[Dshield] New Microsoft Windows RPC vulnerability

Rick Leske rick at jaray.net
Tue Sep 16 22:21:34 GMT 2003


This is way old news.. really.. block 135, 137, 139, 445 ports.. at the
least.  One of micro$oft's Totally Stupid things to leave open.  Been
blocking them since the 70's

~Rick

> -----Original Message-----
> From: list-bounces at dshield.org [mailto:list-bounces at dshield.org]On
> Behalf Of Margles Singleton
> Sent: Tuesday, September 16, 2003 4:05 PM - FamHost
> To: list at dshield.org
> Subject: Re: [Dshield] New Microsoft Windows RPC vulnerability
>
>
> Haven't seen code, but apparently it exists and has been tested, and
> that it targets ports 135, 139, and 445
>
> mas
>
> >>> asebba at secrel.com.br 09/16/03 03:38PM >>>
> Do anyone have an exploit to this new RPC vulnerability?
>
> ----- Original Message -----
> From: "Dietmar Goldbeck" <dietmar.goldbeck at acm.org>
> To: "General DShield Discussion List" <list at dshield.org>
> Sent: Monday, September 15, 2003 6:20 PM
> Subject: Re: [Dshield] New Microsoft Windows RPC vulnerability
>
>
> > On Wed, Sep 10, 2003 at 03:03:40PM -0700, John Hardin wrote:
> > >
> > > Maybe we need to be proactive. Add any IP address from which a
> SoBig or
> > > 135 scan originates to the Potential Open Relay BL (PORBL).
> > >
> >
> >   Hello,
> >
> > has anybody thought about using dshield as spam blocking database?
> > What about refusing mail from IPs attacking other systems?
> >
> >   comments?
> >
> >    Ciao
> >      Dietmar
> >
> > --
> >  Alles Gute / best wishes
> >      Dietmar Goldbeck         E-Mail: dietmar.goldbeck at acm.org
> > Reporter (to Mahatma Gandhi): Mr Gandhi, what do you think of
> Western
> > Civilization?  Gandhi: I think it would be a good idea.
> >
> > _______________________________________________
> > list mailing list
> > list at dshield.org
> > To change your subscription options (or unsubscribe), see:
> http://www.dshield.org/mailman/listinfo/list
> >
>
> _______________________________________________
> list mailing list
> list at dshield.org
> To change your subscription options (or unsubscribe), see:
> http://www.dshield.org/mailman/listinfo/list
>
>
> _______________________________________________
> list mailing list
> list at dshield.org
> To change your subscription options (or unsubscribe), see:
> http://www.dshield.org/mailman/listinfo/list
> ___________________________________________________________________
> Virus Scanned and Filtered by http://www.FamHost.com E-Mail System.
>
>

___________________________________________________________________
Virus Scanned and Filtered by http://www.FamHost.com E-Mail System.




More information about the list mailing list