Microsoft plugs 21 security holes

TalkBack 33 of 123:

Next »

« Previous

• Thread View
• Flat View

You don't use the free firewall?

These (vulnerabilities) take advantage of two listening services that run on the host and listen for traffic coming in through ports that are frequently utilized

This is why I think the 144,000 number is so funny. Turn on your firewall (on by default for over a year now) and you are protected from this and 143,000 other exploits. Quite frankly, I don't really care if there are 144,000,000 exploits that require open ports, I'm protected against every single last one of them, as is everyone else running XP.

So, while it is a bad thing that this existed in the first place and a good thing that MS closed it before it was exploited (seems to be the golden measure when talking about OSX and Linux vulnerabilities), I and 98% of other Windows users were already protected with or without this patch.

Yawn, sometimes running Windows is just so boring. Even worse, when something does come along that sounds really scary like: A user doesn't have to click on a link or open an attachment and I think "Oh good, finally something to worry about!", it turns out that, in fact, it isn't anywhere near as scary as the media and ABMers make it out to be. I'm just waiting for the 6 o'clock news predicting mass outbreaks!!!! only to be dissapointed when it turns out that one guy in Peru was actually the only one affected.

BTW, take a look at the mitigating factors for these "remote exploits". They make the recent OSX finder exploits seem simple by comparison!!

The Remote Access Connection Manager service is not started by default for all supported Microsoft Windows operating systems with the exception of Microsoft Windows 2000 Service Pack 4

On Windows XP Service Pack 2 and Windows Server 2003 systems, an attacker must have valid logon credentials and be able to log on locally to exploit this vulnerability.
Wasn't that a slam against the security contest on OSX where the only way the person broke in was by having local logon privileges? Using the same logic used back then, this exploit is total garbage!!

So michael, you were saying?

Posted by: NonZealot   Posted on: 06/13/06 You are currently: a Guest | Members login | Terms of Use

Alert moderator to an offensive message

Subscribe to this discussion via Email or RSS

SponsoredWhite Papers, Webcasts, and Downloads

• Recovery Manager for Active Directory ScriptLogic Recovery Manager for Active Directory? offers an easy-to-use solution for ... Download Now
• Client and Server System Performance Benchmarks Dell At their best, performance benchmarks provide impartial information that ... Download Now
• Trend Micro Message Archiver Trend Micro Easy compliance, e-discovery, and email management. Take a tour today of ... Download Now