Microsoft Security Bulletin MS02-068: Cumulative Patch for Internet Explorer (324929)

-----BEGIN PGP SIGNED MESSAGE----- - ---------------------------------------------------------------------- Title: Cumulative Patch for Internet Explorer 324929 Released: 04 December 2002 Revised: 06 December 2002 version 2.0 Software: Microsoftr Internet Explorer Impact: Allow an attacker to...

CVE-2001-0904

Internet Explorer 5.5 and 6 with the Q312461 MS01-055 patch modifies the HTTPUSERAGENT UserAgent information that indicates that the patch has been installed, which could allow remote malicious web sites to more easily identify and exploit vulnerable clients...

uucp --config patch -- not sufficient

Problem: uucp patch from RedHat possibly others prevents original exploit, but not variations. Severity: Potential for local root on some distributions, uucp.uucp on others. https://bugzilla.redhat.com/bugzilla/showbug.cgi?id=54466 I had seen this report some time ago, and thought: "Good. They've...

MS patch Q292108 opens a vulnerability

Hi, Last MS patch Q290108 released with the bulletin MS01-020 opens a new vulnerability. A tricked EML file can confuse the user displaying him a fake downlodaded file name. Executable files can be disguised as other supposedly inocent files text, sound or images. Demo is available in :...