W2k/ie Vuln - "workaround" Available

FYI…

- http://www.theinquirer.net/?article=22649
19 April 2005
"…An attacker may execute any command as the logged-on user simply by having the user select a file. Executing the file is not required for exploitation, all it takes is selecting an innocent-looking file - maybe to delete it. The exploit applies to certain versions of Windows 2000. Since Microsoft still hasn't patched the hole, you'll have to have a look at the GreyMagic page for a workaround…"

- http://www.greymagic.com/security/advisories/gm015-ie/
19 Apr 2005
"…Solution:
Until a patch becomes available, disable the Web View by going to: Tools -> Folder Options -> Select 'Use Windows classic folders'…"

FYI…

Microsoft Owns Up To Win2000 Bug
- http://www.techweb.com/wire/security/161501052
April 22, 2005
"…A Microsoft executive took the unusual step this week of confirming a bug in Windows…"
- http://blogs.technet.com/msrc/archive/2005/04/20/404003.aspx
April 20, 2005
"…We believe at this time that any potential attack would rely on Server Message Block (SMB) communication.."

FYI…

(RE: http://www.microsoft.com/technet/security/…n/MS05-024.mspx )

- http://isc.sans.org/diary.php?date=2005-05-10
Updated May 10th 2005 18:03 UTC
"…According the advisory, there is a problem in the way Windows Explorer "handles certain HTML characters in preview fields". A typical attack scenario is on the workaround section: "In a Web-based attack scenario, an attacker would have to host a Web site that contains a Web page that is used to exploit this vulnerability." "…an attacker would have to persuade them to visit the Web site, typically by getting them to click a link that takes them to the attacker's Web site. After they click the link, they would be prompted to perform an action. An attack could only occur after they performed these actions…Our good reader Juha-Matti wrote that this Microsoft patch will fix the flaw, published only five months ago, at http://www.greymagic.com/security/advisories/gm015-ie/ , discovered by Grey Magic Software with a Bugtraq ID 13248. Good Work!"