full-disclosure - SV: MS RPC remote exploit.

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <Pine.LNX.4.58.0310091727110.26210@rolinck>
From: hvl at telefonica.de (Holger van Lengerich (Telefónica Deutschland))
Subject: SV: MS RPC remote exploit.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi,

Peter Kruse wrote:

> Systems already updated are not vulnerable to this exploit.

Just to get this straight: Systems updated according to MS03-39 are not
vulnerable. Systems on which only MS03-26 is applied are still vulnerable.

BTW: Do you know that the exploit works by conducting a test yourself or by
"hearsay"?

Regards,
  Holger

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (GNU/Linux)

iD8DBQE/hYImR9A/7YTqjgURAtvfAJ9ipS0RiEvlRHVZlOqJyJGcF0zI4QCeIkES
GCSYk2kSP5U+bFdZLGk7388=
=NVGr
-----END PGP SIGNATURE-----