DHCP Internet Security Fix

[RobRich]

The DHCP interface standard in Win9x can allow malicous users to redirect your network packets through another computer (for purposes of listening and analyzation). There is a freeware fix, however, and it can be found here:

http://www.analogx.com/contents/download/system/dhcpfix.htm

[socalgal]

VERY interesting RobRich and thanks for that heads up!!

I thought (could've sworn) that MS had a patch out for this a few months ago... but then I couldn't find any reference to it here http://www.microsoft.com/technet/security/current.asp What's up with MS on this anyway? http://www.sysopt.com/forum/frown.gif

Anyway, downloaded the 'fix' and upon activating, it opened as 'disabled'.. not a very comforting thought by any means, unless that's how the DHCP fix is defaulted upon startup.

And, I wonder if that's why my friend keeps getting his online banking log-in eaten without going anywhere... http://www.sysopt.com/forum/frown.gif

[This message has been edited by socalgal (edited 02-06-2000).]

[CMonster]

Why not just give the registry key out and let us disable/enable it ourselves? Can I trust this "fix" ?

[RobRich]

I'm with you Socalgal, I could have sworn I saw an official fix for something related to DHCP, but I guess it wasn't related. MS defualts this setting to open, meaning that your system is vunerable to this hack. CMonster, I would definitely trust the fix, as I have many programs from AnalogX, and haven't found anything unusual or dangerous about them. They actually have some cool freeware apps, just surf around their site. The reason they wrote a program is that many regular users are not willing to modify their registry themselves.

[This message has been edited by RobRich (edited 02-06-2000).]

[alien_from_io]

Aaagghh, I guess I outta read more carefully the topic of discussion. Afterwards I read through 100 topics of DHCP, NONE were about security.. I'll leave this boo-boo here for time being, maybe someone will benefit. SOCAL, if ya want, delete this!!! sorry This one has to do with source routing, @WindowsUpdates; Take me to your leader.

CRITICAL UPDATES No.1>
This update eliminates the "Spoofed Route Pointer" vulnerability in Microsoft Windows® 98. This vulnerability could allow a malicious user to obtain network or other information by performing source routing via your computer, even if source routing has been disabled. Installing this update will eliminate this vulnerability and provide additional control over source routing. Read this first No.2>
Installing this update will eliminate the "Server-Side Page Reference Redirect" vulnerability found in Internet Explorer. NOTE; THESE ARE ABBREVIATED VERSIONS OR MS WINDOWS UPDATES DESCRIPTIONS.....

[This message has been edited by alien_from_io (edited 02-06-2000).]

[This message has been edited by alien_from_io (edited 02-06-2000).]

[socalgal]

This needs to stay up awhile...

[CujoRbd]

RobRich-
in what way would i modify the registry to make it "closed". i am getting more experience every day in the registry (among other things) and would like to find out as much as possible to maybe modify this so that my puter is more secure... thank you in advance...


anywayz...