"All I can tell you is that we take all these reports very seriously and we're looking into it," said Derick Mains. "We need information from the folks in Israel," he said.
While ICQ was one of the first widely used instant messaging (IM) clients, it has since been supplanted in popularity by other clients including AOL's Instant Messenger and similar products from Microsoft and Yahoo. The client remains popular, however, and the company's Web site boasts of more than 150 million registered users.
In the absence of a software patch users can best protect themselves by disabling the POP3 and "Features on Demand" services on their ICQ Pro client, Nuwere said. Where ICQ is used in corporate environments, mail server filtering products can also be configured to stop messages containing long subject lines and other characteristics that might contain an attempted buffer overflow attack, Nuwere said.
However, the more time that passes between the disclosure of the problems and a software fix from AOL, the more likely attackers are to exploit the ICQ vulnerabilities, Nuwere said.
"The problem with most vulnerabilities is user awareness. This could be fixed tomorrow but that doesn't guarantee that users will download the fix tomorrow," he said.
This whitepaper explains the terminology and concepts behind Data Replication technologies and establishes some sizing rules through worked examples. Learn the new paradigm in disaster tolerance—protect data anywhere.
Download now »
Server virtualization is a popular option for dealing with mounting datacenter costs. Another equally promising approach is the use of an Application Delivery Controller. Citrix NetScaler provides a low-cost way for organizations to reduce their server count and accrue cost savings from a reduction in space, cooling, power and personnel.
Download now »
The emergence of WLANs has created a new breed of security threats to enterprise networks.
Included in HP ProCurve WLAN solutions is security technology that alleviates threats from WLANs through:
* Monitoring wireless activity inside and out of the enterprise
* Classifying WLAN transmissions into harmful and harmless
* Preventing transmissions that pose a security threat to the enterprise network
* Locating participating devices for physical remediation
Effectively address data protection challenges, implementing solutions that help store and protect business–critical data while cutting costs and improving efficiency and reliability.
Download now »
Sign up to receive InfoWorld Resource Alerts
2 Recommendations
