On Sep 10, 2003, at 6:01 PM, William Lefkovics wrote:
Retina 4.9.126 and our free RPC scanner Version 1.1.0 have the correct
checks that the rest of the scanners are going to need to "model themselves"
after in order to accurately detect these RPC flaws. Again the free RPC
scanner tool, with latest RPC check, can be downloaded from:
William,
Quick question since you are here. The free scanner for MS03-026 from eEye would show Windows 98 machines as vulnerable. Do you know if this was corrected in the MS03-039 scanner? Microsoft's free scanner had the same flaw by the way. Since Windows 98 isn't totally dead until January 2004, we still have maybe 300 machines on various networks. Causes headaches when 98 machines show up. Would seem a TCP fingerprint could tell the scanner if a machine is 98 or an HP JetDirect or such.
Just curious.
Don't know how others here are responding to this, but in my part of AOL we're calling it an Emergency which means all systems patched (15,000 machines) in the next 5 business days. If code escapes in to the wild to exploit this then we go to Critical which means 48 hours to completely patch all those machines. This is some annoying stuff. Next month I'm throwing up a pair of SUS servers. If anyone here has positive / negative / whatever feedback or tips please pass them on. I want to implement SUS right, and with most things Microsoft, you need to know all sorts of secrets before it all works right.
-Josh
To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
