RE: MS03-046

  • From: "Jim Harrison" <jim@xxxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Wed, 15 Oct 2003 19:14:30 -0700

Unfortunately, they use the same SMTP bits.
I'd be asking MSRC for clarification on this, but I'm off to a short
vacation this weekend.

 Jim Harrison
 MCP(NT4, W2K), A+, Network+, PCG
 http://www.microsoft.com/isaserver
 http://isaserver.org/Jim_Harrison
 http://isatools.org

 Read the help, books and articles!
----- Original Message ----- 
From: "Thomas W Shinder" <tshinder@xxxxxxxxxxxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Wednesday, October 15, 2003 14:10
Subject: [isalist] RE: MS03-046


AD: Get Thawte's New Step-by-Step SSL Guide for MSIIS:
http://www.isaserver.org/thawte/

Hey guys,

This looks like an Exchange issue rather than an IIS SMTP service issue.
In that case, my relays are safe :-)

Thanks!
Tom

Thomas W Shinder
www.isaserver.org/shinder
ISA Server and Beyond: http://tinyurl.com/1jq1
Configuring ISA Server: http://tinyurl.com/1llp




-----Original Message-----
From: Thomas W Shinder
Sent: Wednesday, October 15, 2003 4:07 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: MS03-046


AD: Get Thawte's New Step-by-Step SSL Guide for MSIIS:
http://www.isaserver.org/thawte/

Hi Thor,

Thanks for the heads up.

Time to update my SMTP relays NOW.

Thanks!!!
Tom

Thomas W Shinder
www.isaserver.org/shinder
ISA Server and Beyond: http://tinyurl.com/1jq1
Configuring ISA Server: http://tinyurl.com/1llp




-----Original Message-----
From: Thor [mailto:thor@xxxxxxxxxxxxxxx]
Sent: Wednesday, October 15, 2003 3:50 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] MS03-046


AD: Get Thawte's New Step-by-Step SSL Guide for MSIIS:
http://www.isaserver.org/thawte/


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

http://www.microsoft.com/technet/treeview/?url=/technet/security/bulleti
n/MS03-046.asp

FYI- Critical vulnerability against Exchange 5.5 and 2000 SMTP service.

Though is says that those running ISA with SMTP filter enabled are at
"reduced risk," that sounds like it equals "still at some level of risk"
to
me.

hth

T

-----BEGIN PGP SIGNATURE-----
Version: PGP 8.0

iQA/AwUBP42y8IhsmyD15h5gEQJ/RwCfeEuWvkivMWwIJNC55J78FeKpM7UAn15e
qRrhoCD8Ia0T7Wywm8TE3BPa
=Oims
-----END PGP SIGNATURE-----


Get Thawte's New Step-by-Step SSL Guide for MSIIS
Find out how to test, purchase, and install a Thawte Digital Certificate
on your MSIIS web server:
http://www.isaserver.org/thawte/

------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')

Get Thawte's New Step-by-Step SSL Guide for MSIIS
Find out how to test, purchase, and install a Thawte Digital Certificate
on your MSIIS web server:
http://www.isaserver.org/thawte/

------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')

Get Thawte's New Step-by-Step SSL Guide for MSIIS
Find out how to test, purchase, and install a Thawte Digital Certificate on
your MSIIS web server:
http://www.isaserver.org/thawte/

------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')


^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*

All mail from this domain is virus-scanned with RAV.
www.ravantivirus.com

^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*



Other related posts: