Security Log File - July 2004

Internet Explorer Vulnerability 07/02/2004
The University is currently talking with other USNH institutions to assess the risk potential of a Trojan that is receiving media attention due to a recent banking scam. This Trojan exploits a vulnerability in the way Internet Explorer determines the security zone of a browser frame that is opened in one domain then redirected by a web server to a different domain. The risk assessment of this threat ranges from critical to low-profiled depending upon the source. Please review the links below for the details.

http://www.microsoft.com/security/incident/download_ject.mspx
http://www.us-cert.gov/cas/techalerts/TA04-163A.html
http://zdnet.com.com/2100-1105_2-5251981.html
http://www.internetnews.com/security/article.php/3374931
http://vil.nai.com/vil/content/v_101042.htm