Attack code for Windows flaw heightens risk

TalkBack 42 of 54:

Next »

« Previous

• Thread View
• Flat View

3 uncomfortable facts for the I HATE M$$$$$ crowd

Fact 1: The only OS where RRAS is on by default is W2000SP4. All other MS OSs either don't have this component at all or have it off by default.

The Remote Access Connection Manager service is not started by default for all supported Microsoft Windows operating systems with the exception of Microsoft Windows 2000 Service Pack 4.

Fact 2: To take advantage of this flaw, you need local administrator logon privileges.

On Windows XP Service Pack 2 and Windows Server 2003 systems, an attacker must have valid logon credentials and be able to log on locally to exploit this vulnerability. The vulnerability could not be exploited remotely by anonymous users or by users who have standard user accounts.

Fact 3: The patch does not break dial-up functionality except in the very rare cases where a script is needed to configure your connection. 99% of dial-up users don't require such a script.

Only customers who use dial-up connections that use scripts that configure their device for parity, stop bits or data bits or a post-connect terminal window or dial-up scripting, are affected by the issues identified in the KB article.

http://www.microsoft.com/technet/security/bulletin/ms06-025.mspx

Based on these mitigating factors, the chances of anyone actually using this exploit successfully are pretty minimal.

The difference between FUD and outright, blatant lies is that FUD is based on a grain of truth. Most of the talkbacks here are pure and simple lies.

Posted by: NonZealot   Posted on: 06/27/06 You are currently: a Guest | Members login | Terms of Use

Alert moderator to an offensive message

Subscribe to this discussion via Email or RSS

SponsoredWhite Papers, Webcasts, and Downloads

• VMware Infrastructure: A Guide to Bottom-Line Benefits VMware Frustrated by the costs of maintain ever larger data centers?or building ... Download Now
• Reducing Server Total Cost of Ownership with VMware Virtualization Software VMware VMware virtualization enables customers to reduce their server TCO and ... Download Now
• Three Steps You Need to Know to Stop Data Loss Varonis Sensitive data exposed to misuse or loss... it is the stuff of nightmares ... Download Now