Security Expert Finds Problem with Microsoft's MSN.com
A world renowned security expert has found a problem with a subdomain of Microsoft's MSN.com where simple operations lead to error messages from the server. Is this just an error on Microsoft's part or a prelude to a cyber attack?
View as PDF
 Print View
December 28, 2009 (FPRC) -- Dr. Ali Jahangiri, a world-renowned security expert, has discovered a problem on Microsoft's MSN.com website. As an expert on hacking and server vulnerabilities he is concerned about Microsoft's response time in fixing this problem as well, as the possibility that this is a prelude or even the result of an attack on Microsoft's website.
Discovered on Saturday 26, 2009 at around 5:00pm GMT, the problem is with MSN's Arabia subdomain. MSN uses subdomains to provide localized content to different parts of the the world. There are MSN subdomains for the UK, France, India and so on. There is also a subdomain for Arabia at http://arabia.msn.com. The problem occurs when users of the site try to access Microsoft's Bing search engine.
On other subdomains and the main MSN.com website, entering a search term into the Bing search box takes you to the Bing search engine and a page of results for the term entered. But on the Arabia site using Bing results in an error. The error comes in two parts, the general error is “You are not authorized to view this page” and the reason given for this is “Forbidden: IP address of the client has been rejected.”
Dr. Jahangiri, who is the author of Live Hacking - a comprehensive guide to hacking techniques and countermeasures for ethical hackers, has tried accessing Bing on http://arabia.msn.com from computers in the U.S., U.K., Canada and UAE and the same error is seen. This means that it isn't a specific problem with just a few computers but all computers on the Internet.
Dr. Jahangiri is calling on Microsoft to fix this problem quickly but to also check their MSN Arabia website to ensure that it hasn't been compromised and also to check for any other vulnerabilities in the web server configuration.
About Dr. Ali Jahangiri
Dr. Ali Jahangiri is a a world-renowned information technology expert and author. His book Live Hacking is available from Amazon.com and world wide through book shops. He has an extensive background in computer science and has worked as an information security auditor, security consultant and technical trainer. He is a Chartered IT Professional member of the British Computer Society, and a professional member of both the IEEE and the Information Systems Audit and Control Association.
Contacts:
Dr. Ali Jahangiri Publication
Box: 7728, 147-29 182nd Street
Springfield Gardens, NY 11413
Tel: +1 347-587-8700
Fax: +1 347-438-3314
www.alijahangiri.org
Send an email to Dr. Ali Jahangiri of Dr. Ali Jahangiri
+1 347-587-8700
Keywords:
Live Hacking, Discovered, Dr. Ali Jahangiri
Recent Press Releases By The Same User Dr. Ali Jahangiri Publishes New Security Policy Cookbook Packed Full of Recipes for Security Policy Makers (Wed 12th May 10)
New Linux Mini Distribution for Penetration Testing and Ethical Hacking Fits Onto a Mini CD (Wed 28th Apr 10) Popular Ethical Hacking Book 'Live Hacking' Now Available in India With a Special Price (Thu 1st Apr 10) New Live Hacking Channel on YouTube; Ethical Hacking Tutorials Free For All (Wed 24th Mar 10) Live Hacking 2010 South Africa Workshop Was A Great Success; Second Workshop Planned for August 2010 (Wed 10th Mar 10) Live Hacking CD a Huge Success; Initial Download Figures for Ethical Hacking Linux Distribution Released (Tue 2nd Mar 10) | 
