The following message I saw on bugtraq... thought it was interesting. -Myron ----- Forwarded message from 3APA3A <3APA3A@xxxxxxxxxxxxxxxx> ----- From: 3APA3A <3APA3A@xxxxxxxxxxxxxxxx> Subject: Bad news on RPC DCOM vulnerability To: bugtraq@xxxxxxxxxxxxxxxxx, full-disclosure@xxxxxxxxxxxxxxxx, NTBUGTRAQ@xxxxxxxxxxxxxxxxxxxxxx Cc: Secure@xxxxxxxxxxxxx Delivered-To: myrond@xxxxxxxxxxx Mailing-List: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm List-Id: <bugtraq.list-id.securityfocus.com> List-Post: <mailto:bugtraq@xxxxxxxxxxxxxxxxx> List-Help: <mailto:bugtraq-help@xxxxxxxxxxxxxxxxx> List-Unsubscribe: <mailto:bugtraq-unsubscribe@xxxxxxxxxxxxxxxxx> List-Subscribe: <mailto:bugtraq-subscribe@xxxxxxxxxxxxxxxxx> Delivered-To: mailing list bugtraq@xxxxxxxxxxxxxxxxx Delivered-To: moderator for bugtraq@xxxxxxxxxxxxxxxxx Date: Fri, 10 Oct 2003 18:48:52 +0400 X-Mailer: The Bat! (v1.62r) Reply-To: 3APA3A <3APA3A@xxxxxxxxxxxxxxxx> Organization: http://www.security.nnov.ru Dear bugtraq@xxxxxxxxxxxxxxxxx, There are few bad news on RPC DCOM vulnerability: 1. Universal exploit for MS03-039 exists in-the-wild, PINK FLOYD is again actual. 2. It was reported by exploit author (and confirmed), Windows XP SP1 with all security fixes installed still vulnerable to variant of the same bug. Windows 2000/2003 was not tested. For a while only DoS exploit exists, but code execution is probably possible. Technical details are sent to Microsoft, waiting for confirmation. Dear ISPs. Please instruct you customers to use personal fireWALL in Windows XP. -- http://www.security.nnov.ru /\_/\ { , . } |\ +--oQQo->{ ^ }<-----+ \ | ZARAZA U 3APA3A } +-------------o66o--+ / |/ You know my name - look up my number (The Beatles) ----- End forwarded message ----- -- Attached file included as plaintext by Ecartis -- -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.6 (GNU/Linux) Comment: For info see http://www.gnupg.org iD8DBQE/hu0FnfM/KCuG6/IRAhsMAJ9GScYuAxytg5U2YdchJoMa2DzONwCggyEG xGsqvtr/+n50lfu0Utg5GX0= =cdJA -----END PGP SIGNATURE----- ------------------------------------ This is the Juneau-LUG mailing list. To unsubscribe, send an e-mail to juneau-lug-request@xxxxxxxxxxxxx with the word unsubscribe in the subject header.