Data Source Object exploit fixed- DSOstop FREEWARE

[Nancy_McAleavey]

The "DSO Exploit" (Data Source Object) was first reported by GreyMagic Software of
Israel on February 27, 2002 and a "workaround" for Microsoft's defective code was
provided by Axel Pettinger and Garland Hopkins on March 3, 2002. Their fix requires the
user to manually edit the registry. Many computer users are extremely nervous (and
justifiably so) about doing this, owing to years of warnings and advisories not to. This
FREE utility will safely do it for those who do not feel confident running and editing
"Regedit."

DSOstop is freeware, and it's available now:

http://www.nsclean.com/freebies.html (Thanks to wilders.org - mirror online now!)

The original Greymagic advisory is at:

http://security.greymagic.com/adv/gm001-ie/


We will have more mirrors in the coming days. *Get DSOstop now (or modify your registry) and protect yourself!

;D

[FanJ]

WOW Nancy,
That's great news!
Thanks to you and Kevin !!! *:)
I'm gonna try it.

Jan.

[Nancy_McAleavey]

Yeah...just when you thought it was OK to come out and play. *This one is really serious...any sort of code can be embedded in any HTML webpages to run.....??

Stunning, eh?

We recommend EVERYONE gets this, especially if you're afraid of fooling around in the registry. *The mods necessary are in the Greymagic advisory if you don't mind/prefer to do it yourself.

:o

[Paul Wilders]

Thanks Nancy,

..but I did beat you this time * ;) :

http://www.security-pro.co.uk/yabb/YaBB.pl?board=osif;action=display;num=1015446021

regards.

paul

[Nancy_McAleavey]

;)

*&^%#%#!!

Yes, you did. *Shows you what happens when I spend the afternoon/evening working on getting more mirrors, to save bandwidth before I send out to the Newsletter group. *Sheesh.

It's been a loooong day! * ;D

Bottom line is...folks, you all need this. *Please don't think you can wait for a patch on this one, it's not worth risking it. *When a patch does come out, cool, but till then.....

[Eagle1]

I have mirrored the download as well:

http://www.net-integration.net/downloads/dsostop.exe

Would have done it sooner but I missed this this whole exploit (bad me) and this thread somehow (really bad me). * :(

[Nancy_McAleavey]

Thank you! :)

[Eagle1]

Your welcome, glad to help. *:)

BTW, I will publically mirror any download you want or need...just let me know. * ;D