Yet another serious IE security flaw, Download Ject

Microsoft Windows operating system, and software for Windows platform, including QuickTime Player and iTunes for Windows. We also discuss topics about Microsoft Corp.

Moderators: Josh, Don_HH2K, Mandrake

Postby Wellander » Fri 25 Jun, 2004 7:19 pm

Hi,
Windows 98 Gold = IE 4.01
Windows 98 SE = IE 5.00
Wellander
diamond member
diamond member
 
Posts: 2603
Joined: Mon 21 Oct, 2002 6:37 pm

Postby Don_HH2K » Fri 25 Jun, 2004 7:37 pm

I know that about the versions. I never bothered to upgrade since I never used IE although I did apply patches, etc...
UserAgent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.4) Gecko/20030624 Netscape/7.1 (ax)
User avatar
Don_HH2K
Moderator
Moderator
 
Posts: 5112
Joined: Sun 09 May, 2004 3:59 pm

Postby Andrew T. » Fri 25 Jun, 2004 10:09 pm

In any case, all individuals who use Internet Explorer on Windows will be in danger of what Microsoft considers to be a vulnerability of "critical" severity.

Until Microsoft releases a patch or security update, which they probably won't do for all Windows versions actually affected by the security flaw.

Or, sensibly, they stop using Internet Explorer, instead choosing to use a safer competing product such as Mozilla or Mozilla Firefox!
UserAgent: Mozilla/5.0 (Windows; U; Win95; en-US; rv:1.7) Gecko/20040614 Firefox/0.9
User avatar
Andrew T.
diamond member
diamond member
 
Posts: 1228
Joined: Fri 14 Mar, 2003 11:37 pm
Location: Somewhere beyond the sea

Postby Antony » Sat 26 Jun, 2004 8:20 am

This is for web pages hosted in Microsoft Internet Information Services 5.0 (IIS) and users using Microsoft Internet Explorer (MSIE).

According to Symmatec, affected systems are: Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows XP.

And systems not affected are: DOS, Linux, Macintosh, Macintosh OS X, Novell Netware, OS/2, UNIX, Windows 3.x

Another good reason to use non-MSIE based browsers, and to switch to a Mac.
UserAgent: Mozilla/5.0 (Macintosh; U; PPC Mac OS X; en-us) AppleWebKit/125.2 (KHTML, like Gecko) Safari/125.8
User avatar
Antony
diamond member
diamond member
 
Posts: 14342
Joined: Tue 18 Jun, 2002 11:36 pm
Location: Sydney, Australia

Postby Mandrake » Sat 26 Jun, 2004 11:35 am

Windows XP SP2 is not effected by this, I hope they release SP2 soon, it seems so much more secure.
UserAgent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7) Gecko/20040616
Core i7 920 | ASUS P6T Deluxe v2 | 3TB+ HDD | 12GB Corsair DDR3 | Radeon 4890 Xfire | X-Fi Titanium Fatal1ty | Logitech Z-5500 Speakers | Dell 3008WFP | Seven RC1
User avatar
Mandrake
Moderator
Moderator
 
Posts: 4160
Joined: Fri 13 Sep, 2002 6:35 am

Postby Don_HH2K » Sat 26 Jun, 2004 2:40 pm

Mandrake wrote:Windows XP SP2 is not effected by this, I hope they release SP2 soon, it seems so much more secure.


There is currently a Release Candidate 2 of XPSP2 if you don't mind a service pack in beta. It seems stable enough for everyday use to me.
UserAgent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.4) Gecko/20030624 Netscape/7.1 (ax)
User avatar
Don_HH2K
Moderator
Moderator
 
Posts: 5112
Joined: Sun 09 May, 2004 3:59 pm

Postby Antony » Sun 27 Jun, 2004 12:44 am

SillyDog701 website is of course not served by Microsoft Internet Information Services 5.0 (IIS).
SillyDog701 uses FreeBSD, which is what Mac OS X is based on.
UserAgent: Mozilla/5.0 (Macintosh; U; PPC Mac OS X; en) AppleWebKit/125.2 (KHTML, like Gecko) Safari/125.8
User avatar
Antony
diamond member
diamond member
 
Posts: 14342
Joined: Tue 18 Jun, 2002 11:36 pm
Location: Sydney, Australia

Postby Wellander » Sun 27 Jun, 2004 12:48 am

Antony wrote:SillyDog701 website is of course not served by Microsoft Internet Information Services 5.0 (IIS).
SillyDog701 uses FreeBSD, which is what Mac OS X is based on.


Good.
UserAgent: Mozilla/4.0 (compatible; MSIE 5.0; Windows 98; DigExt)
Wellander
diamond member
diamond member
 
Posts: 2603
Joined: Mon 21 Oct, 2002 6:37 pm

Postby Don_HH2K » Sun 27 Jun, 2004 8:35 am

Antony wrote:SillyDog701 website is of course not served by Microsoft Internet Information Services 5.0 (IIS).
SillyDog701 uses FreeBSD, which is what Mac OS X is based on.


I would have to agree not to use IIS at all. Even though I do have a copy of NT server kicking around somewhere, I use Linux servers anyway. If you want my opinion, IIS is a targeted-with-nuclear-weapons swiss cheese.
UserAgent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.4) Gecko/20030624 Netscape/7.1 (ax)
User avatar
Don_HH2K
Moderator
Moderator
 
Posts: 5112
Joined: Sun 09 May, 2004 3:59 pm

Postby Antony » Mon 28 Jun, 2004 5:35 am

Microsoft said they can cure the recent virus problem, but you have to turn on the auto-updating features.

I would add, by turning on the auto-updating features, you will just get more problems.

[quote="http://www.reuters.com/newsArticle.jhtml?type=technologyNews&storyID=5527173"]SYDNEY (Reuters) - Microsoft Corp is cutting the time it takes to blitz viruses but needs personal computer users to turn on their auto-updating features to help it combat potentially dangerous attacks, Bill Gates said on Monday.[/url]
UserAgent: Mozilla/5.0 (Macintosh; U; PPC Mac OS X; en) AppleWebKit/125.2 (KHTML, like Gecko) Safari/125.8
User avatar
Antony
diamond member
diamond member
 
Posts: 14342
Joined: Tue 18 Jun, 2002 11:36 pm
Location: Sydney, Australia

Postby Wellander » Mon 28 Jun, 2004 4:10 pm

Antony wrote:Microsoft said they can cure the recent virus problem, but you have to turn on the auto-updating features.

I would add, by turning on the auto-updating features, you will just get more problems.

http://www.reuters.com/newsArticle.jhtml?type=technologyNews&storyID=5527173 wrote:SYDNEY (Reuters) - Microsoft Corp is cutting the time it takes to blitz viruses but needs personal computer users to turn on their auto-updating features to help it combat potentially dangerous attacks, Bill Gates said on Monday.[/url]


Hi,
I would much rather be varnible to attacts then do that.
UserAgent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)
Wellander
diamond member
diamond member
 
Posts: 2603
Joined: Mon 21 Oct, 2002 6:37 pm

Postby djv1 » Mon 28 Jun, 2004 5:30 pm

Wellander wrote:Hi,
Windows 98 Gold = IE 4.01
Windows 98 SE = IE 5.00



Waht is windows 98 gold?
UserAgent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.6) Gecko/20040206 Firefox/0.8
Dustin
User avatar
djv1
diamond member
diamond member
 
Posts: 1164
Joined: Wed 14 Jan, 2004 6:02 pm

Postby Wellander » Mon 28 Jun, 2004 5:45 pm

Hi,
It is Windows 98 First edition.
UserAgent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0; .NET CLR 1.1.4322)
Wellander
diamond member
diamond member
 
Posts: 2603
Joined: Mon 21 Oct, 2002 6:37 pm

Postby DJGM » Wed 30 Jun, 2004 9:30 am

Here we go again . . . yet another nasty IE problem has become evident.

While the rogue Russian server a the centre of last weeks problems has been shut down, some of the
affected sites (normally trustworthy ones) are still injecting malicious code onto user's PC's via IE.

And if that wasn't enough . . .

Malware attacks IE users via pop-ups

Another warning has been issued over data-stealing malware that exploits a vulnerability in IE.

Although the threat from last week's "download.ject" attack has subsided, malware authors
have not missed a beat in their efforts to use flaws in Internet Explorer as a gateway
to steal banking and credit card information.

The malware, which has been identified by the SANS Institute, is delivered to users' PCs
through pop-up windows that appear when users log on to financial portals.

It seems that the suspect pop-ups are delivered on certain websites that run ads from third-party
ad servers, which appear to have been hacked. When the pop-ups appear, vulnerable versions
of IE begin downloading a malicious file that records activity, such as passwords onto the
infected PC and sends that data to a server reportedly located in Estonia.


The full article can be found at TheRegister.co.uk . . .

Oh well, it seems like another damn good reason to use alternative browsers, especially ones
that have ad-blocking built in as standard without the need for any third party browser add-ons.
UserAgent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7) Gecko/20040618
SeaMonkey = Swiss Army Knife: It's versatile, reliable, and contains useful tools.
Windows Internet Explorer = Old Swiss Cheese: Full of holes, and it stinks!
User avatar
DJGM
diamond member
diamond member
 
Posts: 4550
Joined: Wed 19 Jun, 2002 1:03 pm
Location: Manchester, England, UK

Postby Mandrake » Wed 30 Jun, 2004 9:28 pm

That is bad news for online-banking sites that require IE!
UserAgent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7) Gecko/20040629 Firefox/0.9.1
Core i7 920 | ASUS P6T Deluxe v2 | 3TB+ HDD | 12GB Corsair DDR3 | Radeon 4890 Xfire | X-Fi Titanium Fatal1ty | Logitech Z-5500 Speakers | Dell 3008WFP | Seven RC1
User avatar
Mandrake
Moderator
Moderator
 
Posts: 4160
Joined: Fri 13 Sep, 2002 6:35 am

PreviousNext

Return to Windows (and Microsoft talk)

Who is online

Registered users: Google [Bot], Yahoo [Bot]