XP SP#1 fixes this, but DO take a read SECURITY HOLE

#1 Admiral LSD

old hand

Group: Members
Posts: 991
Joined: 14-August 01

Posted 12 September 2002 - 09:09 AM

Even without reading the article, I have a feeling I know what this is and I'm going to say this:

I have a rule: Never take any security threat that originates from grc.com seriously.

Had this originated from any other source I'd be more worred but since it comes from Steve Gibson, who is the master of FUD and overstating risks, any credibility it would otherwise have had.

#2 tylau

member

Group: Members
Posts: 193
Joined: 08-February 00

Posted 12 September 2002 - 10:25 AM

If you try and open the file C:\Windows\PCHEALTH\HELPCTR\SYSTEM\DFS\uplddrvinfo.htm in IE6 you will found that it use some sort of ActiveX control; and if you try to diable activeX in the internet zone security setting, then this should be no issue at all, only those allow ActiveX control and plugins in their internet zone are open to vandals like that.

#3 EddiE314

Pooh-Bah

Group: Members
Posts: 1778
Joined: 18-January 00

Posted 12 September 2002 - 10:32 AM

just rename or delete "uplddrvinfo.htm" and it will stop this hole, sp1 does indeed fix this also.

#4 EddiE314

Pooh-Bah

Group: Members
Posts: 1778
Joined: 18-January 00

Posted 13 September 2002 - 08:19 PM

i respect him as well, sometimes he gets a little too excited about security holes, like the time he was getting DoS attacks from those "script kiddies". Other than that he now has a utility on www.grc.com called "XPdite" that fixes this hole.

#5 Jason B

journeyman

Group: Members
Posts: 65
Joined: 07-July 02

Posted 14 September 2002 - 05:25 AM

Majorgeeks can kiss my ass, I joined a while ago, and I just about instantly regretted it. After about a week or so, I was gone, and I will never go back, even to download stuff.
I realize you are talking about something else, but I felt the need to say that.

#6 adamvjackson

Pooh-Bah

Group: Members
Posts: 2174
Joined: 26-August 02

Posted 14 September 2002 - 08:08 AM

Quote:

Anyhow, you'll like it here then... good spot, good crew, lots of sharp folks and even have their nerdy humor moments too!

Yeah, that pretty much describes me...

#7 Jason B

journeyman

Group: Members
Posts: 65
Joined: 07-July 02

Posted 14 September 2002 - 11:00 PM

That link is to Majorgeeks, and that's what brought it on.

I joined, and they were pretty harsh to me, because I put a thread in the wrong forum. ;( I took it the wrong way. The head guy there posted in a thread that a mod closed, and I couldn't reply to it, and it had some things in there, that I really didn't take kindly to, so I left.

Partly my fault, partly theirs.