bugtraq - WindowsUpdate sending unsigned ActiveX ?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date: Fri, 8 Jul 2005 19:50:25 +0200 (CEST)
From: Nestor Burma <goudron_et_plumes@...oo.fr>
To: bugtraq@...urityfocus.com
Subject: WindowsUpdate sending unsigned ActiveX ?

Hello,

As for today (July 8th), when contacting Windows
Update, our Microsoft fiends sends back an _unsigned_
ActiveX (URL is
http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1120844700102)

Seems quite weird, especially since the web page says
(as usual) to check that ActiveX controls are properly
signed by Microsoft.

Is it "just me" (I never had this problem before), or
some more general trouble somewhere in Redmond ?

Tia,

-- Nb

___________________________________________________________________________ 
Appel audio GRATUIT partout dans le monde avec le nouveau Yahoo! Messenger 
Téléchargez cette version sur http://fr.messenger.yahoo.com