Re: what do we make of this........

From: Jayson M. Sperling (sperling@oregonfast.net)
Date: 09/11/02 

From: "Jayson M. Sperling" <sperling@oregonfast.net>
To: "Teodorski, Chris" <cteodorski@ppg.com>, <security-basics@lists.securityfocus.com>
Date: Tue, 10 Sep 2002 21:47:42 -0700

Greetings,

I don't normally mean to chime in and make anti-Microsoft remarks, but I
find myself curious of why MS would let this pass? If WinXP SP1 in fact
cures this, I almost wonder if they did this /intentionally/ to force users
to apply SP1 with it's interesting little quirks and licensing agreement,
perhaps among other things.
Don't call me an alarmist, or a paranoid freak (though with my own systems,
I usually am :), but I wonder...

Just my two cents.

Jayson M. Sperling

<snip>
----- Original Message -----
From: "Teodorski, Chris" <cteodorski@ppg.com>
To: <security-basics@lists.securityfocus.com>
Sent: Tuesday, September 10, 2002 7:51 PM
Subject: what do we make of this........

> from http://grc.com/default.htm
>
> Attention Windows XP Users
>
> A little-known but critical vulnerability exists in Windows XP.
>
> It has recently been repaired in Service Pack 1.
>
> This vulnerability allows the files contained in any specified directory
on your system to be deleted if you click on a specially formed URL. This
URL could appear anywhere: sent in malicious eMail, in a chat room, in a
newsgroup posting, on a malicious web page, or even executed when your
computer merely visits a malicious web page. It is likely to be widely
exploited soon.

</snip>