Re[2]: dH team & SECURITY.NNOV: special device access, information leakage and DoS in Outlook Express

2002-05-17 Thread 3APA3A
Dear Chad Loder, You're right! causes IE toconnectto111.111.111.111viaNetBT. Depending on LMCompatibilityLevel it may cause user's cleartext password or NTLMv1 challenge to leak. It's very serious bug. --Friday, May 17, 2002, 1:38:16 PM, you wrote to [EMAIL PROTECTED

Re: dH team & SECURITY.NNOV: special device access, information leakage and DoS in Outlook Express

2002-05-17 Thread Chad Loder
At Wednesday 5/15/2002 03:11 PM +0400, you wrote: > Title: Special device access and DoS in Microsoft Internet >Exporer/Outlook Express/Outlook > > All versions of Windows have a reserved filenames referred to special > devices such as prn, aux, nul, etc also called DOS devices. This

dH team & SECURITY.NNOV: special device access, information leakage and DoS in Outlook Express

2002-05-15 Thread ERRor
Original version of this advisory: http://www.security.nnov.ru/advisories/msiedos.asp Title: Special device access and DoS in Microsoft Internet Exporer/Outlook Express/Outlook Authors: ERRor, 3APA3A Date: May, 14