Re: IE https certificate attack

From: e-matters GmbH - Securityteam (security@e-matters.de)
Date: 12/24/01 

From: "e-matters GmbH - Securityteam" <security@e-matters.de>
To: "Dimitris Giannitsaros" <daremon@ath.forthnet.gr>, <bugtraq@securityfocus.com>
Date: Mon, 24 Dec 2001 21:44:56 +0100

> I use IE 5.00.3315.1000 / Win2k Pro SP2 and no other patches. I am not
> vulnerable: IE correctly displays the warning ("Security Alert") saying
that

Yeah, it seems that people with IE 5.00 that have not installed any of the
MS "security"
patches are not vulnerable. But latest patched IE 5.00 are vulnerable.

Stefan Esser

Relevant Pages

  • Re: [PATCH 0/19] desc_struct integration
    ... the x86 tree? ... It's due to one of the 25 patches from you today. ... And watch out for compiler warnings as well: ... yeah, I could have done a separate one, to avoid it. ...
    (Linux-Kernel)
  • Re: [PATCH 0/19] desc_struct integration
    ... to the x86 tree? ... It's due to one of the 25 patches from you today. ... And watch out for compiler warnings as well: ... But yeah, I could have done a separate one, to avoid it. ...
    (Linux-Kernel)
  • Re: [PATCH 00/30] C/R OpenVZ/Virtuozzo style
    ... patches for a bit and don't want to jump ship on a whim. ... The format is certainly still in a huge amount of flux. ... Yeah, we've certainly argued plenty about this one amongst ourselves. ... I'm especially worried with respect to the shared objects right ...
    (Linux-Kernel)
  • Re: Decisions, decisions?
    ... PPS no patches no gum no nothing. ... Yeah same here, I think the rest of us SFB2's did the same," ...
    (alt.support.stop-smoking)
  • Re: Decisions, decisions?
    ... PPS no patches no gum no nothing. ... Yeah same here, I think the rest of us SFB2's did the same," ...
    (alt.support.stop-smoking)