Windows NT Magazene Security Update - Contains information on Internet Explorer Allowing Circumvention of Domain Security, IMail IMonitor DoS, MCIS IMAP Buffer Overflow, NetSec 2000, Email Security, and Embedded NT Firewalls. NTsecurity homepage here.
e10826cc45c3d2cc4e9fa262b9b5a88a4d1946983aa4f83b92098b3e7afbeaf3
Windows NT security update - Georgio Guninski discovered a problem with Internet Explorer that may allow the circumvention of the browser's domain security. Microsoft is aware of the issue, however no response was known at the time of this writing. Details here.
3d8453baf779aa48a54279be429ddc72af319e8be0ef01cc23d83f7fbab12591
Windows NT Security Update - Janurary 5, 2000. Contains information on AnalogX Server Overflow, PC-Cillin DoS, CamShot Buffer Overflow, and CSM Mail Server DoS. NTsecurity homepage here.
d9aca7fab99579941c1ad908881263a01b9840872fabad115bec70b1e9d6840c
Windows NT Security Update - Reflections from 1999 and into 2000, Savant Web Server Denial of Service, Avirt Rover Buffer Overflow, Netscape Navigator 4.5 Runs Arbitrary Code, Live Webcast, How Secure is Your Exchange Server? Update, and Using Windows 2000's Run As Command. NTsecurity homepage here.
f60bb1f99aff820fc73ab2697201335fa606baf5a3e95b0ea7026835b2c96754
Windows NT Security Update - December 23, 1999. New vulnerabilities - Yet another problem with Internet Explorer 5.x and cross frame navigation, Overflow in ZBServer v1.5, Outlook 5, as well as Internet Explorer 4.5 on Macintosh platform, Microsoft reported that Internet Information Server (IIS) is prone to reveal source code under certain conditions, Norton Antivirus 2000 was reported to contain a serious buffer overflow condition, and SQL server crash. NTsecurity homepage here.
3cd5748f0b9ba31bc84172eefeb5e50a760038cf0c7b703ff617c3285bc947a1
Windows Security Update - December 22, 1999. Contains info on the Syskey Keystream Reuse vulnerability, the LSA Denial of Service vulnerability, and exchange server security. Also has news on new PGP export laws, piracy intervention, and firewalls with managment capabilities.
134227411f63bbe975a26bcbc1510a72d52f5f51c65af607255efeeeb4607930
Windows NT Magazene security update - December 15, 1999. Contains You Have the Right to Surf Anonymously, SQL Server 7.0 SA Password, NT Subject to Denial of Service, NT Help File Attack, News: Most Cybercrime Goes Unpunished, News: Microsoft Releases Smart Card Toolkit, Practical Recommendations for Post-Y2K, Enterprise Firewall with Security-Compliant VPN, and Monitor Data Before It Reaches the OS. NTsecurity homepage here.
ff2a51b4aa6c31bd1316ffd02d7ca35e600d78e844b7b78b74b17c42d2a92ee4
Security UPDATE Alert - An advisory has been released warning users about proper configuration to avoid an SQL Server 7.0 SA password compromise. A DoS vulnerability have been found in GoodTech's Telnet Server v.2.2.1. .rain.forrest.puppy. reported a DoS condition in Windows NT Server 4.0. The problem can lead to a crashed Service Manager and break functionality of named pipes. NTsecurity homepage here.
863ff8700ab0174402779a16fb094932e7f20189a85b160d817354aabd7c15d6
Windows NT security update for December 8, 1999. New vulnerabilities covered include IE 5.0 WPAD Spoofing, IIS ISAPI Filter Plain Text Leak, FTP Serv-U Subject to Denial of Service, and IE 5.0 Subject to Frame Spoofing. Also has info on making certain you are ready for y2k, the MiniZip virus, Babylonia virus, and Y2K-Specific Worms. NTsecurity homepage here.
a6aa9fff249cad6fef9c9fcdb215405e054d8eabe95afcbcebb4e26b213704a6
Security UPDATE Alert - Four new security vulnerabilities were reported in Windows software in the last couple of days. Georgio Guninski discovered another problem in IE 5.0 that allows of frame spoofing to occur. USSRLABS reported a denial of service potential with Deerfield.com's FTP Serv-U software. Microsoft reported a problem with IIS and Site Server where an SSL ISAPI filter may leak plain text data under rare circumstances, and Tim Adams reported a problem with IE 5.0's automatic proxy detection routines.
be5a1369ff46f932331f4e9251c6dbb341fac8b5ecd01669dd0fd4345925fc86
Windows NT security update for December 1st, 1999. Includes Windows 9x Legacy Psw Caching, IE 5.0 Task Scheduler Elevates Privileges, Mail-Gear Allows Directory Traversal, BisonWare FTP Server Subject to Denial of Service, WorldClient Server Subject to Denial of Service, ASIO Gains Right to Tap Private Computers, Y2K Internet Security Bundle, Compact Fingerprint Reader, Embedded NT Firewalls, Blocking RPC Service Access, A Windows 2000 Post-Installation Checklist, and Testing Your Exchange Server for Y2K Readiness.
624a29a3d83c2eda69436fc32f21b6f51304a94d13a3b16de64ecf56247c9674
[ WINDOWS SECURITY ALERT ] Information on the recent vulnerabilities in IE5, Mail-Gear, BisonWare FTP, WorldClient Server.
19f84145b8db494b6b00f02f331b4414db2c5349a936842614575475e05be31e
WINDOWS NT MAGAZINE SECURITY UPDATE for November 24, 1999. (formerly Windows Security Digest) Includes information on Internet Explorer 5.0 XML Redirects, Vermillion FTP Server Subject to Denial of Service, WordPad Subject to Crash, HP JetDirect Denial of Service, ZetaMail 2.1 Subject to Denial of Service, G6 FTP Server Subject to Denial of Service, Melissa Variant Prilissa on the Loose, The Philosophy of Security - UNIX vs. NT, and 3Com's New 3CR990 Encrypting NIC.
22bdf51ea47ec62aff28e672e877f6d4e56e3031043dc45ebf64d380cc479a36
[ Windows Security Digest ] 1999 - November 2. Contains analysis of 8 windows vulnerabilities that have come out in the past 2 weeks, plus Ongoing MDAC Attacks Against IIS, IIS 5.0's New Security Features, Tools of the Trade, Top 10 Cracks of All Time, and Internet Scanner vs CyberCop. www.ntsecurity.net
a5b0722634118b6f7925bcfc66f9a6e384388015d987e474d69a1d92fb1bb48a
[ Windows Security Digest ] 1999 - October 18. Excel Symbolic Links, JavaScript Redirect, Anatomy of an Intrusion, Getting the Drop on Network Intruders, State of Security 2000, So You Want to Be a Cryptographer, C2 Compliance Check. www.ntsecurity.net
b52d9e47f72f9bd6daa0001926b02ea197343a60b323bde7dd34592350f20bdf