Главная страница


ru.nethack

 
 - RU.NETHACK -------------------------------------------------------------------
 From : Alex Mochalkin                       2:5020/1958.3  15 May 2003  00:13:06
 To : Sergey Ternovykh
 Subject : PGP disk
 -------------------------------------------------------------------------------- 
 
 
 Я видел, как 13 May 03 23:52 Sergey Ternovykh втирал Alex Mochalkin:
 AM>> хотфикс стоит. Хотя хотфикс, я
 ST> Какие еще дыpы в сабже? Что за хотфикс?
 
 =============================================================================== 
 PGP Freeware Version 7.0.3 Hotfix 1
      for Windows 95, 98, Millenium, NT, and Windows 2000
        Copyright (c) 1990-2001 by Networks Associates
        Technology, Inc., and its Affiliated Companies.
             All Rights Reserved.
 
      ----------------------------------------------
      -                HOTFIX 1                    -
      ----------------------------------------------
 Thank you for using PGP Freeware Version 7.0.3. This Hotfix.txt
 file contains important information regarding this hotfix release.
 Network Associates strongly recommends that you read this
 entire document. Network Associates welcomes your comments and
 suggestions. Please use the information provided in this file to
 contact us.
 
 Warning: Export of this software may be restricted by the U.S.
 Government.
 
 ___________________
 WHAT'S IN THIS FILE
 
 - About this Hotfix
 - Issues resolved in this Hotfix
 - Installating the Hotfix
 - Contacting Network Associates
 _________________
 ABOUT THIS HOTFIX
 
 This hotfix consists of a single compressed file
 (PGPfreeware703Hotfix1.zip) which you decompress using an
 extraction utility such as Winzip. The zip file contains three
 files, PGPexch.dll, PGPsc.dll and PGPhotfix.exe.
 
 ______________________________
 ISSUES RESOLVED IN THIS HOTFIX
 
 PGP allows the user to verify signed files from the Explorer
 window by double-clicking on the .sig file that represents
 the signature on the original file. It is possible for an attacker
 to create a .sig file that contains an arbitrary binary file. When
 the user double-clicks on the .sig file, the binary file will be
 extracted and written to the current directory.
 
 If the extracted file is a PGP component DLL, it is possible
 that a PGP program could load the new DLL instead of the installed
 DLL, replacing the normal functionality with the new DLL that the
 attacker created.
 
 This hotfix will force the PGP component DLLs to always load
 from the directory they were installed in. Additionally, it will
 force a "Save As" dialog for any extracted files with a .dll,
 .sys, or .vxd extension.
 =============================================================================== 
 Это достаточно старая маза, пролетала по многим новостным лентам...
 Тока что это даёт? Мне, похоже, не поможет.... :-(
 
 Best rgds, Alex.
 /Простите меня, если сможете, мне за мои дела достанется,/
 /Когда на груди крестом руки сложите, для этого времени не останется.../
 /Dolphin./
 
 --- GoldED/W32 3.0.1-asa9 SR3
  * Origin: In trance we trust... (2:5020/1958.3)
 
 

Вернуться к списку тем, сортированных по: возрастание даты  уменьшение даты  тема  автор 

 Тема:    Автор:    Дата:  
 PGP disk   Alex Mochalkin   12 May 2003 22:30:50 
 Re: PGP disk   Slider   13 May 2003 12:49:42 
 PGP disk   Sergey Ternovykh   13 May 2003 23:52:21 
 PGP disk   Alex Mochalkin   15 May 2003 00:13:06 
 PGP disk   Sergey Ternovykh   16 May 2003 00:58:13 
 PGP disk   Cybervlad   16 May 2003 09:15:15 
Архивное /ru.nethack/39843ec2ddd2.html, оценка 3 из 5, голосов 10
Яндекс.Метрика
Valid HTML 4.01 Transitional