full-disclosure - New Microsoft security bulletins today

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <5F8A923E-FF6D-11D7-8E1C-000A95864792@joshie.com>
From: jlevitsk at joshie.com (Joshua Levitsky)
Subject: New Microsoft security bulletins today

On Oct 15, 2003, at 3:06 PM, Jerry Heidtke wrote:

> Microsoft just issued 7 new security bulletins: 5 for various Windows
> version and 2 for Exchange.
>
> Six are rated "critical", one is "important". Just to refresh your
> memory, a critical vulnerability is one that can be exploited remotely
> and automatically (such as by a worm) and gives complete system 
> control.
> An important vulnerability is one can be exploited remotely and gives
> complete system control, but cannot be exploited automatically or
> without some user action.

Ah what's to worry about. Exploits against Exchange / OWA / Messenger 
Service / Authenticode / Active X  can't harm anyone. :) Bring em on.

Luckily I deployed my SUS boxes at work and all I had to do to deploy 
the patches was check a few little boxes on my SUS servers.

--
Joshua Levitsky, CISSP, MCSE
System Engineer
AOL Time Warner
[5957 F27C 9C71 E9A7 274A  0447 C9B9 75A4 9B41 D4D1]