NTBugtraq (thread)

Suggestions to Microsoft regarding GDI+ patch foolishness, Russ, 2004/09/29
Finjan Security Advisory: JPEG Exploit Used Remotely (Demonstration), Rafel Ivgi, The-Insider, 2004/09/29
Need to purge vulnerable gdiplus.dll?, Jack Kohn, 2004/09/29
- Re: Need to purge vulnerable gdiplus.dll?, Russ, 2004/09/29
  - Re: Need to purge vulnerable gdiplus.dll?, Matthias Fichtner, 2004/09/29
- Re: Need to purge vulnerable gdiplus.dll?, Francis Favorini, 2004/09/29
- Re: Need to purge vulnerable gdiplus.dll?, Threlkeld, Richard, 2004/09/29
Re: GDI Replacing Tool, Louis Solomon [SteelBytes], 2004/09/29
WindowsUpdate V5 on XPSP1 broken, Jim Garrison, 2004/09/27
- Re: WindowsUpdate V5 on XPSP1 broken, Russ, 2004/09/29
- Re: WindowsUpdate V5 on XPSP1 broken, David Sentelle, 2004/09/29
- Re: WindowsUpdate V5 on XPSP1 broken, Dan Bartley, 2004/09/29
patch redistribution, George Monkey, 2004/09/27
Automatically passing NTLM authentication credentials on XP, urity, 2004/09/27
FW: Office Viewers vulnerable to gdiplus.dll issue [sr], jlawson-bugtraq, 2004/09/27
GDI Plus Reporting Utility, eric . brunsen, 2004/09/27
Re: SUS server unable to synchronize with Microsoft servers, Security, 2004/09/27
Shmoocon CFP & registration information, shmooconannounce, 2004/09/27
TiVo Software uses gdiplus.dll, Josh Hurley, 2004/09/27
Office update -- did it work, Clayton, David, 2004/09/27
Rainbow tables for LM/NTLMv1 authentication ++, urity, 2004/09/27
Office update, did it work?, Brendon Rogers, 2004/09/27
Security bug in .NET Forms Authentication, Toby Beaumont, 2004/09/27
Announcing Windows Open Source Security Framework, Steve Warrick, 2004/09/27
Windows Update / Office Update again!, Fish, 2004/09/27
- Re: Windows Update / Office Update again!, Geoff Vass, 2004/09/27
- Re: Windows Update / Office Update again!, Russ, 2004/09/29
Re: [Vmyths.com ALERT] Hysteria predicted for 'JPEG Processor' vulne, Mike Hays, 2004/09/27
Resolution re: SUS server fails to synchronize with Windows Update servers, Joe Dance, 2004/09/27
SUS server fails to synchronize with Windows Update servers, Joe Dance, 2004/09/27
Changed Firewall Policy in XP SP2, Joe Dance, 2004/09/27
Inconsistencies between Windows Updates and AU/SUS, Joe Dance, 2004/09/23
- Re: Inconsistencies between Windows Updates and AU/SUS, Mark Boyum, 2004/09/27
- Re: Inconsistencies between Windows Updates and AU/SUS, k levinson, 2004/09/27
FW: 2003 Server NTP time issue, Jeff Berner, 2004/09/23
- Re: 2003 Server NTP time issue, Jeff Berner, 2004/09/27
Buffer overflow in battlefield 1942 EA.Help.lnk, PBS, 2004/09/23
RE: Microsoft GDIPlus.DLL JPEG Parsing Engine Buffer Overflow, Polazzo Justin, 2004/09/17
- Microsoft GDIPlus.DLL JPEG Parsing Engine Buffer Overflow, Nick D., 2004/09/27
MinorRev: Microsoft Security Bulletin MS04-028 - Buffer Overrun in JPEG Processing (GDI+) Could Allow Code Execution (833987), Russ Cooper, 2004/09/15
- MinorRev: Microsoft Security Bulletin MS04-028 - Buffer Overrun in JPEG Processing (GDI+) Could Allow Code Execution (833987), Russ Cooper, 2004/09/27
- Re: MinorRev: Microsoft Security Bulletin MS04-028 - Buffer Overrun in JPEG Processing (GDI+) Could Allow Code Execution (833987), Reynolds, Tom, 2004/09/27
  - Re: MinorRev: Microsoft Security Bulletin MS04-028 - Buffer Overrun in JPEG Processing (GDI+) Could Allow Code Execution (833987), ntbug list, 2004/09/29
[Vmyths.com ALERT] Hysteria predicted for 'JPEG Processor' vulnerability, Rob Rosenberger, 2004/09/15
- Re: [Vmyths.com ALERT] Hysteria predicted for 'JPEG Processor' vulnerability, Shawn Asmus, 2004/09/27
MinorRev: Microsoft Security Bulletin MS04-027 - Vulnerability in WordPerfect Converter Could Allow Code Execution (884933), Russ Cooper, 2004/09/15
- MinorRev: Microsoft Security Bulletin MS04-027 - Vulnerability in WordPerfect Converter Could Allow Code Execution (884933), Russ Cooper, 2004/09/27
SUS broken upon installing KB867460 (.NET Framework 1.1 SP1), Joe Conner, 2004/09/15
- SUS server unable to synchronize with Microsoft servers, Joe Dance, 2004/09/15
Alert: Microsoft Security Bulletin MS04-028 - Buffer Overrun in JPEG Processing (GDI+) Could Allow Code Execution (833987), Russ Cooper, 2004/09/14
- Re: Alert: Microsoft Security Bulletin MS04-028 - Buffer Overrun in JPEG Processing (GDI+) Could Allow Code Execution (833987), Barry Dorrans, 2004/09/14
  - Followup on .net framework service packs, Barry Dorrans, 2004/09/22
- Re: Alert: Microsoft Security Bulletin MS04-028 - Buffer Overrun in JPEG Processing (GDI+) Could Allow Code Execution (833987), Louis Solomon [SteelBytes], 2004/09/15
  - (GDI+) detection tool don't run without admin prevs., Göran Sedvall, 2004/09/15
    - Re: (GDI+) detection tool don't run without admin prevs., Troy, 2004/09/27
- Re: Alert: Microsoft Security Bulletin MS04-028 - Buffer Overrun in JPEG Processing (GDI+) Could Allow Code Execution (833987), Bjarne Carlsen, 2004/09/15
- Re: Alert: Microsoft Security Bulletin MS04-028 - Buffer Overrun in JPEG Processing (GDI+) Could Allow Code Execution (833987), Dave English, 2004/09/27
  - Re: Alert: Microsoft Security Bulletin MS04-028 - Buffer Overrun in JPEG Processing (GDI+) Could Allow Code Execution (833987), Patrick Nolan, 2004/09/27
- Re: Alert: Microsoft Security Bulletin MS04-028 - Buffer Overrun in JPEG Processing (GDI+) Could Allow Code Execution (833987), Louis Solomon [SteelBytes], 2004/09/15
- Re: Alert: Microsoft Security Bulletin MS04-028 - Buffer Overrun in JPEG Processing (GDI+) Could Allow Code Execution (833987), Russ, 2004/09/15
  - Office update, did it work?, Scott Cothrell, 2004/09/15
- Re: Alert: Microsoft Security Bulletin MS04-028 - Buffer Overrun in JPEG Processing (GDI+) Could Allow Code Execution (833987), Polazzo Justin, 2004/09/15
  - Re: Alert: Microsoft Security Bulletin MS04-028 - Buffer Overrun in JPEG Processing (GDI+) Could Allow Code Execution (833987), Louis Solomon [SteelBytes], 2004/09/27
- Re: Alert: Microsoft Security Bulletin MS04-028 - Buffer Overrun in JPEG Processing (GDI+) Could Allow Code Execution (833987), Kurt Levitan, 2004/09/22
- Re: Alert: Microsoft Security Bulletin MS04-028 - Buffer Overrun in JPEG Processing (GDI+) Could Allow Code Execution (833987), Sergile, Daniel (COX-Atlanta), 2004/09/23
  - SANS has release a GDI scanning tool, Jeffrey Thomas, 2004/09/27
- Re: Alert: Microsoft Security Bulletin MS04-028 - Buffer Overrun in JPEG Processing (GDI+) Could Allow Code Execution (833987), Polazzo Justin, 2004/09/27
- Re: Alert: Microsoft Security Bulletin MS04-028 - Buffer Overrun in JPEG Processing (GDI+) Could Allow Code Execution (833987), Mikael Rönnbäck, 2004/09/27
- Re: Alert: Microsoft Security Bulletin MS04-028 - Buffer Overrun in JPEG Processing (GDI+) Could Allow Code Execution (833987), Sergile, Daniel (COX-Atlanta), 2004/09/27
Alert: Microsoft Security Bulletin MS04-027 - Vulnerability in WordPerfect Converter Could Allow Code Execution (884933), Russ Cooper, 2004/09/14
Administrivia #29986: A reminder about replies, Russ, 2004/09/10
Re: XP SP2: cannot access Disk Manager (LDM) on remote Win 2000 s ystems>>>, Steven McCarthy, 2004/09/10
XP SP2 - profile detection without GPO's ?, Hahn, Frank, 2004/09/10
XP SP2 and RRAS mmc snap-in, Nickolay A. Kritsky, 2004/09/10
Re: A question about preparation for patching, Beegle, Chris, 2004/09/07
SUS strange language behaviour with Microsoft .NET Framework Service Pack 2, Tommaso Calosi, 2004/09/07
- Re: SUS strange language behaviour with Microsoft .NET Framework Service Pack 2, Russ, 2004/09/27
kerberos!, Besirevic, Nesha, 2004/09/07
- Re: kerberos!, Bertrand Légeret, 2004/09/10
- Re: kerberos!, Jeffrey Altman, 2004/09/13
- Re: kerberos!, David Ruschinek, 2004/09/27
  - Re: kerberos!, Thor, 2004/09/28
- Re: kerberos!, Steve Light, 2004/09/10
- Re: kerberos!, Russ, 2004/09/10
- Re: kerberos!, Rick Bertolett, 2004/09/11
- Re: kerberos!, David Schenz, 2004/09/11
- Re: kerberos!, Paul Leach, 2004/09/13
- Re: kerberos!, Frank van Rijt, 2004/09/13
- Re: kerberos!, J. Merrill, 2004/09/27
XP2 update bypasses proxy setting, John Gelavis, 2004/09/07
- Re: XP2 update bypasses proxy setting, Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP], 2004/09/10
- Re: XP2 update bypasses proxy setting, Louis Solomon [SteelBytes], 2004/09/10
FW: [Unpatched] Shell and Drag'n'Drop vulnerabilities, Thor Larholm, 2004/09/07
- Re: FW: [Unpatched] Shell and Drag'n'Drop vulnerabilities, http-equiv@excite.com, 2004/09/10
SP2 Install Error - Access is denied., Wally Beck, 2004/09/07
- Re: SP2 Install Error - Access is denied., Andrew Aronoff, 2004/09/10
SQL Server 2000 SP2 xp_sendmail bug, simon edwins (BITS), 2004/09/02
- SQL Server 2000 SP2 xp_sendmail bug, simon edwins (BITS), 2004/09/07
- Re: SQL Server 2000 SP2 xp_sendmail bug, Brad Sarsfield, 2004/09/07
Patch available for multiple critical flaws in Oracle, NGSSoftware Insight Security Research, 2004/09/02
[SHATTER Team Security Alert] Multiple vulnerabilities in Oracle Database Server, SHATTER (Application Security, Inc.), 2004/09/02
[Vmyths.com ALERT] Follow-up on latest cyber-terror prediction, Rob Rosenberger, 2004/09/02
[Full-Disclosure] [SHATTER Team Security Alert] Multiple vulnerabilities in Oracle Database Server, SHATTER, 2004/09/01
[VulnWatch] Patch available for IBM DB2 Universal Database flaws, NGSSoftware Insight Security Research, 2004/09/01