🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: be.comp.security
Article #342

Re: Onoffici�le patch voor WMF-kwetsbaarheid

#342
From: s|b
Date: Wed, 04 Jan 2006 20:39
47 lines
3467 bytes
On Wed, 04 Jan 2006 09:01:10 GMT, Fluffyb wrote:

> Zeg wel aangezien de officiele patch maar op 10/1 uit komt.

Intussen is hexblog.com tot een minimum beperkt, omdat de site
overbelast wordt. Ik citeer even een deel van de site:

|The hotfix for the WMF vulnerability can be downloaded from any of the following URLs:
|
|    * http://www.grc.com/miscfiles/wmffix_hexblog14.exe
|    * http://handlers.sans.org/tliston/wmffix_hexblog14.exe
|    * http://castlecops.com/modules.php?name=Downloads&d_op=getit&lid=496
|    * http://csc.sunbelt-software.com/wmf/wmffix_hexblog14.exe
|    * http://www.antisource.com/download/wmffix_hexblog14.exe
|    * http://hexblog.axmo12.de/wmffix_hexblog14.exe
|    * http://www.dsinet.org/files/wmffix_hexblog14.exe
|    * http://lab.nsl.it/wmffix_hexblog14.exe 
|
|The MD5 checksum of the file is 15f0a36ea33f39c1bcf5a98e51d4f4f6.
|
|MSI repackages can be downloaded here:
|
|    * http://accentconsulting.com/wmf.shtml by Brian Higgins (MD5: a5108c0fa866101d79bb8006617641ee)
|    * http://handlers.sans.org/tliston/WMFHotfix-1.1.14.msi by Evan Anderson (MD5: 0dd56dac6b932ee7abf2d65ec34c5bec)
|    * http://hexblog.axmo12.de/WMFHotfix-1.1.14.msi by Evan Anderson (MD5: 0dd56dac6b932ee7abf2d65ec34c5bec) 
|
|The WMF vulnerability checker can be downloaded from the following URLs:
|
|    * http://www.grc.com/miscfiles/wmf_checker_hexblog.exe
|    * http://castlecops.com/modules.php?name=Downloads&d_op=getit&lid=495
|    * http://csc.sunbelt-software.com/wmf/wmf_checker_hexblog.exe
|    * http://www.antisource.com/download/wmf_checker_hexblog.exe
|    * http://hexblog.axmo12.de/wmf_checker_hexblog.exe 
|
|The MD5 checksum of the file is ba65e1954070074ea634308f2bab0f6a.
 
> Hitman Pro 2.3.3 (de anti-spyware schil) installeert de onoffici�le patch.

Hitman Pro kreeg onlangs redelijk negatieve kritieken. Ik heb het ding
nog niet ge�nstalleerd en ben het ook niet van plan. De auteur van de
onoffici�le patch, Ilfak Guilfanov, stelt trouwens duidelijk dat de
patch tijdelijk is en dat ze verwijderd moet worden van zodra er een
offici�le patch van Microsoft beschikbaar is.

-- 
Ik usenet, dus ik ben.
<http://www.briachons.org/>
Technical Details
Message-ID: <dphbpq$1tph$2@nl-news.euro.net>
Path: arc1-ca.pugleaf.net!g2news1.google.com!news2.google.com!news4.google.com!news.glorb.com!multikabel.net!feed20.multikabel.net!news2.euro.net!nl-news.euro.net!not-for-mail
References: <dpei47$2856$3@nl-news.euro.net> <q9Muf.88273$Pp2.5886008@phobos.telenet-ops.be>

Show Full Headers
Complete Article Headers
X-Google-Thread: 113446,4afdb548660905cf
X-Google-Attributes: gid113446,public
X-Google-Language: DUTCH,ASCII
Path: arc1-ca.pugleaf.net!g2news1.google.com!news2.google.com!news4.google.com!news.glorb.com!multikabel.net!feed20.multikabel.net!news2.euro.net!nl-news.euro.net!not-for-mail
From: "s|b" <private@usenet4all.org>
Newsgroups: be.comp.security
Subject: Re: Onoffici�le patch voor WMF-kwetsbaarheid
Date: Wed, 04 Jan 2006 21:39:34 +0100
Organization: XXII
Lines: 47
Message-ID: <dphbpq$1tph$2@nl-news.euro.net>
References: <dpei47$2856$3@nl-news.euro.net> <q9Muf.88273$Pp2.5886008@phobos.telenet-ops.be>
Reply-To: sb.nospam@belgacom.net
NNTP-Posting-Host: dd5769839.access.telenet.be
Mime-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 8bit
X-Trace: nl-news.euro.net 1136407162 63281 213.118.152.57 (4 Jan 2006 20:39:22 GMT)
X-Complaints-To: usenet@nl-news.euro.net
NNTP-Posting-Date: Wed, 4 Jan 2006 20:39:22 +0000 (UTC)
Cancel-Lock: sha1:4yE8NJ9Mt7zqy5F0Zjg96lunzwU= sha1:KygJ9JZPne0DewC9xeonY17vG18=
X-Newsreader: Forte Agent 3.2/32.806
X-Face: j0\WO?Dcjo^V#d7Q,H$9^8N{Z|fy50vxQkToel)jNR3hmCMV8kai(fMVJ:Yk}q?t<:xHu2D )?CJ[c|zu]%I!fKb7-4~$&Mx|GT=>ux^*,A:5Cdek,y4A(DSX=oXRv7-)/AcgHiWf