| ActiveMac | Anonymous | Create a User | Reviews | News | Forums | Advertise |
|
|
|
User Controls |
|
New User |
|
Login |
|
Edit/View My Profile |
|
|
|
|
|
|
|
ActiveMac |
|
Articles |
|
Forums |
|
Links |
|
News |
|
News Search |
|
Reviews |
|
|
|
|
|
|
|
News Centers |
|
Windows/Microsoft |
|
DVD |
|
ActiveHardware |
|
Xbox |
|
MaINTosh |
|
News Search |
|
|
|
|
|
|
|
ANet Chats |
|
The Lobby |
|
Special Events Room |
|
Developer's Lounge |
|
XBox Chat |
|
|
|
|
|
|
|
FAQ's |
|
Windows 98/98 SE |
|
Windows 2000 |
|
Windows Me |
|
Windows "Whistler" XP |
|
Windows CE |
|
Internet Explorer 6 |
|
Internet Explorer 5 |
|
Xbox |
|
DirectX |
|
DVD's |
|
|
|
|
|
|
|
TopTechTips |
|
Registry Tips |
|
Windows 95/98 |
|
Windows 2000 |
|
Internet Explorer 4 |
|
Internet Explorer 5 |
|
Windows NT Tips |
|
Program Tips |
|
Easter Eggs |
|
Hardware |
|
DVD |
|
|
|
|
|
|
|
Latest Reviews |
|
Applications |
|
Microsoft Windows XP Professional |
|
Norton SystemWorks 2002 |
|
|
|
Hardware |
|
Intel Personal Audio Player 3000 |
|
Microsoft Wireless IntelliMouse Explorer |
|
|
|
|
|
|
|
Site News/Info |
|
About This Site |
|
Affiliates |
|
ANet Forums |
|
Contact Us |
|
Default Home Page |
|
Link To Us |
|
Links |
|
Member Pages |
|
Site Search |
|
Awards |
|
|
|
|
|
|
|
Credits |
 |
Microsoft Security Bulletin MS01-055: Cookie Data in IE Can Be Exposed or Altered Through Script Injection | |
|
||
| Time: 00:05 EST/05:05 GMT | News Source: Microsoft TechNet Security | Posted By: Matthew Sabean | ||
|
Web sites use cookies as a way to store information on a user's local system. Most often, this information is used for customizing and retaining a site's setting for a user across multiple sessions. By design each site should maintain its own cookies on a user's machine and be able to access only those cookies. A vulnerability exists because it is possible to craft a URL that can allow sites to gain unauthorized access to user's cookies and potentially modify the values contained in them. Because some web sites store sensitive information in a user's cookies, it is also possible that personal information could be exposed. Microsoft is preparing a patch for this issue, but in the meantime customers can protect their systems by disabling active scripting. (The FAQ provides step-by-step instructions for doing this). This will protect against both the web-hosted and the mail-borne variants discussed above. When the patch is complete, Microsoft will re-release this bulletin and provide details on obtaining and using it. | ||
|
Write Comment
Return to News |
Displaying 1 through 25 of 444 Last | Next |
The time now is
11:39:11 PM
ET.
Any comment problems? E-mail us |
| #1 By 2332 (129.21.145.80) at 11/9/2001 4:02:42 PM |
|
LOL... how quickly people forget the many bugs in Netscape that both exposed cookies and EVERY OTHER FILE ON YOUR HARDDRIVE a year or so ago.
Selective memory, I take it? |
| #2 By 2332 (129.21.145.80) at 11/12/2001 12:06:33 AM |
|
Actually, #4 and #8, I was referring to #2's comment "but IE's implementation is simply pathetic and insecure."
Obviously, your hatred of all things Microsoft has blinded you to my point. I was trying to point out the fact that NO software is perfect, and that it's not JUST Microsoft that makes mistakes. Was I in any way trying to suggest that this wasn't a serious hole? No. That was you ASSumption, not mine. Oh, and #4, last time I checked Internet Explorer and Netscape were TWO DIFFERENT BROWSERS. How exactly do you "re-inject" a hole from one browser into another browser? That technical reason IE has a hole and the technical reason Netscape has a hole are DIFFERENT. Sigh... just trying to point out hypocrisy when I see it. |
| #3 By 1845 (65.0.207.79) at 11/12/2001 12:11:44 AM |
| #8 If you're so worried about banking passwords being exposed, perhaps you should look at the website foolish enough to store such sensitive info in a cookie to begin with. I'm sure sunglasses would back me up on that point. I'm not sure I really care if someone steals my ActiveWin account (no offense), but my bank account is a whole different matter. |
|
Write Comment
Return to News |
Displaying 1 through 25 of 444 Last | Next |
The time now is
11:39:11 PM
ET.
Any comment problems? E-mail us |
