MS03-26

  • From: "Deus, Attonbitus" <Thor@xxxxxxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Mon, 21 Jul 2003 10:27:57 -0700

At 09:21 AM 7/21/2003, you wrote:

Yo "ISA_Dewd" :)

Saw your comments on my article. Thanks for providing that info about publishing RPC and ISA's protection of it.

I know now that it is indeed exploitable over TCP 135 *and* UDP 135-- I got confirmation from LSD on that... Though we are all protected, I am still very worried about this one... This is a class exploit, and if/when a multi-vector worm is written, it will make slammer look like a fin packet.

t



Other related posts: