Re: Microsoft Critical Updater Security

From: Lucky Green (shamrockat_private)
Date: Sun Jan 24 1999 - 14:15:49 PST

Next message: Tabor J. Wells: "Re: Perl.exe and IIS security advisory"

Previous message: Jan B. Koum: "Re: SSH 1.x and 2.x Daemon"
Maybe in reply to: Erik Parker: "Microsoft Critical Updater Security"
Next in thread: Gale S. Ringley: "Re: Microsoft Critical Updater Security"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

When I went through the same procedure, Critical Update installed a new
version of the Critical Update control upon accessing the update site.
However, it did ask me if I wanted to install it. Perhaps you once clicked
the "Always trust software from Microsoft Corporation" in the Authenticode
popup? In that case, code signed by Microsoft might auto-install.

--Lucky Green <shamrockat_private>
  PGP 5.x  encrypted email preferred

> -----Original Message-----
> From: Bugtraq List [mailto:BUGTRAQat_private]On Behalf Of
> Erik Parker
> Sent: Saturday, January 23, 1999 03:34
> To: BUGTRAQat_private
> Subject: Microsoft Critical Updater Security
[...]

> Well, The popup says "Hey, critical update available, shall
> we go check
> it out?". Iexplorer opens up (note, you can't use netscape
> for updating).
>
> It took longer to load than usual, because it downloaded and
> installed..

Next message: Tabor J. Wells: "Re: Perl.exe and IIS security advisory"
Previous message: Jan B. Koum: "Re: SSH 1.x and 2.x Daemon"
Maybe in reply to: Erik Parker: "Microsoft Critical Updater Security"
Next in thread: Gale S. Ringley: "Re: Microsoft Critical Updater Security"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Fri Apr 13 2001 - 14:30:38 PDT