TIP: Click on subject to list as thread! ANSI
echo: osdebate
to: Don Hills
from: Rich
date: 2005-06-19 20:21:48
subject: Re: Microsoft meets the hackers

From: "Rich" 

This is a multi-part message in MIME format.

------=_NextPart_000_00EE_01C5750C.857D83E0
Content-Type: text/plain;
        charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

   The claim it is a buffer overflow is because the reporter claimed =
that he could exploit the bug to overflow a buffer.  I suspect the folks =
writing thought it better to be conservative and state there is one even =
though the reporter couldn't provide a repro.  I believe the reporter =
didn't understand what he saw and thought that what he was seeing was = due
to an overflow.  It was not.

Rich

  "Don Hills"  wrote in message =
news:2VgtCtgaXiKD092yn{at}attglobal.net...
  In article , "Rich"  wrote:
  >   Said the only person here who actually knows anything about it.

  If the actual bug is different than that officially published (there's =
that
  word again) by Microsoft, then that opens a whole new avenue of =
interest.
  Microsoft wouldn't conceal the truth from us - would they?

  --=20
  Don Hills
------=_NextPart_000_00EE_01C5750C.857D83E0
Content-Type: text/html;
        charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable








   The claim
it is a buffer =
overflow is=20
because the reporter claimed that he could exploit the bug to overflow a =

buffer.  I suspect the folks writing thought it better to be =
conservative=20
and state there is one even though the reporter couldn't provide a =
repro. =20
I believe the reporter didn't understand what he saw and thought that = what he=20
was seeing was due to an overflow.  It was not.
 
Rich
 

  "Don Hills" <dmhills{at}attglobal.net>">mailto:dmhills{at}attglobal.net">dmhills{at}attglobal.net>
=
wrote in=20
  message news:2VgtCtgaXiKD092yn{at}attg=
lobal.net...In=20
  article <42b5fda9{at}w3.nls.net>,=20">mailto:42b5fda9{at}w3.nls.net">42b5fda9{at}w3.nls.net>,=20
  "Rich" <{at}>
wrote:>   Said the only person here =
who=20
  actually knows anything about it.If the actual bug is =
different than=20
  that officially published (there's thatword again) by Microsoft, =
then that=20
  opens a whole new avenue of interest.Microsoft wouldn't conceal =
the truth=20
  from us - would they?-- Don =
Hills

------=_NextPart_000_00EE_01C5750C.857D83E0--

--- BBBS/NT v4.01 Flag-5
* Origin: Barktopia BBS Site http://HarborWebs.com:8081 (1:379/45)
SEEN-BY: 633/267 270
@PATH: 379/45 1 106/2000 633/267

SOURCE: echomail via fidonet.ozzmosis.com

Email questions or comments to sysop@ipingthereforeiam.com
All parts of this website painstakingly hand-crafted in the U.S.A.!
IPTIA BBS/MUD/Terminal/Game Server List, © 2025 IPTIA Consulting™.