next blaster coming up?

Mon Oct 13 08:20:28 UTC 2003

maybe not 100% acknowledged, but still good to know

From: 3APA3A <3APA3A_ at _security.nnov.ru>  
Date: 11 октября 2003 г. 
Subject: Bad news on RPC DCOM vulnerability 

--------------------------------------------------------------------------------

Dear bugtraq at securityfocus.com,

There are few bad news on RPC DCOM vulnerability:

1.  Universal  exploit  for  MS03-039  exists in-the-wild, PINK FLOYD is
again actual.
2.  It  was  reported  by exploit author (and confirmed), Windows XP SP1
with  all  security  fixes  installed still vulnerable to variant of the
same bug. Windows 2000/2003 was not tested. For a while only DoS exploit
exists,  but  code execution is probably possible. Technical details are
sent to Microsoft, waiting for confirmation.

Dear  ISPs.  Please  instruct  you customers to use personal fireWALL in
Windows XP.

http://www.security.nnov.ru

--

Tomas Daniska
systems engineer
Tronet Computer Networks
Plynarenska 5, 829 75 Bratislava, Slovakia
tel: +421 2 58224111, fax: +421 2 58224199

A transistor protected by a fast-acting fuse will protect the fuse by blowing first.