MS Windows and Office CRITICAL UPDATE Security Bulletin MS02-050 -- New 9-5-02

[FoBoT]

i get so many MS security update emails, they are starting to resemble spam

 

[Harvey]

Originally posted by: FrontlineWarrior
can anyone explain what exactly "identity spoofing" allows people to do and why it is such a big deal?

The headline on News.com Credit card theft feared in Windows flaw. :Q

The flaw could let a Web site with a valid certificate issue a second, invalid one, which could enable unauthorized access to a computer as well as, among other things, the theft of user passwords or credit card numbers.

<Clint Eastwood voice> Are ya feelin' lucky, punk? Well... are ya? </Clint Eastwood voice>

 

[thawolfman]

Thanks

 

[ViRGE]

Originally posted by: FrontlineWarrior
can anyone explain what exactly "identity spoofing" allows people to do and why it is such a big deal?

Frontline, basically, you can falsify who you are; certificates that are signed by the big guys are usually "confirmed" identities, so that the cert that says Amazon.com really was given to Amazon.com. Spoofing allows someone to fake who they are, so when you think you're filling in a CC number on Amazon.com, you're really filling it out for BobsIDTheft.com.

 

[m2kewl]

Originally posted by: FoBoT
i get so many MS security update emails, they are starting to resemble spam

LMAO!!

That's why they all go to the Hotmail accounts

 

[FrontlineWarrior]

Thank you Virge, that makes it very clear!
Harvey, I'm not feeling lucky; I have many important sites I need to visit for graduate school applications!

 

[bunker]

Why does this not show up in Windows Update?

*Edit - Nevermind...not released yet for Win2k

 

[Moonbeam]

It doesn't show up in 98 either unless it was what came through some days back, seems like more than two.

 

[Harvey]

It's too new. I found it while reading News.com (see link in my earlier post). The link to the MS bulletin was there. It will probably be on Windows update by next week.

 

[nord1899]

Question: Is this for IE or would Mozilla be affected by it?

 

[Harvey]

Read my first post. It's not for IE. It's for Windows and various versions of Office.

 

[Freejack2]

Erm correct me if I'm wrong on this but shouldn't I wait until after I install Win XP SP1 on Monday before putting this in?
I seem to remember reading on ntbugtraq that on service packs of the past if you installed a post service pack hotfix before installing the service pack, the hotfix would get wiped.

Edit: I forgot this is an executable file and not a windowsupdate thing so I can just reinstall it after I put SP1 on.
Moo.

 

[SubZeroX]

I downloaded the update for XP and it didn't work. It said "Failed to install catalog files"

Do I have to install SP1 before I install the update?

 

[FlashG]

FYI

The 64 bit version refused to install on my 32 bit XP Pro system. The 32 bit installed smooth as silk. So you can't fvsk it up cause I tried.

 

[bjc112]

Originally posted by: SubZeroX
I downloaded the update for XP and it didn't work. It said "Failed to install catalog files"

Do I have to install SP1 before I install the update?

It doesn't matter.

 

[Mr.IncrediblyBored]

"This update is not designed for your version of Internet Explorer. Press OK to exit"

What the damn hell is this?

 

[Squisher]

The install of the patch Win98se version for some unknown reason hosed my monitor drivers.

NP, just had to reset it, but be forewarned.

 

[Harvey]

I also have Win98 SE. Before I ran the patch, I disabled my AV and closed everything in my system tray, including Zone Alarm, etc. As usual, I had to reboot before the patch took effect. It came right up with no problems.

 

[Geekbabe]

Thank you Harvey, I'm sending out an FYI to every body I know,as usual you're right on top of things !

 

[bmacd]

any idea when the win2k patch is going to be released???

-=bmacd=-

 

[DanFungus]

Originally posted by: bmacd
any idea when the win2k patch is going to be released???

-=bmacd=-

Soon, I hope

 

[Moonbeam]

Harvey, I didn't disable anything, neither zone or virus and it went fine. Probably should have though.

 

[PG]

Why doesn't Microsoft put these patches on windowsupdate like they should?

 

[CraigRT]

shyte... need win2k.

 

[bmacd]

Originally posted by: PG
Why doesn't Microsoft put these patches on windowsupdate like they should?

i believe today was the release date. They should now be available to the public under window's update.

-=bmacd=-