Network Security Archives

September 29, 2004

Re: WindowsUpdate V5 on XPSP1 broken, Dan Bartley, 15:24
Re: WindowsUpdate V5 on XPSP1 broken, David Sentelle, 15:13
Re: Need to purge vulnerable gdiplus.dll?, Matthias Fichtner, 15:13
Re: Need to purge vulnerable gdiplus.dll?, Threlkeld, Richard, 13:43
Re: Need to purge vulnerable gdiplus.dll?, Francis Favorini, 13:33
Suggestions to Microsoft regarding GDI+ patch foolishness, Russ, 13:23
Re: Need to purge vulnerable gdiplus.dll?, Russ, 13:23
Finjan Security Advisory: JPEG Exploit Used Remotely (Demonstration), Rafel Ivgi, The-Insider, 12:12
Need to purge vulnerable gdiplus.dll?, Jack Kohn, 12:12
Re: MinorRev: Microsoft Security Bulletin MS04-028 - Buffer Overrun in JPEG Processing (GDI+) Could Allow Code Execution (833987), ntbug list, 12:12
Re: WindowsUpdate V5 on XPSP1 broken, Russ, 12:02
Re: Windows Update / Office Update again!, Russ, 12:02
Re: GDI Replacing Tool, Louis Solomon [SteelBytes], 11:52

September 28, 2004

Re: kerberos!, Thor, 02:26

September 27, 2004

Re: Alert: Microsoft Security Bulletin MS04-028 - Buffer Overrun in JPEG Processing (GDI+) Could Allow Code Execution (833987), Patrick Nolan, 21:13
WindowsUpdate V5 on XPSP1 broken, Jim Garrison, 21:13
Re: Windows Update / Office Update again!, Geoff Vass, 21:03
patch redistribution, George Monkey, 15:59
Automatically passing NTLM authentication credentials on XP, urity, 15:59
Re: Inconsistencies between Windows Updates and AU/SUS, k levinson, 15:59
FW: Office Viewers vulnerable to gdiplus.dll issue [sr], jlawson-bugtraq, 15:59
Re: MinorRev: Microsoft Security Bulletin MS04-028 - Buffer Overrun in JPEG Processing (GDI+) Could Allow Code Execution (833987), Reynolds, Tom, 15:59
Re: Inconsistencies between Windows Updates and AU/SUS, Mark Boyum, 15:59
GDI Plus Reporting Utility, eric . brunsen, 15:59
Re: SUS server unable to synchronize with Microsoft servers, Security, 15:59
Re: (GDI+) detection tool don't run without admin prevs., Troy, 15:59
Shmoocon CFP & registration information, shmooconannounce, 15:59
TiVo Software uses gdiplus.dll, Josh Hurley, 15:59
Re: [Vmyths.com ALERT] Hysteria predicted for 'JPEG Processor' vulnerability, Shawn Asmus, 15:59
Re: Alert: Microsoft Security Bulletin MS04-028 - Buffer Overrun in JPEG Processing (GDI+) Could Allow Code Execution (833987), Dave English, 15:59
Microsoft GDIPlus.DLL JPEG Parsing Engine Buffer Overflow, Nick D., 15:59
Office update -- did it work, Clayton, David, 15:59
Rainbow tables for LM/NTLMv1 authentication ++, urity, 15:59
Office update, did it work?, Brendon Rogers, 15:59
Security bug in .NET Forms Authentication, Toby Beaumont, 15:59
Re: kerberos!, J. Merrill, 15:59
Re: kerberos!, David Ruschinek, 15:59
MinorRev: Microsoft Security Bulletin MS04-028 - Buffer Overrun in JPEG Processing (GDI+) Could Allow Code Execution (833987), Russ Cooper, 15:38
MinorRev: Microsoft Security Bulletin MS04-027 - Vulnerability in WordPerfect Converter Could Allow Code Execution (884933), Russ Cooper, 15:38
Re: SUS strange language behaviour with Microsoft .NET Framework Service Pack 2, Russ, 15:38
Re: 2003 Server NTP time issue, Jeff Berner, 15:38
SANS has release a GDI scanning tool, Jeffrey Thomas, 15:38
Re: Alert: Microsoft Security Bulletin MS04-028 - Buffer Overrun in JPEG Processing (GDI+) Could Allow Code Execution (833987), Sergile, Daniel (COX-Atlanta), 15:38
Announcing Windows Open Source Security Framework, Steve Warrick, 15:38
Windows Update / Office Update again!, Fish, 15:38
Re: [Vmyths.com ALERT] Hysteria predicted for 'JPEG Processor' vulne, Mike Hays, 15:38
Resolution re: SUS server fails to synchronize with Windows Update servers, Joe Dance, 15:38
SUS server fails to synchronize with Windows Update servers, Joe Dance, 15:38
Re: Alert: Microsoft Security Bulletin MS04-028 - Buffer Overrun in JPEG Processing (GDI+) Could Allow Code Execution (833987), Mikael Rönnbäck, 15:38
Re: Alert: Microsoft Security Bulletin MS04-028 - Buffer Overrun in JPEG Processing (GDI+) Could Allow Code Execution (833987), Louis Solomon [SteelBytes], 15:38
Re: Alert: Microsoft Security Bulletin MS04-028 - Buffer Overrun in JPEG Processing (GDI+) Could Allow Code Execution (833987), Polazzo Justin, 15:38
Changed Firewall Policy in XP SP2, Joe Dance, 15:38

September 23, 2004

Inconsistencies between Windows Updates and AU/SUS, Joe Dance, 17:54
FW: 2003 Server NTP time issue, Jeff Berner, 15:13
Buffer overflow in battlefield 1942 EA.Help.lnk, PBS, 11:41
Re: Alert: Microsoft Security Bulletin MS04-028 - Buffer Overrun in JPEG Processing (GDI+) Could Allow Code Execution (833987), Sergile, Daniel (COX-Atlanta), 11:41

September 22, 2004

Re: Alert: Microsoft Security Bulletin MS04-028 - Buffer Overrun in JPEG Processing (GDI+) Could Allow Code Execution (833987), Kurt Levitan, 13:09
Followup on .net framework service packs, Barry Dorrans, 09:57

September 17, 2004

RE: Microsoft GDIPlus.DLL JPEG Parsing Engine Buffer Overflow, Polazzo Justin, 00:50

September 15, 2004

MinorRev: Microsoft Security Bulletin MS04-028 - Buffer Overrun in JPEG Processing (GDI+) Could Allow Code Execution (833987), Russ Cooper, 22:35
[Vmyths.com ALERT] Hysteria predicted for 'JPEG Processor' vulnerability, Rob Rosenberger, 21:54
MinorRev: Microsoft Security Bulletin MS04-027 - Vulnerability in WordPerfect Converter Could Allow Code Execution (884933), Russ Cooper, 21:44
Re: Alert: Microsoft Security Bulletin MS04-028 - Buffer Overrun in JPEG Processing (GDI+) Could Allow Code Execution (833987), Polazzo Justin, 13:51
Office update, did it work?, Scott Cothrell, 13:51
SUS server unable to synchronize with Microsoft servers, Joe Dance, 13:41
Re: Alert: Microsoft Security Bulletin MS04-028 - Buffer Overrun in JPEG Processing (GDI+) Could Allow Code Execution (833987), Russ, 09:59
(GDI+) detection tool don't run without admin prevs., Göran Sedvall, 09:49
Re: Alert: Microsoft Security Bulletin MS04-028 - Buffer Overrun in JPEG Processing (GDI+) Could Allow Code Execution (833987), Bjarne Carlsen, 09:29
SUS broken upon installing KB867460 (.NET Framework 1.1 SP1), Joe Conner, 09:29
Re: Alert: Microsoft Security Bulletin MS04-028 - Buffer Overrun in JPEG Processing (GDI+) Could Allow Code Execution (833987), Louis Solomon [SteelBytes], 09:18
Re: Alert: Microsoft Security Bulletin MS04-028 - Buffer Overrun in JPEG Processing (GDI+) Could Allow Code Execution (833987), Louis Solomon [SteelBytes], 09:18

September 14, 2004

Re: Alert: Microsoft Security Bulletin MS04-028 - Buffer Overrun in JPEG Processing (GDI+) Could Allow Code Execution (833987), Barry Dorrans, 17:02
Alert: Microsoft Security Bulletin MS04-028 - Buffer Overrun in JPEG Processing (GDI+) Could Allow Code Execution (833987), Russ Cooper, 15:21
Alert: Microsoft Security Bulletin MS04-027 - Vulnerability in WordPerfect Converter Could Allow Code Execution (884933), Russ Cooper, 15:21

September 13, 2004

Re: kerberos!, Jeffrey Altman, 09:05
Re: kerberos!, Frank van Rijt, 09:05
Re: kerberos!, Paul Leach, 09:05

September 11, 2004

Re: kerberos!, David Schenz, 08:12
Re: kerberos!, Rick Bertolett, 08:02

September 10, 2004

Administrivia #29986: A reminder about replies, Russ, 10:21
Re: kerberos!, Russ, 10:21
Re: XP SP2: cannot access Disk Manager (LDM) on remote Win 2000 s ystems>>>, Steven McCarthy, 10:21
Re: FW: [Unpatched] Shell and Drag'n'Drop vulnerabilities, http-equiv@excite.com, 10:21
XP SP2 - profile detection without GPO's ?, Hahn, Frank, 10:21
XP SP2 and RRAS mmc snap-in, Nickolay A. Kritsky, 10:21
Re: kerberos!, Bertrand Légeret, 10:21
Re: SP2 Install Error - Access is denied., Andrew Aronoff, 10:21
Re: XP2 update bypasses proxy setting, Louis Solomon [SteelBytes], 10:21
Re: kerberos!, Steve Light, 10:21
Re: XP2 update bypasses proxy setting, Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP], 10:21

September 07, 2004

Re: SQL Server 2000 SP2 xp_sendmail bug, Brad Sarsfield, 17:00
Re: A question about preparation for patching, Beegle, Chris, 17:00
SUS strange language behaviour with Microsoft .NET Framework Service Pack 2, Tommaso Calosi, 17:00
kerberos!, Besirevic, Nesha, 17:00
XP2 update bypasses proxy setting, John Gelavis, 17:00
SQL Server 2000 SP2 xp_sendmail bug, simon edwins (BITS), 16:50
FW: [Unpatched] Shell and Drag'n'Drop vulnerabilities, Thor Larholm, 16:50
SP2 Install Error - Access is denied., Wally Beck, 16:50

September 02, 2004

SQL Server 2000 SP2 xp_sendmail bug, simon edwins (BITS), 16:01
Patch available for multiple critical flaws in Oracle, NGSSoftware Insight Security Research, 16:01
[SHATTER Team Security Alert] Multiple vulnerabilities in Oracle Database Server, SHATTER (Application Security, Inc.), 15:51
[Vmyths.com ALERT] Follow-up on latest cyber-terror prediction, Rob Rosenberger, 15:51

September 01, 2004

[Full-Disclosure] [SHATTER Team Security Alert] Multiple vulnerabilities in Oracle Database Server, SHATTER, 22:43
[VulnWatch] Patch available for IBM DB2 Universal Database flaws, NGSSoftware Insight Security Research, 14:59