From: "Rich" 

This is a multi-part message in MIME format.

------=_NextPart_000_005C_01C30448.EB232010
Content-Type: text/plain;
        charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

   This information is wrong.  The differences are 0xD8-0xDA and =
0x128-0x12A.  0xD8-0xDA are part of a timestamp and nothing else.  =
0x128-0x12A are part of a checksum and differ because the timestamp =
differs and it is included in the checksum.

Rich

  "Geo."  wrote in message =
news:3e9df43e$1{at}w3.nls.net...
  From NTBugtraq:

  Thanks to Bronek Kozicki for bringing this to my attention.


  "Binary compare between MS03-007 and MS03-013 version of NTDLL.DLL =
reveals
  six different bytes (file offset 0x8-0xA and 0x128-0x12A)"

------=_NextPart_000_005C_01C30448.EB232010
Content-Type: text/html;
        charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable








   This
information is =
wrong.  The=20
differences are 0xD8-0xDA=20
and 0x128-0x12A.  0xD8-0xDA are part of a timestamp and nothing =
else. =20
0x128-0x12A are part of a checksum and differ because the timestamp = differs and=20
it is included in the checksum.
 
Rich
 

  "Geo." <georger{at}nls.net>">mailto:georger{at}nls.net">georger{at}nls.net>
wrote=20
  in message news:3e9df43e$1{at}w3.nls.net...From=20
  NTBugtraq:Thanks to Bronek Kozicki for bringing this to my=20
  attention."Binary compare between
MS03-007 and MS03-013 =
version of=20
  NTDLL.DLL revealssix different bytes (file offset 0x8-0xA and=20
  0x128-0x12A)"

------=_NextPart_000_005C_01C30448.EB232010--

--- BBBS/NT v4.01 Flag-4