Thoughts Media.com

 


Windows Phone Thoughts

Loading feed...

Digital Home Thoughts

Loading feed...

Apple Thoughts

Loading feed...




Go Back   Thoughts Media Forums > Thoughts Media Off Topic

Reply
 
Thread Tools Display Modes
  #1  
Old 02-11-2004, 03:00 PM
Ed Hansberry
Contributing Editor Emeritus
Ed Hansberry's Avatar
Join Date: Aug 2006
Posts: 8,228
Default Public Service Announcement: Patch Your NT4/2000/XP/2003 Systems!

http://www.microsoft.com/technet/security/bulletin/winfeb04.asp

Microsoft has released several patches in the past 24 hours, but the most critical is "MS04-007 - ASN .1 Vulnerability Could Allow Code Execution." You can apply this patch by visiting Microsoft's Windows Update site.



For more information on the issue, you can visit the following links:
Vulnerability Note VU#216324 -
Vulnerability Note VU#583108 -
eEye Digital Security Advisory AD20040210 -
eEye Digital Security Advisory AD20040210-2
Microsoft Security Bulletin MS04-007
Microsoft Knowledge Base Article 252648

Basically, patch your box or unplug it. There is no exploit as I type this, but the day is young. Most alarming is there are really no mitigating factors. A firewall may not be the protection you think it is for this issue. This quote puts it in perspective. "The widespread use of ASN.1 has led many security researchers to label it a possible "monoculture" -- a population so homogeneous that a single threat could destroy it." :shocked!:

Why are you still reading this? You should be patching!
__________________
text sig
 
Reply With Quote
  #2  
Old 02-11-2004, 03:05 PM
dMores
Philosopher
Join Date: Jan 2003
Posts: 539

*sigh*

the joys of using a mac

:lol:
 
Reply With Quote
  #3  
Old 02-11-2004, 03:15 PM
Jon Westfall
Executive Editor, Android Thoughts
Jon Westfall's Avatar
Join Date: Aug 2006
Posts: 3,233

Thanks for complicating my morning Ed Logging into 5 2000 boxes over Terminal Services to run windows update is just the thing to wake me up.

Jon.
__________________
Dr. Jon Westfall, MCSE, MS-MVP
Executive Editor - Android Thoughts
News Editor - Windows Phone Thoughts

 
Reply With Quote
  #4  
Old 02-11-2004, 03:17 PM
that_kid
Sage
Join Date: Jul 2003
Posts: 651
Send a message via Yahoo to that_kid

Only 5, I had to tS into 12 2000 boxes and 6 XP boxes to do this update. Hmm... maybe it's time to invest in an SMS server.
 
Reply With Quote
  #5  
Old 02-11-2004, 03:23 PM
twntaipan
Pupil
Join Date: Sep 2002
Posts: 30

Is Windows Update running unusually slow???
 
Reply With Quote
  #6  
Old 02-11-2004, 03:25 PM
PR.
Theorist
Join Date: Dec 2004
Posts: 291

I know I will probably be flamed for this and I hasten to add that I will patch myself and the Office PC's

But why would anyone go to the effort of exploiting this when you can send an email to a user with a attachment labelled Virus.pif and spread it to millions of users.

Its not the holes in Windows that we should fear its the hole between the users ears that I fear
 
Reply With Quote
  #7  
Old 02-11-2004, 03:26 PM
EricMCarson
Ponderer
EricMCarson's Avatar
Join Date: Mar 2004
Posts: 112

I've been getting the "500" error that last three times I've been trying to access windows update. Luckily, we've got the auto update on one machine, so we've got a copy to install locally.
 
Reply With Quote
  #8  
Old 02-11-2004, 03:27 PM
gorkon280
Philosopher
Join Date: Apr 2004
Posts: 545
Default Yes....because of panic messages like this!

Windows Update is slow because all of ppc thoughts is hitting it at the same time(my theory). Let me calm everyone down a bit....the world is not falling. You will be OK! Now, make sure you visit Windows Update at least once a week or once a day if your paranoid. There that feels better doesn't it? :roll:
 
Reply With Quote
  #9  
Old 02-11-2004, 03:30 PM
acronym
Intellectual
Join Date: Mar 2004
Posts: 119

RED ALERT !! RED ALERT !!
we found a bug 6 months ago that makes your entire system vulnerable, but just got around to releasing a patch...

micro$oft - "we care"
 
Reply With Quote
  #10  
Old 02-11-2004, 03:36 PM
Kevin Remhof
Intellectual
Join Date: Aug 2002
Posts: 222

Ah, the joys of being on a corporate PC. We can't run Microsoft Update from our desktop PCs. Our servers, yes. But, not our desktops. Blech.
 
Reply With Quote
Reply


Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT +1. The time now is 09:15 PM.


Powered by vBulletin® Version 3.8.9
Copyright ©2000 - 2019, vBulletin Solutions, Inc.
Copyright Thoughts Media Inc. 2009