 |
|
Richelieu
|
|
Gatineau
Dec 2001 time: 00:30
|
|
If you haven't done so today. New patch available.
|
|
|  |
 |
|
optimus2861
|
|
Halifax, NS
Nov 2000 time: 01:30
|
|
Excerpt from the MS security bulletin:
quote: The fix provided by this patch supersedes the one included in Microsoft Security Bulletin MS03-026.
Remote Procedure Call (RPC) is a protocol used by the Windows operating system. RPC provides an inter-process communication mechanism that allows a program running on one computer to seamlessly access services on another computer. The protocol itself is derived from the Open Software Foundation (OSF) RPC protocol, but with the addition of some Microsoft specific extensions.
There are three identified vulnerabilities in the part of RPCSS Service that deals with RPC messages for DCOM activation— two that could allow arbitrary code execution and one that could result in a denial of service. The flaws result from incorrect handling of malformed messages. These particular vulnerabilities affect the Distributed Component Object Model (DCOM) interface within the RPCSS Service. This interface handles DCOM object activation requests that are sent from one machine to another.
An attacker who successfully exploited these vulnerabilities could be able to run code with Local System privileges on an affected system, or could cause the RPCSS Service to fail. The attacker could then be able to take any action on the system, including installing programs, viewing, changing or deleting data, or creating new accounts with full privileges.
To exploit these vulnerabilities, an attacker could create a program to send a malformed RPC message to a vulnerable system targeting the RPCSS Service. |

A patch for a patch that they released barely two months ago. Come on, MS, get your act together.
|
|
|  |
 |
|
Q Cubed
|
 |
t3h y3ll0w p3ril
Apr 1999 time: 23:30
|
|
where's asher? he might love this article.
or this one.
Last edited by Q Cubed on 12-09-2003 at 17:30
|
|
|  |
All times are GMT. The time now is 05:30. Apolyton Time is 00:30. |
top of page
|
| archivepost |
|
Forum Rules:
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
|
HTML code is ON
vB code is ON
Smilies are ON
[IMG] code is ON
|
|
|
|
|
|