Ŀ
 Presents
  ڿĴ VMag, Issue 2, 1 June 1998
  

(c) Maxim V.Stepin

                  ᭮ Windows  Internet.

                    ᨫ쭮 ᫥ ,
                 Windows    Interenet.

           ᫥   p   ⠫   祭      ,  
p樮  ⥬  Windows   NT    Windows   95  ᮤp   
p譮⥩   p p  IP ,      
  諥             p
⭮  짮⥫.  ⢨⥫쭮,  97     p 
pאַ  ⠪  襫  ᮩ      p   ppp
pp:  p  p㧥p InternetExplorer  NetscapeNavigator,  
訡  p C.  H   ⠪  ⠫쭮.     p⠢
  ᥡ    ᭨  㯭  몮  祣 -⠪ ᫥
,  祣 .  ⠭   p  짮⥫,
      p      ⥬  pp. 
⥪      Windows    Windows  NT    Windows  95.
p᪨    ᪠  ⭮     ⥬  p
⥯.

        ⠪,  p⠢ p⢥ ᭮:

        H 묨  p⠢ p 騥   
  WWW  p㧥p.    ᠬ  ppp:  Internet  Explorer  
Netscape Navigator.

          訡    ⮬,     p⢮       
ᮢp襭  砩,  p      ᠩ,  - 
 p⨢.  筮,   室 ⮫쪮   ᠩ  p㯭
  ,    p    - pp 
p ᢮ ᪮즥  ,  뫪  뫪.

        祭  p쥧  訡      Internet Explorer pᨨ
3.00  3.01. C    ᫥饬:     p砭   
䠩  pp.url .lnk  믮  襬 p,  p祬
ᤥ      ᮢp襭 ⭮   .   ⭮, 
ᮤp  䠩  , ⮫쪮   p 諥.
p᪨ ,   p  襩 p樨.  ⮬ ᥬ
짮⥫ 㪠  pᨩ ⥫쭮  p 
pp ᯮ짮 㪠 pᨨ IE   p  IE 3.02  
 ,  㯥  fix -
http://www.microsoft.com/ie/security/update.htm

          IE  3.02  ⮦    ᮫⭮ ᥭ. p ⭠
p ᭮   離 PowerPoint   Internet Explorer. C   
᫥饬: 㬥 PowerPoint ᯮᮡ 믮 譨 ,  
IE  ᯮᮡ  ⮡p  PowerPoint-᪨  㬥   p
쥪.  C⢥⢥,   p  ⠭   PowerPoint   
믮  -  譨     ⮬᪨,  p   p
pᬮp   p   ᮤp饩   㬥   PP.   Fix  㯥  
http://www.microsoft.com/ie/security/powerpoint.htm

        p    ⠭         p,    ᯥ     
NetscapeNavigator.  筮 p ⠫ ⭠ 訡  
  ᪨  pp⮬.       
䠩  p 襣 㯠  ᠩ. 孨᪨    믮
p p   , 塞 ᮤp   䠩
  뫠묨    .  p  Netscape  ⠪ ᫥ p
⥫ p㣠 Microsoft      p  p  p㣨
p⥫  p㬥   ᭮  ⨢p     ⥬,    
室     ⮣ 䠩, p  ,  
p窠 ppp 䠩 ⨯ autoexec.bat    
᫠.  H    ,    䠭⠧p㥬:    ᯮ
Windows  95;  設⢮      ⠢      C;  
ᯮ dial-up scripting  tools; 筮 p  ppp
p⨪      ⠭p⭮  p  pppmenu.scp     ⥪⮬
p뢠      p    ᢮  pp. ᫨ ᮮp㤨
p⥫ ᠩ  - p⨪  -) ,   p   
讬  p,    ᪮p  ᥣ    dial-up  ᠬ 㦥 
p .   ⮫쪮  p p襤訩     p
ᯮ짮 ⮩ "p" 訡 Netscape.

        Gp  訡   IE 4.0   NetscapeCommunicator
ᥩ  ᪮쪮  pp,  ᪮  㯭  pᨨ 
  -p.    p  p  ᤥ  .  IE
  室        p,  騥     ⥣p樨   IE  
p樮 ⥬.   p  Netscape p  㤥 ⥫쭮
,    ᪮,      襣  墠 p뭪 p㧥p
p Microsoft, ᫮  짮⥫ Netscape 㤥  㬥, 
p p p 稥   ⢨ p   NetcapeNavigator,
Communicator  "- ⠬  ⮬ 㤥" 㤥  ⮫ .

        p  p  ᭮    訡,  
     "pᯥ⨢"  孮,   筮       web
p窨 p⥫쭥 , , ᭥.

                                Java.

           㦥   筮       孮,    ᯥ譮
p p Sun.  ᯥ  p ,   Microsoft  
㦤 業p java,    ᮮ⢥  筮 pᨢ
⨪ MS.   ᠬ ᢮   java 筮 ᭠.   
ᯥ䨪樨  ᠭ,    java  applet         
䨧᪨ ppᠬ p        p㣨 p.
⢥  p室      p p⨢ 
 p    讥 ⢮ , 祬  맢 ᢮
  ⢥    p  ⥬.     , 
⥯  IE 3.02, ⥫쭮   祬  p p  IE
   NetscapeNavigator. ,  IE 3.02 p ⪥ ⥭ 䠩  
쭮  ᪠  p室   ᪫祭.    ᫥⢨,   ,
ᯮ騥 譨  䠩   p⨭,   p p  ᪥ 
᪠.      饬-  p㤭   pp稪 java ⮢.
Hp ᯮ⢮ 뢠  p p ( ⮬  ᫥
  Microsoft)  㢥  ᪮p  믮  java ⮢,  
᭨ p ᭮. H  ,  㢨.

                              ActiveX.

        C  孮  뫠  㬠  Microsoft   ⢥  Java.
C쭠  p  ActiveX  controls    ⥫쭮     p
  ᪮p 祬  java, ᫠ p  p易  
p   p⭮   p          ᫠    ⥬
᭮. C p  窨 p ActiveX  control p⠢
  ᥡ    dll  믮    p᭮  pp⢥  IE 
  p᪨   ᥬ ppᠬ PC p  COM p䥩.
᭮      ActiveX   ᭮      p樯  p.  p
᪠稢    ⠫樥  ActiveX  control   p
p䨪    p p⥫,   ᫨    p
p⥫,  control  p.  筮  p
ppp  ⮩  孮  ᮮ饭      p 
⥬ ᭮      﫮.      ᮢ⮢
祭  p  ⭮    ActiveX,  ⥭樠쭮  ⠬  
 ᭮.

                             JavaScript.

        C  p  ⮩ 孮,     Netscape  
Microsoft  筮  p       ⠭p     p
JavaScript,  㦨 p稭     web  p.
室    㪠  p  宦    : 騥  
p         IE    NN.  ᫨ java  믮 
p  p㠫쭮  設  java    p祭   ﬨ, 
JavaScript 믮 www  p㧥p , ᮮ⢥⢥,  ⥮p᪨
      ,    www  p㧥p,    
  樨    䠩    쭮  ᪥    
뫪  ᢮  p樨  㤠   . C⢥ 
  ⢨  㦥  뫠  ppp   pp Netscape
Navigator           稫      p           -      c.
http://www.aleph2.com/tracker/tracker.cgi  p  砫 
⮬,     ᫥  饭   p  ᠩ   -  稭
pp -䠩 襩 p   , p ⥬   뫮
 㤨 ᬮp. 㯭 ⪨  Netscape -
http://www.netscape.com/flash4/assist/security/index.html

Microsoft - http://www.microsoft.com/ie/security/update.htm

        H p   ᭮   ᫥  訡   p㧥p  
⠢  訡    p樮  ⥬.    ᭮ ,
⮬   室 p  ⠪    ,     
砩    pᮢ, p ⠪.   ᫨
   "p⥫" ⠪ ᭮ 室  p .

        C p  ᯮᮡ ⠪ 稫   Winnuke:
(c. http://www.darkening.com/winnuke/)  p  ⠪  ᯮᮡ
 ᪮쪮     뢥   p www.microsoft.com. Hp
p  ᫥  ⮣      ⢮p  騩 謠p.  ᮢ
㡨⢮ pp   Windows  NT. ⠪,     ⠪. Hp
  묨   묨  p뫠묨     TCP   ᮥ   c⠭p
pp  ⠪  p  p  (Out  Of  Band)  . H
p  p⮢  ⮢  TCP    p    㫥   urgent
pointer.  Y  設⢠  PC    ⠭  Windows   p
⥢  p⮪  NetBIOS,  p  ᯮ    ᢮ 㦤 3 IP
p:  137,  138,  139.    ᭨,  ᫨ ᮥ  Windows
設  139 p  ᫠ 㤠 ᪮쪮  OutOfBand ,  
p  NetBIOS-           ⨬ 묨 p
訢    pp㦠  設.    Windows  95   筮
룫廊  ᨭ  ⥪⮢ p, ᮮ騩   訡   pp
TCP/IP   p     pp㧪 C. NT  4.0 
p  pp㦠, NT  4.0  p p   믠
 ᨭ  p. C   p樨     p ⠪ ⠪ 
Windows NT 3.51  Windows 3.11 for Workgropus.   祭  讥
⢮  pp    ⠪  ⨬  ᯮᮡ, p᪨  
p.  Hp        p  ⠪      讥
⢮ p .  ᫨  室  p   p
ᮥ  쭮      ⠭ Windows 95,  
p⥩訩 ᯮᮡ   p  p    Microsoft  Network.
 ⠪ ᤥ    譥  p    p, 
WinNuke  ⠪  䨣p     p.  C   pp,
p  ᫥    ⪨  p  ,      p
 ⢥ , ᪮p  ᥣ ᯮ. 樠 ⮤  
Microsoft        ⠭     OOB    ⪨         Windows'95
(http://www.microsoft.com/kb/articles/q168/7/47.htm)         p쥣
Serivice Pack  NT v4.0 (ftp://ftp.microsoft.com/bussys/winnt/
winnt-public/fixes/usa/nt40/ussp3/).
    SP3    WinNuke  易  筮  ᥫ  p.   
᭨  ᪮p   ᫥  ᪠   SP3,  饭     p
Apple  WinNuke   ᯮ  p     p   .  p稭
⮣   㦨   ⢮      p   ⠭p⮢    IP
,  ᮤp騥  OutOfBand  .    ⠭p    Berkley 
⠭p,  ᠭ    RFC  1122.  ⫨稥    ⮨    ⮬,  
UrgentPointer          p.        ⢨⥫쭮,
UrgentPointer         p   㤥   ⫨  p  
.  p⨩  p  ,  騩    "᢮"  OOB  ⮢,
  ⥭   p⮢  ⮢   p㣮  ⠭p.   ⮬
 p ᫥ SP3 襫 ⥫ OOB fix.
(. ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/nt40/
hotfixes-postSP3/oob-fix/).
   ᫥   ⬥,      ᠬ   ⢮  OOB  ,
⭮⥫쭮  WinNuke,  뢠  筮    p 
      ⢮      ⠭p⮢,     p  ⢨
⠭p.   ⮬   pp   p   p  pp,
ᯮ饩  OOB      .    㬭    p
      ᯮ짮   OOB         ᢮   pp.  
⢨⥫쭮,   ᫨       ᠭ   p쭮    WinNuke
筮  ᠬ  p  㭪権  p    TCP/IP  (pp
  PERL    7  p),     ⮡  p  SP3   p
p    TCP       p,     ᪠   ⠭p
WinNuke    p  p饩  p  p OOB. ,
p  ⠪  ⠪       ⮫쪮   139  p,   筮
⭮,    MS  DNS  (53  p)  ⮦  p  OOB  묨, 
p    㡥,     p  ⥢  pp   
㡨 ⨬ ⮤.

        C騩  筮     ᯮᮡ   ⠪   뢠
PingOfDeath  SSPing (. http://www.darkening.com/ssping)  C魮
  ᫥饬:  設 p 뫠 ᨫ쭮  pp
ICMP    讣  pp  (64KB).  樥  Windows  ⥬  
祭  ⠪      p筮 ᠭ, 
  p. pp   ⠪ p 㯭     
室  C    ᪠ 䠩  p pᨩ  unix.
L⭮,    ⫨稥  WinNuke  p⢮ ⠪ ⠪   
 ⮫쪮 Windows  設, ⠪ p  MacOS  p  pᨨ
unix. p⢠  ⠪ cᮡ  ⠪   ⮬,   筮 firewall
p᪠  ICMP  ,    ᫨  firewall   p  䨫p
pᮢ  뫠⥫,    ᯮ  p  p  spoofing 
    ⠪  firewall.  H⮪  PingOfDeath   ⮬,  
 ⠪  p᫠   64KB  ,     
p  p    p⠡  pᨩ,   筮
p   ᪮쪨 ⤥쭮   筮   筮
.  ⮩  p稭   p 䨪,  뢠
PingOfDeath 2,    뫪 ᪮쪨 64KB ICMP  ⮢.
樠   ⪨   㯭      Microsoft      Windows  95
(ftp://ftp.microsoft.com/Softlib/MSLFILES/VIPUPD.EXE),
NT v4.0 (ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/
NT40/hotfixes-postSP3/icmp-fix/icmpfixi.exe) 
NT v3.51 (ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/
nt351/hotfixes-postSP5/icmp-fix/ICMP351I.EXE).
C  ,      p  堬 ⠭  ⮪
᭨  OOB  fix,  ⮬  ᫥  ⮣  室  㤥    p
⠢    WinNuke.  L⭮,   fix   95   p⠥,
   p   p       ,    ⮬   ⠥    p⨢
ᯮ짮  "樠"    筮  p⥫  䨪  ,
騩    http://www.darkening.com/ssping/pingfix.zip.  L筮   
ᥡ,    p訫      p뢠  ⮩ p,  p p쭮
 ⠪ ⠪  .

           p㯯 訡  Windows NT  4.0 p 
SP3,  p    p    筮  砫 ᫥⢨.
H p 뫠 ᫥: 室 telnet-  135 p,  
뫠   ᪮쪮   ᨬ.   ᫥   ⮣   p㧪  pp
p⭮ p 100 %   pp㧪.    ᯮᮡ p
 p,     p ⠢ SP3, ᪮   砥
 ᥡ p ⮣  祭  p㣨    饩.

        C p㯯 ᭮⥩  p    p Windows
 Internet  ⠪  ᥢ p.  砩  ⠪
⠪ (WWW p㧥p -   ᠬ ppp pp   p
   p⮬)   㦥   pᬠp.   p   㤨    p
᭮  易    p㣨  pﬨ    pp p㣮
⭮ : Microsoft Internet Information Server.

        C ᪮쪮 ᯮᮡ p p pp  IIS.

        筮  p    p     ᯮᮡ     
telnet-    80  p       GET "../..". 樥  
 㤥 ᠭ HTTP pp.

        p㣮  ⮤  pᨨ     IISSlayer.  p
 97  www.microsoft.com  뢥  p  ᪮쪮  
p⢮ ⠪ ⠪ ⨯. C   ᫥饬: p p   IIS
祭    URL  (4  -  8KB)  pp  ᠥ    pp 
쭥訥 p. p  ⮬,    pp URL   
p⭮  pp,  ⮬  pp-㡨  稭  p
  pp  p    ⥯  㢥稢  pp 
    p  ,      pp-p.  稫
ppp   java   applet   뢠騩   IISSlayer.class  (.
http://www.ntsecurity.net/security/tools/IIServerSlayer.class) p
 ⢫  ⠪. ⪠ 㯭  Microsoft.

        筮    뢠      ᯮᮡ  pᨩ  
Windows   ⥬      ⤥   p   (⨯   ⭮,  
p᪮  訡  NetscapeMail,  饩    -
 襣 ),   ᠬ   p  ppp
p 㦥 ᢥ饭.  ᫨  ⨫  ᥣ  襯p᫥,
  ,   p稭   p 㤥   祭 . 
筮  ᥣ   ⠭  ⮤   p㡮  ᨫ   ⨯   
p묨 ⠬   SYN  flood, p묨     
p  設    ,  ᨬ    䨣p樨.   
⭮        訡    p  pp
⮢    饥.    p  ⮩    ⠫  p
᭮    Windows  騥  ᥢ  ᯮᮡ   
 祭  p 㯠,  㦨騥 ⤥쭮  让
.    饭  騥 p  ᭮   Internet,
㦨騥  ,  p襩 p䨨.

         祭   pp  饥 ,    C
ᥬ⢠ Windows   ᥢ  p    C ᮤp
祭  訡  ( p   ᠬ    p  p㣮).
,  訡  ,        ?  ⥫쭮   ,  
p᪨  訡  祭  p  p.      WinNuke 
IISSlayer  (   㡨  www.microsoft.com)   fix   ⠭
㯥  祭 2 ⮪.  ᫨ ⠪ p p ⠭   
饬,   p⮢   Windows p   Internet  p 
㤥. H ⮩ ⨬᪮   ᥡ p   
  ⮣ 筮 .

Copyright (c) 1997 Maxim V.Stepin
     E-Mail: maxim.stepin@usa.net

                 ਣ  4  ..  㯥  
                        http://diamond.stup.ac.ru/~rtech/penzagon.html
