Skip to main content
BBC NEWS / TECHNOLOGY
Graphics VersionBBC Sport Home
News Front Page | Africa | Americas | Asia-Pacific | Europe | Middle East | South Asia | UK | Business | Health | Science & Environment | Technology | Entertainment | Also in the news | Have Your Say |
Wednesday, 13 April, 2005, 11:23 GMT 12:23 UK

Net security bug prompts warnings

Copies of Microsoft Windows XP on sale, PA Microsoft has issued patches for five critical bugs in its software.

The bugs affect Windows, Internet Explorer, Word, Messenger and Exchange. If exploited the loopholes could give an attacker complete control over a compromised computer.

One flaw is found in so much of the net's software that the UK government's national computer security advisor issued its own warning about it.

Users were urged to install the patches to ensure their machine was protected.

Bad bugs

The warnings about the critical vulnerabilities were issued as part of Microsoft's April security update. As well as these most serious bugs, Microsoft warned about three others that it only considered "important" - the second highest rating.

Most of the critical bugs involve weaknesses that, if exploited, would allow attackers to run their own code remotely on a target machine.

VULNERABLE SOFTWARE


Any malicious hacker who managed to do this would have complete control over the machine and could use this access to steal confidential information or use that machine as a spam forwarder or to attack other websites.

Microsoft said it was important for users to download the patches and apply them because often computer code written to exploit the loopholes quickly follows the issuing of a fix of a bug.

Users are less likely to fall victim to some of the bugs which require them to visit websites loaded with malicious code that exploits the flaws.

However, one of the flaws that Microsoft has flagged in its April update affects many of the net systems that use the IP networking protocol.

As its name implies IP, aka Internet Protocol, is integral to the way the net works.

Gerhard Eschelbeck, chief technology officer of Qualys which found the flaw, said the bug could let an attacker interfere with net traffic to mount attacks on websites by cutting people off from those sites. These are known as Source Quench attacks.

So far Microsoft, Cisco, Juniper, IBM and Red Hat have all issued advice and updates for products that tackle the bug.




E-mail this to a friend
Related to this story:
Warning over fake Windows update (08 Apr 05 |  Technology )
Security scares spark browser fix (16 Feb 05 |  Technology )
Gates says security is priority (28 Jan 05 |  Click Online )
Microsoft makes anti-piracy move (26 Jan 05 |  Technology )
Ex-hacker warns on computer security (08 Apr 05 |  Click Online )
Technical support for the neighbours (28 Mar 05 |  Magazine )

RELATED INTERNET LINKS:
Microsoft
Microsoft security updates
Microsoft on the IP bug
Qualys
National Infrastructure Security Co-ordination Centre
Niscc on IP bug
Cisco on IP bug
Cisco
Juniper
The BBC is not responsible for the content of external internet sites



SEARCH BBC NEWS: 

News Front Page | Africa | Americas | Asia-Pacific | Europe | Middle East | South Asia | UK | Business | Health | Science & Environment | Technology | Entertainment | Also in the news | Have Your Say |

NewsWatch | Notes | Contact us | About BBC News | Profiles | History

^ Back to top | BBC Sport Home | BBC Homepage | Contact us | Help | ©