Re: Serious security problem
- To: "jeanne" <j*@aol.com>, "Jdierick" <J*@aol.com>, "Janet Macunovich" <w*@aol.com>, "Amy & John" <j*@aol.com>, <perennials@mallorn.com>
- Subject: Re: Serious security problem
- From: "* L* <h*@mindspring.com>
- Date: Wed, 29 Jul 1998 14:19:39 -0400
This may be of value.
Hal Lanktree
Rochester, Michigan
-----Original Message-----
From: Christopher P. Lindsey <lindsey@lorien.mallorn.com>
To: perennials@lorien.mallorn.com <perennials@lorien.mallorn.com>
Date: Monday, July 27, 1998 11:45 PM
Subject: Serious security problem
>Hi folks,
>
> Normally I don't post security-related information to such a
> wide forum, but I feel that this is serious and important
> enough to warrant some dedicated space on the list.
>
> For those of you running Microsoft Outlook Express (v4.72.2106.4
> & v4.72.3110.1) or Netscape Mail (v4.05 & 4.5b1), an extremely
> serious security problem has been detected in your mail programs.
>
> It has been discovered that messages can be configured by crackers
> to run programs on user's systems via attachments. The attachment
> doesn't even have to be opened -- simply downloading it is enough to
> cause problems. Through this exploit virii can be installed, files can
> be deleted from your system, or your passwords can be sent to another
> site.
>
> Netscape has refused to release a patch, but says that version
> 4.06 of their Communicator suite will solve the problem. If you
> use Netscape Mail, look for a new version in the next few weeks.
> Upgrade as soon as it's available.
>
> Microsoft currently has a patch available for Outlook Express at
>
> http://www.microsoft.com/security/bulletins/ms98-008.htm
>
> More information about the exploit is available at
>
> http://ntbugtraq.ntadvice.com/archives/default.asp
>
> Please, pass this information on to friends and acquaintances.
> This is a very serious problem and needs to be remedied immediately.
> Feel free to send this message around, but I ask that you
> keep it in its entirety for continuity's sake.
>
>Thanks,
>
>Chris
>
>----------------------------------------------------------------------
>Christopher Lindsey
>President/CEO, Mallorn Computing
>
>---------------------------------------------------------------------
>To sign-off this list, send email to majordomo@mallorn.com with the
>message text UNSUBSCRIBE PERENNIALS
---------------------------------------------------------------------
To sign-off this list, send email to majordomo@mallorn.com with the
message text UNSUBSCRIBE PERENNIALS