Potential vulnerabilities of the Microsoft RVP-based Instant Messaging

The Encode Security Labs performed an empirical analysis of the Microsoft Instant Messaging implementation based on Exchange 2000 and using the MSN Messenger Service v3.6 client. The most important findings about the IM service are: -it does not offer any confidentiality -it is vulnerable to...

breeze-server.txt

Date: Sun, 27 Dec 1998 00:32:34 -0500 From: //Stany To: [email protected] Subject: Breeze Network Server remote reboot and other bogosity. Good day. I am Ortodox Christian, so my Christmas is on Jan 7th, but in the spirit of giving, I would like to submit the following rant. It is rather...

fwtk.gauntlet.random.seed.txt

Date: Fri, 16 Apr 1999 15:36:27 -0500 From: [email protected] To: [email protected] Subject: FWTK, Gauntlet 'random seed' security problem Summary A 'random seed' problem in lib/rand.c affects all local challenge-response authentication on FWTK and Gauntlet. Many services have support available...