Re: WinXP Vulnerability

  • From: "Scheele, Brian" <bscheele@xxxxxxxxxxxxxxx>
  • To: "'[ISAserver.org Discussion List]'" <isalist@xxxxxxxxxxxxx>
  • Date: Tue, 10 Sep 2002 10:24:19 -0400

Windows 2000 SP3 was also slow yesterday, and probably still is.

Windows XP SP1 is not on the TechNet DVD for September 2002, but Win2K SP3
is.  If anybody with TechNet still needs to install SP3, then they should
probably use the CD/DVD.

Thanks,

Brian K. Scheele
Systems Administrator
Clark Filter
3649 Hempland Road
Lancaster, PA 17601-1393
Ph. 717-285-5941 x176
Fx. 717-285-3039

-----Original Message-----
From: John Tolmachoff [mailto:isalist@xxxxxxxxxxxx]
Sent: Tuesday, September 10, 2002 10:17 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: WinXP Vulnerability


http://www.ISAserver.org


I think everybody and their brother is downloading right now.

I am on a T-1. The transfer rate is at 20 KBS.

John Tolmachoff
IT Manager, Network Engineer
RelianceSoft, Inc.
Fullerton, CA  92835
www.reliancesoft.com


-----Original Message-----
From: Jim Harrison [mailto:jim@xxxxxxxxxxxx] 
Sent: Monday, September 09, 2002 8:02 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: WinXP Vulnerability

http://www.ISAserver.org


..and the answer to the question is:
Get WinXP SP1
..now

http://download.microsoft.com/download/whistler/SP/SP1/WXP/EN-US/xpsp1_e
n_x8
6.exe

--
 Jim Harrison
 MCP(NT4, W2K), A+, Network+, PCG
 http://isaserver.org/pages/author_index.asp?aut=3
 http://isatools.org
 Read the books!

"Jim Harrison" <jim.nospam@xxxxxxxxxxxx> wrote in message
news:uJ8865DWCHA.3476@xxxxxxxxxxxxxx
That's ugly!
I tried it on my own system (with a test file, of course), and sure
enough;
it was gone.
Apparently, it's job is to remove the data file that gets created when
the
hardware help scans your system to upload driver data to MS for the
purposes
of locating a suitable driver for your new device.

--
 Jim Harrison
 MCP(NT4, W2K), A+, Network+, PCG
 http://isaserver.org/pages/author_index.asp?aut=3
 http://isatools.org
 Read the books!

"vagabond" <mail@xxxxxxxxx> wrote in message
news:u1jFTdDWCHA.2452@xxxxxxxxxxxxxx
Just a quick heads-up as most folk here are fairly security conscious.
This
only applies to WinXP.  It is very serious.

A quick look at www.grc.com/default.htm and
http://www.security.nnov.ru/search/document.asp?docid=3370 outlines the
vulnerability.

As the exploit is "out" now people may begin to encounter it.  There is
a
detailed discussion of this on the GRC 'Security' newsgroup
(news.grc.com).

In essence, it deletes files on the clicking or execution of a link,
utilising a "feature" of XP's Help Center.


--


vagabond
(originally posted to isaserver group- is that group going to be wound
up as
a result of the new structure?)









------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
isalist@xxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')


------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
bscheele@xxxxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')


Other related posts: