| |
Web & Network Security
|
|
|
WWW Network Security
|
|
- The Computer Security Evaluation - Frequently Answered Questions (V2.1)
- This list is from the Trusted
Products Evaluation Program site. Answers to common questions about the
evaluation of trusted products. The current official version of this FAQ may be found at <http://www.radium.ncsc.mil/tpep/process/faq.html>.
- What is the National
Computer Security Center (NCSC)?
- What is TPEP?
-
|
|
- C2 Net at https://www.c2.net
C2Net's security products fall into two product lines, Stronghold servers and
SafePassage client-side products. The Stronghold Web Server is a secure, commercial web
server based on the world's most popular web server, Apache. C2Net is committed to
providing secure solutions using strong cryptography worldwide.
Their product Safe Passage Web Proxy
adds strong cryptography to any existing Web browser and works with any existing SSL Web
server.
|
|
- MS Internet Explorer
- One problem concerns the ability of a programmer to write code in a Web page that uses
Internet Explorer 3.x versions to access a Web page hyperlink that points to a .LNK (a
Windows shortcut file on Win 95) or .URL (Win 95 or NT ) file. Pointing to either type of
link could launch a program or an executable that could cause damage to a computer. The
creator of the link would have to know about and write to / for the specific program
installed (name and path) on the user’s hard drive in order for this technique to
work.
However, URLs can be of a greater risk because they can be created at the server using
server side scripts. These scripts could generate the URLs to match the setup of the
user's (target machine) computer.
- BIND - the Berkeley
Internet Name Daemon
 Several vulnerabilities in the Berkeley Internet
Name Daemon (BIND) have been fixed in the current version of BIND. One of those
vulnerabilities is now being exploited, a vulnerability that results in cache poisoning
(malicious or misleading data from a remote name server is saved [cached] by another name
server). All versions of BIND before release 8.1.1 are vulnerable.- Among
these is server cache poisoning. Cache poisoning occurs when malicious or misleading data
received from a remote name server is saved (cached) by another name server. This
"bad" data is then made available to programs that request the cached data
through the client interface.
|
|
|
|
 | One problem concerns the ability of a programmer to write code in a Web page that
uses Internet Explorer 3.x versions to access a Web page hyperlink that points to a .LNK
(a Windows shortcut file on Win 95) or .URL (Win 95 or NT ) file. Pointing to either type
of link could launch a program or an executable that could cause damage to a computer. The
creator of the link would have to know about and write to / for the specific program
installed (name and path) on the user’s hard drive in order for this technique to
work.
However, URLs can be of a greater risk because they can be created at the server using
server side scripts. These scripts could generate the URLs to match the setup of the
user's (target machine) computer.
|
| The META REFRESH tag can be used to execute multiple commands
in sequence (demo at cybersnot.com).
This demo copies a .BAT file into your Internet Explorer cache and then runs the .BAT
file. This .BAT will create a new key in your registry called
"HKEY_CURRENT_USER/Software/Cybersnot". It will then open your AUTOEXEC.BAT and
CONFIG.SYS in notepad. Finally, it will open REGEDIT so that you can view the key it
creates.
|
| Simple Win 95 example - The following link will start the standard
calculator which comes with Windows 95.
Windows Calculator (.lnk).
Windows Calculator (.url). |
| Example - A Web site operator could post a link to an
".url" file that creates a folder on a user's computer and then deletes it. |
The security holes discovered relate to Internet Explorer 3.01, 3.00 and are corrected
by downloading version 3.02
from Microsoft.
What does Internet Explorer 3.02
fix?
|
|
|
|
|
|
|
|
The SOCKS protocol is an open, industry standard that enables secure firewall
traversal at the OSI session layer by proxying connection requests and relaying data. The
current release is SOCKS v5. SOCKS v5 includes open support for authentication and
encryption methods, UDP traffic, and DNS.
|
|
Aventail AutoSOCKS:
The Client Key to Network Security |
|
|
|
Last Edit: Thursday, 24. October 2002
|
|
|
