full-disclosure - ISS Security Brief: "MS Blast" MSRPC DCOM Worm Propagation (fwd)

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

From: chows at ozemail.com.au (gregh)
Subject: ISS Security Brief: "MS Blast" MSRPC DCOM Worm Propagation (fwd)

> ----- Original Message ----- 
> From: Richard Stevens 
> To: Chris Garrett ; full-disclosure@...ts.netsys.com 
> Sent: Tuesday, August 12, 2003 9:15 PM
> Subject: RE: [Full-Disclosure] ISS Security Brief: "MS Blast" MSRPC DCOM Worm Propagation (fwd)

> I must be missing something here... xp home & pro both have a "click and forget" firewall?

> why arent people using it?

A) Most people dont know about it.

B) When you set the connection up for your ISP it is ticked by default. However, some ISPs have the option off in their setup disks.

C) Protects lamely against incoming and not at all against outgoing.

D) It's an MS product and let's face it, would YOU blindly trust it knowing that?

Greg.