[juneau-lug] (fwd) Bad news on RPC DCOM vulnerability

The following message I saw on bugtraq... thought it was interesting.
-Myron

----- Forwarded message from 3APA3A <3APA3A@xxxxxxxxxxxxxxxx> -----

From: 3APA3A <3APA3A@xxxxxxxxxxxxxxxx>
Subject: Bad news on RPC DCOM vulnerability
To: bugtraq@xxxxxxxxxxxxxxxxx, full-disclosure@xxxxxxxxxxxxxxxx,
        NTBUGTRAQ@xxxxxxxxxxxxxxxxxxxxxx
Cc: Secure@xxxxxxxxxxxxx
Delivered-To: myrond@xxxxxxxxxxx
Mailing-List: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm
List-Id: <bugtraq.list-id.securityfocus.com>
List-Post: <mailto:bugtraq@xxxxxxxxxxxxxxxxx>
List-Help: <mailto:bugtraq-help@xxxxxxxxxxxxxxxxx>
List-Unsubscribe: <mailto:bugtraq-unsubscribe@xxxxxxxxxxxxxxxxx>
List-Subscribe: <mailto:bugtraq-subscribe@xxxxxxxxxxxxxxxxx>
Delivered-To: mailing list bugtraq@xxxxxxxxxxxxxxxxx
Delivered-To: moderator for bugtraq@xxxxxxxxxxxxxxxxx
Date: Fri, 10 Oct 2003 18:48:52 +0400
X-Mailer: The Bat! (v1.62r)
Reply-To: 3APA3A <3APA3A@xxxxxxxxxxxxxxxx>
Organization: http://www.security.nnov.ru

Dear bugtraq@xxxxxxxxxxxxxxxxx,

There are few bad news on RPC DCOM vulnerability:

1.  Universal  exploit  for  MS03-039  exists in-the-wild, PINK FLOYD is
again actual.
2.  It  was  reported  by exploit author (and confirmed), Windows XP SP1
with  all  security  fixes  installed still vulnerable to variant of the
same bug. Windows 2000/2003 was not tested. For a while only DoS exploit
exists,  but  code execution is probably possible. Technical details are
sent to Microsoft, waiting for confirmation.

Dear  ISPs.  Please  instruct  you customers to use personal fireWALL in
Windows XP.

-- 
http://www.security.nnov.ru
         /\_/\
        { , . }     |\
+--oQQo->{ ^ }<-----+ \
|  ZARAZA  U  3APA3A   }
+-------------o66o--+ /
                    |/
You know my name - look up my number (The Beatles)


----- End forwarded message -----

-- Attached file included as plaintext by Ecartis --

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iD8DBQE/hu0FnfM/KCuG6/IRAhsMAJ9GScYuAxytg5U2YdchJoMa2DzONwCggyEG
xGsqvtr/+n50lfu0Utg5GX0=
=cdJA
-----END PGP SIGNATURE-----



------------------------------------
This is the Juneau-LUG mailing list.
To unsubscribe, send an e-mail to juneau-lug-request@xxxxxxxxxxxxx with the 
word unsubscribe in the subject header.

Other related posts: