Re: Alert: Microsoft Security Bulletin - MS03-026

From: Yaakov Yehudi (yehudi_at_TEHILA.GOV.IL)
Date: 07/17/03

  • Next message: Jan Rutkowski: "Bypassing ServerLock protection"
    Date:         Thu, 17 Jul 2003 10:02:52 +0200
    To: NTBUGTRAQ@LISTSERV.NTBUGTRAQ.COM
    
    

    Hi All,

    The download locations for the patch, don't actually seem to have the download.
    E.G. :
    http://microsoft.com/downloads/details.aspx?FamilyId=2354406C-C5B6-44AC-9532-3DE40F69C074&displaylang=en

    Which sometimes shows the following message: "The download you requested is
    unavailable. If you continue to see this message when trying to access
    this download, you might try the "Search for a Download" area on the
    Download Center home page."

    Regards, YY

    ***********************************************************************
    Yaakov Yehudi yehudi@tehila.gov.il
    Security Manager admin@tehila.gov.il
    Project Tehila abuse@tehila.gov.il
    Israel Ministry Of Finance
    Kaplan 1
    Jerusalem Phone : +972-2-531-7811 or 7890
    Israel Fax : +972-2-5317801
    ***********************************************************************

    At Wednesday 16/07/2003 19:01, you wrote:
    >http://www.microsoft.com/technet/security/bulletin/MS03-026.asp
    >
    >Buffer Overrun In RPC Interface Could Allow Code Execution (823980)
    >
    >Originally posted: July 16, 2003
    >
    >Summary
    >
    >Who should read this bulletin: Users running Microsoft ® Windows ®
    >
    >Impact of vulnerability: Run code of attacker's choice
    >
    >Maximum Severity Rating: Critical
    >
    >Recommendation: Systems administrators should apply the patch immediately
    >
    >End User Bulletin: An end user version of this bulletin is available at:
    >
    >http://www.microsoft.com/security/security_bulletins/ms03-026.asp.
    >
    >Affected Software:
    >- Microsoft Windows NT® 4.0
    >- Microsoft Windows NT 4.0 Terminal Services Edition
    >- Microsoft Windows 2000
    >- Microsoft Windows XP
    >- Microsoft Windows Server(tm) 2003 Not Affected Software:
    >- Microsoft Windows Millennium Edition</ul

    oooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooo
    Are You "Certifiable"? Summer's Hottest Certification Just Got HOTTER!

    With a growth rate exceeding 110%, the TICSA security practitioner
    certification is one of the hottest IT credentials available. And now, for
    a limited time, you can save 33% off of the TICSA certification exam! To
    learn more about the TICSA certification, and to register as a TICSA
    candidate online, just go to

    http://www.trusecure.com/offer/s0100/

    oooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooo


  • Next message: Jan Rutkowski: "Bypassing ServerLock protection"

    Relevant Pages

    • RE: InfoSec certification EC/BackTrack?
      ... Subject: TR: InfoSec certification EC/BackTrack? ... Need to secure your web apps NOW? ... buy it or download a solution FREE today! ...
      (Pen-Test)
    • Re: InfoSec certification EC/BackTrack?
      ... Which version of CEH are you referring to? ... what certification would be most rewarding to get a good job? ... buy it or download a solution FREE today! ...
      (Pen-Test)
    • OT: Mirc Humor
      ... <NES> ... I download something from Napster ... MCSE on Microsoft Windows Server 2003 Certification Requirements ...
      (microsoft.public.cert.exam.mcse)
    • Re: VMS field test update for Itanium installation
      ... >> a VMS field test for Itanium. ... >because you bought the field test CD or was it from the HP Certification ... >to go to download the image the only reply was that they sent out the ...
      (comp.os.vms)
    • Re: Java Timer, swing
      ... >if you saw the download page first.. ... reason - certification costs more than the web hosting!) ... it can't be that difficult since you can get cheap certs. ... Canadian Mind Products, Roedy Green. ...
      (comp.lang.java.programmer)