COMMAND
MS NetMeeting
SYSTEMS AFFECTED
MS NetMeeting Version 2.1 (comes with Win98); Win9x, NT
PROBLEM
Wanderley J. Abreu Junior found following. Local user can gain
root/privileged access, intruders can create root-owned files,
denial of service attack, etc. With MS NetMeeting software in a
conference can copy/paste the remote clipboard area. With the
chat windows OPENED just do a CTRL-C in the box where you write
with nothing in your box and nothing selected at all. Then, you
can get the entire clipboard from the other user in the
conference, of course,if there's something in his Clipboard
(ASCII, Bin, etc).
SOLUTION
Use PGP to encrypt the clipboard area.