Users login

Create an account »

JOIN XATRIX

Users login

Home » Hacking News » Poison applet blights browsers

Poison applet blights browsers

by Nikola Strahija on March 11th, 2002 Crackers can use a malicious Java applet to hijack Internet sessions - leaving victims not so blissfully unaware. Exploiters can re-direct Web traffic once it has left the proxy server to a destination of the attacker's choice, Microsoft warns.


Because of the vulnerability, a variety of man-in-the middle attacks are possible; attackers could also use the bug to filch session information, such as user names or passwords sent without using SSL encryption. Sensitive information sent using SSL will be protected from potential attackers exploited the vulnerability in unpatched systems, Microsoft advises.

A system is vulnerable only if IE is used in conjunction with a proxy server; this limits the risk to home users but isn't much help to businesses, where the proxy server architecture is very common.

The software giant has issued a patch which it describes as "critical" for client systems. Netscape advises users to upgrade to either version 6.2 and 6.2.1 of its browser (which includes an updated Sun JVM plug-in) that guards against this potential risk.


Newsletter signup

Signup to our monthly newsletter and stay in touch with IT news!

Free E-books

We've got ebooks! But they're not online. :( Please give us a few days to bring downloads back.

Contact

Have something to say or just wanna drop us a line? Please keep this in mind: to spam, we reply with spam.

Contact us »