March 26, 2007
Microsoft details network hack in Windows
Attack could be used to divert Web traffic
Recommend ThisMicrosoft Corp. is warning of an attack that could be used to divert someone's Web traffic through a malicious proxy server.
Applications such as Internet Explorer use the Web Proxy Automatic Discovery (WPAD) protocol to find a file that enables a browser to configure its proxy settings. However, it's possible to plant a configuration file that would route traffic through a malicious proxy, the company said.
A malicious WPAD.dat file could be placed in the Domain Name System (DNS) or the Windows Internet Naming Service (WINS), Microsoft said. The client application looks in DNS or WINS to resolve the name of the hosting that has the proxy configuration file.
Once the bad file is there, WPAD clients "may be able to route their Internet traffic through a malicious proxy server," Microsoft said.
Microsoft details on its support site how administrators can configure DNS and WINS on their servers to help prevent what it calls "malicious registrations" of WPAD files. The fix is for Windows Server 2003 and Windows 2000 Service Pack 4.
Microsoft wasn't immediately able to comment.
White Paper
D2D Virtual Tape Library Replication Primer
This whitepaper explains the terminology and concepts behind Data Replication technologies and establishes some sizing rules through worked examples. Learn the new paradigm in disaster tolerance—protect data anywhere.
Download now »
White Paper
An Alternative to Virtualization for Datacenter Cost Savings
Server virtualization is a popular option for dealing with mounting datacenter costs. Another equally promising approach is the use of an Application Delivery Controller. Citrix NetScaler provides a low-cost way for organizations to reduce their server count and accrue cost savings from a reduction in space, cooling, power and personnel.
Download now »
White Paper
Why Your Firewall, VPN, and IEEE 802.11i Aren't Enough to Protect Your Network
The emergence of WLANs has created a new breed of security threats to enterprise networks.
Included in HP ProCurve WLAN solutions is security technology that alleviates threats from WLANs through:
* Monitoring wireless activity inside and out of the enterprise
* Classifying WLAN transmissions into harmful and harmless
* Preventing transmissions that pose a security threat to the enterprise network
* Locating participating devices for physical remediation
White Paper
Bringing the Edge to the Data Center
Effectively address data protection challenges, implementing solutions that help store and protect business–critical data while cutting costs and improving efficiency and reliability.
Download now »
- Lower the Cost and Complexity of a Mobile Workforce through Automation | Webcast
- Managing Mobility: Improve Data Security, Compliance and Manageability – IDC Video Podcast | Webcast
- Retooling IT for a Mobile Workforce: The Importance of Automation – IDC Analyst Connection | White Paper
- The Service-Oriented IT Helpdesk: Keeping Customers Happy and Lowering Support Costs | Webcast
- Tackling the Top Five Network Access Control Challenges | White Paper
Sign up to receive Platforms Resource Alerts
Return on Information: Google Enterprise Search pays you back. Get the facts.Analytics: Use your data to drive insights that enable better decisions.See how AT&T can help protect your network. Make IT Work As One at novell.comHP ProLiant G6 Servers. Perform like a superstar, Save like an accountant.HP ProLiant G6 Servers. Perform like a superstar, Save like an accountant.Unified Communications: Thoughts, Strategies and Predictions. Join the discussion.Increase UPS efficiency without sacrificing protectionIn less than 45 minutes, Palisade Systems protects your dataA smarter approach to IT is needed. That smarter approach is IBM CloudBurst.
Complimentary Energy Efficiency Kit - Cut Energy Costs NowRestrict internet access with GFI WebMonitor™. Now 30% Off! www.gfi.com/web-filterToday’s IT means business. New eBook shows you how to align your IT investments.A new level of interoperability. Make IT Work As One at novell.comLimited-time offer: Save up to $100 on Polycom phones. 64-page prescriptive guide to security, compliance, and IT operations.Learn about Foundations of Green IT, from CTO Marty Poniatowski802.11n Drives an Architectural EvolutionSee IBM CloudBurst's self-service user interface in actionVideo: Simplifying the IT environment for better productivity with IBM
