full-disclosure - [normal] Re: MS RPC remote exploit. What about DCOMbobulator?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <20031009193322.GA7460@arobas.net>
From: vladimir at arobas.net (Vladimir Parkhaev)
Subject: [normal] Re: MS RPC remote exploit. What about DCOMbobulator?

Quoting opticfiber (opticfiber@...sight.net):
> 
> It's come to my attetion that disablinf DCOM in windows is near 
> impossible without a regedit.

I am no m$win expert, but I think that runing 'dcomcfng' from a DOS
shell and clicking on 'Default Properties' and clearing 'Enable Dcom on this
Computer' window is enough. No regedits, no 'tiney little applications' required.

You still need to patch the PC or install *nix on it though....