MS Windows and Office CRITICAL UPDATE Security Bulletin MS02-050 -- New 9-5-02

[Harvey]

Yeah, I know it's about OS's and software, but it's serious stuff. I just figured this forum gets so much traffic, and this info is important enough to get to as many people as possible.

Hope you get it before it gets you.

* * *

Microsoft Security Bulletin MS02-050 -- More info

Certificate Validation Flaw Could Enable Identity Spoofing (Q328145)

Originally posted: September 04, 2002
Updated: September 05, 2002

Summary:

Who should read this bulletin: Customers using Microsoft® Windows®, Office for Mac, Internet Explorer for Mac, or Outlook Express for Mac.

Impact of vulnerability: Identity spoofing.

Maximum Severity Rating: Critical

Recommendation: Administrators should install the patch immediately.

Affected Software:

Microsoft Windows 98
Microsoft Windows 98 Second Edition
Microsoft Windows Me
Microsoft Windows NT® 4.0
Microsoft Windows NT 4.0, Terminal Server Edition
Microsoft Windows 2000
Microsoft Windows XP
Microsoft Office for Mac
Microsoft Internet Explorer for Mac
Microsoft Outlook Express for Mac

Patch availability:

Download locations for this patch:

Microsoft Windows 98/98SE
Windows Me
Windows NT 4.0
Windows NT 4.0 Terminal Server Edition
Windows 2000: (To be released shortly)
Windows XP and Windows XP 64 Bit Edition

Microsoft Office v.X for Mac: (To be released shortly)
Microsoft Office 2001 for Mac: (To be released shortly)
Microsoft Office 98 for the Macintosh (To be released shortly)
Microsoft Internet Explorer for Mac (for OS 8.1 to 9.x) (To be released shortly)
Microsoft Internet Explorer for Mac (for OS X) (To be released shortly)
Microsoft Outlook Express 5.0.5 for Mac (To be released shortly)

Microsoft Office v.X for Mac: (To be released shortly)
Microsoft Office 2001 for Mac: (To be released shortly)
Microsoft Office 98 for the Macintosh (To be released shortly)
Microsoft Internet Explorer for Mac (for OS 8.1 to 9.x) (To be released shortly)
Microsoft Internet Explorer for Mac (for OS X) (To be released shortly)
Microsoft Outlook Express 5.0.5 for Mac (To be released shortly)

 

[bmacd]

thank you

-=bmacd=-

edit: waiting on win2k update

 

[Harvey]

Bump because I care.

 

[Electrode]

Another one?

 

[AzNmAnJLH]

wmp beta 9 is out too

 

[phatcow]

thanks for the info

 

[JellyBaby]

Did the patch for this one make it in XP SP1?

 

[Harvey]

Originally posted by: JellyBaby
Did the patch for this one make it in XP SP1?

I doubt it. The release date on this bulletin is only two days ago. That's why I posted the link to the info and the patches.

 

[Martin]

Does this have the same clause as the WMP update a month or so ago?

 

[SSP]

Thanks!

 

[boi]

ty

 

[mattyrug]

Bump to keep this one at the top!
I know it's stickied over in the OS Forum, but a lot of OT'ers never venture over there!
Thanks,
Matt

 

[Adul]

yeah downloaded it after a clean install

 

[Placer14]

::wonders how such a prestegious company can overlook critical flaw::

MS really surprises me sometimes.

 

[cmdavid]

hmm.. still waiting on win2k ..

 

[n0cmonkey]

Originally posted by: Harvey

Originally posted by: JellyBaby
Did the patch for this one make it in XP SP1?

I doubt it. The release date on this bulletin is only two days ago. That's why I posted the link to the info and the patches.

With Microsoft's track record they have probably known for 6 months.

 

[olds]

How do you know if XP is 32 bit or 64 bit?

 

[bjc112]

Unless your running a server, its almost safe to say your 32 bit...

 

[olds]

TY
They must be getting hammered, page won't open for me.

 

[bjc112]

NP

 

[SSP]

Originally posted by: oldsmoboat
How do you know if XP is 32 bit or 64 bit?

If you don't know that, its 32bit for sure.

 

[olds]

Originally posted by: SSP

Originally posted by: oldsmoboat
How do you know if XP is 32 bit or 64 bit?

If you don't know that, its 32bit for sure.

LOL, you guys keep telling me it's a 2 bit OS. Hence the confusion.

 

[SSP]

Originally posted by: oldsmoboat

Originally posted by: SSP

Originally posted by: oldsmoboat
How do you know if XP is 32 bit or 64 bit?

If you don't know that, its 32bit for sure.

LOL, you guys keep telling me it's a 2 bit OS. Hence the confusion.

That was written by some one with "a bit" too much time.

 

[FrontlineWarrior]

can anyone explain what exactly "identity spoofing" allows people to do and why it is such a big deal?

 

[ElFenix]

thanks!