Firefox browser just beep me, “Hey, you need new updates! The version 2.0.0.3 is available, you want to download or not?!?”

I have to obliged because it keep appearing in front of me while updating JonehRC.com Monster Truck Jam World Finals!. It downloaded silently behind while I finish my other post.

10 minutes afterwards, when done it asked to be restarted and installed by its own. All right. So whats new? Firefox claimed they already fixed the FTP PASV port-scanning.

The FTP protocol includes the PASV (passive) command which is used by Firefox to request an alternate data port. The specification of the FTP protocol allows the server response to include an alternate server address as well, although this is rarely used in practice.

mark@bindshell.net reported that a malicious web page hosted on a specially-coded FTP server could use this feature to perform a rudimentary port-scan of machines inside the firewall of the victim. By itself this causes no harm, but information about an internal network may be useful to an attacker should there be other vulnerabilities present on the network.

Mozilla clients will now ignore the alternate server address.

For a Little Knowledge Papa, I only understand this. No more holes for hacker to penetrate the network. Short and brief. It means one good thing for Firefox users compares to the other browser. Yea, that one lah, that comes free with your PC.

So far, I can’t feel anything. But I hope they fixed my always shutdown thing when browsing multiple tabs. My laptop is AMD Turion 64 MK36, 2.0Ghz, 512KB L2 cache, 1GB DD2 RAM and 80GB HDD. I don’t think there is a memory problem. The only program running in background, is the AVG and the Ad Aware. When i do the Ctrl-Alt-Del to call the Windows Task Manager, I saw lots of SVCHOST.EXE. I know little knowledge of this. When the laptop freeze, I only managed to see in seconds, it reported that the laptop need to shutdown to protect it from damage due to the kernel thing then shuts my laptop. Whats that? I did see in the list of fixed in FireFox 2.0.0.2, Crashes with evidence of memory corruption (rv:1.8.0.10/1.8.1.2).

As part of the Firefox 2.0.0.2 and 1.5.0.10 update releases we fixed several bugs to improve the stability of the product. Some of these were crashes that showed evidence of memory corruption and we presume that with enough effort at least some of these could be exploited to run arbitrary code.

So whats say you? Have you upgraded? Do you have like my sudden shutdown problem? Advice this poor Papa, please.

Technorati Tags: Firefox browser, version 2.0.0.3