IP: Microsoft releases Erroneous VeriSign-Issued Digital Certificate Spoofing Hazard Patch

[David Farber <dave () farber net>]

> Date: Sat, 31 Mar 2001 05:58:27 -0800
> From: Rick Hornbeck <rick_hornbeck () pacbell net>
> Subject: Microsoft releases Erroneous VeriSign-Issued Digital Certificate
>  Spoofing Hazard Patch
> To: dave () farber net
> X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2911.0)
> Importance: High
>
> Dave:
>
> This may be of interest to your readers. For some reason this hasn't
> received the 'buzz' it deserves, given its potentially serious
> ramifications.
>
> Regards,
>
> ------------------------------------------
> Rick Hornbeck
> Hornbeck Consulting
> 556 S. Fair Oaks Ave., Suite 346
> Pasadena, CA 91105
> Rick_Hornbeck () pacbell net
> (cell) +1 323 363-2151
> (efax) +1 603 947-5825
> ------------------------------------------
>
>
> According to Microsoft's Security Bulletin, posted at:
>
> http://www.microsoft.com/technet/security/bulletin/MS01-017.asp
>
> the Erroneous VeriSign-Issued Digital Certificate Spoofing Hazard Patch can
> be downloaded at:
>
> http://www.microsoft.com/downloads/release.asp?ReleaseID=28888
>
> and which contains the following note:
>
> This update resolves the "Erroneous VeriSign-Issued Digital Certificates
> Pose Spoofing Hazard" security vulnerability, and is discussed in Microsoft
> Security Bulletin MS01-017. Download now to prevent an unauthorized user
> from running code on your computer by digitally signing programs as
> "Microsoft Corporation."
>
> VeriSign, Inc. issued two VeriSign digital certificates to an individual who
> fraudulently claimed to be a Microsoft employee; this allows the individual
> to sign programs, ActiveX® controls, Office macros, and other executable
> content as originating from "Microsoft Corporation." This update prevents
> the two erroneously signed certificates from being accepted as valid.
>
> ===========================
>
>
> ------------------------------------------
> Rick Hornbeck
> Hornbeck Consulting
> 556 S. Fair Oaks Ave., Suite 346
> Pasadena, CA 91105
> Rick_Hornbeck () pacbell net
> (cell) +1 323 363-2151
> (efax) +1 603 947-5825
> ------------------------------------------



For archives see: http://www.interesting-people.org/