RE: Mail from MSN Messenger

From: Rod Trent (rodtrent_at_yahoo.com)
Date: 08/20/03

  • Next message: Chris Gianelloni: "RE: DCOM patch + Exchange"
    To: <focus-ms@securityfocus.com>
    Date: Tue, 19 Aug 2003 21:22:02 -0400
    
    

    NWFusion reported on this today:

    http://www.nwfusion.com/news/2003/0819microtolo.html

    Seems like it might be legit...

    -----Original Message-----
    From: Michael Schneider [mailto:MSchneider@n2bb.com]
    Sent: Tuesday, August 19, 2003 10:54 AM
    To: meowbaby; focus-ms@securityfocus.com
    Subject: RE: Mail from MSN Messenger

    I've received 6 of these messages so far, the first one seemed legit to me
    but after receiving 6 of them I am starting to become a little concerned
    about what this is.

    Michael Schneider
    Systems Administrator
    N2 Broadband
     
    678.812.6337 direct
    404.542.8952 mobile
    678.812.6437 fax
    www.n2broadband.com
     

     
     

    -----Original Message-----
    From: meowbaby [mailto:8kajkrui02@sneakemail.com]
    Sent: Tuesday, August 19, 2003 7:39 AM
    To: focus-ms@securityfocus.com
    Subject: Mail from MSN Messenger

    Hard to tell if this email (below) is legitimate, since there's no way to
    verify, no PGP signature, just a web site link posted. There is no mention
    of this in another email I receive from MS on a weekly basis, which arrived
    last night. Given the number of viruses that purport to be from MS with
    files attached, I'd be extremely leery of reading this email in anything
    that does HTML

    full headers of the email:

    ________________________________

    From: ".NET Messenger Service Staff" <dot_net_msgr_svc@msgr.hotmail.com>

    Subject: Important Security Update for the .NET Messenger Service

    Date: Mon 18, Aug 2003

    Mime-Version: 1.0

    Content-Type: text/html; Charset=iso-8859-1

    Content-Transfer-Encoding: 8bit

    <pre>

    ATTENTION: IMMEDIATE ACTION REQUIRED FOR MSN AND WINDOWS MESSENGER USERS.

    You are receiving this e-mail because you are a MSN Messenger or Windows

    Messenger Service user.

    As part of Microsoft's Trustworthy Computing initiative, Microsoft is

    updating the .NET Messenger Service and providing you with an important

    MSN Messenger or Windows Messenger security update.

    If you are using MSN Messenger 5.0, Windows Messenger 4.7.2000, or MSN

    Messenger for Mac 3.5, or any versions higher than these, you do NOT need

    this security update. To find out which version you have, select the

    'Help' menu in Messenger, then select 'About'. If you are using an older

    version, or are not sure, please visit:

    http://messenger.msn.com/Help/Upgrades.aspx

    for an update.

    NOTICE: If you are not using an updated version, you will be unable to

    continue using your MSN Messenger or Windows Messenger Service.

    Thank you for helping Microsoft further its commitment to helping you

    protect your privacy and security online.

    You can view the .NET Messenger Statement of Privacy at:

    http://messenger.msn.com/Help/Privacy.aspx

    and the .NET Messenger Service Terms of Use and Notices at:

    http://messenger.msn.com/Help/Terms.aspx.

    </pre>

    ------------------------------------------------------------------------

    ---
    KaVaDo provides the first and only integrated Web application scanner and
    firewall security suite that prevent Web applications attacks, the most
    common form of online exploitation. Download a FREE whitepaper on Security
    Policy Automation for Web Applications. 
    http://www.securityfocus.com/sponsor/KaVaDo_focus-ms_030818
    ------------------------------------------------------------------------
    ---
    ---------------------------------------------------------------------------
    KaVaDo provides the first and only integrated Web application scanner and
    firewall security suite that prevent Web applications attacks, the most
    common form of online exploitation. Download a FREE whitepaper on Security
    Policy Automation for Web Applications. 
    http://www.securityfocus.com/sponsor/KaVaDo_focus-ms_030818
    ---------------------------------------------------------------------------
    ---------------------------------------------------------------------------
    KaVaDo provides the first and only integrated Web application scanner and 
    firewall security suite that prevent Web applications attacks, the most 
    common form of online exploitation. Download a FREE whitepaper on Security Policy Automation for Web Applications. 
    http://www.securityfocus.com/sponsor/KaVaDo_focus-ms_030818 
    ---------------------------------------------------------------------------
    

  • Next message: Chris Gianelloni: "RE: DCOM patch + Exchange"

    Relevant Pages

    • RE: Mail from MSN Messenger
      ... Important Security Update for the .NET Messenger Service ... Security Policy Automation for Web Applications. ...
      (Focus-Microsoft)
    • Re: Windows XP Professional "Error Code: 0x81000370"
      ... You may need to re/add Messenger to the allowed list of programs in your firewall ... Clear your IE cache and cookies -- open Internet Explorer, click the Tools menu, then ... Check your IE Security settings -- open Internet Explorer, click the Tools menu, then ... Uninstalled MSN Messenger 6.2 and Reinstalled MSN Messenger 6.2 ...
      (microsoft.public.windowsxp.messenger)
    • [NT] MSN Messenger OCX Buffer Overflow
      ... The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com ... Messenger OCX. ... Microsoft signed OCX. ... accept the pop-up "Install Now" signed by Microsoft. ...
      (Securiteam)
    • Re: windows security bulletin
      ... > Important windows security bulletin,buffer overrun in messenger ... messenger service, as some people recommend, only hides the symptom, ... Messenger Service of Windows ... Disabling the messenger ...
      (microsoft.public.windowsxp.general)
    • Re: Pop up Messages
      ... Are you trying to give people a false sense of security by ... advice, however well-intended, was to turn off the warnings. ... to completely get rid of messenger popups, ... >>messenger service are misinformed at best. ...
      (microsoft.public.windowsxp.security_admin)