Search:  

 
 
   All ForumsHot TopicsGallery






how-to block ads


 
Forums » The Site » Old Forums » Kerio - Tiny Support » Release of Kerio Personal Firewall 4.0.6
Search Topic:
Share Topic:
RSS topic:
toggle:
flat / full
normal / watch
Posting:
[Kerio 2.x] irql problems »
« [Kerio 4.x] port 44334 is OPEN: BIG SECURITY HOLE  
AuthorAll Replies

matunga

join:2003-07-26

reply to BlitzenZeus
Re: Release of Kerio Personal Firewall 4.0.6

said by BlitzenZeus See Profile:
Less secure than before!
When you give a program permission to launch other programs, those programs are now launched, and automatically allowed to start without user input.

it's not right?


BlitzenZeus
Burnt Out Cynic
Premium,MVM
join:2000-01-13
Beaverton, OR
·Verizon FIOS
·Verizon Online DSL


"Serious Security problem! When you give a program permission to launch other programs, those programs are now launched, and automatically allowed to start without user input. So if a trusted program launches a malicious program it will be started by default!!! Now any script ran from a trusted application will be able to run loose on a system!"

1: You allow explorer.exe to launch other programs.
2: A script tell it to launch malicious.exe, and malicious.exe is set to be allowed to start by default.
3: Malicious.exe is launched without user input.

That is what I'm talking about, please read the rest of the paragraph.
--
My hourly rates:
$25 per hour.
$35 per hour if you want to watch.
$45 per hour if you want to help.
$75 per hour if you tried to fix it, and failed.
[text was edited by author 2003-10-27 12:52:35]
Forums » The Site » Old Forums » Kerio - Tiny Support[Kerio 2.x] irql problems »
« [Kerio 4.x] port 44334 is OPEN: BIG SECURITY HOLE  


Tuesday, 24-Nov 21:04:26 Terms of Use | Privacy Policy | Hosting by www.nac.net - DSL,Hosting & Co-lo | feedback | contact
over 10 years online! © 1999-2009 dslreports.com.
page compression OFF
Most commented news this week
· [100] New AT&T Ad Campaign Hits Back At Verizon
· [84] New Bill Takes Aim At Higher Verizon ETFs
· [73] Apple Joins AT&T Verizon Snark Fest
· [39] In-Flight Internet Headed For Bumpy Landing?
· [32] Senators Want ACTA Made Public
· [30] Earthlink Suffers From Major E-mail Outage
· [30] AT&T Offers New Prepaid Wireless plans
· [28] Frontier Increases Modem Rental Fee
· [16] Vivendi In Way Of Comcast's NBC Desires
· [15] Charter Still Fighting With Creditors
Most people now reading
· [Rant] Damn Sermons through my speakers! [Rants, Raves, and Praise]
· Mysterious $800 Cash Deposit? [General Questions]
· Windows 7 boot manager editing questions [Microsoft Help]
· Climate Change Scandal Erupts After Email Hack. [Security]
· 3.x Feral Druid - Bear Tanking Guide [World of Warcraft]
· News Corp, MS Teaming Up In Plan To Pay for Obscurity ? [Security]
· 1333mW AP?! Everything we know says it shouldnt exist.... [Wireless Service Providers]
· "ISP owners could face jail under child porn bill" - CBC [Canadian Broadband]
· What to use while demonoid is down? [Filesharing Software]
· DIR-655 1.32 firmware - DNS relay issue (fixed) [D-Link]