Apr 14, 2004 : Microsoft Flaw Threatens SSL Sites


📅 - Microsoft issued a fix this week for a security vulnerability in its Secure Sockets Layer (SSL) library that could allow a remote attacker to take control of Windows 2000 and Windows NT4 servers using the popular SSL technology to offer encrypted services over the Internet.

Internet Security Systems (iss.com) identified the vulnerability on Tuesday, saying it was certain to be a popular target for hackers, given the frequently high value of Web sites protected by SSL, often used in online retail, banking and stock trading.
According to Internet researcher Netcraft (netcraft.com), Microsoft issued a critical security update on Wednesday, urging customers to repair the flaw, which allows a buffer overflow in Private Communications Transport (PCT) packets. Microsoft's notice said an attacker could exploit the vulnerability to take complete control of a system.
Netcraft says its March Secure Server Survey identified more than 132,000 Web-facing SSL servers running either Windows 2000 or Windows NT4, representing nearly 45 percent of all SSL servers.

Reads: 1457 | Category: General | Source: TheWHIR : Web Host Industry Reviews
URL source: http://www.thewhir.com/marketwatch/mic041404.cfm
Want to add a website news or press release ? Just do it, it's free! Use add web hosting news!