Re: Secuirty Hole Found In Dave's Sock

["Exibar" <exibar () thelair com>]

Because of this hole, SANS have just gone from green to argyle as well....

 exibar

----- Original Message ----- 
From: "Exibar" <exibar () thelair com>
To: "Dave Cawley" <dave.cawley () adelphia com>;
<full-disclosure () lists grok org uk>
Sent: Thursday, September 08, 2005 1:31 PM
Subject: Re: [Full-disclosure] Secuirty Hole Found In Dave's Sock


> I've found out that using Dave's right Sock 1.0 along with Sandals 2.0
will
> cause this vulnerability to become very appearant and much worse.  With
this
> known, Dave's rigth sock 1.0 should never EVER be used with any version of
> Sandals (currently at v2.0).
>
>   exibar
>
>
> ----- Original Message ----- 
> From: "Dave Cawley" <dave.cawley () adelphia com>
> To: <full-disclosure () lists grok org uk>
> Sent: Thursday, September 08, 2005 12:10 PM
> Subject: [Full-disclosure] Secuirty Hole Found In Dave's Sock
>
>
> Date: 9/8/2005
>
> Vulnerability Found:   Hole In Dave's Socket
>
> Affected System: Dave's Right Sock
>
> Severity: Rating: Moderately Critical
> Impact: System access
> Where:  Foot
>
> Description of Vulnerability:  This morning while putting my socks
> on I found a small (1/4 inch) hole by my big toe. This could be
> exploited by a virus through the bottom of the foot or under the
> toe nail. This could be used to compromise Dave's entire system.
>
> Solution: No permanent solution is currently available. A work
> around is to wear the sock on the other foot to have the hole
> above the small toe where it will not be furthur enlarged, it
> will proboably fold over and partially cover the vulnerability.
> Permanent solution coming in either a sock darning or upgrading
> the unit to a new sock.
>
> Time Table: Found at 7:48am on Sept 8th, 1005
> Work around figured out at 7:49am on Sept 8th,
> 2005
> Permanent Solution Pending
>
> Credits: Found by Dave
>
> References: No references available.
>
>
> ***************************************************************
> Dave D. Cawley           |
> High Speed Internet      |    The number of Unix installations
> Duryea, PA               | has grown to 10, with more expected.
> (570)451-4311 x104       |  - The Unix Programmer's Manual,1972
> dave.cawley () adelphia com |
> ***************************************************************
>                   URL => http://www.adelphia.net
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
>
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/