Security problems

Published: 28 August 1999 y., Saturday
Microsoft has acknowledged a serious security flaw in NT when used with Service Pack 4 (SP4) -- probably the most commonly deployed version of its operating system. The flaw enables hackers to masquerade as trusted hosts to get access to secure systems, using so-called Predictable IP Sequence Numbering - something that was identified and fixed in Unix systems several years ago, according to Richard Thomas, head of Winterfold Datacomm (Guildford, UK), a networking consultancy. Security problems had been found in earlier versions of NT, but the bundle of patches and fixes in SP4 were supposed to have made everything watertight. That_s proved not to be the case, according to NTA Monitor (Rochester, UK), a consultancy that conducts security audits on corporate systems by simulating hacker attacks over the Internet. When conducting such an audit, it came across Predictable IP Sequence Numbering at a customer site using NT with SP4. After doing bench tests to establish that the problem was generic to NT and SP4, NTA-Monitor contacted Microsoft. After nearly three weeks of deliberations, Microsoft has come clean. Sunil Gopal, a technical specialist at Microsoft, acknowledged the problem on Tuesday in a memo to Roy Hills, NTA-Monitor_s testing development director. His memo says fault has been eliminated in Windows 2000 and "will be back-ported to NT 4.0 in a future SP release."
Copying, publishing, announcing any information from the News.lt portal without written permission of News.lt editorial office is prohibited.

Facebook Comments

New comment


Captcha

Associated articles

New Release of Unisys Baggage Reconciliation System Helps Enhance Security and Efficiency of Baggage Handling at Airport

Unisys Corporation (NYSE: UIS) announced enhancements to its Baggage Reconciliation System (BRS) featuring more detailed information about baggage handling requirements for incoming flights, real-time monitoring and alerts of service level agreements (SLAs), and a mobile app to provide passengers with live updates on when and where to collect their bags. more »

Samsung gains tablet market share as Apple lead narrows

Samsung doubled its share of the tablet PC market in the last three months of 2012, research firm IDC has said. more »

Facebook boss insists site is not making a phone

Facebook boss Mark Zuckerberg has strongly denied the social network is planning to release its own phone. more »

Google TVs get gaming service via LG deal

The OnLive gaming service is to be made available to Google TV users, following a deal with electronics firm LG. One of a handful of firms making hardware for Google TV. LG's G2 series sets have Google's TV service built in. more »

Blackberry introduces free wi-fi calls on BBM

Blackberry has become the latest smartphone to offer free wi-fi calls to users via its own software. Research In Motion (RIM) has added the facility to its Blackberry Messenger (BBM) app, which already offered an alternative to text messages. more »

2012 SIIA CODiE Awards

We are delighted to announce that on 26th of January SafeNet Sentinel Cloud was awarded the SiiA 2012 Best Digital Rights Management Solution! more »

Anti-internet piracy law adopted by Spanish government

The Spanish government has approved tough new legislation which could see websites deemed to be trading in pirated material blocked within ten days. more »

Los Angeles World Airports Selects Unisys to Upgrade ID Card Reader System and Network

The Los Angeles World Airports (LAWA), which oversees airport operations for the city of Los Angeles, has awarded a contract modification to Unisys (NYSE: UIS) to upgrade its access control and alarm monitoring system, used to identify the 45,000 airport employees, contractors, police and others who work at the organization’s three airports. more »

Unisys Strengthens Enterprise-Class Cloud Offerings with New Version of Secure Private Cloud Solution

Unisys Corporation (NYSE: UIS) today announced Version 2 of its Unisys Secure Private Cloud Solution, the company’s flagship cloud solution for clients’ and cloud service providers’ data centers. more »

Fake Apple stores found in China

An American blogger has discovered three fake Apple stores operating in Kunming city, China. more »