Re: NT/W2K Source leak

From: Russ (Russ.Cooper_at_RC.ON.CA)
Date: 02/13/04

  • Next message: Carnegie, Martin: "Secure Channel problem" 
    Date:         Fri, 13 Feb 2004 17:27:29 -0500
To: NTBUGTRAQ@LISTSERV.NTBUGTRAQ.COM

    Couple of corrections.

    1. There were 27,142 NT 4.0 SP3 files totaling 338MB.
    2. There were 28,782 W2K SP1 files totaling 658MB.
    3. It does appear that all of both versions are present, minus IIS.
    4. 10,425 of the 27k NT files are actually source totaling 193MB uncompressed.
    5. 8,367 of the 28k W2K files are actually source totaling 217MB uncompressed.

    Sorry for any confusion. I still contend that the risk is relatively low consider the age of the packages. Both are copies from before the MS security push, and both have had 3 service pack releases since.

    Obviously only time will tell.

    Cheers,
    Russ - NTBugtraq Editor

    -----
    NTBugtraq Editor's Note:

    Most viruses these days use spoofed email addresses. As such, using an Anti-Virus product which automatically notifies the perceived sender of a message it believes is infected may well cause more harm than good. Someone who did not actually send you a virus may receive the notification and scramble their support staff to find an infection which never existed in the first place. Suggest such notifications be disabled by whomever is responsible for your AV, or at least that the idea is considered.
    -----

  • Next message: Carnegie, Martin: "Secure Channel problem"