Author Archive for Matthias Braekevelt

MSN Cards store opens

This morning (Thursday, Sept. 09th) the MSN Cards store opened in France. The store was sold out in less than 2 hours, a great success!

If you want to increase your chances on getting Buddy Cards, come (very) early 7:00 AM every Thursday, Friday and Saturday!

Real business cards for kids

Because inviting or accepting someone on your list really means something, MSN France is going to give out REAL business cards (code named BuddyCards) with your Passport address printed on it. This would be free, and you would recieve them by real mail.

More news later on!

Jitux worm on the prowl

Windows Live Messenger

A new worm is making its way through the Internet via MSN Messenger. The Jitux worm (written in Visual Basic), once executed, sends itself to all Messenger contacts on a user's computer. The contacts receive a message from the infected user that contains a link; when a user clicks on the link, the executable, “jituxramon.exe,” is downloaded onto the user's machine.

Read More at Symantec, McAfee or eWeek

MSN Messenger information leakage weakness

Windows Live Messenger

It has been reported that the problem exists in the MSN client during file transfer invitation requests. The client improperly processes incoming requests and may send sensitive data such as the IP address of the client to the remote host without first identifying that host. The expected behavior is that the client must accept the file transfer prior to revealing its IP address. However, by exploiting this weakness, it is possible to obtain the client IP address prior to the client user accepting the file transfer request. This presents a security threat because it will allow an attacker to enumerate IP addresses of client users.

This information could be used to launch direct attacks against the client system and network.

MSN Messenger versions 6.0.0602 and prior and all versions of Windows Messenger have been reported to be prone to this issue. Other versions of MSN Messenger could be affected as well.

MSN Messenger 6.1 beta

This beta version introduces the feature to change the conversation window color, hiding the title and menu, and other minor additions.