Yet another serious IE security flaw, Download Ject

page previous  1, 2, 3  next
You are here:  SillyDog701 > Message Centre > Windows (and Microsoft talk) > [sdt=6154]
SillyDog701 Forums
Author Message
Wellander
SUSPENDED


Joined: 21 Oct 2002
Posts: 2576
25 Jun, 2004 6:19 pm [sdp=36451]  

Hi,
Windows 98 Gold = IE 4.01
Windows 98 SE = IE 5.00
Back to top profile
Don_HH2K
Moderator


Joined: 09 May 2004
Posts: 4745
25 Jun, 2004 6:37 pm [sdp=36457]  

I know that about the versions. I never bothered to upgrade since I never used IE although I did apply patches, etc...

UserAgent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.4) Gecko/20030624 Netscape/7.1 (ax)
Back to top profile website
Andrew T.
diamond member


Joined: 14 Mar 2003
Posts: 1229
Location: Somewhere beyond the sea
25 Jun, 2004 9:09 pm [sdp=36472]  

In any case, all individuals who use Internet Explorer on Windows will be in danger of what Microsoft considers to be a vulnerability of "critical" severity.

Until Microsoft releases a patch or security update, which they probably won't do for all Windows versions actually affected by the security flaw.

Or, sensibly, they stop using Internet Explorer, instead choosing to use a safer competing product such as Mozilla or Mozilla Firefox!

UserAgent: Mozilla/5.0 (Windows; U; Win95; en-US; rv:1.7) Gecko/20040614 Firefox/0.9
Back to top profile
Antony
Site Admin


Joined: 18 Jun 2002
Posts: 12754
Location: Sydney, Australia
26 Jun, 2004 7:20 am [sdp=36511]  

This is for web pages hosted in Microsoft Internet Information Services 5.0 (IIS) and users using Microsoft Internet Explorer (MSIE).

According to Symmatec, affected systems are: Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows XP.

And systems not affected are: DOS, Linux, Macintosh, Macintosh OS X, Novell Netware, OS/2, UNIX, Windows 3.x

Another good reason to use non-MSIE based browsers, and to switch to a Mac.

UserAgent: Mozilla/5.0 (Macintosh; U; PPC Mac OS X; en-us) AppleWebKit/125.2 (KHTML, like Gecko) Safari/125.8

Back to top profile website
Mandrake
Moderator


Joined: 13 Sep 2002
Posts: 3882
26 Jun, 2004 10:35 am [sdp=36521]  

Windows XP SP2 is not effected by this, I hope they release SP2 soon, it seems so much more secure.

UserAgent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7) Gecko/20040616

Core i7 920 | ASUS P6T Deluxe v2 | 3TB+ HDD | 12GB Corsair DDR3 | Radeon 4890 Xfire | X-Fi Titanium Fatal1ty | Logitech Z-5500 Speakers | Dell 3008WFP | Seven RC1
Back to top profile
Don_HH2K
Moderator


Joined: 09 May 2004
Posts: 4745
26 Jun, 2004 1:40 pm [sdp=36531]  

Mandrake wrote:
Windows XP SP2 is not effected by this, I hope they release SP2 soon, it seems so much more secure.


There is currently a Release Candidate 2 of XPSP2 if you don't mind a service pack in beta. It seems stable enough for everyday use to me.

UserAgent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.4) Gecko/20030624 Netscape/7.1 (ax)
Back to top profile website
Antony
Site Admin


Joined: 18 Jun 2002
Posts: 12754
Location: Sydney, Australia
26 Jun, 2004 11:44 pm [sdp=36621]  

SillyDog701 website is of course not served by Microsoft Internet Information Services 5.0 (IIS).
SillyDog701 uses FreeBSD, which is what Mac OS X is based on.

UserAgent: Mozilla/5.0 (Macintosh; U; PPC Mac OS X; en) AppleWebKit/125.2 (KHTML, like Gecko) Safari/125.8

Back to top profile website
Wellander
SUSPENDED


Joined: 21 Oct 2002
Posts: 2576
26 Jun, 2004 11:48 pm [sdp=36622]  

Antony wrote:
SillyDog701 website is of course not served by Microsoft Internet Information Services 5.0 (IIS).
SillyDog701 uses FreeBSD, which is what Mac OS X is based on.


Good.

UserAgent: Mozilla/4.0 (compatible; MSIE 5.0; Windows 98; DigExt)
Back to top profile
Don_HH2K
Moderator


Joined: 09 May 2004
Posts: 4745
27 Jun, 2004 7:35 am [sdp=36654]  

Antony wrote:
SillyDog701 website is of course not served by Microsoft Internet Information Services 5.0 (IIS).
SillyDog701 uses FreeBSD, which is what Mac OS X is based on.


I would have to agree not to use IIS at all. Even though I do have a copy of NT server kicking around somewhere, I use Linux servers anyway. If you want my opinion, IIS is a targeted-with-nuclear-weapons swiss cheese.

UserAgent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.4) Gecko/20030624 Netscape/7.1 (ax)
Back to top profile website
Antony
Site Admin


Joined: 18 Jun 2002
Posts: 12754
Location: Sydney, Australia
28 Jun, 2004 4:35 am [sdp=36716]  

Microsoft said they can cure the recent virus problem, but you have to turn on the auto-updating features.

I would add, by turning on the auto-updating features, you will just get more problems.

[quote="[/url]"]SYDNEY (Reuters) - Microsoft Corp is cutting the time it takes to blitz viruses but needs personal computer users to turn on their auto-updating features to help it combat potentially dangerous attacks, Bill Gates said on Monday.

UserAgent: Mozilla/5.0 (Macintosh; U; PPC Mac OS X; en) AppleWebKit/125.2 (KHTML, like Gecko) Safari/125.8

Back to top profile website
Wellander
SUSPENDED


Joined: 21 Oct 2002
Posts: 2576
28 Jun, 2004 3:10 pm [sdp=36748]  

[quote="Antony"]Microsoft said they can cure the recent virus problem, but you have to turn on the auto-updating features.

I would add, by turning on the auto-updating features, you will just get more problems.

[/url] wrote:
SYDNEY (Reuters) - Microsoft Corp is cutting the time it takes to blitz viruses but needs personal computer users to turn on their auto-updating features to help it combat potentially dangerous attacks, Bill Gates said on Monday.


Hi,
I would much rather be varnible to attacts then do that.

UserAgent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)
Back to top profile
djv1
diamond member

Dustin
Joined: 14 Jan 2004
Posts: 1159
28 Jun, 2004 4:30 pm [sdp=36751]  

Wellander wrote:
Hi,
Windows 98 Gold = IE 4.01
Windows 98 SE = IE 5.00



Waht is windows 98 gold?

UserAgent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.6) Gecko/20040206 Firefox/0.8

Dustin
Back to top profile
Wellander
SUSPENDED


Joined: 21 Oct 2002
Posts: 2576
28 Jun, 2004 4:45 pm [sdp=36754]  

Hi,
It is Windows 98 First edition.

UserAgent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0; .NET CLR 1.1.4322)
Back to top profile
DJGM
diamond member


Joined: 19 Jun 2002
Posts: 4371
Location: Manchester, England, UK
30 Jun, 2004 8:30 am [sdp=36898]  

Here we go again . . . yet another nasty IE problem has become evident.

While the rogue Russian server a the centre of last weeks problems has been shut down, some of the
affected sites (normally trustworthy ones) are still injecting malicious code onto user's PC's via IE.

And if that wasn't enough . . .

Quote:

Malware attacks IE users via pop-ups

Another warning has been issued over data-stealing malware that exploits a vulnerability in IE.

Although the threat from last week's "download.ject" attack has subsided, malware authors
have not missed a beat in their efforts to use flaws in Internet Explorer as a gateway
to steal banking and credit card information.

The malware, which has been identified by the SANS Institute, is delivered to users' PCs
through pop-up windows that appear when users log on to financial portals.

It seems that the suspect pop-ups are delivered on certain websites that run ads from third-party
ad servers, which appear to have been hacked. When the pop-ups appear, vulnerable versions
of IE begin downloading a malicious file that records activity, such as passwords onto the
infected PC and sends that data to a server reportedly located in Estonia.


The full article can be found at TheRegister.co.uk . . .

Oh well, it seems like another damn good reason to use alternative browsers, especially ones
that have ad-blocking built in as standard without the need for any third party browser add-ons.

UserAgent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7) Gecko/20040618

SeaMonkey = Swiss Army Knife: It's versatile, reliable, and contains useful tools.
Windows Internet Explorer = Old Swiss Cheese: Full of holes, and it stinks!
Back to top profile website
Mandrake
Moderator


Joined: 13 Sep 2002
Posts: 3882
30 Jun, 2004 8:28 pm [sdp=36991]  

That is bad news for online-banking sites that require IE!

UserAgent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7) Gecko/20040629 Firefox/0.9.1

Core i7 920 | ASUS P6T Deluxe v2 | 3TB+ HDD | 12GB Corsair DDR3 | Radeon 4890 Xfire | X-Fi Titanium Fatal1ty | Logitech Z-5500 Speakers | Dell 3008WFP | Seven RC1
Back to top profile
Display posts from previous:   
Reply to topic    Forum Index > Windows (and Microsoft talk) All times are CST (GMT -6)
page 2 of 3 page previous  1, 2, 3  next
To add your questions, comments, and for more features and more, please join SillyDog701 Message Centre. It's free! This is SillyDog 701 Message Centre (SD701 Forums).

iTunes Gift Certificates Your favourite music, radio, music videos, TV shows, movies and more...
Download on iTunes

*Search | FAQ | Rules and Policies | MozInfo701 - Mozilla Information Centre | SD701 Open Directory | Message Board Map | download Netscape