Another Really Fucking Bad Bug in M$ Idiot Exploiter...

GEC: Discuss gaming, computers and electronics and venture into the bizarre world of STGODs.

Moderator: Thanas

Post Reply
User avatar
Einhander Sn0m4n
Insane Railgunner
Posts: 18630
Joined: 2002-10-01 05:51am
Location: Louisiana... or Dagobah. You know, where Yoda lives.

Another Really Fucking Bad Bug in M$ Idiot Exploiter...

Post by Einhander Sn0m4n »

http://slashdot.org/articles/04/01/28/2 ... 90&tid=201

http://www.infoworld.com/article/04/01/ ... ole_1.html
"Infoworld is reporting another new security hole that allows links to executable files to appear to be any other type of file, such as text or pdf. When combined with a previously reported spoofing bug, that Microsoft still hasn't fixed, Infoworld claims the result could be 'devastating'"
Time for the Solution:

Image
Image Image
User avatar
Faram
Bastard Operator from Hell
Posts: 5270
Joined: 2002-07-04 07:39am
Location: Fighting Polarbears

Post by Faram »

Hmm this is bad.

www.secunia.com

Has the proof of consepts and other info.

Damnit been buissy fixing da latest Worm at work and missed this one...

More work for me I guess.
[img=right]http://hem.bredband.net/b217293/warsaban.gif[/img]

"Either God wants to abolish evil, and cannot; or he can, but does not want to. ... If he wants to, but cannot, he is impotent. If he can, but does not want to, he is wicked. ... If, as they say, God can abolish evil, and God really wants to do it, why is there evil in the world?" -Epicurus


Fear is the mother of all gods.

Nature does all things spontaneously, by herself, without the meddling of the gods. -Lucretius
User avatar
Einhander Sn0m4n
Insane Railgunner
Posts: 18630
Joined: 2002-10-01 05:51am
Location: Louisiana... or Dagobah. You know, where Yoda lives.

Post by Einhander Sn0m4n »

Tested it here, the Sploit 'Works'. I had to disable one of my firewall rules to let IE even see the Net. Now I have another reason to keep that particular firewall rule... :roll:
Image Image
User avatar
Crayz9000
Sith Apprentice
Posts: 7329
Joined: 2002-07-03 06:39pm
Location: Improbably superpositioned
Contact:

Post by Crayz9000 »

Ein, you keep linking to the Firebird ProJEct page. You want the ProDUct page, which has the downloads.

The Project page is for developers.
A Tribute to Stupidity: The Robert Scott Anderson Archive (currently offline)
John Hansen - Slightly Insane Bounty Hunter - ASVS Vets' Assoc. Class of 2000
HAB Cryptanalyst | WG - Intergalactic Alliance and Spoof Author | BotM | Cybertron | SCEF
User avatar
Spanky The Dolphin
Mammy Two-Shoes
Posts: 30776
Joined: 2002-07-05 05:45pm
Location: Reykjavík, Iceland (not really)

Post by Spanky The Dolphin »

What's the difference between firebird and regular flavour Mozilla?
Image
I believe in a sign of Zeta.

[BOTM|WG|JL|Mecha Maniacs|Pax Cybertronia|Veteran of the Psychic Wars|Eva Expert]

"And besides, who cares if a monster destroys Australia?"
User avatar
Crayz9000
Sith Apprentice
Posts: 7329
Joined: 2002-07-03 06:39pm
Location: Improbably superpositioned
Contact:

Post by Crayz9000 »

Spanky The Dolphin wrote:What's the difference between firebird and regular flavour Mozilla?
Firebird is just the browser. Mozilla is everything in one package and some people complain that it runs slowly, although I really don't see anything to those claims.
A Tribute to Stupidity: The Robert Scott Anderson Archive (currently offline)
John Hansen - Slightly Insane Bounty Hunter - ASVS Vets' Assoc. Class of 2000
HAB Cryptanalyst | WG - Intergalactic Alliance and Spoof Author | BotM | Cybertron | SCEF
User avatar
Einhander Sn0m4n
Insane Railgunner
Posts: 18630
Joined: 2002-10-01 05:51am
Location: Louisiana... or Dagobah. You know, where Yoda lives.

Post by Einhander Sn0m4n »

Crayz9000 wrote:
Spanky The Dolphin wrote:What's the difference between firebird and regular flavour Mozilla?
Firebird is just the browser. Mozilla is everything in one package and some people complain that it runs slowly, although I really don't see anything to those claims.
I use Mozzy Full Version, and there's no 'slowness' here. In fact, I browsed the net a bit with IE before I did the Sploit Test, and IE is STAGGERINGLY SLOOOOWWWWW compared to Mozzy! :lol: :lol: :lol:
Image Image
User avatar
Faram
Bastard Operator from Hell
Posts: 5270
Joined: 2002-07-04 07:39am
Location: Fighting Polarbears

Post by Faram »

Doing like Einy.

A brand new FW rule:

Image

And Ein before youn ask. I know that the DHCP rule is messed up but I use a static IP adress so they are redudant anyways just have them there for a handy reference :)
Last edited by Faram on 2004-01-28 05:42pm, edited 1 time in total.
[img=right]http://hem.bredband.net/b217293/warsaban.gif[/img]

"Either God wants to abolish evil, and cannot; or he can, but does not want to. ... If he wants to, but cannot, he is impotent. If he can, but does not want to, he is wicked. ... If, as they say, God can abolish evil, and God really wants to do it, why is there evil in the world?" -Epicurus


Fear is the mother of all gods.

Nature does all things spontaneously, by herself, without the meddling of the gods. -Lucretius
User avatar
Einhander Sn0m4n
Insane Railgunner
Posts: 18630
Joined: 2002-10-01 05:51am
Location: Louisiana... or Dagobah. You know, where Yoda lives.

Post by Einhander Sn0m4n »

Faram wrote:Doing like Einy.

A brand new FW rule:

Image
I love being the BOFH of my household...
Image Image
User avatar
Faram
Bastard Operator from Hell
Posts: 5270
Joined: 2002-07-04 07:39am
Location: Fighting Polarbears

Post by Faram »

Einhander Sn0m4n wrote:I love being the BOFH of my household...
I am the BOFH At my work, but I use winblows so I cheat ;)
[img=right]http://hem.bredband.net/b217293/warsaban.gif[/img]

"Either God wants to abolish evil, and cannot; or he can, but does not want to. ... If he wants to, but cannot, he is impotent. If he can, but does not want to, he is wicked. ... If, as they say, God can abolish evil, and God really wants to do it, why is there evil in the world?" -Epicurus


Fear is the mother of all gods.

Nature does all things spontaneously, by herself, without the meddling of the gods. -Lucretius
User avatar
Einhander Sn0m4n
Insane Railgunner
Posts: 18630
Joined: 2002-10-01 05:51am
Location: Louisiana... or Dagobah. You know, where Yoda lives.

Post by Einhander Sn0m4n »

Faram wrote:
Einhander Sn0m4n wrote:I love being the BOFH of my household...
I am the BOFH At my work, but I use winblows so I cheat ;)
Ah, well I use Windows too so I'm also cheat...
Image Image
User avatar
Chardok
GET THE FUCK OFF MY OBSTACLE!
Posts: 8488
Joined: 2003-08-12 09:49am
Location: San Antonio

Post by Chardok »

I Use mozzyfull, and I daresay that if there's any slowdown I don't notice it. In fact, My RealOne player likes Mozilla better than IE, Especially when viewing streaming porn.

<FAPFAPFAPFAPFAPFAPFAPFAP>
Image
User avatar
Faram
Bastard Operator from Hell
Posts: 5270
Joined: 2002-07-04 07:39am
Location: Fighting Polarbears

Post by Faram »

Chardok wrote:I Use mozzyfull, and I daresay that if there's any slowdown I don't notice it. In fact, My RealOne player likes Mozilla better than IE, Especially when viewing streaming porn.

<FAPFAPFAPFAPFAPFAPFAPFAP>
Heaten!

Anything from Real is BAD and must burn.
[img=right]http://hem.bredband.net/b217293/warsaban.gif[/img]

"Either God wants to abolish evil, and cannot; or he can, but does not want to. ... If he wants to, but cannot, he is impotent. If he can, but does not want to, he is wicked. ... If, as they say, God can abolish evil, and God really wants to do it, why is there evil in the world?" -Epicurus


Fear is the mother of all gods.

Nature does all things spontaneously, by herself, without the meddling of the gods. -Lucretius
User avatar
Chardok
GET THE FUCK OFF MY OBSTACLE!
Posts: 8488
Joined: 2003-08-12 09:49am
Location: San Antonio

Post by Chardok »

Evil Sweedish FJORD-WORSHIPPER! I DEMAND YOU TAKE BACK YOUR HERETIC SPEAK!!! IMMEDIATELY, IF NOT SOONER!


No seriously, why is RealONE player bad? Most porn sites require it. My favorite one does, anywa. For everything else it's pure winamp 5.1 (YEAH, I SAID 5.1 BITCHES, MY COMP CAN HANG!! WHAT?! WHAT?!) :wink:

(By the way, Faram, I'm not sure how brash that came across so if the fjord-worshipper thing was over the line, I'm sorry, Was only a joke *Gives Austin Powers-style thumbs up*)
Image
User avatar
Faram
Bastard Operator from Hell
Posts: 5270
Joined: 2002-07-04 07:39am
Location: Fighting Polarbears

Post by Faram »

Chardok wrote:Evil Sweedish FJORD-WORSHIPPER! I DEMAND YOU TAKE BACK YOUR HERETIC SPEAK!!! IMMEDIATELY, IF NOT SOONER!


No seriously, why is RealONE player bad? Most porn sites require it. My favorite one does, anywa. For everything else it's pure winamp 5.1 (YEAH, I SAID 5.1 BITCHES, MY COMP CAN HANG!! WHAT?! WHAT?!) :wink:

(By the way, Faram, I'm not sure how brash that came across so if the fjord-worshipper thing was over the line, I'm sorry, Was only a joke *Gives Austin Powers-style thumbs up*)
Realplayer Staels all fuckin assosiations for media files.

I hate the controlcenter or what it's name is in the system tray! It's just plain fucking bad.

And try to find the free player at real's site! It's close to inpossible.

I Hate those fuckers.
[img=right]http://hem.bredband.net/b217293/warsaban.gif[/img]

"Either God wants to abolish evil, and cannot; or he can, but does not want to. ... If he wants to, but cannot, he is impotent. If he can, but does not want to, he is wicked. ... If, as they say, God can abolish evil, and God really wants to do it, why is there evil in the world?" -Epicurus


Fear is the mother of all gods.

Nature does all things spontaneously, by herself, without the meddling of the gods. -Lucretius
User avatar
Crayz9000
Sith Apprentice
Posts: 7329
Joined: 2002-07-03 06:39pm
Location: Improbably superpositioned
Contact:

Post by Crayz9000 »

Bah, this is why I run Linux. :twisted:
A Tribute to Stupidity: The Robert Scott Anderson Archive (currently offline)
John Hansen - Slightly Insane Bounty Hunter - ASVS Vets' Assoc. Class of 2000
HAB Cryptanalyst | WG - Intergalactic Alliance and Spoof Author | BotM | Cybertron | SCEF
User avatar
Vertigo1
Defender of the Night
Posts: 4720
Joined: 2002-08-12 12:47am
Location: Tennessee, USA
Contact:

Post by Vertigo1 »

Two words for ya Faram. Real Alternative. :)
"I once asked Rebecca to sing Happy Birthday to me during sex. That was funny, especially since I timed my thrusts to sync up with the words. And yes, it was my birthday." - Darth Wong

Leader of the SD.Net Gargoyle Clan | Spacebattles Firstone | Twitter
Post Reply