Mail Index

• Thread Index

• Anti-Hacking Guide For NT Users Ready For Release
  • From: Ken Williams <jkwilli2UNITY.NCSU.EDU>
• Alert: New Teardrop Attack
  • From: Russ <Russ.CooperRC.ON.CA>
• Re: Alert: New Teardrop Attack
  • From: Russ <Russ.CooperRC.ON.CA>
• Alert: Teardrop2 Attack - Update
  • From: Russ <Russ.CooperRC.ON.CA>
• Re: Alert: Teardrop2 Attack - Update
  • From: Chris Timossi <CATimossiLBL.GOV>
• Re: Alert: Teardrop2 Attack - Update #2
  • From: Russ <Russ.CooperRC.ON.CA>
• Re: Alert: Teardrop2 Attack - Update #3
  • From: Russ <Russ.CooperRC.ON.CA>
• Re: Alert: Teardrop2 Attack - Update #4
  • From: Russ <Russ.CooperRC.ON.CA>
• Update on wide-spread NewTear Denial of Service attacks
  • From: Jason Garms <jasongMICROSOFT.COM>
• Re: Alert: Teardrop2 Attack - Update #5
  • From: Russ <Russ.CooperRC.ON.CA>
• FW: CERT Summary CS-98.02
  • From: Russ <Russ.CooperRC.ON.CA>
• Re: FW: CERT Summary CS-98.02
  • From: "John D. Hardin" <jhardinwolfenet.com>
• Re: FW: CERT Summary CS-98.02
  • From: Robert Woodcock <rcwOZ.NET>
• Re: FW: CERT Summary CS-98.02
  • From: marcSNIFF.CT-NET.DE
• Update on Win9x and NewTear, TCP/IP vulnerabilities
  • From: Jason Garms <jasongMICROSOFT.COM>
• Administrivia #8122 - Anniversary Issue
  • From: Russ <Russ.CooperRC.ON.CA>
• What patches *must* I install?
  • From: Russ <Russ.CooperRC.ON.CA>
• Re: What patches *must* I install?
  • From: marcSNIFF.CT-NET.DE
• Re: What patches *must* I install?
  • From: Lee Rogowski <lrogowskiBPD.TREAS.GOV>
• Re: What patches *must* I install?
  • From: marcSNIFF.CT-NET.DE
• Re: [NTSEC] Re: Update on Win9x and NewTear, TCP/IP vulnerabiliti es
  • From: Jason Garms <jasongMICROSOFT.COM>
• Re: [NTSEC] Re: Update on Win9x and NewTear, TCP/IP vulnerabiliti es
  • From: Itai Dor-on <silicomNETVISION.NET.IL>
• Administrivia #8231 - Logo Voting
  • From: Russ <Russ.CooperRC.ON.CA>
• Re: Administrivia #8231 - Logo Voting
  • From: Russ <Russ.CooperRC.ON.CA>
• Y2K Problem in Windwos NT
  • From: Kastl <skastlMCS.NET>
• Re: Y2K Problem in Windwos NT
  • From: Russ <Russ.CooperRC.ON.CA>
• Teardrop2 - still getting DNS bad packets
  • From: Krzysztof Kleszynski <kkleszynintercafe.krakow.pl>
• Re: Teardrop2 - still getting DNS bad packets
  • From: Russ <Russ.CooperRC.ON.CA>
• Re: Teardrop2 - still getting DNS bad packets
  • From: Leon McCalla <mccallaNETROX.NET>
• IE 4.01 bugs in Win95 & WinNT. (long)
  • From: "Abe L. Getchell" <agetchelKDE.STATE.KY.US>
• Re: IE 4.01 bugs in Win95 & WinNT. (long)
  • From: Lee Dilkie <LeeDILKIE.COM>
• RRAS Hotfix semantics
  • From: Itai Dor-on <silicomNETVISION.NET.IL>
• Re: IE 4.01 bugs in Win95 & WinNT. (long)
  • From: David LeBlanc <dleblancISS.NET>
• Re: IE 4.01 bugs in Win95 & WinNT. (long)
  • From: "Abe L. Getchell" <agetchelKDE.STATE.KY.US>
• Administrivia #8661
  • From: Russ <Russ.CooperRC.ON.CA>
• Re: IE 4.01 bugs in Win95 & WinNT. (long)
  • From: Jason Garms <jasongMICROSOFT.COM>
• MS Word connected to DB/2: Cleartext host uid & pwd in document!
  • From: "Kusche, Klaus" <Klaus.KuscheOOE.GV.AT>
• legitimate use of recursive document loading into IE4
  • From: ezines <ezinesSLEEPI.DEMON.CO.UK>
• NTFS Alternate Data Streams
  • From: Charles White <charliewmarch.co.uk>
• FW: Your message to NTBUGTRAQ
  • From: Russ <Russ.CooperRC.ON.CA>
• RAS 'save password' problems...
  • From: martin Dolphin <mdolphinPOBOX.COM>
• Frontpage extensions CGI security!
  • From: Ramit Luthra <ramitBIGFOOT.COM>
• Re: RAS 'save password' problems...
  • From: Russ <Russ.CooperRC.ON.CA>
• FW: MSIE buffer overrun
  • From: Russ <Russ.CooperRC.ON.CA>
• Re: MSIE buffer overrun
  • From: Russ <Russ.CooperRC.ON.CA>
• Re: MSIE buffer overrun
  • From: Liam Colvin <randomAIS.NET>
• Re: MSIE buffer overrun
  • From: Russ <Russ.CooperRC.ON.CA>
• Re: MSIE buffer overrun
  • From: Phil Cox <pccLLNL.GOV>
• Re: MSIE buffer overrun
  • From: Alan Boyd <Alan_BoydWORLDRESEARCH.COM>
• Re: legitimate use of recursive document loading into IE4
  • From: Andrew Kennedy <adkPRESENCE-IT.CO.UK>
• Re: legitimate use of recursive document loading into IE4
  • From: Alex Georgiev <adgeorgiMTU.EDU>
• Re: legitimate use of recursive document loading into IE4
  • From: "Joan L. Grove Brewer" <redroseAA.NET>
• Administrivia #8980 - Logo results
  • From: Russ <Russ.CooperRC.ON.CA>
• Re: RAS 'save password' problems...
  • From: martin Dolphin <mdolphinPOBOX.COM>
• IE Object Bug Code...
  • From: "Getchell, Abe - Sys. Support" <agetchelKDE.STATE.KY.US>
• NT Screen Saver Password Protect Bug
  • From: Christopher L Buono <cbuonoALBANY.NET>
• Re: NT Screen Saver Password Protect Bug
  • From: Christopher L Buono <cbuonoALBANY.NET>
• Re: NT Screen Saver Password Protect Bug
  • From: Russ <Russ.CooperRC.ON.CA>
• Stubborn Licenses
  • From: Alan Boyd <Alan_BoydWORLDRESEARCH.COM>
• Re: NT Screen Saver Password Protect Bug
  • From: Andreas Klein <andreklMICROSOFT.COM>
• Re: NT Screen Saver Password Protect Bug
  • From: "Curtis Anderson, CNE, MCSE" <candersoism.ca>
• Re: NT Screen Saver Password Protect Bug
  • From: David LeBlanc <dleblancISS.NET>
• Re: NT Screen Saver Password Protect Bug
  • From: Paul Leach <paulleMICROSOFT.COM>
• Re: NT Screen Saver Password Protect Bug
  • From: Andrew Baker <BakerASUltraTech-llc.com>
• Re: NT Screen Saver Password Protect Bug
  • From: peter riegersperger <rickSALZBURG.CO.AT>
• Re: NT Screen Saver Password Protect Bug
  • From: Michael Grundy <grundymUS.IBM.COM>
• More MS Y2K non-compliance... (fwd)
  • From: Steven Kastl <skastlWIRETRIP.NET>
• NTCrash2
  • From: Paul Ashton <paulARGO.DEMON.CO.UK>
• Re: Stubborn Licenses
  • From: Grant Geyer <grantRIPTECH.COM>
• Re: NT Screen Saver Password Protect Bug
  • From: Paul Leach <paulleMICROSOFT.COM>
• Re: NT Screen Saver Password Protect Bug
  • From: Paul Leach <paulleMICROSOFT.COM>
• Re: More MS Y2K non-compliance... (fwd)
  • From: "Daniel & Shawna's Home Account" <allicatAIRMAIL.NET>
• SQL IIS
  • From: Ray Atkinson <dataWORLDACCESSNET.COM>
• Re: More MS Y2K non-compliance... (fwd)
  • From: Jerold Schulman <schulmanMINDSPRING.COM>
• Re: NT Screen Saver Password Protect Bug
  • From: Stewart Berman <Stewart.BermanBANKERSTRUST.COM>
• Re: NT Screen Saver Password Protect Bug
  • From: David Hiers <USFTLTV9IBMMAIL.COM>
• Alert: NTBugtraq may be off air!
  • From: Russ <Russ.CooperRC.ON.CA>
• Re: NT Screen Saver Password Protect Bug
  • From: "Tim Larkins (EUKSHEL1PO)" <tlarkinsEUKSHEL1PO.UNITEDKINGDOM.NCR.COM>
• Can't prevent BAT/CMD file termination by users
  • From: Tim Chilton <Tim_ChiltonSFI.CO.UK>
• Re: Can't prevent BAT/CMD file termination by users
  • From: "Andrew S. Baker" <ABakerthebeast.com>
• What does "map" mean in this context?
  • From: "Larson, Axel" <LARSON.AXELEMAIL.MCCLELLAN.AF.MIL>
• Re: What does "map" mean in this context?
  • From: Xfilesfan <XfilesfanAOL.COM>
• Re: NT Screen Saver Password Protect Bug
  • From: David LeBlanc <dleblancISS.NET>
• Re: NT Screen Saver Password Protect Bug
  • From: Paul Leach <paulleMICROSOFT.COM>
• Re: NT Screen Saver Password Protect Bug
  • From: Paul Leach <paulleMICROSOFT.COM>
• Re: NT Screen Saver Password Protect Bug
  • From: Russ <Russ.CooperRC.ON.CA>
• Re: Alert: NTBugtraq may be off air!
  • From: Russ <Russ.CooperRC.ON.CA>
• Re: NT Screen Saver Password Protect Bug
  • From: Paul Leach <paulleMICROSOFT.COM>
• Re: NT Screen Saver Password Protect Bug
  • From: Steve Birnbaum <sbirnSECURITY.ORG.IL>
• Rogue Admin protection
  • From: "McGregor, Byron" <BMcGregorBCBC.BC.CA>
• B1/2 and untrustworthy admins
  • From: Paul Leach <paulleMICROSOFT.COM>
• Re: B1/2 and untrustworthy admins
  • From: Steve Birnbaum <sbirnSECURITY.ORG.IL>
• Rogue netbios packets?
  • From: Joel Maslak <jmaslakwind-river.com>
• Remote sessions on NT
  • From: Steven Kastl <skastlWIRETRIP.NET>
• New tool set released
  • From: Phil Waterbury <pwaterburyns.ncsa.com>
• Re: New tool set released
  • From: Phil Waterbury <pwaterburyns.ncsa.com>
• Re: Remote sessions on NT
  • From: "Chance H. Neale" <cnealepanix.com>
• IBM ClientAccess hole
  • From: Paul Culmsee <fgculpVIANET.NET.AU>
• Disabling of Caching of Logon Credentials does not work
  • From: Walter Schittek <schittekPOST.MED.UNI-MARBURG.DE>
• Possible IE proxy authentication problem
  • From: "Martin O'Neal" <martin.onealCORSAIRE.COM>
• Re: Disabling of Caching of Logon Credentials does not work
  • From: Peter Brundrett <petebrMICROSOFT.COM>
• IIS 4.0 and FP 98 server extensions disable SSL port?
  • From: "Ganguly, Surya" <surya.gangulyGWL.COM>
• Alert: Syndrop.c
  • From: Russ <Russ.CooperRC.ON.CA>
• SIDs of local groups
  • From: Evgenii Borisovich Rudnyi <rudnyiMCH1.CHEM.MSU.SU>
• FYI: SSleay Crypto for Win32 & Linux Netscape Browsers
  • From: Russ <Russ.CooperRC.ON.CA>
• IE4.x EMBED issue - MS fix released
  • From: Chris Larsen <vaderVADER.DK>
• Re: SIDs of local groups
  • From: Scott Field <sfieldMICROSOFT.COM>
• Re: SIDs of local groups
  • From: "McGregor, Byron" <BMcGregorBCBC.BC.CA>
• Re: SIDs of local groups
  • From: Scott Field <sfieldMICROSOFT.COM>
• Last DNS Fix available. But where?
  • From: Jose Carlos da Silva <jcdsbrasmail.com.br>
• Re: Last DNS Fix available. But where?
  • From: Russ <Russ.CooperRC.ON.CA>
• Re: Possible IE proxy authentication problem
  • From: "Martin O'Neal" <martin.onealCORSAIRE.COM>
• NT firewall lab test
  • From: David Newman <dnewmanDATA.COM>
• Re: Last DNS Fix available. But where?
  • From: Paul Leach <paulleMICROSOFT.COM>
• IIS SSL configuration bug?
  • From: Philip Yzarn de Louraille <yzarnchevron.com>
• Re: Last DNS Fix available. But where?
  • From: Paul Leach <paulleMICROSOFT.COM>
• Re: IIS SSL configuration bug?
  • From: Bryan Sowell <bsowellunix.sprint.net>
• Re: IIS SSL configuration bug?
  • From: Mark Lamourine <mlamouriNETOPS.GTE.COM>
• Re: IIS SSL configuration bug?
  • From: Jim Howard <jimhLYCEUM.COM>
• Re: IIS SSL configuration bug?
  • From: Jim Howard <jimhLYCEUM.COM>
• spoofed mail
  • From: Paul J Leach <paulleMICROSOFT.COM>
• NTBugtraq web links
  • From: Russ <Russ.CooperRC.ON.CA>
• Re: IIS SSL configuration bug?
  • From: Sftwr Dvlp <developALPHA.VAXXINE.COM>
• Diabling Profile Caching on NT4.x
  • From: "J.A. Terranson" <sysadminmfn.org>
• Re: Diabling Profile Caching on NT4.x
  • From: Jerold Schulman <schulmanMINDSPRING.COM>
• Re: Diabling Profile Caching on NT4.x
  • From: "Gerald W. Carter" <cartegwEng.Auburn.EDU>
• New NT hotfix (mdl-fix) seems highly confusing(?)
  • From: Marvin Nipper <marvin.nipperSWSPECTRUM.COM>
• Re: IEAK .ins / windows policy bug (fwd)
  • From: "Vladislav S. Davidzon" <davidzonmetronet.lib.mi.us>
• Re: IEAK .ins / windows policy bug (fwd)
  • From: Paul J Leach <paulleMICROSOFT.COM>
• FW: IEAK .ins / windows policy bug (fwd)
  • From: Les Landau <Les.LandauDIGITAL.COM>
• Re: IEAK .ins / windows policy bug (fwd)
  • From: Ray Atkinson <dataWORLDACCESSNET.COM>
• (Follow-up on...): New NT hotfix (mdl-fix) seems highly confusing(?)
  • From: Marvin Nipper <marvin.nipperSWSPECTRUM.COM>
• Re: IEAK .ins / windows policy bug (fwd)
  • From: Rick LeMarr <rlemarrNTSTARGATE.PROMUS.COM>
• Nasty Bug IIs 4.0 And Proxy 2.0
  • From: Wayne <w.bardowellWORLDNET.ATT.NET>
• Is PPTP secure?
  • From: Russ <Russ.CooperRC.ON.CA>
• Passwords in NDS for NT
  • From: Kouti Sakari <Sakari.KoutiTIETURI.FI>
• Nestea.c - a tear variation yet again.
  • From: Russ <Russ.CooperRC.ON.CA>
• Re: Nasty Bug IIs 4.0 And Proxy 2.0
  • From: Mark Hassman <mhassmanDIGEX.NET>
• Re: Nasty Bug IIs 4.0 And Proxy 2.0
  • From: Bill Landry <BillLPOINTSHARE.COM>
• Re: Nasty Bug IIs 4.0 And Proxy 2.0
  • From: Mark Hassman <mhassmanDIGEX.NET>
• Re: Passwords in NDS for NT
  • From: Simple Nomad <thegnomeNMRC.ORG>
• Re: Nasty Bug IIs 4.0 And Proxy 2.0
  • From: Alex Caffary <alexctsgmicro.com>
• Hot-fix installation sequence
  • From: Alan Ramsbottom <acrals.co.uk>
• Have Crackers Found Military's Achilles Heel?
  • From: Russ <Russ.CooperRC.ON.CA>
• Re: Have Crackers Found Military's Achilles Heel?
  • From: Tony Facca <Tony.FaccaLERC.NASA.GOV>
• Re: Have Crackers Found Military's Achilles Heel?
  • From: Greg Jones <JoneGREGMAIL.DEC.COM>
• Re: Have Crackers Found Military's Achilles Heel?
  • From: Tom Perrine <tepSDSC.EDU>
• SP4 released? NOT!
  • From: Russ <Russ.CooperRC.ON.CA>
• Re: Have Crackers Found Military's Achilles Heel?
  • From: "Paul D. Robertson" <probertsCLARK.NET>
• Re: Have Crackers Found Military's Achilles Heel?
  • From: John Rubier <JohnRGENERATOR.COM>
• Admins w/Full Control Display Security Info Using LsaHac
  • From: Russ <Russ.CooperRC.ON.CA>
• SP4 and its effect on security Hot Fixes for SP3
  • From: Russ <Russ.CooperRC.ON.CA>
• Re: Have Crackers Found Military's Achilles Heel?
  • From: "Mark (Mookie)" <markZANG.COM>
• Max file transfer size of 1.3GB?
  • From: "Stout, William" <StoutWPIONEER-STANDARD.COM>
• Re: Max file transfer size of 1.3GB?
  • From: Russ <Russ.CooperRC.ON.CA>
• Re: Max file transfer size of 1.3GB?
  • From: James Fang <jfangMICROSOFT.COM>
• Re: Admins w/Full Control Display Security Info Using LsaHac
  • From: Todd Sabin <taswebspan.net>
• Frontpage server extensions - bad security settings.
  • From: Chris Larsen <vaderVADER.DK>
• Re: Frontpage server extensions - bad security settings.
  • From: Russ <Russ.CooperRC.ON.CA>
• Re: Is PPTP secure?
  • From: Paul Leach <paulleMICROSOFT.COM>
• Re: Is PPTP secure?
  • From: Weld Pond <weldL0PHT.COM>
• Re: Is PPTP secure?
  • From: Paul Leach <paulleMICROSOFT.COM>
• Re: Max file transfer size of 1.3GB?
  • From: "Stout, William" <StoutWPIOS.COM>
• Re: Max file transfer size of 1.3GB?
  • From: David LeBlanc <dleblancMINDSPRING.COM>
• name of built-in administrator
  • From: Evgenii Borisovich Rudnyi <rudnyiMCH1.CHEM.MSU.SU>
• Re: name of built-in administrator
  • From: Gerald Carter <cartegwEng.Auburn.EDU>
• Re: Leveraging search engines against FrontPage enabled websites
  • From: David LeBlanc <dleblancMINDSPRING.COM>
• Re: Is PPTP secure?
  • From: Tolunay Orkun <tolunayTURKEY.INGR.COM.TR>
• Re: name of built-in administrator
  • From: Dominique Brezinski <dom_brezinskiSECURECOMPUTING.COM>
• Fw: Is PPTP secure?
  • From: Paul Leach <paulleMICROSOFT.COM>
• Re: name of built-in administrator
  • From: David LeBlanc <dleblancMINDSPRING.COM>
• Re: name of built-in administrator
  • From: David LeBlanc <dleblancMINDSPRING.COM>
• Re: Leveraging search engines against FrontPage enabled websites
  • From: Bill Cobb - TAY <Bill.CobbDIGITAL.COM>
• Re: name of built-in administrator
  • From: Dom <domBELLATLANTIC.NET>
• Re: Max file transfer size of 1.3GB?
  • From: Russ <Russ.CooperRC.ON.CA>
• Re: Is PPTP secure?
  • From: David LeBlanc <dleblancMINDSPRING.COM>
• Re: Max file transfer size of 1.3GB?
  • From: callas <callasMAGNET.AT>
• Re: name of built-in administrator
  • From: David LeBlanc <dleblancMINDSPRING.COM>
• Re: Leveraging search engines against FrontPage enabled websites
  • From: David LeBlanc <dleblancMINDSPRING.COM>
• Re: name of built-in administrator
  • From: "McGregor, Byron" <BMcGregorBCBC.BC.CA>
• Session ttl and virtual memory (was: RE: Max file transfer size of 1.3GB?)
  • From: "Stout, William" <StoutWPIONEER-STANDARD.COM>
• Re: Session ttl and virtual memory (was: RE: Max file transfer size of 1.3GB?)
  • From: thothPURPLEFROG.COM
• Re: Is PPTP secure?
  • From: Frank Knobbe <FKnobbeBellSouth.net>
• Setup Bug
  • From: Michael Simmons <michaelECEL.UWA.EDU.AU>
• NEW NT Security List
  • From: Jiva DeVoe <jivaBEASTIE.DEVWARE.COM>
• Re: name of built-in administrator
  • From: Alvin Foo <BigbirdQUANTUM.SIMPLENET.COM>
• Re: name of built-in administrator
  • From: Luke Kenneth Casson Leighton <lkclREGENT.PUSH.NET>
• Re: name of built-in administrator
  • From: Luke Kenneth Casson Leighton <lkclREGENT.PUSH.NET>
• Re: name of built-in administrator
  • From: David LeBlanc <dleblancMINDSPRING.COM>
• Re: Is PPTP secure?
  • From: "Curtis Anderson, CNE, MCSE" <candersoISM.CA>
• Is PPTP cryptographically secure?
  • From: Vin McLellan <vinSHORE.NET>
• Announcing Russ Cooper's NTSecurity mailing list
  • From: Russ <Russ.CooperRC.ON.CA>
• Is PPTP secure?
  • From: "Swoyer, Stephen" <swoyerseENTMAG.COM>
• Can PPTP be secure?
  • From: Frank Knobbe <FKnobbeBellSouth.net>
• Re: Is PPTP secure?
  • From: "John D. Hardin" <jhardinwolfenet.com>
• PPTP (again)
  • From: Russ <Russ.CooperRC.ON.CA>
• New Hotfix: lsa2-fix
  • From: Alan Ramsbottom <acrals.co.uk>
• Re: PPTP (again)
  • From: Frank Knobbe <FKnobbeBellSouth.net>
• Re: Is PPTP cryptographically secure?
  • From: "Arnold G. Reinhold" <reinholdWORLD.STD.COM>
• Re: Setup Bug
  • From: Goran Sedvall <gseIDA.LIU.SE>
• Re: PPTP (again)
  • From: Russ <Russ.CooperRC.ON.CA>
• Re: PPTP (again)
  • From: Aleph One <aleph1NATIONWIDE.NET>
• Re: New Hotfix: lsa2-fix
  • From: Phil Cox <pccLLNL.GOV>
• Re: name of built-in administrator
  • From: Ken Gunther <kguntherNASSAU.CV.NET>
• Re: name of built-in administrator
  • From: Luke Kenneth Casson Leighton <lkclSWITCHBOARD.NET>
• Anonymous Connections May Be Able to Obtain the Password Policy
  • From: David LeBlanc <dleblancMINDSPRING.COM>
• Re: Is PPTP cryptographically secure?
  • From: David Jablon <dpjWORLD.STD.COM>
• Re: name of built-in administrator
  • From: David LeBlanc <dleblancMINDSPRING.COM>
• Re: name of built-in administrator
  • From: Luke Kenneth Casson Leighton <lkclSWITCHBOARD.NET>
• Re: name of built-in administrator
  • From: Dominique Brezinski <dom_brezinskiSECURECOMPUTING.COM>
• Re: New Hotfix: lsa2-fix
  • From: François Normant <fnormantTECHNOLOGIA.CA>
• Fw: lsa2-fix
  • From: Paul Leach <paulleMICROSOFT.COM>
• Re: Anonymous Connections May Be Able to Obtain the Password Policy
  • From: "Stout, William" <StoutWPIONEER-STANDARD.COM>
• Re: [NTSEC] PPTP (again)
  • From: Paul Leach <paulleMICROSOFT.COM>
• Re: PPTP (again)
  • From: Aleph One <aleph1NATIONWIDE.NET>
• Re: PPTP (again)
  • From: Paul Leach <paulleMICROSOFT.COM>
• Re: name of built-in administrator
  • From: Peter da Silva <peterSPARCY.NMTI.COM>
• Re: New Hotfix: lsa2-fix
  • From: "Ward, Cynthia" <CWardPYTHON.IDEAS.COM>
• Re: name of built-in administrator
  • From: Jon Maltz <jmaltzNEMA.COM>
• Re: PPTP (again)
  • From: Aleph One <aleph1nationwide.net>
• Re: name of built-in administrator
  • From: Tim Newsham <newshamLAVA.NET>
• Clearing The Security Log - Bug
  • From: Elvio Serrao <Elvio.SerraoNRMA.COM.AU>
• Administrivia #10311: Message volume, list noise
  • From: Russ <Russ.CooperRC.ON.CA>
• Re: PPTP (again)
  • From: Niall Smart <njs3DOC.IC.AC.UK>
• sid2user and user2sid
  • From: Russ <Russ.CooperRC.ON.CA>
• Re: PPTP (again)
  • From: Weld Pond <weldL0PHT.COM>
• STAC Replica for NT; password problems
  • From: Steven Kastl <skastlWIRETRIP.NET>
• Re: STAC Replica for NT; password problems
  • From: Aleph One <aleph1NATIONWIDE.NET>
• Alert: S/MIME problems with Outlook '98
  • From: Russ <Russ.CooperRC.ON.CA>
• (Don't) Uninstall the new lsa2 hotfix....
  • From: Marvin Nipper <marvin.nipperSWSPECTRUM.COM>
• Re: (Don't) Uninstall the new lsa2 hotfix....
  • From: Russ <Russ.CooperRC.ON.CA>
• Re: (Don't) Uninstall the new lsa2 hotfix....
  • From: Phil Cox <pccNTSINC.COM>
• Re: (Don't) Uninstall the new lsa2 hotfix....
  • From: Marvin Nipper <marvin.nipperSWSPECTRUM.COM>
• Intrusion Detection solutions compared...
  • From: Stuart McClure <smcclureQUAKE.NET>
• Re: Alert: S/MIME problems with Outlook '98
  • From: Xavier Serret <serretTELE.UCL.AC.BE>
• By-passing IIS ftp security
  • From: Nemo <mnemonixGLOBALNET.CO.UK>
• Re: Intrusion Detection solutions compared...
  • From: Tim Newsham <newshamLAVA.NET>
• Basic authentication, IIS 4.0 gives "the parameter is incorrect", LogonMethod=2 doesn't work.
  • From: Adam Davis <adamdigex.net>
• Re: By-passing IIS ftp security
  • From: Andreas Klein <andreklMICROSOFT.COM>
• Re: By-passing IIS ftp security
  • From: Russ <Russ.CooperRC.ON.CA>
• LSA2-fix re-released
  • From: Russ <Russ.CooperRC.ON.CA>
• SPQuery for Windows NT
  • From: Russ <Russ.CooperRC.ON.CA>
• Curious ActiveX problem under NT
  • From: "Jesper M. Johansson" <jesper.m.johansson-1UMN.EDU>
• Re: SPQuery for Windows NT
  • From: Itai Dor-on <silicomNETVISION.NET.IL>
• file cache problem persists
  • From: Gerbert Orasche <gorascheHYPERWAVE.COM>
• Re: file cache problem persists
  • From: "Martin O'Neal" <martin.onealCORSAIRE.COM>
• Re: file cache problem persists
  • From: randall g <randallgTELEMARK.NET>
• Re: file cache problem persists
  • From: "A.J. Singh" <singhaNEUMAN.INTERACCESS.COM>
• Re: Alert: S/MIME problems with Outlook '98 - update
  • From: Russ <Russ.CooperRC.ON.CA>
• NT Domain_Create_Alias vulnerability
  • From: Adrian Berferd <securitylistsHOTMAIL.COM>
• Re: NT Domain_Create_Alias vulnerability
  • From: Jonathan Wayne <jonathan.waynePRUDENTIAL.COM>
• Re: NT Domain_Create_Alias vulnerability
  • From: Hans Meyer <hansWDA.COM.BR>
• Re: NT Domain_Create_Alias vulnerability
  • From: Ryan Fox <rfoxNOGUSKA.COM>
• Re: NT Domain_Create_Alias vulnerability
  • From: Russ <Russ.CooperRC.ON.CA>
• Re: NT Domain_Create_Alias vulnerability
  • From: Russ <Russ.CooperRC.ON.CA>
• Re: NT Domain_Create_Alias vulnerability
  • From: Russ <Russ.CooperRC.ON.CA>
• Re: NT Domain_Create_Alias vulnerability
  • From: Paul L Schmehl <paulsUTDALLAS.EDU>
• Re: NT Domain_Create_Alias vulnerability
  • From: Russ <Russ.CooperRC.ON.CA>
• CREATALS.EXE - WARNING!!!
  • From: Russ <Russ.CooperRC.ON.CA>
• Re: NT Domain_Create_Alias vulnerability
  • From: Russ <Russ.CooperRC.ON.CA>
• Administrivia #10971: NTFixes updates - call for testers
  • From: Russ <Russ.CooperRC.ON.CA>
• New PPTP2 & RRAS20 Hotfixes
  • From: Alan Ramsbottom <acrals.co.uk>
• Re: New PPTP2 & RRAS20 Hotfixes
  • From: Thomas Melzer <TMelzerTOMESOFT.DE>
• Counterpane PPTP paper
  • From: Aleph One <aleph1nationwide.net>
• PPTP: The never ending story
  • From: Aleph One <aleph1NATIONWIDE.NET>
• Re: Counterpane PPTP paper
  • From: Alan Ramsbottom <acrals.co.uk>
• Re: Counterpane PPTP paper
  • From: Aleph One <aleph1NATIONWIDE.NET>
• Enabling strong encryption with PPTP2.
  • From: "Barnes, Jeff" <BarnesJDFO-MPO.GC.CA>
• can´t change passwords after lsa2 fix
  • From: Jari Helenius <jari.heleniusHELSINKI.FI>
• RE: can´t change passwords after lsa2 fix
  • From: "Appel, John" <AppelJ1ST-ANNAPOLIS.COM>
• Re: NT Domain_Create_Alias vulnerability
  • From: "Stout, Bill" <StoutBPIONEER-STANDARD.COM>
• Re: NT Domain_Create_Alias vulnerability
  • From: David LeBlanc <dleblancMINDSPRING.COM>
• Cheyenne Inoculan vulnerability on NT
  • From: p__boyerUSA.NET
• Perl script + SIDs
  • From: Nemo <mnemonixGLOBALNET.CO.UK>
• Dr Solomon's - Possible Hole
  • From: Nemo <mnemonixGLOBALNET.CO.UK>
• Re: Cheyenne Inoculan vulnerability on NT
  • From: Russ <Russ.CooperRC.ON.CA>
• Permissions Error
  • From: Alex Foley <alexAXL.NET>
• Re: Permissions Error
  • From: "Harmer, Michael E." <harmerUDRI.UDAYTON.EDU>
• Outlook Express feature could crash e-mail servers
  • From: "Basse, Daniel" <bassedPANASONIC.COM>
• Re: Outlook Express feature could crash e-mail servers
  • From: Bruce Brown <bbbugnet.com>
• Re: Outlook Express feature could crash e-mail servers
  • From: Russ <Russ.CooperRC.ON.CA>
• Re: Outlook Express feature could crash e-mail servers
  • From: Russ <Russ.CooperRC.ON.CA>
• Re: Outlook Express feature could crash e-mail servers
  • From: Denis Phillips <dpDMXINC.COM>
• Supposed Security Hole for Dr. Solomon's NT ME
  • From: Bill Hayes <ianr012UNLVM.UNL.EDU>
• Re: Dr Solomon's - Possible Hole
  • From: Jan MOEYERSONS <jmoeyersonsNATSYS.BE>
• Re: Outlook Express feature could crash e-mail servers
  • From: Charlie Solomon <CharlieSCHGROUP.COM>
• Re: Outlook Express feature could crash e-mail servers
  • From: tonySECAPL.COM
• Re: Outlook Express feature could crash e-mail servers
  • From: Russ <Russ.CooperRC.ON.CA>
• Re: Outlook Express feature could crash e-mail servers
  • From: David LeBlanc <dleblancISS.NET>
• Re: Outlook Express feature could crash e-mail servers
  • From: DBellMOBILE.BAM.COM
• Re: Outlook Express feature could crash e-mail servers
  • From: Bruce Howells <Bruce_HowellsI2.COM>
• Re: Outlook Express feature could crash e-mail servers
  • From: John Carlson <JohnCSOSDFW.COM>
• Re: Outlook Express feature could crash e-mail servers
  • From: "Lynn W. Taylor" <LynnBUSCOM.NET>
• Re: Outlook Express feature could crash e-mail servers
  • From: Dave Dittrich <dittrichCAC.WASHINGTON.EDU>
• Re: Outlook Express feature could crash e-mail servers
  • From: Russ <Russ.CooperRC.ON.CA>
• Re: Outlook Express feature could crash e-mail servers
  • From: Paul L Schmehl <paulsUTDALLAS.EDU>
• Re: Outlook Express feature could crash e-mail servers
  • From: Paul L Schmehl <paulsUTDALLAS.EDU>
• Re: Outlook Express feature could crash e-mail servers
  • From: Vinnie Chassot <drachenENI.NET>
• Re: Outlook Express feature could crash e-mail servers
  • From: Tiel Hicks <tielhSTCU.ORG>
• Re: Outlook Express feature could crash e-mail servers
  • From: Aleph One <aleph1DFW.NET>
• Re: Outlook Express feature could crash e-mail servers
  • From: Thumper! <thumperVFR.INTERCEPTOR.COM>
• Re: Outlook Express feature could crash e-mail servers
  • From: Darrell Van Rensburg <darrellINFOBAHN.COM.AU>
• Re: Dr Solomon's - Possible Hole
  • From: Graham Clarke <Graham.ClarkeUK.DRSOLOMON.COM>
• Re: Dr Solomon's - Possible Hole
  • From: Chris Lalka <chris.j.lalkaEXXON.COM>
• Re: Dr Solomon's - Possible Hole
  • From: David LeBlanc <dleblancMINDSPRING.COM>
• Re: Dr Solomon's - Possible Hole
  • From: Bill Hayes <ianr012UNLVM.UNL.EDU>
• Re: Dr Solomon's - Possible Hole
  • From: Graham Clarke <Graham.ClarkeUK.DRSOLOMON.COM>
• Re: Dr Solomon's - Possible Hole
  • From: Graham Clarke <Graham.ClarkeUK.DRSOLOMON.COM>
• microsoft's response to recent pptp discussions
  • From: Marc Bejarano <marcDELTA-GLOBAL.COM>
• Yet another "get yourself admin rights exploit":
  • From: nemo <mnemonixglobalnet.co.uk>
• Re: Yet another "get yourself admin rights exploit":
  • From: Dominique Brezinski <dom_brezinskiSECURECOMPUTING.COM>
• Re: Yet another "get yourself admin rights exploit":
  • From: Paul Leach <paulleMICROSOFT.COM>
• Re: Yet another "get yourself admin rights exploit":
  • From: David LeBlanc <dleblancISS.NET>
• Re: Yet another "get yourself admin rights exploit":
  • From: David LeBlanc <dleblancISS.NET>
• Re: Yet another "get yourself admin rights exploit":
  • From: Paul Leach <paulleMICROSOFT.COM>
• Re: Yet another "get yourself admin rights exploit":
  • From: Paul Leach <paulleMICROSOFT.COM>
• Re: Yet another "get yourself admin rights exploit":
  • From: David LeBlanc <dleblancMINDSPRING.COM>
• Security on CurrentVersion key
  • From: David LeBlanc <dleblancMINDSPRING.COM>
• Re: Yet another "get yourself admin rights exploit":
  • From: Paul Ashton <paulARGO.DEMON.CO.UK>
• SPAM: Important Legislative Alert
  • From: Simple Nomad <thegnomeNMRC.ORG>
• Re: Yet another "get yourself admin rights exploit":
  • From: Paul Ashton <paulARGO.DEMON.CO.UK>
• Re: Yet another "get yourself admin rights exploit":
  • From: David LeBlanc <dleblancISS.NET>
• Re: Yet another "get yourself admin rights exploit":
  • From: Paul Leach <paulleMICROSOFT.COM>
• Re: Yet another "get yourself admin rights exploit":
  • From: Paul Leach <paulleMICROSOFT.COM>
• Re: Yet another "get yourself admin rights exploit":
  • From: Paul Leach <paulleMICROSOFT.COM>
• Re: Security on CurrentVersion key
  • From: George <georgerNLS.NET>
• Re: Security on CurrentVersion key
  • From: Scott Field <sfieldMICROSOFT.COM>
• Re: Discussion on HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersi on keys
  • From: Paul Leach <paulleMICROSOFT.COM>
• Recent thread about NT Registry permissions
  • From: Russ <Russ.CooperRC.ON.CA>
• Administrivia #11895 - Web Site Developer needed
  • From: Russ <Russ.CooperRC.ON.CA>
• The Black Hat Briefings Security Conference final announcement - July 29-30th
  • From: Jeff Moss <jmDEFCON.ORG>
• Administrivia #11905 - NT Books
  • From: Russ <Russ.CooperRC.ON.CA>
• Alert: Important Legislative Alert
  • From: Russ <Russ.CooperRC.ON.CA>
• Security Gotchas in IBM's UDB for Windows NT
  • From: "Colman, Clem" <Clem.ColmanDVA.GOV.AU>
• New SSL hotfix
  • From: Marvin Nipper <marvin.nipperSWSPECTRUM.COM>
• No Subject
  • From: Jason Garms <jasongMICROSOFT.COM>
• SSL vulnerability & Vendor reactions
  • From: Vin McLellan <vinSHORE.NET>
• No Subject
  • From: Marc Bejarano <marcDELTA-GLOBAL.COM>
• No Subject
  • From: Jason Garms <jasongMICROSOFT.COM>
• No Subject
  • From: Jason Garms <jasongMICROSOFT.COM>
• No Subject
  • From: Marvin Nipper <marvin.nipperSWSPECTRUM.COM>
• No Subject
  • From: Marc Bejarano <marcDELTA-GLOBAL.COM>
• Re: Alert: Important Legislative Alert
  • From: "Stout, Bill" <StoutBPIOS.COM>
• Vague ASP Vulnerability in WebSite and Netscape NT Servers
  • From: David Kennedy CISSP <dmkennedyCSI.COM>
• Re: Security Gotchas in IBM's UDB for Windows NT
  • From: Gerbert Orasche <gorascheHYPERWAVE.COM>
• Re: Vague ASP Vulnerability in WebSite and Netscape NT Servers
  • From: David LeBlanc <dleblancMINDSPRING.COM>
• Re: Vague ASP Vulnerability in WebSite and Netscape NT Servers
  • From: LR LeVally <webmasterCOUNTERPOINT.ORG>
• Re: Alert: Important Legislative Alert
  • From: Russ <Russ.CooperRC.ON.CA>
• Re: Vague ASP Vulnerability in WebSite and Netscape NT Servers
  • From: David LeBlanc <dleblancMINDSPRING.COM>
• MS SQL Server 6.5 stores password in unprotected area of registry
  • From: Todd Sabin <tasWEBSPAN.NET>
• Re: Vague ASP Vulnerability in WebSite and Netscape NT Servers
  • From: Aleph One <aleph1DFW.NET>
• Re: Vague ASP Vulnerability in WebSite and Netscape NT Servers
  • From: Jonathan Pryor <jonpryorVT.EDU>
• Re: Vague ASP Vulnerability in WebSite and Netscape NT Servers
  • From: Steve Boyce <SteveBHBS.COM>
• ASP vulnerability with Alternate Data Streams
  • From: Paul Ashton <paulARGO.DEMON.CO.UK>
• Re: MS SQL Server 6.5 stores password in unprotected area of registry
  • From: Kevin Hegg <kevinheggkshtechnology.com>
• 128 bit SSL HotFix
  • From: Seth Janowiak <sjanowiaLEASINGGROUP.COM>
• Re: Security Gotchas in IBM's UDB for Windows NT
  • From: "Colman, Clem" <Clem.ColmanDVA.GOV.AU>
• Re: MS SQL Server 6.5 stores password in unprotected area of registry
  • From: Kevin Hegg <kevinheggkshtechnology.com>
• Re: MS SQL Server 6.5 Enterprise Manager Stores Password in Registry As Well
  • From: Todd Sabin <tasWEBSPAN.NET>
• Re: MS SQL Server 6.5 stores password in unprotected area of registry
  • From: Kirk Helfand <khelfandSQLAUDITOR.COM>
• Re: MS SQL Server 6.5 Enterprise Manager Stores Password in Registry As Well
  • From: David LeBlanc <dleblancMINDSPRING.COM>
• Netscape Source Bug Fix Available
  • From: Leland Baker <bakerSDDT.COM>
• Re: MS SQL Server 6.5 stores password in unprotected area of regi stry
  • From: "Stout, Bill" <StoutBPIOS.COM>
• Alert: Microsoft Security Notification service
  • From: Karan Khanna <karankMICROSOFT.COM>
• Re: Alert: Microsoft Security Notification service
  • From: "Steven E. P. Knapp" <spinelessSEANET.COM>
• Re: Alert: Microsoft Security Notification service
  • From: Russ <Russ.CooperRC.ON.CA>
• Alert: ASP vulnerability with Alternate Data Streams
  • From: Russ <Russ.CooperRC.ON.CA>
• ::$DATA IIS ISAPI filter
  • From: Aleph One <aleph1DFW.NET>
• Re: Alert: ASP vulnerability with Alternate Data Streams
  • From: "Bill Potvin, II" <bpotvinMERXSOFT.COM>
• ASP vulnerability with Alternate Data Streams
  • From: Karan Khanna <karankMICROSOFT.COM>
• Re: ASP vulnerability with Alternate Data Streams
  • From: Russ <Russ.CooperRC.ON.CA>
• FW: ASP vulnerability with Alternate Data Streams
  • From: Russ <Russ.CooperRC.ON.CA>
• Re: ASP vulnerability with Alternate Data Streams
  • From: Greg Stark <starkGENERATION.NET>
• ALERT: Microsoft IIS ASP - $DATA issue update
  • From: Karan Khanna <karankMICROSOFT.COM>
• Alert: Hotfixes for Microsoft IIS $DATA issue available now
  • From: Karan Khanna <karankMICROSOFT.COM>
• Web Server Source Exploit, pre IIS issue.
  • From: David Schmidt <davidadan.kingston.net>
• Security issue over IIS3 and IIS4 - Additional information
  • From: Toby Beaumont <tobyWIRESTATION.CO.UK>
• Visible user list in FrontPage permissions (larger problem)
  • From: Michael Thomas <mikemathbox.com>
• Visible user list in FrontPage permissions (CNAMES also)
  • From: Michael Thomas <mikemathbox.com>
• Alert: MS IIS 4.0 FTP Denial of Service Attack
  • From: Marcos Guillen <winnt2RAN.ES>
• Re: Web Server Source Exploit, pre IIS issue.
  • From: Paul Ashton <paulARGO.DEMON.CO.UK>
• MS IIS 3.0/4.0 FTP not RFC 959 conform
  • From: Yves Kreis <yves.kreisunifr.ch>
• Re: 128-bit version of SSL-fix from Microsoft
  • From: Russ <Russ.CooperRC.ON.CA>
• Administrivia #12963: NTBugtraq and the media
  • From: Russ <Russ.CooperRC.ON.CA>
• When - Hotfixes for Microsoft IIS $DATA in foreign languages
  • From: Stefan Funk <stefanfuTOPS.NET>
• SLMail 3.0.2421 Stack Overflow...
  • From: Ezekial Morrow <paceflowHOTMAIL.COM>
• Stack overflow problems
  • From: Red NSX <rednsxHOTMAIL.COM>
• IIS Fix for ::$DATA cause SSL Problems?
  • From: Amy Tebbe <atebbeREAL-TIME.COM>
• Mystery Solved
  • From: Amy Tebbe <atebbeREAL-TIME.COM>
• Not too serious alert: Perl and IIS
  • From: Nemo <mnemonixGLOBALNET.CO.UK>
• Re: MS IIS 3.0/4.0 FTP not RFC 959 conform
  • From: Nemo <mnemonixGLOBALNET.CO.UK>
• Re: Not too serious alert: Perl and IIS
  • From: mb <mbCHAMISPLACE.COM>
• Seattle Lab fixes security issue in SLmail
  • From: Lee Thompson <ltseattlelab.com>
• Re: Seattle Lab fixes security issue in SLmail
  • From: Adam Shostack <adamHOMEPORT.ORG>
• Re: Seattle Lab fixes security issue in SLmail
  • From: David LeBlanc <dleblancMINDSPRING.COM>
• PPTP Password Theft Vulnerability
  • From: Aleph One <aleph1dfw.net>
• Re: PPTP Password Theft Vulnerability
  • From: "Stout, Bill" <StoutBPIOS.COM>
• Re: PPTP Password Theft Vulnerability
  • From: Aleph One <aleph1DFW.NET>
• Innoculan hidden share patch available
  • From: "Dr. Stanley C. Mortel" <mortelPILOT.MSU.EDU>
• Alert: Microsoft Security Bulletin (MS98-004)
  • From: Russ <Russ.CooperRC.ON.CA>
• DOS in Vintra systems Mailserver software.
  • From: Vytis Fedaravicius <vytisOT.LT>
• WIPO Reprieve?
  • From: Paul R Bort <Paul_R_BortKEYBANK.COM>
• Potential issue in the ::DATA fix?
  • From: Raul Rojas <raulrJAMTV.COM>
• WIPO Treaty Passes the House
  • From: "Phillip R. Renouf" <forgeBINARY.NET>
• Re: Potential issue in the ::DATA fix?
  • From: Steve Boyce <SteveBHBS.COM>
• Re: Potential issue in the ::DATA fix? ***CONTINUED***
  • From: Jeff Carr <carrPIONEER.STATE.ND.US>
• Potential issue in the ::DATA fix? ***CONTINUED***
  • From: Raul Rojas <raulrJAMTV.COM>
• From a Post on NANOG - Smurfable networks..
  • From: "Whaley, Chance" <cwhaleyKUTIRIBA.DEN.RHYTHMS.NET>
• Serious bug in SFM-FIX (post SP3)
  • From: Firstname Lastname <ruipmartinsmail.telepac.pt>
• Updated information on IIS ::$DATA fix
  • From: Jason Garms <jasongMICROSOFT.COM>
• Buffer overflows on NT - what is the risk?
  • From: Roy Hills <Roy.HillsNTA-MONITOR.COM>
• Alert: Microsoft Security Bulletin (MS98-006)
  • From: Russ <Russ.CooperRC.ON.CA>
• Alert: New Source Bug Affect Sun JWS
  • From: Leland Baker <bakerSDDT.COM>
• Re: Buffer overflows on NT - what is the risk?
  • From: Russ <Russ.CooperRC.ON.CA>
• Alert: Microsoft Security Bulletin (MS98-007) - Exchange Server
  • From: Russ <Russ.CooperRC.ON.CA>
• Re: Buffer overflows on NT - what is the risk?
  • From: Steven Kirby <kirbyBAE.UGA.EDU>
• Alert: Arbitrary code execution via email or news
  • From: Russ <Russ.CooperRC.ON.CA>
• ISS Security Advisory -- MS Exchange 5.x
  • From: Jon Larimer <jlarimerISS.NET>
• Alert: Microsoft Security Bulletin (MS98-008) - Outlook '98 and O utlook Express
  • From: Russ <Russ.CooperRC.ON.CA>
• Outlook Express Fix
  • From: Jon Wallwork <jon.wallworkVIRGIN.NET>
• Re: Alert: Microsoft Security Bulletin (MS98-008)
  • From: Russ <Russ.CooperRC.ON.CA>
• What's in a NAME?
  • From: Russ <Russ.CooperRC.ON.CA>
• Alert: Microsoft Security Bulletin (MS98-009) - Increased Privs.
  • From: Russ <Russ.CooperRC.ON.CA>
• Outlook Express patch available from Windows Update
  • From: Matt K Marlor <mmarlorOZEMAIL.COM.AU>
• cDc to realse BO
  • From: jyhad <realizeTELEPORT.COM>
• Re: MS Security Bulletin (MS98-009)
  • From: MJE <markNTSHOP.NET>
• ALERT: security hole in zen 2.5 client for NT 4.0
  • From: Dave Cottle <d.cottlecantva.canterbury.ac.nz>
• Re: Alert: Microsoft Security Bulletin (MS98-009) - Increased Privs.
  • From: Jason Adam Young <jason_youngNCSU.EDU>
• Security Hole in Netscape and Microsoft email clients
  • From: Shimon Gruper <shimonIL.ESAFE.COM>
• Pegasus Mail not vulnerable to Name attack
  • From: Martin Johnson <M.JohnsonERIS.DERA.GOV.UK>
• Re: Alert: Microsoft Security Bulletin (MS98-009) - Increased Privs.
  • From: David LeBlanc <dleblancMINDSPRING.COM>
• Re: ALERT: security hole in zen 2.5 client for NT 4.0
  • From: eivind.tromborgCINET.NO
• Ann: Hotfix Control
  • From: Magnus Baeck <baeckSWIPNET.SE>
• How to find and get rid rid of Back Orifice
  • From: James Strompolis <jimstenteract.com>
• Re: How to find and get rid of Back Orifice
  • From: Russ <Russ.CooperRC.ON.CA>
• Re: How to find and get rid rid of Back Orifice
  • From: Mikko Hypponen <Mikko.HypponenDATAFELLOWS.COM>
• Any Sniffed Back Orifice :-)
  • From: MJE <markNTSHOP.NET>
• Russ Cooper on Wall Street Journal Voices Event - live tonight
  • From: Russ <Russ.CooperRC.ON.CA>
• Re: Any Sniffed Back Orifice :-)
  • From: Paul Leach <paulleMICROSOFT.COM>
• Fw: L0pht Releases PPTP Sniffer
  • From: seifried <seifriedseifried.org>
• Re: Any Sniffed Back Orifice :-)
  • From: Aleph One <aleph1DFW.NET>
• Re: How to find and get rid of Back Orifice
  • From: Russ <Russ.CooperRC.ON.CA>
• Re: How to find and get rid rid of Back Orifice
  • From: Steven <stevenprimacomputer.com>
• Re: How to find and get rid rid of Back Orifice - reply summary
  • From: James Strompolis <jimstenteract.com>
• ISS Security Advisory: cDc BackOrifice Backdoor
  • From: X-Force <xforceISS.NET>
• Four new KB NTsecurity articles
  • From: "Stout, Bill" <StoutBPIOS.COM>
• Administrivia: Acceptable posts to the list
  • From: Russ <Russ.CooperRC.ON.CA>
• Back Orifice - last info
  • From: James Strompolis <jimstenteract.com>
• Watching for nasties.
  • From: Steven <stevenprimacomputer.com>
• Re: How to find and get rid rid of Back Orifice
  • From: "Leech, Simon" <Simon_LeechNAI.COM>
• Eudora security bug - executes URL
  • From: "Stout, Bill" <StoutBPIOS.COM>
• Re: Eudora security bug - executes URL
  • From: Toby Beaumont <tobywirestation.co.uk>
• Re: Watching for nasties.
  • From: Liam Colvin <randomAIS.NET>
• Re: Eudora security bug - executes URL
  • From: David Kennedy CISSP <dmkennedyCOMPUSERVE.COM>
• Re: Eudora security bug - executes URL
  • From: Aleph One <aleph1DFW.NET>
• Re: Eudora security bug - executes URL
  • From: "Stout, Bill" <StoutBPIOS.COM>
• Re: Eudora security bug - executes URL
  • From: Richard Hartman <rhartmanREALRESUME.COM>
• Re: Eudora security bug - executes URL
  • From: Russ <Russ.CooperRC.ON.CA>
• Description of the Eudora Security Hole
  • From: "Richard M. Smith" <rmsPHARLAP.COM>
• Re: Eudora security bug - executes URL
  • From: David Kennedy CISSP <dmkennedyCOMPUSERVE.COM>
• Re: Eudora security bug - executes URL
  • From: Aleph One <aleph1DFW.NET>
• Re: Eudora security bug - executes URL
  • From: Julian Assange <proffIQ.ORG>
• Re: How to find and get rid rid of Back Orifice
  • From: "Leech, Simon" <Simon_LeechNAI.COM>
• Re: How to find and get rid rid of Back Orifice
  • From: Defiant <defiantCYBERDEFIANT.DEMON.CO.UK>
• Re: How to find and get rid rid of Back Orifice
  • From: Ken Williams <jkwilli2UNITY.NCSU.EDU>
• Re: How to find and get rid of Back Orifice
  • From: Tracy R Reed <treedULTRAVIOLET.ORG>
• (Here come the attacks) FREE! Your upgrade for Microsoft Internet Explorer
  • From: Ryan Russell <ryanrSYBASE.COM>
• ISS vs. CyberCop - My findings.
  • From: Steve Manzuik <steve.manzuikTELUS.COM>
• Re: Here come the attacks (Summary so far)
  • From: Ryan Russell <ryanrSYBASE.COM>
• Re: ISS vs. CyberCop - My findings.
  • From: John Seitzinger <john.seitzingerREESEWEB.COM>
• Re: ISS vs. CyberCop - My findings.
  • From: Steve Manzuik <steve.manzuikTELUS.COM>
• ISS vs. CyberCop - My findings.
  • From: Hobe Industries <hobe_industriesHOTMAIL.COM>
• Re: ISS vs. CyberCop - My findings.
  • From: Tom Yochum <tyochumWHITWORTH.EDU>
• Strange NT Log Entries
  • From: Michael Collins <collintmSPRYNET.COM>
• Re: ISS vs. CyberCop - My findings.
  • From: Elliot Turner <turnereMIMESTAR.COM>
• obtain domain users password via asp server variable
  • From: VINCENT LOK <vincentlVOL.NET>
• Re: obtain domain users password via asp server variable
  • From: David LeBlanc <dleblancMINDSPRING.COM>
• Re: obtain domain users password via asp server variable
  • From: Russ <Russ.CooperRC.ON.CA>
• Re: ISS vs. CyberCop - My findings.
  • From: Randy Taylor <rtaylorMAIL.CIST.SAIC.COM>
• Re: ISS vs. CyberCop - My findings.
  • From: Steven Kastl <skastlWIRETRIP.NET>
• Re: obtain domain users password via asp server variable
  • From: "D'Agostino, Mark" <Mark.D'AgostinoFMR.COM>
• Re: obtain domain users password via asp server variable
  • From: "David Drzyzga (DMR Trecom)" <v-dadrzyMICROSOFT.COM>
• Bug announcement rule-of-thumb?
  • From: "Stout, Bill" <StoutBPIOS.COM>
• Re: ISS vs. CyberCop - My findings.
  • From: Kid Stevens <kidUS.IBM.COM>
• Netbus
  • From: Aleph One <aleph1DFW.NET>
• Here come the attacks (final summary from me, LONG)
  • From: Ryan Russell <ryanrSYBASE.COM>
• Re: obtain domain users password via asp server variable
  • From: Marc Slemko <marcsGO2NET.COM>
• Administrivia #16929: New NTBugtraq Site!!
  • From: Russ <Russ.CooperRC.ON.CA>
• IE080898.EXE info from DataFellows
  • From: Ryan Russell <ryanrSYBASE.COM>
• Re: How to find and get rid of Back Orifice
  • From: Russ <Russ.CooperRC.ON.CA>
• Re: IE080898.EXE info from DataFellows
  • From: Dan Schrader <Dan_SchraderTRENDMICRO.COM>
• SUMMARY: Bug announcement rule of thumb.
  • From: "Stout, Bill" <StoutBPIOS.COM>
• Re: Here come the attacks (another FYI)
  • From: Bill Sobel <bsobelVIPMAIL.COM>
• Re: Strange NT Log Entries
  • From: "Colman, Clem" <Clem.ColmanDVA.GOV.AU>
• S08138PP - RE: IE080898.EXE McAfee also has coverage
  • From: Steve.LawlorENVOY-NEIC.COM
• Re: Here come the attacks (commendation sidebar)
  • From: Raul Rojas <raulrJAMTV.COM>
• Re: Strange NT Log Entries
  • From: Luke Kenneth Casson Leighton <lkclSWITCHBOARD.NET>
• Debunking the "Lead Time" theory.
  • From: Scott Burke <webfxWEBFX.CA>
• Re: Strange NT Log Entries
  • From: Adam G Goode <goode_adamJPMORGAN.COM>
• Re: Strange NT Log Entries
  • From: Luke Kenneth Casson Leighton <lkclSWITCHBOARD.NET>
• Re: Strange NT Log Entries
  • From: David LeBlanc <dleblancMINDSPRING.COM>
• Administrivia #17290: New place for NTBugtraq discussions!
  • From: Russ <Russ.CooperRC.ON.CA>
• Re: Administrivia #17290: Corrected URL
  • From: Russ <Russ.CooperRC.ON.CA>
• Microsoft Security Bulletin MS98-011, JScript vulnerability in IE 4
  • From: Jason Garms <jasongMICROSOFT.COM>
• File dates for the MS Jscript/VBScript patch
  • From: Ernie Souhrada <ewsrsmartinc.com>
• MS Security Bulletin MS98-012, security updates for Microsoft PPT P
  • From: Jason Garms <jasongMICROSOFT.COM>
• Re: MS Security Bulletin MS98-012, security updates for Microsoft PPT P
  • From: Brian Steele <steele_bSPICEISLE.COM>
• Interesting 'feature' in IIS 4.0 SMTP Server component.
  • From: seifried <seifriedSEIFRIED.ORG>
• Re: MS Security Bulletin MS98-012, security updates for Microsoft PPT P
  • From: Robert Lister <robllentil.org>
• No Subject
  • From: Joe Goldstein <joe_goldsteinHOTMAIL.COM>
• Anyone know how to stop c2myazz from obtaining passwords on nt?
  • From: Stephen / Wendy Mann <manntiac.net>
• No Subject
  • From: Raul Rojas <raulrJAMTV.COM>
• Re: Anyone know how to stop c2myazz from obtaining passwords on n t?
  • From: Russ <Russ.CooperRC.ON.CA>
• Re: Anyone know how to stop c2myazz from obtaining passwords on nt?
  • From: Simple Nomad <thegnomenmrc.org>
• Re: MS Security Bulletin MS98-012, security updates for Microsoft PPT P
  • From: Chuck Flink <cflinkATT.COM>
• Re: Interesting 'feature' in IIS 4.0 SMTP Server component.
  • From: Russ <Russ.CooperRC.ON.CA>
• Re: Interesting 'feature' in IIS 4.0 SMTP Server component.
  • From: Alan Ramsbottom <ACRALS.CO.UK>
• Re: Interesting 'feature' in IIS 4.0 SMTP Server component.
  • From: Russ <Russ.CooperRC.ON.CA>
• Re: Interesting 'feature' in IIS 4.0 SMTP Server component.
  • From: Paul Leach <paulleMICROSOFT.COM>
• Directory names with dots
  • From: Marco Miltenburg <marcoTWINSPARK.NL>
• Re: Interesting 'feature' in IIS 4.0 SMTP Server component.
  • From: Tim Poulsen <Tim_PoulsenZD.COM>
• Re: MS Security Bulletin MS98-012, security updates for Microsoft PPT P
  • From: Chuck Flink <cflinkATT.COM>
• Re: Directory names with dots
  • From: daniel katz a <dkatzIONA.EDU>
• File Auditing Problems
  • From: "Sladek, Seth" <SSladekCHALLIANCE.ORG>
• Re: Directory names with dots
  • From: Andrew Fladmark <andrewORBITAL-WEB.NET>
• Re: Interesting 'feature' in IIS 4.0 SMTP Server component.
  • From: NT ListUser <ntlistseifried.org>
• Re: Directory names with dots
  • From: Cortney Thompson <CortneyWYOMING.COM>
• Re: Directory names with dots
  • From: Steve Boyce <SteveBHBS.COM>
• Re: Directory names with dots
  • From: MJE <markNTSHOP.NET>
• Re: MS Security Bulletin MS98-012,security updates for Microsoft PPTP
  • From: dfrhodes <dfrhodestsoft.com>
• Re: Directory names with dots
  • From: Brad Choate <choateDELPHIEXCHANGE.COM>
• Re: File Auditing Problems
  • From: Phil Cox <pccNTSINC.COM>
• Administrivia #17800
  • From: Russ <Russ.CooperRC.ON.CA>
• Re: Directory names with dots
  • From: Steve Boyce <SteveBHBS.COM>
• Re: MS Security Bulletin MS98-012, security updates for Microsoft PPT P
  • From: Dwaine Wright <dwaineWRITEME.COM>
• Msproxy LAT
  • From: Colin McNab <colinDIGITAL-ANIMATIONS.COM>
• "NERP" DoS attack possible in Oracle
  • From: Adam Maloney <adamiexposure.com>
• Re: Directory names with dots
  • From: Dave Watts <dwattsFIGLEAF.COM>
• Re: MS Security Bulletin MS98-012, security updates for Microsoft PPT P
  • From: Trevor Banks <Trevor.BanksSCHRODERS.COM>
• Possible MSIE/NT NetBIOS bug.
  • From: Robert Koch <NemesisEXECPC.COM>
• Re: NERP DoS attack for Oracle
  • From: Adam Maloney <adamiexposure.com>
• Re: Directory names with dots
  • From: Jan Tietze <jptietzeNETHEADS.DE>
• Re: ISS vs. CyberCop - My findings.
  • From: Vin McLellan <vinSHORE.NET>
• Alt-N MDaemon DOS attacks possible.
  • From: Dylan Griffiths <dgriffithsmegasoft.dyn.ml.org>
• Re: "NERP" DoS attack possible in Oracle
  • From: Jon & Sheri Christiansen <jonsheriROCHESTER.RR.COM>
• NT 4.0 file creation date - bug
  • From: Jussi Nieminen <jussi.nieminenCOMPTEL.COM>
• Re: "NERP" DoS attack possible in Oracle
  • From: Joe Miller <joemilerCLARK.NET>
• Re: Msproxy LAT
  • From: Rene Lariviere <Rene_Lariviereemail.msn.com>
• Re: NERP DoS attack possible in Oracle
  • From: "Reed, Dennis" <DJR3PGE.COM>
• Re: SUMMARY: Bug announcement rule of thumb.
  • From: "Stout, Bill" <StoutBPIOS.COM>
• Re: NT 4.0 file creation date - bug
  • From: Mnemonix <mnemonixGLOBALNET.CO.UK>
• Re: NT 4.0 file creation date - bug
  • From: Mark Allen <markallMICROSOFT.COM>
• Re: Alt-N MDaemon DOS attacks possible.
  • From: Development Team <developmentaltn.com>
• Re: NT 4.0 file creation date - bug
  • From: Andreas Häber <ahaeberonline.no>
• Another BO detector that is actually a trojan
  • From: Ken Williams <jkwilli2UNITY.NCSU.EDU>
• ISS Security Advisory: Executable Directories in IIS 4.0
  • From: X-Force <xforceISS.NET>
• Re: NT 4.0 file creation date - bug
  • From: Bret Appleby <Bret.ApplebyINFOBANK.CO.UK>
• Re: Directory names with dots
  • From: Samuel Liddicott <samCAMPBELLSCI.CO.UK>
• Re: Another BO detector that is actually a trojan
  • From: "O'Neil Brooke" <obrookeCOBA.NET>
• Proliferating configuration databases. Re: Interesting 'feature' in IIS 4.0 SMTP Server component.
  • From: Peter da Silva <peterSPARCY.NMTI.COM>
• Re: ISS Security Advisory: Executable Directories in IIS 4.0
  • From: Paul Holmes <pholmesUNLIMITED.COM>
• Re: Norton AV BSOD bug
  • From: Julien Radoff <jradoffMAA.ORG>
• Re: Norton AV BSOD bug
  • From: Patrick Mannion <pmannionPIPELINE.COM>
• Re: ISS Security Advisory: Executable Directories in IIS 4.0
  • From: Paul Holmes <pholmesUNLIMITED.COM>
• Re: ISS Security Advisory: Executable Directories in IIS 4.0
  • From: David LeBlanc <dleblancMINDSPRING.COM>
• Re: ISS Security Advisory: Executable Directories in IIS 4.0
  • From: Paul Holmes <pholmesUNLIMITED.COM>
• Information about the Norton AntiVirus causing BSOD on WINNT4.0 SP3...
  • From: Jason Highfield <highfiejMTCOFALLON.COM>
• Re: ISS Security Advisory: Executable Directories in IIS 4.0
  • From: David LeBlanc <dleblancISS.NET>
• Re: ISS Security Advisory: Executable Directories in IIS 4.0
  • From: "Russell J. LeBar" <argelEMAIL.MSN.COM>
• Security reduction FTP service on NT4
  • From: Tim Chilton <Tim_ChiltonSFI.CO.UK>
• SL-Mail ver 3.0.2423 security
  • From: Mnemonix <mnemonixGLOBALNET.CO.UK>
• Teardrop and friends
  • From: Ben Efros <karunSPRINTMAIL.COM>
• Another IE4.01 Security patch available
  • From: James Strompolis <jimstenteract.com>
• IE can read local files
  • From: Georgi Guninski <guninskiUSA.NET>
• Re: IE can read local files
  • From: "Richard M. Smith" <rmsPHARLAP.COM>
• Re: Security reduction FTP service on NT4
  • From: David LeBlanc <dleblancMINDSPRING.COM>
• Security Bug in MS Posting Acceptor for IIS
  • From: Pete Blumenthal <pblumenthalZBR.COM>
• netstat lists socket as listening although already closed
  • From: Gerbert Orasche <gorascheHYPERWAVE.COM>
• IE can read local files
  • From: Phil Edwards <philntexplorer.com>
• Re: IE can read local files
  • From: Tobin Titus <adminVIPERLINK.NET>
• Re: Security reduction FTP service on NT4
  • From: Neil McKellar <mckellarPLANET.EON.NET>
• Re: IE can read local files
  • From: Russ <Russ.CooperRC.ON.CA>
• Re: IE can read local files
  • From: Weld Pond <weldL0PHT.COM>
• Re: IE can read local files
  • From: David Norris <davidnRUNDEL.COM>
• Re: IE can read local files (MS Patch didn't work!)
  • From: "Michael I. Sølvstad" <michaelisfactor4.dk>
• Re: IE can read local files
  • From: "Russell J. LeBar" <rjlTECHAPP.COM>
• Re: IE can read local files (MS Patch works!)
  • From: Russ <Russ.CooperRC.ON.CA>
• Web Site Authentication through MS Proxy 2.0
  • From: Jim McGarry <jmcgarryNETREX.COM>
• Re: Web Site Authentication through MS Proxy 2.0
  • From: "Bulinckx, Dirk" <Dirk.BulinckxWANG.COM>
• Re: Web Site Authentication through MS Proxy 2.0
  • From: Trevor Banks <Trevor.BanksSCHRODERS.COM>
• CFP: The Insider December 1998 edition
  • From: Technical Incursion Countermeasures <listsTICM.COM>
• ISS Vulnerability Alert: Windows Backdoors Update
  • From: X-Force <xforceISS.NET>
• IIS4 with remote content
  • From: "Pilosof, Avi" <APilosofNIBUPLS1.TELSTRA.COM.AU>
• Floplock-Service
  • From: Jens Lutzen <jldps.de>
• Re: Web Site Authentication through MS Proxy 2.0
  • From: "Zamora, Ivonne Yeste" <izamoraAMILINK.COM>
• Re: IIS4 with remote content
  • From: Christopher Miller <chrisAIELTD.COM>
• ColdFusion File Upload Exploit
  • From: INFO2000 TECH <colbyINFO2000.NET>
• New York Times Hack
  • From: Richard Christie <richardcSUNDOWN.NCSC.MIL>
• Re: Floplock-Service
  • From: Russ <Russ.CooperRC.ON.CA>
• Re: New York Times Hack
  • From: "Paul D. Robertson" <probertsCLARK.NET>
• Re: New York Times Hack
  • From: Ian Guthrie <iguthrieswbell.net>
• ColdFusion File Upload Exploit
  • From: "Mark Giovannetti (Web Manager)" <webmanCCRS.NRCAN.GC.CA>
• Re: ColdFusion File Upload Exploit
  • From: David LeBlanc <dleblancMINDSPRING.COM>
• Re: ColdFusion File Upload Exploit
  • From: David LeBlanc <dleblancMINDSPRING.COM>
• Whackamole is making it's rounds
  • From: Ken Pfeil <arrow1BIGFOOT.COM>
• Re: IIS4 with remote content
  • From: Alexandre Viale <alexandre.vialeESFRANCE.COM>
• Security fix for Lyris list server
  • From: John Buckman <johnLYRIS.COM>
• PGP do not hide passphrase
  • From: "Claudio T. Nagao" <claudioUOL.COM.BR>
• Administrivia #18268 - can you please reply?
  • From: Russ <Russ.CooperRC.ON.CA>
• PC Anywhere denial of service
  • From: Cain <cainTASAM.COM>
• Serious security hole in PWS/FrontPage 98
  • From: "Richard M. Smith" <rmsPHARLAP.COM>
• Re: Serious security hole in PWS/FrontPage 98
  • From: "Darrell L. Kristof" <dlkXYOS.NET>
• Re: PC Anywhere denial of service
  • From: Russ <Russ.CooperRC.ON.CA>
• WARNING! SMTP Denial of Service in SLmail ver 3.1
  • From: Mnemonix <mnemonixGLOBALNET.CO.UK>
• Re: WARNING! SMTP Denial of Service in SLmail ver 3.1
  • From: Seattle Lab Technical Support <slmailSEATTLELAB.COM>
• Port Filter on NT 4.0 does not seem to work correctly.
  • From: Tim Hawkins <TimHawkinsEMAIL.MSN.COM>
• PC Anywhere denial of service update
  • From: Bill Sobel <bsobelvipmail.com>
• Re: PC Anywhere denial of service update
  • From: Russ <Russ.CooperRC.ON.CA>
• Re: Port Filter on NT 4.0 does not seem to work correctly.
  • From: Tim Hawkins <TimHawkinsEMAIL.MSN.COM>
• Update on the PWS security hole
  • From: "Richard M. Smith" <rmsPHARLAP.COM>
• Crashing NT with Native Calls
  • From: Gigi Mori <gigiSYMBOLIC.IT>
• Re: Update on the PWS security hole
  • From: MAURICIO FALCK <MAURICIO.FALCKBCP.COM.BR>
• Re: Update on the PWS security hole
  • From: Michael Hines <mshinesPURDUE.EDU>
• Re: Crashing NT with Native Calls
  • From: David LeBlanc <dleblancMINDSPRING.COM>
• Re: Crashing NT with Native Calls
  • From: Dominique Brezinski <dom_brezinskiSECURECOMPUTING.COM>
• ISS Security Advisory: Snork
  • From: X-Force <xforceISS.NET>
• Re: Crashing NT with Native Calls
  • From: hoglundUNIX.IEWAY.COM