bugtraq - Re: ASN.1 vulnerability -is- on Win98

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <00dd01c3f640$131ec7b0$a105bb0a@corp.ad.timeinc.com>
Date: Wed, 18 Feb 2004 11:55:55 -0500
From: "Joshua Levitsky" <jlevitsk@...hie.com>
To: <bugtraq@...urityfocus.com>
Subject: Re: ASN.1 vulnerability -is- on Win98

----- Original Message ----- 
>
> As per Microsoft there is now a Windows 98 security patch for MS04-007. It
> was completed today and is not available on Windows Update at this time.
If
> you have a support contract with Microsoft be sure to ask your TAM for the
> patch. Perhaps by the time anyone reads this the patch will be available
on
> the advisory page. I suspected this would happen.

Just an update. Microsoft is not going to post the patch on Windows Update.
You have to call in to Microsoft to get the patch or get it from your TAM if
you have a corporate account. I have been deploying the update since
yesterday because we use the AD client in 98 on our remaining machines so I
can't rename the vulnerable DLLs without killing the AD client. (As far as I
know.)

--
Joshua Levitsky, MCSE, CISSP
http://www.foist.org/
[5957 F27C 9C71 E9A7 274A 0447 C9B9 75A4 9B41 D4D1]