OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: Re: Securax Security Advisory: Windows98 contains a serious buffer overflow with long filenameextensions.
From: Ron DuFresne (dufresneWINTERNET.COM)
Date: Sat Apr 22 2000 - 09:02:35 CDT

Bob,

Thanks for the info. Just what I was asking about fer sure. And then it
seems that EI is not the sole culprit in this little nasty. Has anyone
looked to see if this works on NT and or 2000?

Thanks,

Ron DuFresne

On Sat, 22 Apr 2000, Bob Fiero wrote:

> At 09:12 PM 4/21/2000 -0500, you wrote:
> >Your having stripped Internet Explorer and/or dropping in Win95
> >explore.exe might well be what has caused ths to not function on your end.
>
> Zoa_Chien sent me an example for exploiting this with Eudora, it was very
> effective in making my e-mail unaccessible. He also was kind enough to
> mention in the e-mail how to make Eudora usable again, but if it wasn't for
> me poking around files within Eudora with Edit, I never would have found it. :)
>
> >Course, my interest is in what you did to strip out Internet Explorer, it
> >was my understanding that doing so broked much of the OS....
>
> Contrary to popular belief, Windows 98 without IE fixes much of the OS.
> Most noted is the unending slew of bugs and vulnerabilities that IE and
> Outlook bring to the OS. I most enjoy the large performance increase. I use
> a utility called 98Lite that can be found at http://www.98lite.net and have
> systems that outperform and are more secure than any Win98 systems setup as
> Microsoft would have you believe they need to be. I never have allowed IE
> to ever touch my hard disks, and would still be using Win95 (and
> Netware/Linux for my servers) if it wasn't for this great utility.
>
> This configuration alone, in my opinion, is more than enough proof to me
> that MS is guilty of harming consumers for the sole purpose of business
> gain. Each and every person who has tried this configuration has come to
> realize the harm integrating IE has done to consumers, and would never
> consider allowing IE to "muck up" his or her system again.
>
>

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
"Cutting the space budget really restores my faith in humanity. It
eliminates dreams, goals, and ideals and lets us get straight to the
business of hate, debauchery, and self-annihilation." -- Johnny Hart
        ***testing, only testing, and damn good at it too!***

OK, so you're a Ph.D. Just don't touch anything.