OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
NTBugtraq And NTSecurity Archives: 40-bit SP6a no different tha

40-bit SP6a no different than SP6 on MS website?

Russ (Russ.CooperRC.ON.CA)
Mon, 29 Nov 1999 10:35:32 -0500

-----BEGIN PGP SIGNED MESSAGE-----

I have received so many reports from folks that claim the 40-bit
English version of SP6a from Microsoft's web site is no different than
the 40-bit English version of SP6 that I felt I should put this
message out.

An example;
- -----
Leonardo Rodrigues said yesterday (99/11/29);

"I downloaded AGAIN it this morning from
http://download.microsoft.com/download/winntsp/SP/6.0/NT4/EN-US/
SP6I386.exe

This link was generated from MS homepage, at the Start Network
Download button.

After that, let's do a md5 check on the old SP6 and the new one we
downloaded !

[[rootkrusty /tmp]# md5sum SP6I386.exe
6cb3ee756d3a25a0785de11ae44dad26

[[rootkrusty /tmp]# md5sum ../archive/sp6/english-sp6i386.exe
6cb3ee756d3a25a0785de11ae44dad26

See ? The SAME md5 checksum. That means the files are identical.
There´s no SP6a yet on there ......

What´s the hell is happening ????/ Did you get some answer from MS
people ???"
- -----

FWIW, I have contacted MS on this issue but have not received a reply.
All reports of this nature have come from people comparing the 40-bit
versions, there have been no reports of such a problem with the
128-bit version, or with versions other than English.

When we get more information we'll let you know.

Cheers,
Russ - NTBugtraq Editor

-----BEGIN PGP SIGNATURE-----
Version: PGP 6.0.2

iQCVAwUBOEKeABBh2Kw/l7p5AQE4mgP9Hl5dhznHmSFCoEtTIcXB76VHbrVbglTU
1SsD3nLMJQDcRFi/gYPPemZwNoRDedePV+EMGVjNh61N0kuELrCfEMfweUjzDLBj
A1InywaV1uMTRXxHlCKFPFgCgsJYATok5SfNARVLw4lrzSpdquc/EQ4D5g6ad90O
l69vtYWEIuA=
=3cr8
-----END PGP SIGNATURE-----

This archive was generated by hypermail 2.0b3 on Mon Nov 29 1999 - 09:38:54 CST