NTDLL Attack FAQ

From: Russ (Russ.Cooper@RC.ON.CA)
Date: 03/19/03

  • Next message: Russ: "FW: Alert: Problems with MS03-007 installed - clarification" 
    Date:         Tue, 18 Mar 2003 19:20:14 -0500
From: Russ <Russ.Cooper@RC.ON.CA>
To: NTBUGTRAQ@LISTSERV.NTBUGTRAQ.COM

    I've gathered together some information about the NTDLL Attack
    (MS03-007) and put them on a web page;

    http://www.ntbugtraq.com/default.asp?sid=1&pid=47&aid=74

    It includes links to articles on how to disable WebDAV and answers some
    questions about that (whether you need to reboot or not, etc...) as well
    as a couple of files Nelson Bunker gave me to automate modifying the
    registry key. I've included the easiest method I've seen to determine if
    WebDAV is enabled also. I was going to write a little tool to do this,
    but I'll leave that up to one of you.

    Suggestions for additional information or testers is welcome.

    Cheers,
    Russ - NTBugtraq Editor

    oooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooo
    Delivery co-sponsored by Prometric - More than testing, learning.
    oooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooo
    http://www.prometric.com

    Prometric, part of The Thomson Corporation, is the leader in
    technology-enabled testing and assessment services for information
    technology certification, academic admissions, professional licensure and
    certifications, computer-based driver's licensing, and corporate testing.

    oooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooo

  • Next message: Russ: "FW: Alert: Problems with MS03-007 installed - clarification"

    Relevant Pages