From: "Rich" 

This is a multi-part message in MIME format.

------=_NextPart_000_007C_01C30475.96D8EF30
Content-Type: text/plain;
        charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

   The location of the different bytes was wrong.  Simply missing is =
what these bytes represent and why the difference doesn't matter.

Rich

  "Geo."  wrote in message
news:3e9e11e1{at}w3.nls.net...
  BTW, what part was wrong? The bytes were different right?

  Geo.

  "Rich"  wrote in message news:3e9e05c8$1{at}w3.nls.net...
     This information is wrong.  The differences are 0xD8-0xDA and
  0x128-0x12A.  0xD8-0xDA are part of a timestamp and nothing else.
  0x128-0x12A are part of a checksum and differ because the timestamp =
differs
  and it is included in the checksum.

  Rich

    "Geo."  wrote in message =
news:3e9df43e$1{at}w3.nls.net...
    From NTBugtraq:

    Thanks to Bronek Kozicki for bringing this to my attention.


    "Binary compare between MS03-007 and MS03-013 version of NTDLL.DLL =
reveals
    six different bytes (file offset 0x8-0xA and 0x128-0x12A)"


------=_NextPart_000_007C_01C30475.96D8EF30
Content-Type: text/html;
        charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable








   The
location of the =
different bytes=20
was wrong.  Simply missing is what these bytes represent and why = the=20
difference doesn't matter.
 
Rich
 

  "Geo." <georger{at}nls.net>">mailto:georger{at}nls.net">georger{at}nls.net>
wrote=20
  in message news:3e9e11e1{at}w3.nls.net...BT=
W, what=20
  part was wrong? The bytes were different =
right?Geo."Rich"=20
  <{at}> wrote in message news:3e9e05c8$1{at}w3.nls.net...=
  =20
  This information is wrong.  The differences are 0xD8-0xDA=20
  and0x128-0x12A.  0xD8-0xDA are part of a timestamp and =
nothing=20
  else.0x128-0x12A are part of a checksum and differ because the =
timestamp=20
  differsand it is included in the =
checksum.Rich =20
  "Geo." <georger{at}nls.net>">mailto:georger{at}nls.net">georger{at}nls.net>
=
wrote in=20
  message news:3e9df43e$1{at}w3.nls.net...=
 =20
  From NTBugtraq:  Thanks to Bronek Kozicki
for bringing =
this to my=20
  attention.  "Binary compare
between MS03-007 and =
MS03-013=20
  version of NTDLL.DLL reveals  six different bytes (file =
offset=20
  0x8-0xA and
0x128-0x12A)"

------=_NextPart_000_007C_01C30475.96D8EF30--

--- BBBS/NT v4.01 Flag-4