Client Login 
Community 
Contact Us 
LinkBack URL
About LinkBacksA critical flaw has been found that allows remote code execution, through a specifically crafted RPC request against the Server Service (i.e. this is a SMB exploit). MS has issued an "out-of-band" patch to immediately fix this, as all versions of Windows are vulnerable.
Windows 5.xx: Completely Vulnerable/Critical (No authentication required)
Windows 6.xx: Partially Vulnerable/Important (The attacker would need appropriate authentication credentials)
Firewalls can block this, but only if they're configured to block SMB requests. This means that most computers in a LAN are vulnerable to each other, should an exploit be deployed in such a way that it can cross the network's firewall (i.e. delivered via infected laptops or an email-based worm).
This is currently being exploited in the wild
Patch today, before certain doom strikes!
BTW, despite what Microsoft Security Bulletin MS08-067 says, this patch can be Hotpatched...
Welcome to the JaguarPC Community
Results 1 to 14 of 14
This is a discussion on MS Issues Emergency Patch !!! in the Open Discussion & Chit-chat forum
A critical flaw has been found that allows remote code execution , through a specifically crafted RPC request against the Server Service (i.e. this is ...
-
10-23-2008, 08:31 PM #1Yeah, I know a LOT!
- Join Date
- Mar 2003
- Location
- Arizona Uplands
- Posts
- 10,775
MS Issues Emergency Patch !!!
DISCLAIMER Any resemblance between the views expressed above and those of the owners and operators of this system is purely coincidental. Any resemblance between these views and my own are non-deterministic. The existence of Vin DSL is questionable. The existence of views in the absence of anyone to hold them is problematic. The existence of the reader is left as an exercise in the second-order coefficient.
No Guts, No Story! VinDSL © 2010
-
10-24-2008, 01:52 PM #2Loyal Client
- Join Date
- Feb 2004
- Posts
- 3,386
Windows 5 and 6, Man you should be Using XP or Vista
-
10-24-2008, 09:08 PM #3Yeah, I know a LOT!
- Join Date
- Mar 2003
- Location
- Arizona Uplands
- Posts
- 10,775
Let's see...
I got a Win98SE proxy server, three W2K desktops, a XP and Vista lappy[s].
Got all my bases covered!
DISCLAIMER Any resemblance between the views expressed above and those of the owners and operators of this system is purely coincidental. Any resemblance between these views and my own are non-deterministic. The existence of Vin DSL is questionable. The existence of views in the absence of anyone to hold them is problematic. The existence of the reader is left as an exercise in the second-order coefficient.
No Guts, No Story! VinDSL © 2010
-
10-24-2008, 11:08 PM #4Loyal Client
- Join Date
- Feb 2004
- Posts
- 3,386
That is sooo last decade
Originally Posted by Vin DSL
-
10-24-2008, 11:54 PM #5Community Leader
- Join Date
- Sep 2001
- Location
- Rochester, NY
- Posts
- 6,003
At 3:00 this afternoon they started blocking unpatched computers from the campus network at work--they didn't want this one floating around over the weekend. Anyone with an unpatched computer now gets an IP address in the 10.10.*.* range instead of a public IP when they hit the DHCP servers for a lease renewal and they get blocked from doing anything online except hitting our "why am I seeing this page" site and Windows Update.
--Jason
-
10-25-2008, 01:47 PM #6Loyal Client
- Join Date
- Aug 2002
- Posts
- 7,304
Just curious, without me going and studying the vulnerability, how does the DHCP server know the patch hasn't been applied?
Good luck
-
10-25-2008, 03:07 PM #7Community Leader
- Join Date
- Sep 2001
- Location
- Rochester, NY
- Posts
- 6,003
The DHCP server doesn't. Our Information Security Office routinely scans computers connected to our network for known vulnerabilities. When it finds one it blacklists it. When the blacklisted computer tries to renew its lease, the DHCP server sees that it is blacklisted and hands out an internal-only IP. Blacklisted computers get rescanned every hour or so, so once the scanner sees the computer is patched it removes the blacklisting and during the next lease renewal (blacklisted IPs have very short leases) the computer gets its old IP back.
--Jason
-
10-25-2008, 03:43 PM #8Loyal Client
- Join Date
- Aug 2002
- Posts
- 7,304
Hahaa! Neat!
Good luck
-
10-26-2008, 01:35 AM #9Yeah, I know a LOT!
- Join Date
- Mar 2003
- Location
- Arizona Uplands
- Posts
- 10,775
Proxy servers? Originally Posted by the_ancient
That is sooo last decadeDISCLAIMER Any resemblance between the views expressed above and those of the owners and operators of this system is purely coincidental. Any resemblance between these views and my own are non-deterministic. The existence of Vin DSL is questionable. The existence of views in the absence of anyone to hold them is problematic. The existence of the reader is left as an exercise in the second-order coefficient.
No Guts, No Story! VinDSL © 2010
-
10-26-2008, 11:57 AM #10Loyal Client
- Join Date
- Feb 2004
- Posts
- 3,386
no win98.... you know 2008 - 1998 == 10years or 1 decade Originally Posted by Vin DSL
-
10-26-2008, 10:04 PM #11Yeah, I know a LOT!
- Join Date
- Mar 2003
- Location
- Arizona Uplands
- Posts
- 10,775
I'm also using W2K which is 8 years old, XP which is 7 years old, and Vista which is 3 years old.... Originally Posted by the_ancient
no win98.... you know 2008 - 1998 == 10years or 1 decade
And, my production site (JagPC) and private sites (home) are using Linux which is 17 years old.
What's your point, stupid?
n/m
You probably got older pron than my various OSes... and that still gets you off in a Kleenex which is 84 years old!Last edited by Vin DSL; 10-26-2008 at 10:14 PM.
DISCLAIMER Any resemblance between the views expressed above and those of the owners and operators of this system is purely coincidental. Any resemblance between these views and my own are non-deterministic. The existence of Vin DSL is questionable. The existence of views in the absence of anyone to hold them is problematic. The existence of the reader is left as an exercise in the second-order coefficient.
No Guts, No Story! VinDSL © 2010
-
10-27-2008, 04:11 AM #12Loyal Client
- Join Date
- Feb 2004
- Posts
- 3,386
Sounds like some one needs to buy himself a hooker Originally Posted by Vin DSL
I'm also using W2K which is 8 years old, XP which is 7 years old, and Vista which is 3 years old....
And, my production site (JagPC) and private sites (home) are using Linux which is 17 years old.
What's your point, stupid?
n/m
You probably got older pron than my various OSes... and that still gets you off in a Kleenex which is 84 years old!
-
10-27-2008, 09:21 AM #13Yeah, I know a LOT!
- Join Date
- Mar 2003
- Location
- Arizona Uplands
- Posts
- 10,775
Yeah, sure! Originally Posted by the_ancient
Sounds like some one needs to buy himself a hooker
Then you'll say I'm using a 23 year-old trick instead of a 5 year-old, like you...
DISCLAIMER Any resemblance between the views expressed above and those of the owners and operators of this system is purely coincidental. Any resemblance between these views and my own are non-deterministic. The existence of Vin DSL is questionable. The existence of views in the absence of anyone to hold them is problematic. The existence of the reader is left as an exercise in the second-order coefficient.
No Guts, No Story! VinDSL © 2010
-
10-27-2008, 03:44 PM #14Loyal Client
- Join Date
- Feb 2004
- Posts
- 3,386
naaa I wait until they are legal..... 16 here in the great state of Indiana Originally Posted by Vin DSL
Yeah, sure!
Then you'll say I'm using a 23 year-old trick instead of a 5 year-old, like you...
Reply With Quote
Posting Permissions
Get Social:
Copyright © 2011 JaguarPC.com
Bookmarks