RE: Download Managers

From: Leonard.Ong@nokia.com
Date: 02/28/03 

Date: Fri, 28 Feb 2003 15:31:00 +0800
From: <Leonard.Ong@nokia.com>
To: <vlad@zoomstats.org>, <L.Pholi@secureinteractive.com>

Hello,

Getright, like other download manager may include spyware, which only removable after registering it. During the time between the program installed and the actual registration period (ad removal), it is enough to pose a security risk.

Let see, you have downloaded the shareware and installed as a trial. The spyware would be installed at this point of time, and may or may not be removed. it is depending on the vendor, if they are honestly providing removal instruction, and/or if the spyware/trojan has done anything harmful before removed.

Leonard

-----Original Message-----
From: ext Vlad Tsyrklevich [mailto:vlad@zoomstats.org]
Sent: Thursday, February 27, 2003 8:27 AM
To: Leon Pholi
Cc: security-basics@securityfocus.com
Subject: Re: Download Managers

Leon Pholi writes:

> Hi,

Hi.

> Just wondering on thoughts about download managers- do they pose are
> security risk? Any known to be trojaned? The one I use is GetRight, does
> anyone know if this one has known security issues?

I've heard good things about GetRight just so you know :-). I doubt it has
any remote hole other then perhaps a buffer overflow in the length of a file
name but I highly doubt that. The only security hole it might have is an
accidental one (and this applies to all programs) but again as I said, I
highly doubt it has one, I highly doubt few of the "big" (read: commonly
used) have security holes/trojans because users would notice something and
it would be found.

 -Vlad

 --
 -Vlad Tsyrklevich

Relevant Pages

  • Re: kerio blocking problems
    ... >> to use a proxy would assist with certain ... >> blocking problems (in particular with getright). ... >> used to the same effect but without affecting the security. ...
    (comp.security.firewalls)
  • Re: Graphics not displaying correctly...HELP
    ... If you have never had GetRight (download manager) installed, ... the registry problem that I suggested. ... > Summary and those kinds of pages I have to login to. ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Re: Download Manager
    ... "Download Manager cannot download the file you requested. ... solving this through Security Center on the control panel without success. ... By the look of things there may an entry in your Hosts file. ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Is there any way to get a CD for the trial versions.?
    ... pick Flashget or GetRight from the list at the link below. ... Okay if I knew what a download manager was I might be able to figure out what I need to do. ... Computer wizard I am not! ...
    (microsoft.public.office.misc)
  • RE: Download Managers
    ... I not aware of any security issues associated with d/l managers other ... According to http://www.tom-cat.com/spybase/, Getright ... v4.5+ is clear of any spyware although previous versions contained it. ...
    (Security-Basics)