RE: Items within XP SP2 and Win2003
From: Depp, Dennis M. (deppdm_at_ornl.gov)
Date: 09/27/04
- Previous message: Jeff Fedor: "Re: Are MS Powerpoint's vulnerable to this JPEG Vuln?"
- Maybe in reply to: James Bowman: "Items within XP SP2 and Win2003"
- Next in thread: kyle: "Re: Items within XP SP2 and Win2003"
- Reply: kyle: "Re: Items within XP SP2 and Win2003"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Mon, 27 Sep 2004 07:14:49 -0400 To: kyle@inetconnection.com, focus-ms@securityfocus.com
Interesting comment. The arbitrary code exploits you mentioned, are
these unique to SP2 or does SP1 fall prey to them as well. I am not
aware of any exploits that are unique to SP2. The firewall is not
perfect I will admit, but it is a vast improvement over its
predecdessor. The current firewall is great for a home machine.
However, when you use the wizard to poke holes in the firewall, they
seem to be much larger than needed. I think a better analogy for the
firewall is a privacy fence, but when you use the wizard to open the
firewall, often you are removing several boards when a knot hole would
have worked just as well.
Denny
> -----Original Message-----
> From: kyle [mailto:kyle@inetconnection.com]
> Sent: Wednesday, September 22, 2004 9:53 PM
> To: focus-ms@securityfocus.com
> Subject: Re: Items within XP SP2 and Win2003
>
> Well, on the grand scheme of things, XP SP2 is far from
> secure. I know of a
> good many arbitrary code exploits that are easily utilized by
> a common
> webmaster. And the "firewall" is like a chain link fence for
> a privacy fence.
> IMO you were better off not "upgrading" to SP2 and sticking
> with SP1 until
> SP2 was fixed (released, but far from done, and def. not an upgrade)
> I'm sure M$ was better with 2003 considering it was supposed
> to be a SERVER
> edition, but then again you never know with M$.
>
> On Sunday 19 September 2004 09:11 pm, James Bowman wrote:
> > Is their a set of hotfixes needed for 2003 that make it comprable in
> > features / overall security posture to XP SP2?
> >
> > Although there's probably a bevy of XP SP2 items embedded
> in 2003, I would
> > imagine there's a bunch that's not...
> >
> > Thanks
> >
> >
> --------------------------------------------------------------
> -------------
> >
> --------------------------------------------------------------
> -------------
>
> --------------------------------------------------------------
> -------------
> --------------------------------------------------------------
> -------------
>
>
---------------------------------------------------------------------------
---------------------------------------------------------------------------
- Previous message: Jeff Fedor: "Re: Are MS Powerpoint's vulnerable to this JPEG Vuln?"
- Maybe in reply to: James Bowman: "Items within XP SP2 and Win2003"
- Next in thread: kyle: "Re: Items within XP SP2 and Win2003"
- Reply: kyle: "Re: Items within XP SP2 and Win2003"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|