Critical Altnet security flaw
p2pnet.net News:- Bad news for Altnet and Kazaa, not to mention Grokster.
A highly critical vulnerability in Altnet Download Manager, installed with both p2p apps, could give a hacker entry into users’ PCs via a malicious Web page, says Denmark’s Secunia here.
"The vulnerability is caused due to a boundary error within the ‘IsValidFile()’ method in the ADM ActiveX control." it says. "This can be exploited to cause a stack-based buffer overflow via e.g. a malicious web site by passing an overly long string to the ‘bstrFilepath’ parameter.
"Successful exploitation may allow execution of arbitrary code. The vulnerability has been confirmed on Altnet Download Manager 4.0.0.2 and 4.0.0.4. Other versions may also be affected."
Altnet is calling the fix an upgrade. If you need it, go here.
In the meanwhile Altnet ‘owner,’ Brilliant Digital Entertainment, has just announced that it’s suing the RIAA. And others.
September 10th, 2004 at 1:30 am
best solution is to just remove Altnet
September 10th, 2004 at 8:52 pm
Altnet is one big security “flaw”.
September 13th, 2004 at 9:28 am
great that somone sues the riaa…why aren’t more people
November 5th, 2004 at 11:05 am
HOW do you remove altnet from the registry? I;ve tried and tried but just get a message saying it can’t be deleted