assistance (e.g. 
capturing a screen and even controlling input).

--

-- 
Regards,
Raoul Nakhmanson-Kulish,
Elfor Soft Ltd.,
IT Department

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/
Permalink | Reply | 1 comment |
headers
InfoSecBOFH | 1 Dec 2005 07:58
Picon

Re: Re: SOX whistleblowers' clause Compliance

> Why cant you use google to find out this ?

The same reason you can't use Google and find your answer fuckbag.

> *In the para 4*
> "Protecting whistleblowers is an essential component of an ethical
> and open work environment."

No mention of an anon email address here.

> *In para 6* <----- this is the one that you want
> "Provide Employees Multiple Avenues to Report Concerns"
>  While employees will hopefully feel comfortable raising concerns
>  directly with their supervisors, many employees are reluctant to
>  raise concerns with line management for fear of retaliation,
>  especially where their concerns pertain to unethical or illegal
>  conduct by their line managers. Therefore, nonprofits should provide
>  several options for employees to raise concerns, including the
>  option of raising a concern anonymously.

Again, not specifying email.  A simple drop box in the lunchroom
facilitates this.
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/
Permalink | Reply | 3 comments |

Gmane