Microsoft probing reported flaws in Windows XP SP2

Advertisement (Why?)

Microsoft Corp. Thursday said it is investigating claims that several new vulnerabilities have been found in Windows XP Service Pack 2 by security firm Finjan Software Inc. in San Jose, Calif. Finjan on Tuesday announced that it had found as many as 10 "serious" flaws in SP2.

According to Gil Arditi, Finjan's chief security officer, some of the vulnerabilities could be exploited by hackers to gain complete remote control of a system or to download malicious code to a compromised computer. Finjan has notified Microsoft of the vulnerabilities and has shared all relevant technical details with the company, Arditi said. Finjan has also developed a proof-of-concept exploit capable of taking advantage of the flaws, which it has shared with Microsoft.

News source: InfoWorld

Azure Web Log analyzer tells you all you want about your web site: What are the most popular pages and files on your site? How many visitors are there and where are they from? What browsers and OS they use? What is your sites traffic? Special features: Accumulates statistics for a year - you can watch closely your site's evolution. Separate statistics for every page or file - daily hits for two last months, monthly hits for a year, referring sites for particular page or file. There is no need in configuring - just install and work. Partial downloaded log processing. Project support allow you to work with multiple site. Graphical data representation and Win XP interface make your work with Azure Web Log analyzer more comfortable and visual. The analyzer gives you the exact information about completed downloads, partial downloads and redirections. Supported web log format: common log format, the NCSA combined log format and Microsoft IIS web log in W3 extended format. You can print the reports or export reports to HTML format.

(1 reply) #1 PimpinWithAaron on 12 Nov 2004 - 23:44

and so it begins...
FLAME WAR!!!

#1.1 PseudoRandomDragon on 13 Nov 2004 - 04:19

Hold on one second...

*plays LOTR theme*

Okay you may begin.

#2 Omn1 on 12 Nov 2004 - 23:50

Haha

#3 PCyr on 13 Nov 2004 - 00:00

*ducks for cover*

(1 reply) #4 netizen on 13 Nov 2004 - 00:03

Do MS never look for holes themselves, or is it just happy coincidence that exploits found by third parties keep making the news? The real issue is (as always) how long it takes for a fix to be released, from the date the exploit is confirmed as real.

#4.1 caesar on 13 Nov 2004 - 15:33

How do you know that they aren't looking for *bugs* in their products? Just cause they don't do an public anounce when they have found one is just cos they don't want crackers to be aware of the bug they just found and fixed because a lot of people do ocasionaly updates and for a marketing reason. For instance, will you buy a car that the producer warned you about that had some issues with the locking mechanism, with the direction mechanism and other major stuff? I doubt. They just fix them and hope no one finds about them. Pure management. Put your cards on the table and you are history.

#5 burnsflipper on 13 Nov 2004 - 00:35

It's not an exploit, it's a feature

(2 replies) #6 Winnerboy on 13 Nov 2004 - 01:07

another damn firm always find flaws or holes on the system, then I ask who system this firm use???maybe your os is perfect in this world? bah!

#6.1 Andareed on 13 Nov 2004 - 01:16

You make it sound like finding flaws is a bad thing. You think we should all stick our heads in the sand?

#6.2 Mando on 14 Nov 2004 - 11:15

QUOTE

~ well according to my manager yer he reckons best course of action

(hes the IT manager)

(1 reply) #7 nogoon on 13 Nov 2004 - 01:22

its better for them to find than the hackers...

besides, i think microsoft pays them to find flaws?

#7.1 PCyr on 13 Nov 2004 - 02:24

Hackers are the one's finding them. I think you are refering to crackers.

#8 ev0| on 13 Nov 2004 - 02:07

well those people are making alot of money I guess

#9 Richteralan on 13 Nov 2004 - 02:21

those people just trying hard to find "every flaws" in windows.
this can make them look so smart and people will believe that they are good security company thus can make a lot of money.

marketing thing.....bah

(2 replies) #10 Skyfrog on 13 Nov 2004 - 03:02

several new vulnerabilities have been found in Windows XP Service Pack 2

" Surprise, Surprise, Surprise!! "

Seriously, Windows is always going to have vulnerabilities. The same goes for Linux, Mac OS, etc. Microsoft just gets a lot more attention.

#10.1 Darkinspiration on 13 Nov 2004 - 05:11

most likely something to do with remote help again. Man this thing is an horrible security risk especialy with user who have a weak password or no password at all

#10.2 cork1958 on 13 Nov 2004 - 11:21

Exactly what I was going to say. Surprise 3 X's!! I sure hope no one even thought that SP2 was the end of any security flaws or any other type flaw?

#11 kronik on 13 Nov 2004 - 13:35

though you must admit it took a while for something like this to be reported since the SP2 release

(1 reply) #12 jivemastert on 13 Nov 2004 - 14:19

so, thats not so bad. a recent article on here said that linux had the most security flaws out of the big OSs.... with Mac OS having the least. you gotta hand it to MS, they actually do release security patches and stuff and try to make their product secure.

#12.1 kitchenutensils on 13 Nov 2004 - 15:34

i agree that every OS is going to have security flaws; and ms just has the most attention so enevitably its them thats worst off. but that was hacking attempts at web servers you're talking about, not security flaws. thats because linux is used on most webservers; and redhat also has bad security default settings. hence the reason i say that linux is more secure at this current moment in time; because less is known about hacking it.

#13 EduardValencia on 13 Nov 2004 - 15:28

those vulnerabilities are still under invstigation,it seems a false alarm

#14 SquareSoft0 on 14 Nov 2004 - 01:04

Oh my god, this thread remained relatively sane, you all get a free cookie.

Commenting has either been disabled on this article or you are not logged in. Click here to login or register, its free!

Note: Anonymous commenting is disabled in order to keep the quality of responses to a high standard.

Neowin.net