Re: exploit fix breaks CDO access

From: N. Miller (duh_at_blackhole.aosake.net)
Date: 07/04/04 

Date: Sun, 4 Jul 2004 08:04:48 -0700

In article <256f901c4618c$e17c6c40$a601280a@phx.gbl>, Biff says...

> Just an FYI:

> I followed a suggested fix that is suppossed to eliminate
> the current "spoofing" exploit and discovered that the fix
> breaks access to these newsgroups if you use the CDO
> interface. (web access)

> The fix calls for setting "Navigate sub-frames across
> different domains" to disabled. It seems that these MS ngs
> use that functionality !!!!!!! Go figure !!!!!!

> With that setting disabled you can open the site but you
> can't open or read any of the posts. A security fix that
> won't let you access a security forum. How's that for
> irony ???

Do you trust the MSFT site? Put it in the "Trusted sites" zone, and loosen
the permissions in that zone. 

-- 
Norman
~Win dain a lotica, En vai tu ri, Si lo ta
~Fin dein a loluca, En dragu a sei lain
~Vi fa-ru les shutai am, En riga-lint