Microsoft Plugs Money Security Hole

Patch is available to repair security 'vulnerability' in Money 2000 and 2001.

Microsoft on Friday announced a patch to fix a bug that could allow access to password-protected data files for Money 2000 and the just-released Money 2001.

The security "vulnerability" only threatens locally stored files and has nothing to do with online financial services, according to a Microsoft spokesperson. The company posted a report detailing the bug and the patch.

Money users can opt to control access to their financial data by requiring correct entry of an encrypted password. However, a bug in the program would allow people with physical access to the machine and knowledge of a specialized developer's text editor to recover the password. The spokesperson stresses that no losses have been attributed to the bug, which will be repaired by the patch.

Online Updates

The patch will be automatically downloaded to Money 2000 and 2001 users who update the program via the Update Internet Information feature in the Tools menu. If you want to activate that feature, you can either do so via Tools, Options, or perform a one-time update using the Tools, Update menu command.

Microsoft released the latest version of the money-management program earlier in August. (See "Microsoft Money Enters the New Millennium.") The company competes fiercely with Intuit's Quicken, which also recently updated. (See "2001: A Financial Odyssey.")

Would you recommend this story? YES NO