Re: Windows NT4 Bastion Host Whitepaper

["Stefan Norberg" <stnor () sweden hp com>]

Jonah and others:

The paper is under constant change. I have been in Redmond the last week -
but my aim is to constantly publish new versions on my web site. Check
http://people.hp.se/stnor for updates every now and then.

Kind regards,

Stefan


----- Original Message -----
From: S. Jonah Pressman <jonah () istar ca>
To: Stefan Norberg <stnor () sweden hp com>
Cc: <firewall-wizards () nfr net>
Sent: Thursday, June 17, 1999 14:54
Subject: Re: Windows NT4 Bastion Host Whitepaper


> Stefan:
>
> Thank you for posting your interesting and very useful paper on bastion
> host configuration.
>
> In light of the serious threat described in CERT Advisory CA-99-07 IIS
> Buffer Overflow (June 16, 1999), in combination with the fact that most
> NT bastion hosts are running IIS4 these days, the readers of your next
> iteration of the document may benefit from mention of the exploit and
> the corrective action (as described in
> http://www.microsoft.com/security/bulletins/ms99-019.asp ).
>
> Best Regards,
> Jonah