Re: Fw: [Full-disclosure] scanning

2006-06-02 Thread Drew Masters
It's worth looking into the Daniel Cuthbert case in the UK.DrewOn 02/06/06, Lawrence Tang <[EMAIL PROTECTED] > wrote:"Vulnerability test" is not "port scan". It could involve attempt to "penetrate" or even penetration of the website through a vulnerable server script for instance. In this particula

Re: [Full-disclosure] PoC for the 2 new WMF vulnerabilities (DoS)

2006-01-10 Thread Drew Masters
Not sure if it's been previously mentioned... It's possible to cause similiar crashes by making a malformed call to startdoc instead of setabortproc with 64bytes of garbage data. Cheers DrewOn 09/01/06, Andrey Bayora <[EMAIL PROTECTED]> wrote: Hello list,In case, someone interested:Here is the