‘download-eject’ fix coming
p2pnet.net News:- Microsoft says it’s finally going to provide a permanent fix for the download-eject security flaw used by Russian hackers against servers running Internet Information Services 5.0 and Internet Explorer.
Microsoft Watch’s Mary Jo Foley said the virus was, "plaguing Internet Explorer users across the Web" and although security program manager Stephen Toulouse told the Seattle Post-Intelligencer a patch was coming, he couldn’t say when it would arrive.
Microsoft found a way to clean computers that were already infected with download.ject, but couldn’t stop it from proliferating.
However, "Microsoft executives say a comprehensive patch for Internet Explorer will be released next week, finally plugging the hole that hackers exploited in a sneak attack last month," says InformationWeek.
"We’re targeting the release within the next week," it quotes Dean Hachamovitch as saying in the "security-oriented briefing hosted monthly by Mike Nash, the head of Microsoft’s security efforts", adding:
"We’re doing our final checks right now."
