06-05-2002, 01:27 PM | #1 | ||
20th Level Warrior
Join Date: April 9, 2001
Location: Dallas, Tx, USA
Age: 55
Posts: 2,830
|
It must be Wednesday, already. [img]graemlins/evillaughter2.gif[/img]
OK, this one isn't too bad. Associated Press - Security Flaw Found in Explorer Here's the intro: Quote:
Here's the part that get's me: Quote:
You see? It's not M$'s fault. It's the reporting security companies. They put you at risk by exposing the problem. [img]graemlins/evillaughter2.gif[/img] New M$ tagline: "Where do you want to gopher today?" Gopher is outdated (I only found 3 working gopher servers when I searched. Well, i found 25, but only 3 returned data.), but the problem is any buffer overflow in the IE client code which is exploitable is a huge problem. It doesn't matter that there are damned few servers left that use the exploitable protocol. A malacious server need not even be a fully functioning gopher server, it just needs to listen for requests on the right port and respond appropriately. A worm'ed IIS server could fit the bill quite nicely. A smart worm could: 1. Infect an IIS server via some unfixed hole, or backdoor left by another worm. 2. Open up a dummy gopher port which responds to all requests with the exploit. 3. Replace links on the web site the IIS server serves with links to the gopher server exploit. 4. The worm installs itself on all client machines that click the gopher links and begins scanning for vunerable servers. 5. Goto 1. None of this has anything to do with the number gopher servers left on the Internet. Now, the obligatory gopher file.
__________________
[img]\"http://home.earthlink.net/~rudedawg/images/perin14.gif\" alt=\" - \" /><br />The RudeDawg, known in these Forgotten Realms as Perin LightEyes<br /><br />Think Different. Keeper of the Bunnies of Total Self Confidence <img border=\"0\" alt=\"[bunny]\" title=\"\" src=\"graemlins/bunny.gif\" /> |
||
06-05-2002, 03:39 PM | #2 |
Ironworks Moderator
Join Date: January 7, 2001
Location: Monroe, LA
Age: 60
Posts: 7,387
|
Micro$uck once again shows it's unflappable ability to address the absolute wrong thing with the wrong words. [img]tongue.gif[/img]
You know what they say: "The sun will burn out in 5 billion years...which means they'll have to release patches for Windows in the dark." Gopher...man, what a concept. I remember that WAAAAAY back when I was first studying Internet back in 1994. Gopher, and Telnet, and Archie, and Veronica, and WAIS. Blaugh...what antediluvian systems. "A MIME is a terrible thing to WAIS." [img]graemlins/laugh2.gif[/img] Ok, enough bad geek puns. Back to reality. [img]smile.gif[/img] -Sazerac
__________________
"And all my days are trances, and all my nightly dreams, Are where thy grey eye glances, and where thy footstep gleams, In what ethereal dances, by what eternal streams..." |
06-05-2002, 03:59 PM | #3 |
20th Level Warrior
Join Date: April 9, 2001
Location: Dallas, Tx, USA
Age: 55
Posts: 2,830
|
Listen to the gopher file! [img]graemlins/crying.gif[/img] It took me forever to find it!
__________________
[img]\"http://home.earthlink.net/~rudedawg/images/perin14.gif\" alt=\" - \" /><br />The RudeDawg, known in these Forgotten Realms as Perin LightEyes<br /><br />Think Different. Keeper of the Bunnies of Total Self Confidence <img border=\"0\" alt=\"[bunny]\" title=\"\" src=\"graemlins/bunny.gif\" /> |
06-05-2002, 04:14 PM | #4 | |
Guest
Posts: n/a
|
Quote:
Hey!You leave my Auntie out of this!Boy do I remember those days..before AOL was even born [img]smile.gif[/img] Altho there was PC link and Apple Link which would eventually combine and become AOL...I feel old. [img]graemlins/thewave.gif[/img] I did listen to the gopher link [img]smile.gif[/img] hehe reminds me of the SNL skit, "All things Scottish" [ 06-05-2002, 04:17 PM: Message edited by: MagiK ] |
|
06-05-2002, 07:35 PM | #5 |
User suspended until [Feb13]
Join Date: December 6, 2001
Location: the south side of ol virginny
Age: 62
Posts: 1,172
|
bill murray made that movie great.
|
Currently Active Users Viewing This Thread: 1 (0 members and 1 guests) | |
|
|
Similar Threads | ||||
Thread | Thread Starter | Forum | Replies | Last Post |
Discovered something in the game... | Bungleau | Wizards & Warriors Forum | 6 | 02-05-2006 12:58 AM |
Just discovered something new tonight... | Bungleau | Miscellaneous Games (RPG or not) | 5 | 08-19-2005 10:41 PM |
US-CERT Vulnerability Note VU#713878: IE Specific Security Hole | LennonCook | General Conversation Archives (11/2000 - 01/2005) | 24 | 12-19-2004 08:03 AM |
WinAmp Security Flaw discovered | LennonCook | General Conversation Archives (11/2000 - 01/2005) | 28 | 12-05-2004 06:14 AM |
I just discovered... | Sir Exxon | General Conversation Archives (11/2000 - 01/2005) | 7 | 01-26-2002 05:40 PM |