Pessoal: acho que essa mensagem traz algumas informacoes interessantes - principalmente para quem utiliza o MSIE como plataforma ;-) --- Mauricio F. A. Walder DIR Brasil Integracao de Sistemas [EMAIL PROTECTED] http://www.dirbrasil.com +55-11-3733-0189 / 3733-0190 ---------- Forwarded message ---------- Date: Fri, 25 Feb 2000 08:40:20 +0900 From: "TAKAGI, Hiromitsu" <[EMAIL PROTECTED]> To: [EMAIL PROTECTED] Subject: Re: `Microsoft VM for Java' allows reading local files using `getSystemResourceAsStream'. On Tue, 1 Feb 2000 10:49:54 +0900, I wrote: > Microsoft JVM allows reading local files using getSystemResourceAsStream. > For a detailed description, please see the following article. > http://java-house.etl.go.jp/ml/archive/j-h-b/030376.html (in Japanese) > http://java-house.etl.go.jp/ml/archive/j-h-b/030411.html (in English) We have released a new note which includes additional information to the previous warning. http://java-house.etl.go.jp/ml/archive/j-h-b/031072.html (in Japanese) http://java-house.etl.go.jp/ml/archive/j-h-b/031178.html (in English) There are three new issues: 1. Windows2000 is also affected 2. IE5 has additional hole for "Existence Attack" over whole C:\ 3. Patch available from Microsoft with inappropriate description of the vulnerability Thank you. -- Hiromitsu Takagi http://www.etl.go.jp/~takagi/ --------------------------- LISTA SOUJAVA --------------------------- http://www.soujava.org.br - Sociedade de Usuários Java da Sucesu-SP [dúvidas mais comuns: http://www.soujava.org.br/faq.htm] [para sair da lista: http://www.soujava.org.br/forum/cadastrados.htm] ---------------------------------------------------------------------
