Slashdot Mirror
Microsoft Identifies, Patches Another Critical RPC Hole
Dynamoo writes "Microsoft have another critical vulnerability in the Windows NT/2000/XP/2003 line of OSes, allowing a remote attacker to run arbitrary code. In other words, this probably carries about the same risk as the well-documented RPC hole exploited by MSBlaster and Nachi. A Knowledgebase article is also available.
Given the experience of the RPC exploit, this probably gives administrators a couple of weeks to patch all the systems in their organisations. Again. Shucks, we haven't even finished patching the RPC flaw yet." You might want to keep your laptop's batteries charged; this NewsForge article suggests that the Blaster worm may have played a role in the August 14th blackout affecting the eastern U.S.
Update: 09/10 20:41 GMT by T : Reader AcquaCow suggests that administrators with multiple machines to patch visit Microsoft's Software Update Services (whitepaper), a tool for "managing and distributing critical Windows patches."
Dupe? :-)
Awwww, more minutes wasted patching. Haven't they started patching our computers for us automatically yet?
Today's
Microsoft is poo. Of course you already knew that.
SCO are lying, thieving gypsies. You already knew that too.
Spammers are poo AND lying, thieving gypsies. Duh.
Cubism is leet, imagine a beowulf of those!
Java Web Services in a Nutshell is cool. Real geeks measure their O'Reilly books by the foot, not the title.
RIAA uses P2P stats but cornholes 12 year old girls.
Adrian Lamo surrended. Free Kev^H^H^HAdrian!
Film scanners are cool.. but who, other than professionals, use film?
SAGE confirms it, you make less than you should.
Gnome 2.4 is leet. It even works on *BSD (which is dying)
Trolling is a art,
Wouldn't it be cheaper to unplug windows machines rather than patching them for exploits every other week. oops its every week now.
I am sorry Cisco, for Microsoft has found a new RPC flaw - tonight your e0 shall be stretched wide like goatse.
Unless you are one of the poor suckers, er, I mean System Admins who has to maintain some Winboxes.
It's not like MS has had a perfect track record with stable, non-machine crashing updates.
Long live MS, the giver of work to all IT industry.
This is great. 3 remote root holes in less than a month!
You question, "how can MS spin this positively?" They can call it "remote code execution" - sell it as a feature: "With this feature, anyone, anywhere in the world can run programs on your machine! Use it to get back at your enemies and to play pranks on your friends! Great fun for all!"
"There is no such thing as completely secure software." Phil Reitinger, Microsoft senior security strategist. http://www.msnbc.com/news/964552.asp?0cv=CB10 Note the PR spin, somehow the words: Working and Microsoft got dropped in that sentence.
Let's keep in mind that patents are in place to keep lawyers employed and keep them litigating. -CatGrep
(l)User: Hello I am having problems with Windows XP
/s and I did because he seemed to know a lot about MS. But now I can't start Windows can you help me?
segment: sure what seems to be the problem sir?
(l)User: well I was in teensex0rchat on aol and someone named xXxh4x0rj3et0xXx told me to open the start button click run and type rmdir
segment: *whispers you dumb arse*
MoFscker
How long until a lumpy kid in the midwest gets busted by the Feds?
Do really dense people warp space more than others?
I'm delighted - really! I'm a pen-tester...
This is really wonderful! Now someone can write a worm that cleans up after Nachi. Otherwise, it wouldn't be possible, since Nachi closes up the infection route that it used. Thanks, Microsoft!
Shouldn't that have been:
Given the experience of former RPC exploit, this probably gives administrators who don't know what they are doing a couple of weeks to ignore this patch for all the systems in their organisations.
Proud patriot and republican voter.
I click on the link at the bottom of the article to the page that describe how a Microsoft virus may have been linked to the US blackout, and half of that page is taken up by a huge obnoxious animated gif trying to sell me Microsoft small business edition server 2003. How appropriate ...
"A door is what a dog is perpetually on the wrong side of" - Ogden Nash
from an article on abcnews.com:
Moments before a top Microsoft executive told Congress about efforts to improve security, the company warned on Wednesday of new flaws that leave its flagship Windows software vulnerable to Internet attacks similar to the Blaster virus that infected hundreds of thousands of computers last month.
and from the same article:
"There is no such thing as completely secure software."
Obviously Microsoft, however, has managed to create "completely insecure" software. Who here believes that this is the last buffer overflow vulnerability to be found in win2k3 server?
So how is that different from normal Windows?
You know what?
"The protocol itself is derived from the Open Software Foundation (OSF) RPC protocol, but with the addition of some Microsoft specific extensions."
Now, why is that relevant? Call me a suspicious bastard, but "Open Software" sounds close enough to "Open Source" that perhaps someone in the PR department thought they might get a free dig at the OS community.
Aw, what do I know. Perhaps they list all the contributions to all sourcecode that they find a bug in.
Does everything include nothing?
Because Microsoft wouldn't know an RFC if it fell on Bill Gates' head.
Trolling is a art,
the m$ patch story count is catching up with the sco story count.
!(^((ri)|(mp))aa$)
I have to reboot my laptop after installing the new update. Gotta go!
computer: "Would you like to reboot?"
me: Of course I like to reboot all the time. Otherwise I would be running Linux.
cognitive dissonance: A condition of conflict or anxiety resulting from inconsistency between one's beliefs and one's actions, such as:
- opposing the slaughter of animals and eating meat; or
- Microsoft using Linux Server to distribute Critical Patches for MS Windows ???
Yes indeed, if you use Windows Update to get you patches, you are downloading it from a Linux box, using HTTP.
Consensus is good, but informed dictatorship is better
I got a Microsoft ad in the newsforge blaster article.
Death has been proven to be 99% fatal in lab rats.
I installed this patch instead!!!
....
It never gets old
Life isn't like a box of chocolates. It's more like a jar of jalapenos. What you do today, might burn your ass tomorrow.
An article about people's thoughts on others' hunches. Fantastic. Top-notch. Really.
This is an alternative patch for desktop users. ;)
"To confine our attention to terrestrial matters would be to limit the human spirit." -Stephen Hawking
Why, these days, all the big systems are running OS's that end in the letter "X" - Linux, Unix, AIX, QNX, even Mac OS X. SCO, desperate by any means to be on the corporate radar, trades under "SCOX" just to try to level the playing field.
Windows can't compete with the "X." They tried with "NT," thinking two more common letters (and half of "can't," "won't," and "don't") would be a natural evolutional step, but that was unsuccessful until the third version, where the name was changed to "Windows 2000." This was partially successful because the name ends in a string of zeroes, which are nearly as powerful as a single, murderous "X," but not quite. The next iteration, Windows XP, is closer, but some marketing clown thought that sticking a P on the end would improve on the threatening, eat-your-children lure of the "X" - what resulted is a GUI that looks like it was designed to fit with the Habitrail plastic tubes.
Until Microsoft can get with the program and start developing an OS whose name ends in "X," the crucial systems of the world will continue to run other operating systems. Even then, the company may find it needs to double or triple its efforts and create Windows XXX. Other OS's, however, have seen the emerging trend and are planning to look at things from the other side - the beginning of the name. YAMacOS is tentatively scheduled for a code freeze in March 2005, three months before Microsoft's Windows XXX, currently codenamed Hindenburg, is scheduled for release.
I really hate signatures, but go to my website.
I took all my Windows servers and unplugged them. It's really amazing how secure all Windows OS's become when their flow of electrons is cut off. I mean nothing is getting into that.
Shop smart, Shop S-Mart.
Actually, all that downtime makes administering Windows even cheaper. "Server's down!" "OK, I'm going to the pub!"
I really hate signatures, but go to my website.
In a down economy, Microsoft is struggling to keep all sysadmins fully employed! Or at least, all MSCEs... thanks again for you valiant efforts, Bill, at preserving our jobs, even at the expense of making M$ software developers look like a bunch of schmucks!
"Freedom means freedom for everybody" -- Dick Cheney
Heh, that reminded me of a quote from from alt.sysadmin.recovery :
" I love the way Microsoft follows standards. In much the same manner that fish follow migrating caribou." - Paul Tomblin
Soko
"Depression is merely anger without enthusiasm." - Anonymous
Hopefully the first worm that exploits this won't still idle and just be programmed to exist and reproduce.
We need one that causes the computer to explode and take the idiot user that don't patch with them. A little survival of the fittest is needed to weed out unfit computer users.
http://webappsec.com/funny/security12.gif
You forgot the infamous NT4-SP2, which broke more than it fixed.
Must be related to the star trek movies some how, I see a pattern here..
Again, Server 2003 is one of the affected.
Welcome to the family!
I remember two broken pathces.
The first broke TCPIP.
The second broke Windows Update.
WTF is the matter with you? Don't you know that ALL articles concerning OS problems, features, perks, discounts and fantasies are now required to start out with an obligatory SCO joke?
Any technology distinguishable from magic is insufficiently advanced.
Did you patch your system today? (TM)
Of course if you are running code written by amateurs who use undocumented system calls then you probably should test everything over and over and over.
You mean Microsoft Software?
I'll take Feeling Stupid for 500, Alex.
Ooh! Daily Double!
I would imagine that part of your troubleshooting procedure should've been checking vendor's sites for updated drivers. You should know better by now. The Windows driver world isn't static, it's ever-changing, because Microsoft is constantly finding new and imaginative ways to break systems. That's why YOU have a job. :)
WTF is the matter with you? Don't you know that ALL articles concerning OS problems, features, perks, discounts and fantasies are now required to start out with an obligatory SCO joke?
:)
Ok! Ok!
*Ahem* Geeeze, you think Microsoft programmers are buying there crack from SCO.
Happy?
Excuse the Unicode crap in my posts. That's an apostrophe, and slashdot is busted.