user profiles on a dc

From: 8cup (8cup_at_discussions.microsoft.com)
Date: 07/20/05 

Date: Wed, 20 Jul 2005 12:55:08 -0700

we discovered lately created profiles of a few normal users on our DC (w2k
sp4, patched upto june)! is there some vulnerability we have overseen? The DC
is also fileserver, no IIS, we use TS only in admin mode. We are worried as
there were already rumours of security breaches.

Relevant Pages

  • Web DAV vulnerability
    ... This machine is running Win 2k SP4 so it shouldn't be ... vulnerable and it is set to DL and install patches every ... >vulnerability discussed in MS03-007 security bulletin. ... >denying the connections but I am seeing scans at least ...
    (microsoft.public.inetserver.iis.security)
  • apply update if OS is not affected but software on it is?
    ... If for example windows 2000 sp4 is not affected from a ... vulnerability, but internet explorer 6 sp1 is affected, ...
    (microsoft.public.security)