full-disclosure - No one else seeing the new MS05-039 worm yet?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <OF42E1429D.B5BAB8A8-ON8825706D.00747365-8825706D.0074B39A@symantec.com>
Date: Tue Aug 30 22:15:04 2005
From: pferrie at symantec.com (Peter Ferrie)
Subject: No one else seeing the new MS05-039 worm yet?

...

>Lastly they don't point out that "worm" propagation based on the
>PnP vulnerability only occurs on the Win2K boxes.  Win2K3 and
>WinXP require some user/machine action to exploit the
>vulnerability, and the malware can't infect those boxes
>independently.

It's not quite like that.
XP pre SP2 is vulnerable to attack.  They will most likely
crash because of a wrong address, but they can be reached.