Gopher holes in IE
Print storyBlast from the past
Posted in Software, 5th June 2002 15:47 GMT
Understand how application security is evolving
Finnish researchers Oy Online have discovered a way to root a windows box using a gopher URL to cause a buffer overflow in the IE Gopher client.
"A test exploit has been successfully used to run arbitrary code without user intervention with various IE versions and systems including IE 5.5 and 6.0," the group says.
A link in a Web page or an e-mail could lure a person to a malicious Gopher server. While these may be a rare bit of Internet fauna these days, malicious or not, it's not actually necessary to use a fully-functioning one. Any program listening on a TCP port with the ability to write a block of data can get the job done.
MS says they're working on a patch but have offered no estimated release date.
For a quick workaround Oy Online recommends simply using a broken proxy for Gopher in IE settings. See their advisory here for simple instructions, and additional details. ®
Solving on-premise email challenges with on-demand services
The business case for application security
Airport insecurity: the case of lost laptops
The best practices guide for application security
Impact of the dramatic increase in devices on the cost to support
Google code cloud punts on-demand embarrassment
Microsoft weighs next-phase in open-source support
iTunes minus the player: hack your Apple beats
Oracle plans cloud strategy