Morpheus Security Flaw!
Posted by: [PM] on: 02/04/2002 07:50 PM [ Print | 3 comment(s) ] · 1439 views
BBC Sci/Tech reports that members of the security group 2600 have been investigating this problem since coming across it on Friday.
They found a different hole to one reported several months ago involving a specific computer port.
Using the Morpheus program, they found a way of getting a random list of people using the service.
They could then obtain details of the files on a user's hard drive and make copies of any file. This includes software installed on a computer or a list of websites that person visited.
Read more...
"We're not sure what it is that makes some Morpheus members vulnerable to this," said one, who asked to remain anonymous. "Potentially this could make every user's computer available to anyone who wants to have a look at it. "All we know is that there's a major gap that's allowing certain users to become vulnerable."
Using the Morpheus program, they found a way of getting a random list of people using the service.
They could then obtain details of the files on a user's hard drive and make copies of any file. This includes software installed on a computer or a list of websites that person visited.
Read more...
"We're not sure what it is that makes some Morpheus members vulnerable to this," said one, who asked to remain anonymous. "Potentially this could make every user's computer available to anyone who wants to have a look at it. "All we know is that there's a major gap that's allowing certain users to become vulnerable."
« New Fraps v1.6A! · Morpheus Security Flaw!
· Radeon Tweakage! »
Comment
|
unknown Posts: 2 Joined: 2002-11-11 |
#35867 Posted on: 02/04/2002 10:57 PM
to avoid this problem simply get a good firewall and use the adaware program to remove any spyware from your computer these 2 things keep me from having alot of problems. |
Comment
|
unknown Posts: 2 Joined: 2002-11-11 |
#35883 Posted on: 02/05/2002 06:38 AM
kaazza has spyware morpheous wasnt known to |
Comment
|
unknown Posts: 2 Joined: 2002-11-11 |
#35905 Posted on: 02/05/2002 08:30 PM
That is not what they are saying. " A malicious hacker could then access the computers of those users and copy files from anywhere on their hard disk. Usually, Morpheus only allows access to files placed in a specific folder, like other peer to peer file-sharing clients." |
