Microsoft Investigates Alleged Flaw in Browser (First virus for .Net reported)

Computerworld ^ | Jan. 14, 2002 | By JAIKUMAR VIJAYAN

[AFreeBird]

he 'HoneyNet' project left that server open on purpose, with a 3 year old known exploit unpatched on purpose, "to catch a thief".

So what part of this didn't you understand? If the exploit is three years old and is known, and a fix has been supplied, yet someone is leaving it open for their own purposes; what exactly is your problem?

According to Suns web site:

________________________________________________________________________________

Sun Microsystems, Inc. Security Bulletin

Bulletin Number: #00192
Date: December 29, 1999
Cross-Ref: CERT CA-99-11
Title: CDE and OpenWindows

Revision History:

March 28, 2000: Updated patch information
March 3, 2000: Updated patch information
January 25, 2000: Updated patch information
December 29, 1999: Initial release

[Bush2000]

1. Click on the CA-2001-31 advisory.

2. Look down in Appendix A. See Sun Microsystems.

3. Click on the Sun Alert Notification in Appendix A.

4. Look in the Resolution section. Click on any of the patches for Solaris. For example, Solaris 8 with patch 108949-07 or later.

5. Note the date on the patch: Dec/07/2001.

6. Game over, dude.

[dixie sass]

ping