Security holes in IE 6.0


Cyberm4n
#1
Finnish researchers Oy Online ( http://www.solutions.fi/index.cgi/?lang=eng )have discovered a way to root a windows box using a gopher URL to cause a buffer overflow in the IE Gopher client.

"A test exploit has been successfully used to run arbitrary code without user intervention with various IE versions and systems including IE 5.5 and 6.0," the group says.

A link in a Web page or an e-mail could lure a person to a malicious Gopher server. While these may be a rare bit of Internet fauna these days, malicious or not, it's not actually necessary to use a fully- functioning one. Any program listening on a TCP port with the ability to write a block of data can get the job done.

MS says they're working on a patch but have offered no estimated release date.

For a quick workaround Oy Online recommends simply using a broken proxy for Gopher in IE settings. See their advisory here ( http://www.solutions.fi/index.cgi/ne...06_04?lang=eng )for simple instructions, and additional details.
 
Shmad
#2
thanks for the heads up on this issue. Its greatly appreciated by myself and most Canadian Content users Keep em coming!
 
Anonymous
#3
Guys,

Anasoft an UK program is trying to get into your machine on port 1084.

So watch out for intruders.
 

Similar Threads

10
Black Holes
by Libra Girl | May 1st, 2007
6
Some people are just a-holes.
by Twila | Aug 7th, 2005