bugtraq
[Top] [All Lists]

RE: Re[2]: [Full-disclosure] Fun with event logs (semi-offtopic)

To: <full-disclosure@lists.grok.org.uk>
Subject: RE: Re[2]: [Full-disclosure] Fun with event logs (semi-offtopic)
From: "Michele Cicciotti" <mc@khamsa.net>
Date: Thu, 21 Dec 2006 21:19:47 +0100
Cc: <bugtraq@securityfocus.com>
Delivered-to: sp-com-lists@consult.net
Delivered-to: bugtraq-list@securepoint.com
Delivered-to: mailing list bugtraq@securityfocus.com
Delivered-to: moderator for bugtraq@securityfocus.com
In-reply-to: <20061221171327.4C5AA1D8F80@supertolla.itapac.net>
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@securityfocus.com; run by ezmlm
Organization: Khamsa Italia Srl
References: <20061221122536.6AA7A1D8F7C@supertolla.itapac.net> <20061221152104.A96731D8F79@supertolla.itapac.net> <20061221171327.4C5AA1D8F80@supertolla.itapac.net>
Thread-index: AcclI00LHc/688nqTTiiVcNWCpm8iQAGbDHw
> Yes,  probably  this  bug  only  affects  event  viewer  itself. I don't
> understand  how  and why Microsoft achieved this effect in event viewer,
> which  is,  by  the  way,  security tool, and if it's hard for different
> vendor  to  make  same  mistake.

For what it's worth, the updated viewer in Windows Vista can show string 
inserts separately, in a list. IIRC its XML export function exports them 
separately, too



<Prev in Thread] Current Thread [Next in Thread>