Re: MS09-048 includes fixes for TCP/IP implementation issues reported more than a year ago

[bob]

Does anyone have a reference pointing to the original announcement on here for 
these vulnerabilities? I would like to research them regarding the potential 
continued vulnerability of XP, since MS did not provide a patch for XP products.

RE: MS09-048 includes fixes for TCP/IP implementation issues reported more than a year ago

[Jim Duncan]

b...@home.com wrote:
 Does anyone have a reference pointing to the original announcement on
 here for these vulnerabilities? I would like to research them
 regarding the potential continued vulnerability of XP, since MS did
 not provide a patch for XP products.   

CERT-FI was the coordinator for these vulnerabilities, and the CERT-FI
advisory (referenced in the previous message from Juha-Matti Laurio)
is the best overall announcement.

Jim

-- 
James N. Duncan, CISSP
Manager, Juniper Networks Security Incident Response Team (Juniper SIRT)
E-mail: jdun...@juniper.net  Mobile: +1 919 608 0748
PGP key fingerprint: E09E EA55 DA28 1399 75EB  D6A2 7092 9A9C 6DC3 1821