Microsoft Security Advisory (2501696): Vulnerability in MHTML Could Allow Information Disclosure - 3


 
Thread Tools Search this Thread
Special Forums Windows & DOS: Issues & Discussions Security Advisories (RSS) - Microsoft Microsoft Security Advisory (2501696): Vulnerability in MHTML Could Allow Information Disclosure - 3
# 1  
Old 03-11-2011
Microsoft Security Advisory (2501696): Vulnerability in MHTML Could Allow Information Disclosure - 3

Revision Note: V1.1 (March 11, 2011): Revised Executive Summary to reflect investigation of limited, targeted attacks. Advisory Summary:Microsoft is investigating new public reports of a vulnerability in all supported editions of Microsoft Windows. The vulnerability could allow an attacker to cause a victim to run malicious scripts when visiting various Web sites, resulting in information disclosure. This impact is similar to server-side cross-site scripting (XSS) vulnerabilities. Microsoft is aware of published information and proof-of-concept code that attempts to exploit this vulnerability. In addition, at this time, Microsoft is aware of public proof-of-concept code being used in limited, targeted attacks. Users who have applied the automated Microsoft Fix it solution described in Microsoft Knowledge Base Article 2501696 or manually applied the "Enable the MHTML protocol lockdown" workaround described in this advisory to their systems are not exposed to this vulnerability.

More...
Login or Register to Ask a Question

Previous Thread | Next Thread
Login or Register to Ask a Question
GAMMU-SMSD-ODBC(7)						       Gammu							GAMMU-SMSD-ODBC(7)

NAME
gammu-smsd-odbc - gammu-smsd(1) backend using ODBC abstraction layer to use any supported database as a message storage DESCRIPTION
New in version 1.29.92. ODBC backend stores all data in any database supported by ODBC, which parameters are defined by configuration (see gammu-smsdrc for description of configuration options). For tables description see gammu-smsd-tables. This backend is based on gammu-smsd-sql. SUPPORTED DRIVERS
On Microsoft Windows, Gammu uses native ODBC, on other platforms, unixODBC can be used. LIMITATIONS
Due to limits of the ODBC interface, you might have to tweak SQL queries to work in used SQL server, see SQL Queries for more details. Partially this can be configured using SQL. CONFIGURATION
Before running gammu-smsd you need to create necessary tables in the database. You can use examples given in database specific backends parts of this manual to do that. You specify data source name (DSN) as Host in gammu-smsdrc. The data source is configured depending on your platform. On Microsoft Windows, you can find instructions on Microsoft website: http://support.microsoft.com/kb/305599 For unixODBC this is documented in the user manual: http://www.unixodbc.org/doc/UserManual/ EXAMPLE
Example configuration: [smsd] service = sql driver = odbc host = dsn_of_your_database sql = sql_variant_to_use user = username password = password See also gammu-smsdrc AUTHOR
Michal iha <michal@cihar.com> COPYRIGHT
2009-2012, Michal iha <michal@cihar.com> 1.31.90 February 24, 2012 GAMMU-SMSD-ODBC(7)