<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"> <html> <head> <title></title> </head> <body> -------- Original Message -------- <table cellpadding="0" cellspacing="0" border="0"> <tbody> <tr> <th valign="baseline" align="right" nowrap="">Subject: </th> <td>[DISCUSS] New MS vulnerability</td> </tr> <tr> <th valign="baseline" align="right" nowrap="">Date: </th> <td>Thu, 19 Sep 2002 15:43:37 -0500</td> </tr> <tr> <th valign="baseline" align="right" nowrap="">From: </th> <td>"Brian Bilgere" <a class="moz-txt-link-rfc2396E" href="mailto:BBilgere@earthlink.net"><BBilgere@earthlink.net></a></td> </tr> <tr> <th valign="baseline" align="right" nowrap="">Reply-To: </th> <td><a class="moz-txt-link-abbreviated" href="mailto:discuss@sluug.org">discuss@sluug.org</a></td> </tr> <tr> <th valign="baseline" align="right" nowrap="">To: </th> <td><a class="moz-txt-link-rfc2396E" href="mailto:discuss@sluug.org"><discuss@sluug.org></a></td> </tr> <tr> <th valign="baseline" align="right" nowrap="">References: </th> <td><a class="moz-txt-link-rfc2396E" href="mailto:3.0.5.32.20020919152306.01b8bc88@mail.earthlink.net"><3.0.5.32.20020919152306.01b8bc88@mail.earthlink.net></a></td> </tr> </tbody> </table> <pre><a class="moz-txt-link-freetext" href="http://www.internetnews.com/dev-news/article.php/1466231">http://www.internetnews.com/dev-news/article.php/1466231</a> Interesting that MS just put this out since the patch on windows update is dated March 4 2002. So did they sit on it for 6 months? Security Update, March 4, 2002 5191 KB/ Download Time: 1 min This update resolves the "Java Applet Can Redirect Browser Traffic" security vulnerability in the Microsoft virtual machine (Microsoft VM) on Windows XP and Windows Millennium Edition (Windows Me), and is discussed in Microsoft Security Bulletin MS02-013. Download now to prevent a maliciously crafted Java program ("applet") from silently re-routing all browser traffic to the applet's host without the user's knowledge. Read this first ------- St. Louis Unix Users Group - <a class="moz-txt-link-freetext" href="http://www.sluug.org/">http://www.sluug.org/</a> To unsubscrib e from the SLUUG discussion mailing list, send a message to <a class="moz-txt-link-abbreviated" href="mailto:discuss-request@sluug.org">discuss-request@sluug.org</a> with the word 'unsubscribe' as the body . -- Duaine Hechler Piano Tuning & Repair Pump Organ Rebuilding Member of the Piano Technicians Guild (314) 838-5587 <a class="moz-txt-link-abbreviated" href="mailto:dahechler@mlc.net">dahechler@mlc.net</a> </pre> </body> </html>