Re: unsubscription

["Mario J. Pedras" <dspam () nomn net>]

hereinafter, you should pay a little more attention to the list  
headers, in a near future it could help you so much!

https://lists.grok.org.uk/mailman/listinfo/full-disclosure

Good luck!

Beijinhos e abraços

Quoting Júlio César Abreu <julio () gra gov br>:

> What are e-mail to unsubscription?
>
> Em 10/5/2011 15:36, ZDI Disclosures escreveu:
> > ZDI-11-166: HP 3COM/H3C Intelligent Management Center imcsyslogdm  
> > Remote Code Execution Vulnerability
> >
> > http://www.zerodayinitiative.com/advisories/ZDI-11-166
> >
> > May 10, 2011
> >
> > -- CVE ID:
> > CVE-2011-1854
> >
> > -- CVSS:
> > 10, (AV:N/AC:L/Au:N/C:C/I:C/A:C)
> >
> > -- Affected Vendors:
> > Hewlett-Packard
> >
> > -- Affected Products:
> > Hewlett-Packard H3C Intelligent Management Center
> >
> > -- TippingPoint(TM) IPS Customer Protection:
> > TippingPoint IPS customers have been protected against this
> > vulnerability by Digital Vaccine protection filter ID 11199.
> > For further product information on the TippingPoint IPS, visit:
> >
> >     http://www.tippingpoint.com
> >
> > -- Vulnerability Details:
> > This vulnerability allows remote attackers to execute arbitrary code on
> > vulnerable installations of HP 3com/H3C Intelligent Management Center.
> > Authentication is not required to exploit this vulnerability.
> >
> > The flaw exists within the imcsyslogdm.exe component which listens by
> > default on UDP port 514. When handling a syslog packet having a size
> > larger than 2048 bytes the process attempts to exit. An exception
> > handler is called that makes a call into a location that has been
> > previously freed. A remote attacker can exploit this vulnerability to
> > execute arbitrary code under the context of the SYSTEM user.
> >
> > -- Vendor Response:
> > Hewlett-Packard has issued an update to correct this vulnerability. More
> > details can be found at:
> >
> > http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02822750
> >
> > -- Disclosure Timeline:
> > 2011-01-21 - Vulnerability reported to vendor
> > 2011-05-10 - Coordinated public release of advisory
> >
> > -- Credit:
> > This vulnerability was discovered by:
> >     * Luigi Auriemma
> >
> > -- About the Zero Day Initiative (ZDI):
> > Established by TippingPoint, The Zero Day Initiative (ZDI) represents
> > a best-of-breed model for rewarding security researchers for responsibly
> > disclosing discovered vulnerabilities.
> >
> > Researchers interested in getting paid for their security research
> > through the ZDI can find more information and sign-up at:
> >
> >     http://www.zerodayinitiative.com
> >
> > The ZDI is unique in how the acquired vulnerability information is
> > used. TippingPoint does not re-sell the vulnerability details or any
> > exploit code. Instead, upon notifying the affected product vendor,
> > TippingPoint provides its customers with zero day protection through
> > its intrusion prevention technology. Explicit details regarding the
> > specifics of the vulnerability are not exposed to any parties until
> > an official vendor patch is publicly available. Furthermore, with the
> > altruistic aim of helping to secure a broader user base, TippingPoint
> > provides this vulnerability information confidentially to security
> > vendors (including competitors) who have a vulnerability protection or
> > mitigation product.
> >
> > Our vulnerability disclosure policy is available online at:
> >
> >     http://www.zerodayinitiative.com/advisories/disclosure_policy/
> >
> > Follow the ZDI on Twitter:
> >
> >     http://twitter.com/thezdi
> >
> > _______________________________________________
> > Full-Disclosure - We believe in it.
> > Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> > Hosted and sponsored by Secunia - http://secunia.com/
>
> -- 
> Júlio César de Abreu SUPSI/SISEG/SISSP TEL (0XX11) 2173-1505 FAX  
> (0XX11) 2173-1615 julio.abreu () serpro gov br

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/