Nova falha crítica emerge no IE

[Mário Monteiro 179]

Nova falha crítica emerge no Internet Explorer

 

Quinta-feira, 18 agosto de 2005 - 10:29

 

IDG Now!

 

Em meio à onda de novos vírus que exploram uma falha de segurança no sistema Plug & Play do Windows, foi descoberta uma falha crítica no Internet Explorer, deixando o PC do usuário vulnerável a ataques e execução de códigos nocivos remotamente.

 

 

A falha, na realidade, ocorre por um problema ao iniciar o objeto Msdds.dll (Microsoft Design Tools Diagram Surface) como um controle Active X - mais especificamente, um erro que faz a memória ser corrompida.

 

 

Devido à natureza do problema, o ataque mais provável seria através de uma página da web desenvolvida especificamente para explorar a falha no objeto.

 

 

Como ainda não existe qualquer correção para o problema, e levando em conta a popularidade do navegador da Microsoft, empresas de segurança classificam a descoberta como uma vulnerabilidade crítica - o que, em linguagem mais clara, oferece risco acentuado ao usuário do Internet Explorer.

 

 

De acordo com a Secunia e a FrSIRT (French Security Incident Response Team), a brecha de segurança foi confirmada em sistemas Windows XP (com Service Pack 1 ou 2) com Internet Explorer 6, Office 2003 ou Microsoft Visual Studio.

 

 

Para a Microsoft, o problema está na divulgação do código que demonstra a falha, permitindo que hackers e criadores de vírus tenham conhecimento prévio sobre o problema antes que a companhia possa emitir uma correção apropriada.

 

 

Menos de uma semana após a Microsoft ter divulgado falhas no sistema Plug & Play do Windows (seis dias apenas), surgiu na web a família de vírus Zotob. Até então, a menor janela de tempo entre a divulgação de falha e surgimento de vírus havia sido de 18 dias, em maio do ano de 2005, quando apareciam na web os primeiros sinais do Sasser.

 

 

A recomendação da Secunia e da FrSIRT é habilitar controles Active X somente para websites confiáveis, dentro do item Opções de Internet, localizado no menu Ferramentas.

 

Fonte: http://idgnow.uol.com.br/AdPortalv5/Segura...nnelID=21080105

[Prog 183]

"Get the Facts... ops... Get the Firefox" ;)

 

Nada demais pessoal, rumo a liberdade.

[Guilherme Strich 0]

Poutz Grill,Mais ainda sou mais IE

[d.eleete 0]

Vulneráveis: Microsoft Visual Studio .NET Trial Edition - Microsoft Windows 2000 Advanced Server - Microsoft Windows 2000 Advanced Server SP1- Microsoft Windows 2000 Advanced Server SP2- Microsoft Windows 2000 Datacenter Server - Microsoft Windows 2000 Datacenter Server SP1- Microsoft Windows 2000 Datacenter Server SP2- Microsoft Windows 2000 Professional - Microsoft Windows 2000 Professional SP1- Microsoft Windows 2000 Professional SP2- Microsoft Windows 2000 Server - Microsoft Windows 2000 Server SP1- Microsoft Windows 2000 Server SP2- Microsoft Windows 2000 Terminal Services - Microsoft Windows 2000 Terminal Services SP1- Microsoft Windows 2000 Terminal Services SP2- Microsoft Windows NT Enterprise Server 4.0 - Microsoft Windows NT Enterprise Server 4.0 SP1- Microsoft Windows NT Enterprise Server 4.0 SP2- Microsoft Windows NT Enterprise Server 4.0 SP3- Microsoft Windows NT Enterprise Server 4.0 SP4- Microsoft Windows NT Enterprise Server 4.0 SP5- Microsoft Windows NT Enterprise Server 4.0 SP6- Microsoft Windows NT Enterprise Server 4.0 SP6a- Microsoft Windows NT Server 4.0 - Microsoft Windows NT Server 4.0 SP1- Microsoft Windows NT Server 4.0 SP2- Microsoft Windows NT Server 4.0 SP3- Microsoft Windows NT Server 4.0 SP4- Microsoft Windows NT Server 4.0 SP5- Microsoft Windows NT Server 4.0 SP6- Microsoft Windows NT Server 4.0 SP6a- Microsoft Windows NT Terminal Server 4.0 - Microsoft Windows NT Terminal Server 4.0 alpha- Microsoft Windows NT Terminal Server 4.0 SP1- Microsoft Windows NT Terminal Server 4.0 SP2- Microsoft Windows NT Terminal Server 4.0 SP3- Microsoft Windows NT Terminal Server 4.0 SP4- Microsoft Windows NT Terminal Server 4.0 SP5- Microsoft Windows NT Terminal Server 4.0 SP6- Microsoft Windows NT Workstation 4.0 - Microsoft Windows NT Workstation 4.0 SP1- Microsoft Windows NT Workstation 4.0 SP2- Microsoft Windows NT Workstation 4.0 SP3- Microsoft Windows NT Workstation 4.0 SP4- Microsoft Windows NT Workstation 4.0 SP5- Microsoft Windows NT Workstation 4.0 SP6- Microsoft Windows NT Workstation 4.0 SP6a- Microsoft Windows XP Professional Microsoft Visual Studio .NET Professional Edition - Microsoft Windows 2000 Advanced Server - Microsoft Windows 2000 Advanced Server SP1- Microsoft Windows 2000 Advanced Server SP2- Microsoft Windows 2000 Datacenter Server - Microsoft Windows 2000 Datacenter Server SP1- Microsoft Windows 2000 Datacenter Server SP2- Microsoft Windows 2000 Professional - Microsoft Windows 2000 Professional SP1- Microsoft Windows 2000 Professional SP2- Microsoft Windows 2000 Server - Microsoft Windows 2000 Server SP1- Microsoft Windows 2000 Server SP2- Microsoft Windows 2000 Terminal Services - Microsoft Windows 2000 Terminal Services SP1- Microsoft Windows 2000 Terminal Services SP2- Microsoft Windows NT Enterprise Server 4.0 - Microsoft Windows NT Enterprise Server 4.0 SP1- Microsoft Windows NT Enterprise Server 4.0 SP2- Microsoft Windows NT Enterprise Server 4.0 SP3- Microsoft Windows NT Enterprise Server 4.0 SP4- Microsoft Windows NT Enterprise Server 4.0 SP5- Microsoft Windows NT Enterprise Server 4.0 SP6- Microsoft Windows NT Enterprise Server 4.0 SP6a- Microsoft Windows NT Server 4.0 - Microsoft Windows NT Server 4.0 SP1- Microsoft Windows NT Server 4.0 SP2- Microsoft Windows NT Server 4.0 SP3- Microsoft Windows NT Server 4.0 SP4- Microsoft Windows NT Server 4.0 SP5- Microsoft Windows NT Server 4.0 SP6- Microsoft Windows NT Server 4.0 SP6a- Microsoft Windows NT Terminal Server 4.0 - Microsoft Windows NT Terminal Server 4.0 alpha- Microsoft Windows NT Terminal Server 4.0 SP1- Microsoft Windows NT Terminal Server 4.0 SP2- Microsoft Windows NT Terminal Server 4.0 SP3- Microsoft Windows NT Terminal Server 4.0 SP4- Microsoft Windows NT Terminal Server 4.0 SP5- Microsoft Windows NT Terminal Server 4.0 SP6- Microsoft Windows NT Workstation 4.0 - Microsoft Windows NT Workstation 4.0 SP1- Microsoft Windows NT Workstation 4.0 SP2- Microsoft Windows NT Workstation 4.0 SP3- Microsoft Windows NT Workstation 4.0 SP4- Microsoft Windows NT Workstation 4.0 SP5- Microsoft Windows NT Workstation 4.0 SP6- Microsoft Windows NT Workstation 4.0 SP6a- Microsoft Windows XP Professional Microsoft Visual Studio .NET Enterprise Developer Edition - Microsoft Windows 2000 Advanced Server - Microsoft Windows 2000 Advanced Server SP1- Microsoft Windows 2000 Advanced Server SP2- Microsoft Windows 2000 Datacenter Server - Microsoft Windows 2000 Datacenter Server SP1- Microsoft Windows 2000 Datacenter Server SP2- Microsoft Windows 2000 Professional - Microsoft Windows 2000 Professional SP1- Microsoft Windows 2000 Professional SP2- Microsoft Windows 2000 Server - Microsoft Windows 2000 Server SP1- Microsoft Windows 2000 Server SP2- Microsoft Windows 2000 Terminal Services - Microsoft Windows 2000 Terminal Services SP1- Microsoft Windows 2000 Terminal Services SP2- Microsoft Windows NT Enterprise Server 4.0 - Microsoft Windows NT Enterprise Server 4.0 SP1- Microsoft Windows NT Enterprise Server 4.0 SP2- Microsoft Windows NT Enterprise Server 4.0 SP3- Microsoft Windows NT Enterprise Server 4.0 SP4- Microsoft Windows NT Enterprise Server 4.0 SP5- Microsoft Windows NT Enterprise Server 4.0 SP6- Microsoft Windows NT Enterprise Server 4.0 SP6a- Microsoft Windows NT Server 4.0 - Microsoft Windows NT Server 4.0 SP1- Microsoft Windows NT Server 4.0 SP2- Microsoft Windows NT Server 4.0 SP3- Microsoft Windows NT Server 4.0 SP4- Microsoft Windows NT Server 4.0 SP5- Microsoft Windows NT Server 4.0 SP6- Microsoft Windows NT Server 4.0 SP6a- Microsoft Windows NT Terminal Server 4.0 - Microsoft Windows NT Terminal Server 4.0 alpha- Microsoft Windows NT Terminal Server 4.0 SP1- Microsoft Windows NT Terminal Server 4.0 SP2- Microsoft Windows NT Terminal Server 4.0 SP3- Microsoft Windows NT Terminal Server 4.0 SP4- Microsoft Windows NT Terminal Server 4.0 SP5- Microsoft Windows NT Terminal Server 4.0 SP6- Microsoft Windows NT Workstation 4.0 - Microsoft Windows NT Workstation 4.0 SP1- Microsoft Windows NT Workstation 4.0 SP2- Microsoft Windows NT Workstation 4.0 SP3- Microsoft Windows NT Workstation 4.0 SP4- Microsoft Windows NT Workstation 4.0 SP5- Microsoft Windows NT Workstation 4.0 SP6- Microsoft Windows NT Workstation 4.0 SP6a- Microsoft Windows XP Professional Microsoft Visual Studio .NET Enterprise Architect Edition - Microsoft Windows 2000 Advanced Server - Microsoft Windows 2000 Advanced Server SP1- Microsoft Windows 2000 Advanced Server SP2- Microsoft Windows 2000 Datacenter Server - Microsoft Windows 2000 Datacenter Server SP1- Microsoft Windows 2000 Datacenter Server SP2- Microsoft Windows 2000 Professional - Microsoft Windows 2000 Professional SP1- Microsoft Windows 2000 Professional SP2- Microsoft Windows 2000 Server - Microsoft Windows 2000 Server SP1- Microsoft Windows 2000 Server SP2- Microsoft Windows 2000 Terminal Services - Microsoft Windows 2000 Terminal Services SP1- Microsoft Windows 2000 Terminal Services SP2- Microsoft Windows NT Enterprise Server 4.0 - Microsoft Windows NT Enterprise Server 4.0 SP1- Microsoft Windows NT Enterprise Server 4.0 SP2- Microsoft Windows NT Enterprise Server 4.0 SP3- Microsoft Windows NT Enterprise Server 4.0 SP4- Microsoft Windows NT Enterprise Server 4.0 SP5- Microsoft Windows NT Enterprise Server 4.0 SP6- Microsoft Windows NT Enterprise Server 4.0 SP6a- Microsoft Windows NT Server 4.0 - Microsoft Windows NT Server 4.0 SP1- Microsoft Windows NT Server 4.0 SP2- Microsoft Windows NT Server 4.0 SP3- Microsoft Windows NT Server 4.0 SP4- Microsoft Windows NT Server 4.0 SP5- Microsoft Windows NT Server 4.0 SP6- Microsoft Windows NT Server 4.0 SP6a- Microsoft Windows NT Terminal Server 4.0 - Microsoft Windows NT Terminal Server 4.0 alpha- Microsoft Windows NT Terminal Server 4.0 SP1- Microsoft Windows NT Terminal Server 4.0 SP2- Microsoft Windows NT Terminal Server 4.0 SP3- Microsoft Windows NT Terminal Server 4.0 SP4- Microsoft Windows NT Terminal Server 4.0 SP5- Microsoft Windows NT Terminal Server 4.0 SP6- Microsoft Windows NT Workstation 4.0 - Microsoft Windows NT Workstation 4.0 SP1- Microsoft Windows NT Workstation 4.0 SP2- Microsoft Windows NT Workstation 4.0 SP3- Microsoft Windows NT Workstation 4.0 SP4- Microsoft Windows NT Workstation 4.0 SP5- Microsoft Windows NT Workstation 4.0 SP6- Microsoft Windows NT Workstation 4.0 SP6a- Microsoft Windows XP Professional Microsoft Visual Studio .NET Academic Edition - Microsoft Windows 2000 Advanced Server - Microsoft Windows 2000 Advanced Server SP1- Microsoft Windows 2000 Advanced Server SP2- Microsoft Windows 2000 Datacenter Server - Microsoft Windows 2000 Datacenter Server SP1- Microsoft Windows 2000 Datacenter Server SP2- Microsoft Windows 2000 Professional - Microsoft Windows 2000 Professional SP1- Microsoft Windows 2000 Professional SP2- Microsoft Windows 2000 Server - Microsoft Windows 2000 Server SP1- Microsoft Windows 2000 Server SP2- Microsoft Windows 2000 Terminal Services - Microsoft Windows 2000 Terminal Services SP1- Microsoft Windows 2000 Terminal Services SP2- Microsoft Windows NT Enterprise Server 4.0 - Microsoft Windows NT Enterprise Server 4.0 SP1- Microsoft Windows NT Enterprise Server 4.0 SP2- Microsoft Windows NT Enterprise Server 4.0 SP3- Microsoft Windows NT Enterprise Server 4.0 SP4- Microsoft Windows NT Enterprise Server 4.0 SP5- Microsoft Windows NT Enterprise Server 4.0 SP6- Microsoft Windows NT Enterprise Server 4.0 SP6a- Microsoft Windows NT Server 4.0 - Microsoft Windows NT Server 4.0 SP1- Microsoft Windows NT Server 4.0 SP2- Microsoft Windows NT Server 4.0 SP3- Microsoft Windows NT Server 4.0 SP4- Microsoft Windows NT Server 4.0 SP5- Microsoft Windows NT Server 4.0 SP6- Microsoft Windows NT Server 4.0 SP6a- Microsoft Windows NT Terminal Server 4.0 - Microsoft Windows NT Terminal Server 4.0 alpha- Microsoft Windows NT Terminal Server 4.0 SP1- Microsoft Windows NT Terminal Server 4.0 SP2- Microsoft Windows NT Terminal Server 4.0 SP3- Microsoft Windows NT Terminal Server 4.0 SP4- Microsoft Windows NT Terminal Server 4.0 SP5- Microsoft Windows NT Terminal Server 4.0 SP6- Microsoft Windows NT Workstation 4.0 - Microsoft Windows NT Workstation 4.0 SP1- Microsoft Windows NT Workstation 4.0 SP2- Microsoft Windows NT Workstation 4.0 SP3- Microsoft Windows NT Workstation 4.0 SP4- Microsoft Windows NT Workstation 4.0 SP5- Microsoft Windows NT Workstation 4.0 SP6- Microsoft Windows NT Workstation 4.0 SP6a- Microsoft Windows XP Professional Microsoft Visual Studio .NET 2003 Enterprise Architect Microsoft Visual Studio .NET 2003 + Microsoft Visual Basic .NET Standard 2003 + Microsoft Visual C# .NET Standard 2003 + Microsoft Visual C++ .NET Standard 2003 + Microsoft Visual J# .NET Standard 2003 Microsoft Visual Studio .NET 2002 + Microsoft Visual Basic .NET Standard 2002 + Microsoft Visual C# .NET Standard 2002 + Microsoft Visual C++ .NET Standard 2002 Microsoft Visio Professional 2002 - Microsoft Windows 2000 Professional - Microsoft Windows 2000 Professional SP1- Microsoft Windows 2000 Professional SP2- Microsoft Windows 98 - Microsoft Windows 98SE - Microsoft Windows ME - Microsoft Windows XP Home - Microsoft Windows XP Professional Microsoft Visio 2003 Standard Microsoft Visio 2003 Professional Microsoft Visio 2003 SP1Microsoft Visio 2003 Microsoft Visio 2002 Standard SP2Microsoft Visio 2002 Professional SP2Microsoft Visio 2002 SP2Microsoft Visio 2002 SP1Microsoft Visio 2002 Microsoft Visio 2000 Enterprise Edition SR1Microsoft Visio 2000 Enterprise Edition Microsoft Project 98 - Microsoft Windows NT 4.0 Microsoft Project 2003 SP1Microsoft Project 2003 Microsoft Project 2002 SP1Microsoft Project 2002 Microsoft Project 2000 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows NT 4.0 Microsoft Office XP Developer Edition Microsoft Office XP SP3+ Microsoft Excel 2002 SP3+ Microsoft FrontPage 2002 SP3+ Microsoft Outlook 2002 SP3+ Microsoft PowerPoint 2002 SP3+ Microsoft Publisher 2002 SP3+ Microsoft Word 2002 SP3Microsoft Office XP SP2- Microsoft Windows 2000 Professional - Microsoft Windows 2000 Professional SP1- Microsoft Windows 2000 Professional SP2- Microsoft Windows 2000 Professional SP3- Microsoft Windows 98 - Microsoft Windows 98SE - Microsoft Windows ME - Microsoft Windows NT Workstation 4.0 - Microsoft Windows NT Workstation 4.0 SP1- Microsoft Windows NT Workstation 4.0 SP2- Microsoft Windows NT Workstation 4.0 SP3- Microsoft Windows NT Workstation 4.0 SP4- Microsoft Windows NT Workstation 4.0 SP5- Microsoft Windows NT Workstation 4.0 SP6- Microsoft Windows NT Workstation 4.0 SP6a- Microsoft Windows XP Home - Microsoft Windows XP Home SP1- Microsoft Windows XP Professional - Microsoft Windows XP Professional SP1Microsoft Office XP SP1- Microsoft Windows 2000 Professional - Microsoft Windows 2000 Professional SP1- Microsoft Windows 2000 Professional SP2- Microsoft Windows 98 - Microsoft Windows ME - Microsoft Windows NT Workstation 4.0 - Microsoft Windows NT Workstation 4.0 SP1- Microsoft Windows NT Workstation 4.0 SP2- Microsoft Windows NT Workstation 4.0 SP3- Microsoft Windows NT Workstation 4.0 SP4- Microsoft Windows NT Workstation 4.0 SP5- Microsoft Windows NT Workstation 4.0 SP6- Microsoft Windows NT Workstation 4.0 SP6a- Microsoft Windows XP Home - Microsoft Windows XP Professional Microsoft Office XP - Microsoft Windows 2000 Professional - Microsoft Windows 2000 Professional SP1- Microsoft Windows 2000 Professional SP2- Microsoft Windows 98 - Microsoft Windows ME - Microsoft Windows NT Workstation 4.0 - Microsoft Windows NT Workstation 4.0 SP1- Microsoft Windows NT Workstation 4.0 SP2- Microsoft Windows NT Workstation 4.0 SP3- Microsoft Windows NT Workstation 4.0 SP4- Microsoft Windows NT Workstation 4.0 SP5- Microsoft Windows NT Workstation 4.0 SP6- Microsoft Windows NT Workstation 4.0 SP6a- Microsoft Windows XP Home - Microsoft Windows XP Professional Microsoft Office 2000 Korean Version Microsoft Office 2000 Japanese Version Microsoft Office 2000 Chinese Version Microsoft Office 2000 SP3- Microsoft Windows 2000 Professional - Microsoft Windows 2000 Professional SP1- Microsoft Windows 2000 Professional SP2- Microsoft Windows 2000 Professional SP3- Microsoft Windows 98 - Microsoft Windows 98SE - Microsoft Windows ME - Microsoft Windows NT Workstation 4.0 - Microsoft Windows NT Workstation 4.0 SP1- Microsoft Windows NT Workstation 4.0 SP2- Microsoft Windows NT Workstation 4.0 SP3- Microsoft Windows NT Workstation 4.0 SP4- Microsoft Windows NT Workstation 4.0 SP5- Microsoft Windows NT Workstation 4.0 SP6- Microsoft Windows NT Workstation 4.0 SP6a- Microsoft Windows XP Home - Microsoft Windows XP Home SP1- Microsoft Windows XP Professional - Microsoft Windows XP Professional SP1Microsoft Office 2000 SP2- Microsoft Windows 2000 Professional - Microsoft Windows 2000 Professional SP1- Microsoft Windows 2000 Professional SP2- Microsoft Windows ME - Microsoft Windows NT Workstation 4.0 - Microsoft Windows NT Workstation 4.0 SP1- Microsoft Windows NT Workstation 4.0 SP2- Microsoft Windows NT Workstation 4.0 SP3- Microsoft Windows NT Workstation 4.0 SP4- Microsoft Windows NT Workstation 4.0 SP5- Microsoft Windows NT Workstation 4.0 SP6- Microsoft Windows NT Workstation 4.0 SP6a- Microsoft Windows XP Home - Microsoft Windows XP Professional Microsoft Office 2000 SP1- Microsoft Windows 2000 Professional - Microsoft Windows 2000 Professional SP1- Microsoft Windows 2000 Professional SP2- Microsoft Windows ME - Microsoft Windows NT Workstation 4.0 - Microsoft Windows NT Workstation 4.0 SP1- Microsoft Windows NT Workstation 4.0 SP2- Microsoft Windows NT Workstation 4.0 SP3- Microsoft Windows NT Workstation 4.0 SP4- Microsoft Windows NT Workstation 4.0 SP5- Microsoft Windows NT Workstation 4.0 SP6- Microsoft Windows NT Workstation 4.0 SP6a- Microsoft Windows XP Home - Microsoft Windows XP Professional Microsoft Office 2000 - Microsoft Windows 2000 Professional - Microsoft Windows 2000 Professional SP1- Microsoft Windows 2000 Professional SP2- Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows ME - Microsoft Windows NT Workstation 4.0 - Microsoft Windows NT Workstation 4.0 SP1- Microsoft Windows NT Workstation 4.0 SP2- Microsoft Windows NT Workstation 4.0 SP3- Microsoft Windows NT Workstation 4.0 SP4- Microsoft Windows NT Workstation 4.0 SP5- Microsoft Windows NT Workstation 4.0 SP6- Microsoft Windows NT Workstation 4.0 SP6a- Microsoft Windows XP Home - Microsoft Windows XP Professional Microsoft .NET Framework 1.1 SP3Microsoft .NET Framework 1.1 SP2Microsoft .NET Framework 1.1 SP1Microsoft .NET Framework 1.1 Microsoft .NET Framework 1.1 ATI Catalyst Driver Não Vulneráveis: NENHUM!!

[d.eleete 0]

http://www.microsoft.com/technet/security/...ory/906267.mspx

[Mário Monteiro 179]

Não Vulneráveis:  NENHUM!!

eita lista extensa...mas poe o outro lado tambem cade a lista dos open source vulneraveis???

[Mário Monteiro 179]

eita lista extensa... mas poe o outro lado tambem cade a lista dos open source vulneraveis???

Com certeza existe mas é menor! E o que mais importa: tempo de resposta na solução! O IE já nasce com problemas e a MS sabe mas solta assim mesmo... :blink:

sem exageros Alves

 

o apache é o servidor mais usado no mundo, mas ele tem mais falhas que o IIS

 

e o apache mesmo na ultima versão ja veio com falhas ou seja já "nasceu com problemas" ou seja tem muita coisa que mesmo sendo muito usado que é livre, open source ou como queira chamar que é padrão microsoft de qualidade tambem

[Prog 183]

Não ententendi... que tipo de comparação é esta?

 

Em outro post ali, falaram sobre confiabilidade etc e talz, que uma era mais irada que a outra só pq tinha um nome por tras... então esta não deveria ter nenhuma vulnerabilidade, ou será que é tão dificil ajeitar um problema no Internet Exploder.

 

Quer que eu liste as vulrerabilidades de qual módulo??

 

Veja bem pq é relativo... você pode ter uma falha num determinado servidor de FTP, só que existem 32 servidores de FTP open sources diferentes, ai, fica a questão... se existe uma falha em 1 deles, este deve ser considerada uma falha do sistema operacional?

 

Linux Fedora Core 4 -> http://secunia.com/product/5251/

FreeBSD -> http://secunia.com/product/1132/

OpenOffice -> http://secunia.com/product/302/

Apache Tomcat -> http://secunia.com/product/3571/

VsFTP -> http://secunia.com/product/3268/

mod_ssl -> http://secunia.com/product/252/

Postfix -> http://secunia.com/product/915/

 

Todos eles estão sujeito a falhas, mas as falhas não persistem por anos a dentro como se aquilo fosse algo absolutamente normal. Existem falhas, por exemplo, no Internet Exploder que já fizem anos.

 

Algumas falhas em sistemas abertos podem ser "facilmente" resolvidas com configurações administrativas, como fechar uma porta pelo firewall, desistalar ou desabilitar um determinado módulo ou setar permissões especiais em pastas ou arquivos.