This is real scary. Sys admins should take note and download the new Skype patch to rectify this problem. (Version: 2.0.0.107. Release date: May 24, 2006)
Australian security firm Security-Assessment.com has discovered a flaw with the install of the Windows-based Skype client.
Skype was notified of the potential flaw earlier this month and promptly issued a patch. General vulnerability dissemination was made on 22 May by Security-Assessment.com.
Skype has confirmed the vulnerability could allow users to 'retrieve' files from other Skype users through unauthenticated connections due to a flaw present in the URI (Uniform Resource Identifiers).
The VoIP space has become more competitive, with Skype's offer and the launch of AOL's new AIM Phoneline service. AOL has been offering free inbound calls and voicemail to those who sign up for Phoneline and upgrade their AIM client to the latest beta version of AIM Triton.
Skype Flaw found by Australian security firm source
Comment Preview