IE all version Gopher security warning issued.

[Archer]

Another IE warning issued by MS in regard to versions 5.01,5.5 and 6.

Quote curtesy PC PRO:

With the information out there for attackers to exploit a security flaw in Microsoft IE (versions 5.01, 5.5 and 6.0), Proxy Server 2.0 and ISA Server 2000, Microsoft has hurriedly issued a workaround to batten down the hatches while it works on a patch.

The hatch in question is TCP port 70, which allows Gopher protocol traffic access. The Gopher is an Internet utility that transmits information across the Web through text, but is currently almost obselete. However, an unchecked buffer in a piece of code that handles response from Gopher servers could be exploited with a buffer overrun attack.

By building a Web page that contacted the attacker's server, the vulnerability could be exploited when a target displayed the page, giving the attacker user privileges with IE victims, and potentially complete control over ISA and Proxy Servers, including formatting drives and adding administrator accounts.

For full step by step instructions on the workaround for all the vulnerable products, head over to the Microsoft TechNet Web site and click open the Frequently Asked Questions tree. The instructions are at the bottom of that section.

We'll keep you informed when a patch is available.

Those instructions to shore up IE are reasonably straightforward and are listed below.

Right Click on Internet Explorer(IE) Icon on the Desktop or while IE is open, Click on "Tools" and select "Internet Options"
Click on the "Connections" Tab
Click on the "LAN Settings..." button
Uncheck "automatically detect settings"
If "automatic configuration script" is set, check with your administrator if gopher server is called out.
Check the "Use proxy server for your LAN..." Checkbox
Click on the "Advanced..." button
Ensure "use the same proxy server for all protocols" is unchecked.
In the "Proxy addresses to use" textbox next to the word Gopher, Type "LocalHost"
In the "Port" textbox next to the Gopher protocol, Type "1"
Click 'OK' until the Internet Options Menu disappears.

[MacGyver]

LMAO, I thought gopher was long since forgotten. The question is, do any hackers today know how to use it?

[Archer]

Seems at least someone knows how to exploit it,shows how old technology can sometimes come back and bite you in the butt and here was I thinking it was a small furry rodent.