full-disclosure - RPC DCOM Patches

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <200307311927.h6VJRShS012770@mailserver2.hushmail.com>
From: r1an at hush.ai (r1an@...h.ai)
Subject: RPC DCOM Patches

John,

On Thu, 31 Jul 2003 05:31:57 -0700 John Sec <john_sec_lists@...mail.com>
wrote:
>The MS website says that the patch can only be applied to Windows
>2000 systems with SP3 or SP4.  Has anybody tried to run the patch on
>an SP2 system?  

I've confirmed that the patch does install on SP2; however, M$ says it
won't support the configuration or vouch for the protection it provides.
 (Isn't that every patch? :)  I haven't yet confirmed whether HD's exploit
will work on that configuration (SP2 w/ MS03-026 patch) and haven't yet
played with NT 4.0 workstation.