|Salon Just hanging around... |
(Social area, where non-retouching talk is encouraged)
| ||Thread Tools|
Credit card theft feared in Windows flaw
Microsoft has issued a security alert for a group of programs on both the Windows and Macintosh platforms.
Microsoft Windows 98
Microsoft Windows 98 Second Edition
Microsoft Windows Me
Microsoft Windows NT® 4.0
Microsoft Windows NT 4.0, Terminal Server Edition
Microsoft Windows 2000
Microsoft Windows XP
Microsoft Office for Mac
Microsoft Internet Explorer for Mac
Microsoft Outlook Express for Mac
Learn how this flaw could affect you
"Microsoft issued a security alert, calling the flaw "critical." The flaw affects how more than a dozen Microsoft products, including programs for Windows and the Macintosh, handle digital certificates, which are used to certify the authenticity of a Web site or of software code.
The flaw could let a Web site with a valid certificate issue a second, invalid one, which could enable unauthorized access to a computer as well as, among other things, the theft of user passwords or credit card numbers.
"You're on my site and I say, 'Click here to go to Amazon.com.' But I don't really take you to Amazon.com. I can pretend to be Amazon.com and get you to enter in your credit card number," explained Gartner analyst John Pescatore.
Experts were quick to point out that, so far, it is unlikely anyone has taken advantage of the flaw , but they also say that the implications of the flaw could be widespread, since it affects one of Windows' key security-authentication mechanisms, called CryptoAPI, which is also used by many non-Microsoft programs that run on Windows. Analysts also warned that the problem, if exploited, could undermine consumers' confidence in conducting transactions over the Web. "
Download the patches for this flaw
Last edited by CJ Swartz; 09-06-2002 at 02:25 PM.
|Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)|
|Thread||Thread Starter||Forum||Replies||Last Post|
|Gary - I need your help please!||Syd||Hardware||36||02-12-2007 11:43 AM|
|Sounds like good credit card advice||rondon||Salon||0||07-11-2005 10:03 PM|
|Credit card fraud in US||BigAl||Salon||3||02-20-2003 12:08 PM|
|Does someone have your credit card number?||Ed_L||Salon||4||10-14-2002 02:20 PM|
|Digital certificate flaw found in over a dozen programs!||CJ Swartz||Software||10||09-06-2002 11:41 PM|