[seguridad] Confirmado, a pesar del parche se es vulnerable al nuevo exploit del RPC.

ya deberían comenzar a botar a ciertos programadores no?

...yo estoy a salvo por que dejé el IE ;-)

Saludos
Caterpillar 1.0


"JM Tella Llop [MS MVP] ·" escribió en el mensaje
news:%

Por favor, usar siempre cortafuegos.

http://www.governmentsecurity.org/downloads.php
http://www.securitylab.ru/40754.html
http://www.cyberphreak.ch/sploitz/MS03-039.txt

ya deberían comenzar a botar a ciertos programadores no?

...yo estoy a salvo por que dejé el IE ;-)

Saludos
Caterpillar 1.0


"JM Tella Llop [MS MVP] ·" escribió en el mensaje
news:%

Por favor, usar siempre cortafuegos.

http://www.governmentsecurity.org/downloads.php
http://www.securitylab.ru/40754.html
http://www.cyberphreak.ch/sploitz/MS03-039.txt

<<http://www.securitylab.ru/40754.html>>

******************************************
????? ?????????? ????????, ????? ?? ?????????? ?????????? ?????
????????, ??? "????????????? "???????? ?????? DCOM?2 ??????????,
?????????????? ? ????? ?? ????? ??????, ???????? ???? ??? ?????????????
??????? MS03-39.

???? ??????? ????????? ???????? ?????? ??? DoS ?????????, ?? ??????
????? ???????? ????? ?????????????? ? ??? ?????????? ????????????? ????.
???? ????????????? ?????? ????????????? ??????? ???????? ????? ??? ???????
?? ????????, ??? ??? ? ????????? ????? ???????? ????????? ??????
??????????????? ?????, ???????????????? ????????????? ??????????.

? ????????? ?????? ?????????? ????????? ?? ????????? ????????:

* Microsoft Windows XP Professional
* Microsoft Windows XP Home
* Microsoft Windows 2000 Workstation
????? ??????????? SNORT ????????? ??? ???? ??????????:
alert TCP any any -> any 135 (msg:"RPC Vulnerability - bind
initiation";sid:1; rev:1; content:"|05 00 0B 03 10 00 00 00 48 00 00 00
7F 00 00 00 D0 16 D0 16 00 00 00 00 01 00 00 00 01 00 01 00 a0 01 00 00
00 00 00 00 C0 00 00 00 00 00 00 46 00 00 00 00 04 5D 88 8A EB 1C C9 11
9F E8 08 00 2B10 48 60 02 00 00 00|";
flow:to_server,established;classtype:attempted-admin;)


***************************************

je je je, no se aruso :-(

Saludos
Caterpillar 1.0


"JM Tella Llop [MS MVP] ·" escribió en el mensaje
news:%

Por favor, usar siempre cortafuegos.

http://www.governmentsecurity.org/downloads.php
http://www.securitylab.ru/40754.html
http://www.cyberphreak.ch/sploitz/MS03-039.txt

<<http://www.securitylab.ru/40754.html>>

******************************************
????? ?????????? ????????, ????? ?? ?????????? ?????????? ?????
????????, ??? "????????????? "???????? ?????? DCOM?2 ??????????,
?????????????? ? ????? ?? ????? ??????, ???????? ???? ??? ?????????????
??????? MS03-39.

???? ??????? ????????? ???????? ?????? ??? DoS ?????????, ?? ??????
????? ???????? ????? ?????????????? ? ??? ?????????? ????????????? ????.
???? ????????????? ?????? ????????????? ??????? ???????? ????? ??? ???????
?? ????????, ??? ??? ? ????????? ????? ???????? ????????? ??????
??????????????? ?????, ???????????????? ????????????? ??????????.

? ????????? ?????? ?????????? ????????? ?? ????????? ????????:

* Microsoft Windows XP Professional
* Microsoft Windows XP Home
* Microsoft Windows 2000 Workstation
????? ??????????? SNORT ????????? ??? ???? ??????????:
alert TCP any any -> any 135 (msg:"RPC Vulnerability - bind
initiation";sid:1; rev:1; content:"|05 00 0B 03 10 00 00 00 48 00 00 00
7F 00 00 00 D0 16 D0 16 00 00 00 00 01 00 00 00 01 00 01 00 a0 01 00 00
00 00 00 00 C0 00 00 00 00 00 00 46 00 00 00 00 04 5D 88 8A EB 1C C9 11
9F E8 08 00 2B10 48 60 02 00 00 00|";
flow:to_server,established;classtype:attempted-admin;)


***************************************

je je je, no se aruso :-(

Saludos
Caterpillar 1.0


"JM Tella Llop [MS MVP] ·" escribió en el mensaje
news:%

Por favor, usar siempre cortafuegos.

http://www.governmentsecurity.org/downloads.php
http://www.securitylab.ru/40754.html
http://www.cyberphreak.ch/sploitz/MS03-039.txt

El Sun, 12 Oct 2003 14:20:28 -0500, "Caterpillar 1.0"
<caterpillar_v10<ARROBA>hotmail.com> escribio:

<<http://www.securitylab.ru/40754.html>>
je je je, no se aruso :-(

Tal vez el si :-DDDDDDDDD




Ille Corvus
"¿Sere yo maestro? Pin, pin, pin..."