Karl
Wed Dec 17 13:19:57 CST 2003
IE vulnerabilities should not really affect servers, because you should not
be allowing web browsing / email checking from your servers.
If you're talking about the IE URL encoding problem, that issue needs to be
fixed eventually, but I really am in no hurry. Anyone who is foolish enough
to fall for such an exploit isn't going to be checking the Address: field
anyways, so it doesn't matter what is in the Address field. And the web
site still respects the security settings in the security zone
You're right, there are probably at least 30 to 50 unpatched IE
vulnerabilities out there. [And yet I still use IE myself.] It should be
noted that the same things you can do to your IE security zones to harden
your browser protect you against a large number of the unpatched IE
vulnerabilities both now and in the future.
"Ron" <anonymous@discussions.microsoft.com> wrote in message
news:026b01c3c4ce$5475a8d0$a301280a@phx.gbl...
> Anybody have any clue as to when MS will release the
> December patch updates? I know IE has a serious exploit
> with no patch. I have a room full of servers that are curious.
>
> Thanks
> Ron