Security Warning from CERT!

[mto]

<Quote>
In its advisory, CERT recommends that customers apply the Microsoft patch
and, as well, block network traffic on Transmission Control Protocol (TCP)
ports 135, 139, and 445, which are used by the RPC service. <END>

http://www.pcworld.com/news/article/0,aid,111856,00.asp

[Jeffrey A. Setaro]

In article <ssSdnbDZtKRFlLaiU-KYuQ@seg.net>,
nobody@atdon'tbothertowrite.com says...
> <Quote>
> In its advisory, CERT recommends that customers apply the Microsoft patch
> and, as well, block network traffic on Transmission Control Protocol (TCP)
> ports 135, 139, and 445, which are used by the RPC service. <END>
>
> http://www.pcworld.com/news/article/0,aid,111856,00.asp
>

Wow it's only taken CERT & PC World two weeks to catch up. Microsoft
release a bulletin and patch for this on July 16, 2003.

See Microsoft Security Bulletin MS03-026: Buffer Overrun In RPC
Interface Could Allow Code Execution(Q823980)
<http://www.microsoft.com/technet/security/bulletin/MS03-026.asp> for
details.

--
Cheers-

Jeff Setaro
jasetaro@mags.net
http://people.mags.net/jasetaro/
PGP Key IDs DH/DSS: 0x5D41429D RSA: 0x599D2A99 New RSA: 0xA19EBD34