[11781] in bugtraq
Re: IE 5.0 allows executing programs
daemon@ATHENA.MIT.EDU (: dp :)
Thu Sep 9 12:00:21 1999
Mime-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
Message-Id: <000a01bef5af$942b4c20$1276fea9@ruckus>
Date: Thu, 2 Sep 1999 18:56:39 -0700
Reply-To: ": dp :" <dap24@BEER.COM>
From: ": dp :" <dap24@BEER.COM>
X-To: BUGTRAQ@SECURITYFOCUS.COM
To: BUGTRAQ@SECURITYFOCUS.COM
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
You can manually download the updates at
http://www.microsoft.com/windows98/downloads/corporate.asp
Personally, I prefer to actually save the update files so that I don't
need to download everything all over again whenever windows breaks and
I have to reinstall (which is pretty often).
David
- -----
dap24@beer.com
http://neongoat.netpedia.net
PGP Key ID/Fingerprint:
0xF90FFFE5 / F362 51F7 6D51 85EB AF68 75B9 D29B 1AFC F90F FFE5
- -----
- -----Original Message-----
From: Jens Benecke <jens@PINGUIN.CONETIX.DE>
To: BUGTRAQ@SECURITYFOCUS.COM <BUGTRAQ@SECURITYFOCUS.COM>
Date: Thursday, September 02, 1999 6:30 PM
Subject: Re: IE 5.0 allows executing programs
>On Sat, Aug 28, 1999 at 10:44:32AM -0400, Jesper M. Johansson wrote:
>
>> >Actually, the setting that goes right to the heart of this one is
>> >"Script ActiveX Controls Marked Safe For Scripting". Default for
>> >"Internet Zone" is Enable. It is probably safest to set it to
either
>> >disable or prompt.
>> I don't know that you want it as a trusted site, but I realized
yesterday
>> that Windows Update needs to be able to "Script ActiveX Controls
Marked
>> Safe For Scripting." Thus, if you want to be able to use Windows
Update,
>> you must set this to either enable or prompt.
>
>That is not true. You can also download the Update files 'manually',
>without having to tell Microsoft about your digestion problems and
>grandmothers. It's hidden somewhere in
www.microsoft.com/windows/update/ or
>something, I'll dig out the URL in case anyone needs to know.
>
>Strangely(0), Netscape/Windows barfs out when visiting that page -
>Netscape/Linux displays it though.
>
>
>(0) NOT
>
>--
>_ciao, Jens_______________________________
http://www.pinguin.conetix.de
>
>There are more than 1000 chemicals in brand coffee, of which 26 have
been
>tested and examined. Of those 26, 24 caused cancer in lab rats.
>
-----BEGIN PGP SIGNATURE-----
Version: PGP 6.0.2
iQA/AwUBN88q1tKbGvz5D//lEQIOjgCeMwZC0l09tXEJX2btLAIXKnagN6oAoPyi
s7IQgfO69wk2I/ZYh/+ZAFt6
=k4E/
-----END PGP SIGNATURE-----
