Explore Security hole - GoFuckYourself.com

Sexzity · 09-26-2003, 09:15 AM

In the Danish news, they just told that Microsoft have work the 24 hours the last 14 days to close a security hole in explore.
It seems like Microsoft can't close the hole!!!!!!
The security hole is so big that a hacker can download your harddisk, without you can see it.
Microsoft expect that the first virus will be around in a coulple of days.
Maby it is soon time to find the link to Netscape again.

darksoul · 09-26-2003, 09:25 AM

geesh
I locked my harddisk with steel,
do you think they can still download it ?

loverboy · 09-26-2003, 09:30 AM

any1 have news links to this report?

Luc · 09-26-2003, 11:34 AM

Quote:

Originally posted by loverboy
any1 have news links to this report?

www.bullshit.com

Triple 6 · 09-26-2003, 11:38 AM

Quote:

Originally posted by Luc

www.bullshit.com

EZRhino · 09-26-2003, 11:54 AM

All I can say is fire wall, fire wall, fire wall.

extreme · 09-26-2003, 12:20 PM

Quote:

Originally posted by EZRhino
All I can say is fire wall, fire wall, fire wall.

.. good luck protecting yourself against client browser vulns with a firewall ;].

skillfull · 09-26-2003, 12:30 PM

Quote:

Originally posted by extreme

.. good luck protecting yourself against client browser vulns with a firewall ;].

people feel so safe with a windows firewall, soryy but...
hahahahahahahah
ahahahahahahaha
ahahahahahahahaha

GrimShawn · 09-26-2003, 12:31 PM

glory hole?

Sexzity · 09-27-2003, 11:43 AM

http://news.com.com/2100-7349_3-5083234.html

JamesK · 09-27-2003, 11:44 AM

Sexzity · 10-04-2003, 07:06 AM

Microsoft just made the update.

From microsoft:
A number of security issues have been identified in Microsoft® Internet Explorer that could allow an attacker to compromise a Microsoft Windows®-based system and then take a variety of actions. For example, an attacker could run programs on your computer when you are viewing a Web page. This vulnerability affects all computers that have Internet Explorer installed. (You do not have to be using Internet Explorer as your Web browser to be affected by this issue.) You should help protect your computer by installing this update from Microsoft.

So it mith such this threat, but this hole is BIG!

goBigtime · 10-04-2003, 07:21 AM

This was talked about on GFY in about 20 threads (complete with fixes) about 2 weeks ago, and probably 2 months before that.

open regedit

go to:

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\ Content Type\

and then about 4 entries down inside the content type "folder" will be a folder that sais:

application/hta

Just rename that folder to:

application/htalkejrwlrkjwelrkj
......................^ put your own jibberish here.

Close it & you're done.

----------------

Then to close the other hole:

go to START button and run: dcomcnfg

If you're in windows 2000 or XP the menus are a bit different.

In XP... open Component Services, wait a few seconds and get it to display the "Computers" folder.

Expand that and you will see "My Computer" or whatever your computer is... right click on that and select properties.

Go to Default properties tab and disable DCOM.

(In Windows 2000 I think you can get
to the default properties tab right away.)

goBigtime · 10-04-2003, 07:24 AM

Quote:

Originally posted by skillfull

people feel so safe with a windows firewall, soryy but...
hahahahahahahah
ahahahahahahaha
ahahahahahahahaha

How safe are they with a hardware firewall + software firewall + mozilla firebird browsers (kicks ass) + mozilla thunderbird (better than outlook?) & DCOM disabled

09-26-2003, 09:15 AM	#1
Sexzity Confirmed User Join Date: Jun 2002 Location: Cyperspaces! Posts: 1,329	Explore Security hole In the Danish news, they just told that Microsoft have work the 24 hours the last 14 days to close a security hole in explore. It seems like Microsoft can't close the hole!!!!!! The security hole is so big that a hacker can download your harddisk, without you can see it. Microsoft expect that the first virus will be around in a coulple of days. Maby it is soon time to find the link to Netscape again.

09-26-2003, 09:25 AM	#2
darksoul Confirmed User Join Date: Apr 2002 Location: /root/ Posts: 4,997	geesh I locked my harddisk with steel, do you think they can still download it ? __________________ 1337 5y54\|)m1n: 157717888 BM-2cUBw4B2fgiYAfjkE7JvWaJMiUXD96n9tN Cambooth

09-27-2003, 11:44 AM	#11
JamesK hi Industry Role: Join Date: Jun 2002 Posts: 16,731	__________________ M3Server - NATS Hosting

09-26-2003, 09:30 AM	#3
loverboy When it rains, it pours Industry Role: Join Date: May 2003 Posts: 20,609	any1 have news links to this report?

09-26-2003, 11:54 AM	#6
EZRhino Confirmed User Industry Role: Join Date: Jul 2003 Location: couch Posts: 6,258	All I can say is fire wall, fire wall, fire wall.

09-26-2003, 12:31 PM	#9
GrimShawn Confirmed User Join Date: Oct 2002 Location: BONEPRONE MANSION serving drinks! Posts: 8,120	glory hole?

09-27-2003, 11:43 AM	#10
Sexzity Confirmed User Join Date: Jun 2002 Location: Cyperspaces! Posts: 1,329	http://news.com.com/2100-7349_3-5083234.html

10-04-2003, 07:06 AM	#12
Sexzity Confirmed User Join Date: Jun 2002 Location: Cyperspaces! Posts: 1,329	Microsoft just made the update. From microsoft: A number of security issues have been identified in Microsoft® Internet Explorer that could allow an attacker to compromise a Microsoft Windows®-based system and then take a variety of actions. For example, an attacker could run programs on your computer when you are viewing a Web page. This vulnerability affects all computers that have Internet Explorer installed. (You do not have to be using Internet Explorer as your Web browser to be affected by this issue.) You should help protect your computer by installing this update from Microsoft. So it mith such this threat, but this hole is BIG!

10-04-2003, 07:21 AM	#13
goBigtime Confirmed User Join Date: Nov 2002 Posts: 7,761	This was talked about on GFY in about 20 threads (complete with fixes) about 2 weeks ago, and probably 2 months before that. open regedit go to: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\ Content Type\ and then about 4 entries down inside the content type "folder" will be a folder that sais: application/hta Just rename that folder to: application/htalkejrwlrkjwelrkj ......................^ put your own jibberish here. Close it & you're done. ---------------- Then to close the other hole: go to START button and run: dcomcnfg If you're in windows 2000 or XP the menus are a bit different. In XP... open Component Services, wait a few seconds and get it to display the "Computers" folder. Expand that and you will see "My Computer" or whatever your computer is... right click on that and select properties. Go to Default properties tab and disable DCOM. (In Windows 2000 I think you can get to the default properties tab right away.)