This paper presents several methods of bypassing the protection mechanism built into Microsoft’s Windows 2003 Server that attempts to prevent the exploitation of stack based buffer overflows. Recommendations about how to thwart these attacks are made where appropriate. Introduction Microsoft is committed to security. I’ve been playing with Microsoft products, as far as security is concerned, since 1997 and in the past year and a half or two I’ve seen a marked difference with some very positive moves made. In a way they had to. With the public relations crisis caused by worms such as Code Red Microsoft needed to do something to stem the flow of customers moving away from the Windows OS to other platforms.
Read the rest of this entry »

• 0 Comments

Advisory ID: cisco’sa?20011003?pix?firewall?auth?flood … The Cisco Secure PIX Firewall AAA authentication feature, introduced in version 4.0
Read the rest of this entry »

• 0 Comments