Please pass along this security write up-
thanks for all your work Michael...
james
-----Original Message-----
From: Michael Dinowitz [mailto:[EMAIL PROTECTED]]
Sent: Friday, April 14, 2000 11:04 AM
To: [EMAIL PROTECTED]
Subject: Re: WAY OT: backdoor affecting IIS and FP 98 extensions
If anyone wants, I've got a write-up on this from RFP that goes into ALL the
details. I'll send it over off list.
> I know that this is way off topic, but I think that it's important for
> everyone to know about this hack, since it affects IIS, NT's default
> webserver. There is a dll included in IIS and in FrontPage 98 Extensions
> that includes a backdoor password to the server. And of course, the
> password is something about Netscape being "weenies." People will be
trying
> to use this asap to take advantage of unknowing server admins, so if any
of
> you think you could be affected, take a look at these articles.
>
> Slashdot has a copy of the text from the Wall Street Journal article (you
> have to *pay* to subscribe to WSJ online news).
> http://slashdot.org/articles/00/04/14/0619206.shtml
> There is also an article at ZDNet
>
http://www.zdnet.com/zdnn/stories/news/0,4586,2543490,00.html?&_ref=12652509
18
>
> It's also been covered at Hacker News Network. It hasn't been covered on
> 2600 yet, but Hacker News Network and Slashdot are frequented by hacker
> types, including the malicious ones. The word is out, but there is a
remedy
> listed in the articles.
> --------------------------------------------------------------------------
----
> Archives: http://www.eGroups.com/list/cf-talk
> To Unsubscribe visit
http://www.houseoffusion.com/index.cfm?sidebar=lists&body=lists/cf_talk or
send a message to [EMAIL PROTECTED] with 'unsubscribe' in
the body.
>
----------------------------------------------------------------------------
--
Archives: http://www.eGroups.com/list/cf-talk
To Unsubscribe visit
http://www.houseoffusion.com/index.cfm?sidebar=lists&body=lists/cf_talk or
send a message to [EMAIL PROTECTED] with 'unsubscribe' in
the body.
------------------------------------------------------------------------------
Archives: http://www.eGroups.com/list/cf-talk
To Unsubscribe visit
http://www.houseoffusion.com/index.cfm?sidebar=lists&body=lists/cf_talk or send a
message to [EMAIL PROTECTED] with 'unsubscribe' in the body.
