Hello, All! I've been reading the last Microsoft advisories and one of the vulnerabilities descriptions made me think about buffer overrun. The description for the HTTP header delimiters vulnerability sounds like a buffer overflow, although it is described as a buffer overrun. And the differences between overflow and overrun are very well defined, but it seems that someone is forgetting it. I might be wrong, but what I understood from the technical description is that the problem regards to an overflow. Anyone have any idea on that, or knows the reason why it is described like that? Alberto Cozer Future Technologies Digital Security IBM Certified AIX System Specialist acozerat_private http://www.fti.com.br ********************************************************* Future Technologies Seguranca Digital Esta mensagem e de responsabilidade de seu autor. Seu conteudo nao reflete necessariamente a opiniao da empresa. *********************************************************
This archive was generated by hypermail 2b30 : Fri Apr 12 2002 - 09:45:09 PDT