[dshield] Re: [Dshield] Dcom

R Shady RShady at stny.rr.com
Sun Aug 3 21:28:32 GMT 2003


Sorry, forgot to add this link:
http://support.microsoft.com/default.aspx?scid=kb;en-us;236354

newsdesk wrote:

> I have installed it on my WIN98 system, but did not configure it. Now I am getting error messages to change my network authorizations, including sharing files and printers. I do not have a network and don't know which direction to go. Uninstall and reinstall? or just leave off machine. It came on my new Norton Internet Security 2003 CD. Also, I wonder why Win98 was not listed in the affected OS for the patch.
> thanks
> 
> (first post)
>   ----- Original Message ----- 
>   From: Paul Marsh 
>   To: General DShield Discussion List 
>   Sent: Friday, August 01, 2003 8:34 AM
>   Subject: RE: [Dshield] Dcom
> 
> 
>   My sentiments exactly, patch those systems!  I've also been looking around and found that there is a dcom for Win98 http://www.microsoft.com/com/dcom/dcom98/dcom1_3.asp but who really knows how many users have installed it.
> 
>   -----Original Message-----
>   From: Johannes Ullrich [mailto:jullrich at euclidian.com]
>   Sent: Friday, August 01, 2003 9:17 AM
>   To: General DShield Discussion List
>   Subject: Re: [Dshield] Dcom
> 
> 
>   On Fri, 2003-08-01 at 08:47, Paul Marsh wrote:
>   > I'm starting to hear rumblings that dcom is 
>   > exploitable on port 80, does anyone know if 
>   > there is any truth behind it?  
> 
>   yes it is. But AFAIK, this is not enabled by default,
>   and the currently circulated exploits (dcom.c based)
>   are not using this port.
> 
>   However, this does bring up the fact that you need
>   to patch. Don't rely on the firewall alone. If possible,
>   just disable RPC.
> 
> 
>   > 
>   > _______________________________________________
>   > list mailing list
>   > list at dshield.org
>   > To change your subscription options (or unsubscribe), see: http://www.dshield.org/mailman/listinfo/list
>   -- 
>   Johannes Ullrich                     jullrich at euclidian.com
>   pgp key: http://johannes.homepc.org/PGPKEYS
> 
>   _______________________________________________
>   list mailing list
>   list at dshield.org
>   To change your subscription options (or unsubscribe), see: http://www.dshield.org/mailman/listinfo/list
> 
> 
> 
> ------------------------------------------------------------------------
> 
> _______________________________________________
> list mailing list
> list at dshield.org
> To change your subscription options (or unsubscribe), see: http://www.dshield.org/mailman/listinfo/list





More information about the list mailing list