RPC Scan Issues

From: Thaddeus McNamara (tk_at_coast-radio.com)
Date: 10/14/03

  • Next message: Jason Aarons: "RE: Windows 2000 Server hardening" 
    To: "'focus-ms@securityfocus.com'" <focus-ms@securityfocus.com>
Date: Tue, 14 Oct 2003 09:58:01 -0700

    After reading there's yet another RPC exploit code in the wild, I double
    checked my LANs with both the MS DCOM scanner (KB824146Scan) and the Retina
    RPC DCOM scanner and got very different results. A few of the machines I
    know are NOT patched and others are Fully patched.

    1. Is it possible they aren't patched properly?
    2. Should I be getting such different results?
    3. Should I or can I turn off RPC?
    4. Will the firewall be enough?

    Thadd McNamara
    IT Director
    Coast Radio Co., Inc.

    ---------------------------------------------------------------------------
    Visual & Easy-to-use are not words that you think of when talking about
    network analyzers. Need to share problem information with colleagues that
    do not read packets?

    Download ClearSight Networks Analyzer and see a new network analysis tool
    that makes the complex - easy
    http://www.securityfocus.com/sponsor/ClearSightNetworks_focus-ms_031006
    ---------------------------------------------------------------------------

  • Next message: Jason Aarons: "RE: Windows 2000 Server hardening"

    Relevant Pages

    • RE: RPC Scan Issues
      ... Not many sites hit with one of the many RPC related worms were hit thru the ... Subject: RPC Scan Issues ... RPC DCOM scanner and got very different results. ... network analyzers. ...
      (Focus-Microsoft)
    • RE: RPC Scan Issues
      ... The MS scanner is so inaccurate as to be useless. ... You may find systems that had the patch installed through windowsupdate, ... You cannot turn off RPC and expect a Windows system to work. ... network analyzers. ...
      (Focus-Microsoft)
    • Re: RPC Scan Issues
      ... Turn off DCOM if that's feasible, or use firewall rules to block the ... Subject: RPC Scan Issues ... > network analyzers. ...
      (Focus-Microsoft)
    • RE: RPC Scan Issues
      ... I double checked my LANs with both the MS DCOM scanner ... > and the Retina RPC DCOM scanner and got very ... network analyzers. ...
      (Focus-Microsoft)
    • RE: RPC Scan Issues
      ... Ms DCOM tells it like it is, ... Subject: RPC Scan Issues ... network analyzers. ... Download ClearSight Networks Analyzer and see a new network analysis tool ...
      (Focus-Microsoft)