bugtraq - Re: CVE-2015-1437 XSS In ASUS Router.

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Wed, 4 Feb 2015 08:38:00 +0200
From: Henri Salo <henri@...v.fi>
To: kingkaustubh@...com
Cc: bugtraq@...urityfocus.com
Subject: Re: CVE-2015-1437  XSS In ASUS Router.

On Tue, Feb 03, 2015 at 04:54:26PM +0000, kingkaustubh@...com wrote:
> 8-jan-2015 Repoerted to ASUS 
> 9-jan-2015 Asus confirm that they reported to concern department
> 15-jan-2015 Ask for update from asus asus says reported to HQ
> 28-jan-2015 Ask asus about reporting security foucus No reply from ASUS
> 29-jan-2015 security focus bugtraq

Could you copy-paste their exact responses, thanks? I hope they did not say
"issue has been reported to concern department". This probably affects other
firmwares as well.

-- 
Henri Salo