OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
RE: [Dailydave] Awkward Silences

From: Keith E. Benedict (kbenedictworkingworld.ca)
Date: Tue Aug 19 2003 - 17:36:58 CDT


Yes Exchange 2003 is out, as far as stack protection....no comments on my part they may or may not have implemented anything but I find beta 2 of any ms product is usually too far in their development cycle for any changes such as that. The RC's are usually just for usability and customer acceptance studies which normally do not even come close to bordering on security issues.
 
Regards,
 
Keith.
 
________________________________

From: Matt Hargett [mailto:mattuse.net]
Sent: Tue 8/19/2003 2:58 PM
To: daveimmunitysec.com; dailydavelists.immunitysec.com
Subject: Re: [Dailydave] Awkward Silences
         

> So I want to write an exploit that exemplifies this kind of joke. Today I
> installed Exchange 2003 to see if I could find something funny enough to
> be worthy of telling a friend. Perhaps something awkwardly silent?

Is Exchange 2003 RTM yet? I asked several people if the final product would
be compiled with stack protection (beta 2 wasn't as far as I could tell) and
got no answer.. what does your
analysis show on that?

_______________________________________________
Dailydave mailing list
Dailydavelists.immunitysec.com
http://www.immunitysec.com/mailman/listinfo/dailydave