|
|
ru.nethack- RU.NETHACK ------------------------------------------------------------------- From : Alex Mochalkin 2:5020/1958.3 15 May 2003 00:13:06 To : Sergey Ternovykh Subject : PGP disk --------------------------------------------------------------------------------
Я видел, как 13 May 03 23:52 Sergey Ternovykh втирал Alex Mochalkin:
AM>> хотфикс стоит. Хотя хотфикс, я
ST> Какие еще дыpы в сабже? Что за хотфикс?
===============================================================================
PGP Freeware Version 7.0.3 Hotfix 1
for Windows 95, 98, Millenium, NT, and Windows 2000
Copyright (c) 1990-2001 by Networks Associates
Technology, Inc., and its Affiliated Companies.
All Rights Reserved.
----------------------------------------------
- HOTFIX 1 -
----------------------------------------------
Thank you for using PGP Freeware Version 7.0.3. This Hotfix.txt
file contains important information regarding this hotfix release.
Network Associates strongly recommends that you read this
entire document. Network Associates welcomes your comments and
suggestions. Please use the information provided in this file to
contact us.
Warning: Export of this software may be restricted by the U.S.
Government.
___________________
WHAT'S IN THIS FILE
- About this Hotfix
- Issues resolved in this Hotfix
- Installating the Hotfix
- Contacting Network Associates
_________________
ABOUT THIS HOTFIX
This hotfix consists of a single compressed file
(PGPfreeware703Hotfix1.zip) which you decompress using an
extraction utility such as Winzip. The zip file contains three
files, PGPexch.dll, PGPsc.dll and PGPhotfix.exe.
______________________________
ISSUES RESOLVED IN THIS HOTFIX
PGP allows the user to verify signed files from the Explorer
window by double-clicking on the .sig file that represents
the signature on the original file. It is possible for an attacker
to create a .sig file that contains an arbitrary binary file. When
the user double-clicks on the .sig file, the binary file will be
extracted and written to the current directory.
If the extracted file is a PGP component DLL, it is possible
that a PGP program could load the new DLL instead of the installed
DLL, replacing the normal functionality with the new DLL that the
attacker created.
This hotfix will force the PGP component DLLs to always load
from the directory they were installed in. Additionally, it will
force a "Save As" dialog for any extracted files with a .dll,
.sys, or .vxd extension.
===============================================================================
Это достаточно старая маза, пролетала по многим новостным лентам...
Тока что это даёт? Мне, похоже, не поможет.... :-(
Best rgds, Alex.
/Простите меня, если сможете, мне за мои дела достанется,/
/Когда на груди крестом руки сложите, для этого времени не останется.../
/Dolphin./
--- GoldED/W32 3.0.1-asa9 SR3
* Origin: In trance we trust... (2:5020/1958.3)
Вернуться к списку тем, сортированных по: возрастание даты уменьшение даты тема автор
Архивное /ru.nethack/39843ec2ddd2.html, оценка из 5, голосов 10
|