RE: Windows 2000 Server hardening

From: Laura A. Robinson (larobins_at_bellatlantic.net)
Date: 10/14/03

  • Next message: Thaddeus McNamara: "RPC Scan Issues" 
    To: "'Stewart, Jack'" <Jack.Stewart@tyson.com>, <focus-ms@securityfocus.com>
Date: Tue, 14 Oct 2003 09:50:35 -0400

    Yup. Do what you've already been doing- block ports at the firewall, disable
    unnecessary services, patch machines and wait for another patch soon, I'd
    wager.

    Laura

    > -----Original Message-----
    > From: Stewart, Jack [mailto:Jack.Stewart@tyson.com]
    > Sent: Monday, October 13, 2003 3:19 PM
    > To: focus-ms@securityfocus.com
    > Subject: RE: Windows 2000 Server hardening
    >
    >
    > Has anyone else heard about this - from the VigilantMinds website.
    >
    > VigilantMinds has successfully validated the claims regarding
    > the latest >> Microsoft Remote Procedure Call (RPC)
    > vulnerability. Specifically, >> VigilantMinds has validated
    > that hosts running fully patched versions of >> the following
    > Microsoft operating systems REMAIN subject to denial of >>
    > service attacks and possible remote exploitation: >> >> *
    > Microsoft Windows XP Professional >> * Microsoft Windows XP
    > Home >> * Microsoft Windows 2000 Workstation >> >> Although
    > it has not been verified at this time, other versions of >>
    > Microsoft Windows are also suspected to be subject to this >>
    > vulnerability. >> >> As with the prior RPC vulnerability
    > (MS03-039), these attacks can occur >> on TCP ports 135, 139,
    > 445 and 593; and UDP ports 135, 137, 138 and 445. >>
    >
    >
    >
    > -----Original Message-----
    > From: Scott [mailto:scott@cleven-mulcahy.com]
    > Sent: Monday, October 13, 2003 9:33 AM
    > To: focus-ms@securityfocus.com
    > Subject: RE: Windows 2000 Server hardening
    >
    >
    > Kurt was kind enough to remind me of another document. I
    > should have sent the link he provides below. It includes the
    > W2K3 and XP security guides, as well as the Threats and
    > Countermeasures Guide.
    >
    > Scott
    >
    > -----Original Message-----
    > From: Kurt Dillard [mailto:kurtdill@microsoft.com]
    > Sent: Monday, October 13, 2003 2:07 AM
    > To: Scott
    > Subject: RE: Windows 2000 Server hardening
    >
    >
    > Did you see this other guide I helped to write also? Threats and
    > Countermeasures: Security Settings in Windows Server 2003 and Windows
    > XP: http://go.microsoft.com/fwlink/?LinkId=15159
    >
    >
    > --------------------------------------------------------------
    > -------------
    > Visual & Easy-to-use are not words that you think of when
    > talking about
    > network analyzers. Need to share problem information with
    > colleagues that
    > do not read packets?
    >
    > Download ClearSight Networks Analyzer and see a new network
    > analysis tool
    > that makes the complex - easy
    > http://www.securityfocus.com/sponsor/ClearSightNetworks_focus-
    ms_031006
    ---------------------------------------------------------------------------

    This email, and any files transmitted with it are confidential and intended
    solely for the use of the addressee. This email may contain information
    protected by attorney-client privilege. If you are not the intended
    addressee, then you have received this email in error and that any use,
    dissemination, forwarding, printing, or copying of this email is strictly
    prohibited.

    Tyson Foods, Inc. will not be held liable to any person resulting from the
    use of any information contained in this email. Tyson Foods, Inc. will not
    be liable to any person who adds or deletes information contained in this
    email, and will not be held liable to any person as a result of any
    additions or deletions of information originally contained in this email.

    ---------------------------------------------------------------------------
    Visual & Easy-to-use are not words that you think of when talking about
    network analyzers. Need to share problem information with colleagues that
    do not read packets?

    Download ClearSight Networks Analyzer and see a new network analysis tool
    that makes the complex - easy
    http://www.securityfocus.com/sponsor/ClearSightNetworks_focus-ms_031006
    ---------------------------------------------------------------------------

    ---------------------------------------------------------------------------
    Visual & Easy-to-use are not words that you think of when talking about
    network analyzers. Need to share problem information with colleagues that
    do not read packets?

    Download ClearSight Networks Analyzer and see a new network analysis tool
    that makes the complex - easy
    http://www.securityfocus.com/sponsor/ClearSightNetworks_focus-ms_031006
    ---------------------------------------------------------------------------

  • Next message: Thaddeus McNamara: "RPC Scan Issues"

    Relevant Pages

    • RE: Windows 2000 Server hardening
      ... > Web-based reference is preferred, but a book would be useful ... > network analyzers. ... Download ClearSight Networks Analyzer and see a new network analysis tool ...
      (Focus-Microsoft)
    • RE: Windows 2000 Server hardening
      ... It's a pretty holistic book, ... I notice you mention the Windows Security Resource Kit here. ... > network analyzers. ... Download ClearSight Networks Analyzer and see a new network analysis tool ...
      (Focus-Microsoft)
    • RE: Tool for 026/ 039
      ... "Don't lose sight of security. ... network analyzers. ... Download ClearSight Networks Analyzer and see a new network analysis tool ...
      (Focus-Microsoft)
    • RE: RPC Scan Issues
      ... appropriate service port behind a firewall? ... network analyzers. ... Download ClearSight Networks Analyzer and see a new network analysis tool ...
      (Focus-Microsoft)