[THIN] Re: Sasser patch killed my license server connections

  • From: Henry Sieff <hsieff@xxxxxxxxxxxx>
  • To: "'thin@xxxxxxxxxxxxx'" <thin@xxxxxxxxxxxxx>
  • Date: Mon, 3 May 2004 16:32:46 -0500

The Sasser patch was released in April (MS04-11).

If you filter port 445 (RPC w/SSL), you are safe from that direction. But,
defense-in-depth dictates that you apply the patch unless you completely
trust every computer which shares the same network to NOT be infected (think
of laptops, taken home, infected, and brought back.)

AV is useless; will not catch this until the damage is already done (some AV
products might be able to identify the behavior early enough, but I wouldn't
count on it.)

I have not patched my license server, but I have patched my citrix hosts
with no evident problems.

To the people seeing the problems, have you patched your license servers,
your citrix boxes, or both?

Henry

> -----Original Message-----
> From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx]On
> Behalf Of Mark Mucher
> Sent: Monday, May 03, 2004 4:23 PM
> To: thin@xxxxxxxxxxxxx
> Subject: [THIN] Re: Sasser patch killed my license server connections
> 
> 
> The thought this Sasser patch was months old.
> 
> Any why don't firewalls catch it?
> 
> Mark
>  
> 
> -----Original Message-----
> From: thin-bounce@xxxxxxxxxxxxx 
> [mailto:thin-bounce@xxxxxxxxxxxxx] On Behalf
> Of Sanders, Robert (GE Energy)
> Sent: Monday, May 03, 2004 5:06 PM
> To: thin@xxxxxxxxxxxxx
> Subject: [THIN] Re: Sasser patch killed my license server connections
> 
> Im about to install the Sasser patch on my license server. 
> Would I do = well
> do alter my plans?
> Im unsure if you guys are having problems after installing it 
> on your =
> license server or on your terminal servers...
> 
> Bob Sanders
> 
> ---
> Mark's outgoing mail is certified Virus Free.
> Checked by AVG anti-virus system (http://www.grisoft.com).
> Version: 6.0.675 / Virus Database: 437 - Release Date: 5/2/2004
>  
> 
> ********************************************************
> This Week's Sponsor - RTO Software / TScale
> What's keeping you from getting more from your terminal 
> servers? Did you
> know, in most cases, CPU Utilization IS NOT the single biggest
> constraint to scaling up?! Get this free white paper to understand the
> real constraints & how to overcome them. SAVE MONEY by 
> scaling-up rather
> than buying more servers.
> http://www.rtosoft.com/Enter.asp?ID=147
> **********************************************************
> Useful Thin Client Computing Links are available at:
> http://thin.net/links.cfm
> ***********************************************************
> For Archives, to Unsubscribe, Subscribe or 
> set Digest or Vacation mode use the below link:
> http://thin.net/citrixlist.cfm
> 
********************************************************
This Week's Sponsor - RTO Software / TScale
What's keeping you from getting more from your terminal servers? Did you
know, in most cases, CPU Utilization IS NOT the single biggest
constraint to scaling up?! Get this free white paper to understand the
real constraints & how to overcome them. SAVE MONEY by scaling-up rather
than buying more servers.
http://www.rtosoft.com/Enter.asp?ID=147
**********************************************************
Useful Thin Client Computing Links are available at:
http://thin.net/links.cfm
***********************************************************
For Archives, to Unsubscribe, Subscribe or 
set Digest or Vacation mode use the below link:
http://thin.net/citrixlist.cfm

Other related posts: