RetouchPRO

Go Back   RetouchPRO > Tools > Software
Register Blogs FAQ Site Nav Search Today's Posts Mark Forums Read


Software Photoshop, Lightroom, Paintshop Pro, Painter, etc., and all their various plugins. Of course, you can also discuss all other programs, as well.

Digital certificate flaw found in over a dozen programs!

Reply
 
Thread Tools
  #1  
Old 09-06-2002, 03:23 PM
CJ Swartz's Avatar
CJ Swartz CJ Swartz is offline
Senior Member
 
Join Date: Sep 2001
Location: Metro Phoenix area, Arizona
Posts: 3,345
Blog Entries: 19
Digital certificate flaw found in over a dozen programs!

Microsoft has issued a security alert for a group of programs on both the Windows and Macintosh platforms.
They include:
Microsoft Windows 98
Microsoft Windows 98 Second Edition
Microsoft Windows Me
Microsoft Windows NT® 4.0
Microsoft Windows NT 4.0, Terminal Server Edition
Microsoft Windows 2000
Microsoft Windows XP
Microsoft Office for Mac
Microsoft Internet Explorer for Mac
Microsoft Outlook Express for Mac

Learn how this flaw could affect you
Excerpt:
"Microsoft issued a security alert, calling the flaw "critical." The flaw affects how more than a dozen Microsoft products, including programs for Windows and the Macintosh, handle digital certificates, which are used to certify the authenticity of a Web site or of software code.

The flaw could let a Web site with a valid certificate issue a second, invalid one, which could enable unauthorized access to a computer as well as, among other things, the theft of user passwords or credit card numbers.

"You're on my site and I say, 'Click here to go to Amazon.com.' But I don't really take you to Amazon.com. I can pretend to be Amazon.com and get you to enter in your credit card number," explained Gartner analyst John Pescatore.

Experts were quick to point out that, so far, it is unlikely anyone has taken advantage of the flaw , but they also say that the implications of the flaw could be widespread, since it affects one of Windows' key security-authentication mechanisms, called CryptoAPI, which is also used by many non-Microsoft programs that run on Windows. Analysts also warned that the problem, if exploited, could undermine consumers' confidence in conducting transactions over the Web. "

Download the patches for this flaw
Reply With Quote top
  #2  
Old 09-06-2002, 03:49 PM
Doug Nelson's Avatar
Doug Nelson Doug Nelson is offline
Janitor
 
Join Date: Aug 2001
Posts: 7,068
Blog Entries: 21
This will be automatically installed by my weekly Windows update, no?
Reply With Quote top
  #3  
Old 09-06-2002, 04:17 PM
CJ Swartz's Avatar
CJ Swartz CJ Swartz is offline
Senior Member
 
Join Date: Sep 2001
Location: Metro Phoenix area, Arizona
Posts: 3,345
Blog Entries: 19
Quote:
This will be automatically installed by my weekly Windows update, no?
I can't answer that -- I tried to find the info on Microsoft's website, but failed. I'm sure that your weekly update will inform you whether it includes this patch, tho.

Microsoft's FAQ says:

"You just need to apply the patch for the version of Windows you’re using." No patch is available yet for Windows 2000, or for MAC programs affected -- "will be available shortly".

NOTE: After I installed the patch, I found that a soft boot didn't work, so had to hard boot to get system working.
Reply With Quote top
  #4  
Old 09-06-2002, 04:48 PM
Doug Nelson's Avatar
Doug Nelson Doug Nelson is offline
Janitor
 
Join Date: Aug 2001
Posts: 7,068
Blog Entries: 21
I use Win2000, so no automatic update for me.

And thanks for bringing this to our attention.
Reply With Quote top
  #5  
Old 09-06-2002, 04:53 PM
DJ Dubovsky's Avatar
DJ Dubovsky DJ Dubovsky is offline
Senior Member
 
Join Date: Aug 2001
Location: Upper Penninsula of Michigan
Posts: 1,659
I have XP with the auto updates. Will this be included do you think?
DJ
Reply With Quote top
  #6  
Old 09-06-2002, 04:56 PM
Doug Nelson's Avatar
Doug Nelson Doug Nelson is offline
Janitor
 
Join Date: Aug 2001
Posts: 7,068
Blog Entries: 21
I hear the XP Service Pack 1 will be released Monday. I wonder if it will be in there?
Reply With Quote top
  #7  
Old 09-06-2002, 05:05 PM
CJ Swartz's Avatar
CJ Swartz CJ Swartz is offline
Senior Member
 
Join Date: Sep 2001
Location: Metro Phoenix area, Arizona
Posts: 3,345
Blog Entries: 19
DJ -- I don't know since I use Win98Se. The XP update area won't speak to me since they know I'm "beneath their level".
Reply With Quote top
  #8  
Old 09-06-2002, 05:50 PM
angue's Avatar
angue angue is offline
Senior Member
 
Join Date: Jul 2002
Location: New York
Posts: 176
I would go there right now and not wait for my computer to find the update.

Here's a paranoid question:
Since the flaw takes you to another site other than where you wanted to go, how do you know that you are really at Microsoft's site downloading the "patch'?

Reply With Quote top
  #9  
Old 09-06-2002, 08:32 PM
JBCaffrey's Avatar
JBCaffrey JBCaffrey is offline
Member
 
Join Date: Apr 2002
Location: Maryland
Posts: 60
Quote:
Originally posted by DJ Dubovsky
I have XP with the auto updates. Will this be included do you think?
DJ
I have XP and received this fix in an automatic update yesterday (9/5).

Jim
Reply With Quote top
  #10  
Old 09-06-2002, 09:54 PM
Ed_L's Avatar
Ed_L Ed_L is offline
Senior Member
 
Join Date: Aug 2001
Location: northwest Indiana, about 45 minutes from Chicago, IL
Posts: 2,824
Thanks very much for passing that on CJ. I just downloaded the patch, just in case. My wife had her card stolen not long ago. I think there was $35.00 charged to it from a porno site. Our bank just sent out statements that they would no longer cover that type of loss.

Ed
Reply With Quote top
Reply

  RetouchPRO > Tools > Software


Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Free Action Set for Digital Noise Removal gmitchel Photo Restoration 5 11-17-2013 08:20 AM
Credit card theft feared in Windows flaw CJ Swartz Salon 0 09-06-2002 02:50 PM


All times are GMT -6. The time now is 04:51 PM.


Powered by vBulletin® Version 3.8.4
Copyright ©2000 - 2017, Jelsoft Enterprises Ltd.
SEO by vBSEO ©2011, Crawlability, Inc.
Copyright © 2016 Doug Nelson. All Rights Reserved