RE: Too much misleading advice on the Universal Plug-and-Play security hole

From: Paul Schmehl (pauls@utdallas.edu)
Date: 12/28/01


Date: Thu, 27 Dec 2001 20:11:57 -0600
From: Paul Schmehl <pauls@utdallas.edu>
To: Marc Maiffret <marc@eeye.com>, bugtraq@securityfocus.com

Furthermore, if you run the patch and you're not vulneralble, the patch
will tell you that. So, if you have any of the vulnerable versions, just
run the patch. If you're not vulnerable, it won't hurt anything, and if
you are, you'll be patched.

--On Wednesday, December 26, 2001 7:24 PM -0800 Marc Maiffret
<marc@eeye.com> wrote:
>
> Good to try to clear things up like that however you just confused people
> even more again. Windows 98 is also affected yet you fail to mention it.
>
> Once again for those of us that missed it in Microsoft's bulletin the
> first time:
> Affected Software:
> Microsoft Windows 98
> Microsoft Windows 98SE
> Microsoft Windows ME
> Microsoft Windows XP
>
> That means, and as I've said to one to many reporters, if you or someone
> you know is running Windows 98/ME/XP then you/they need to install the
> patch.

Paul Schmehl (pauls@utdallas.edu)
Supervisor of Support Services
The University of Texas at Dallas
AVIEN Founding Member



Relevant Pages

  • help
    ... being asked to send $19.95 to receive this patch? ... Buffer Overrun in Messenger Service Could Allow Code ... Tested Software and Patch Download Locations: ... Microsoft Windows NT - Download a fix to patch this issue ...
    (microsoft.public.windowsxp.general)
  • Re: Microsoft Security Bulletin MS02-071 Update
    ... I installed the previous patch on a couple of WinNT 4.0 servers. ... Microsoft Windows NT 4.0; ... The bulletin has been updated to include the new download ... > The Microsoft Security Response Center has released Microsoft Security ...
    (microsoft.public.security)
  • Re: Microsoft Security Bulletin MS02-055
    ... The MS02-055 security patch appears to be affecting my server adversely - ... This is one server out of three that are load-balanced. ... > Microsoft Windows 98 Second Edition ...
    (microsoft.public.security)
  • Re: Microsoft Security Bulletin MS02-055
    ... The MS02-055 security patch appears to be affecting my server adversely - ... This is one server out of three that are load-balanced. ... > Microsoft Windows 98 Second Edition ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Microsoft Security Bulletin MS02-055
    ... The MS02-055 security patch appears to be affecting my server adversely - ... This is one server out of three that are load-balanced. ... > Microsoft Windows 98 Second Edition ...
    (microsoft.public.win2000.security)