Tuesday, February 07, 2012
Register  Login
  Our sponsors   
  Users currently online   
Membership Membership:
Latest New User Latest: kevin
New Today New Today: 0
New Yesterday New Yesterday: 0
User Count Overall: 56

People Online People Online:
Visitors Visitors: 4
Members Members: 0
Total Total: 4

Online Now Online Now:
Periwinkle Communications
Viruswarn banner

Welcome to the Viruswarning forums.  All your original content has been ported to the new forums as  well as new content and additional opportunities to interact with the authors of Viruswarn.com.  You can always access old content at www.leedrake.com/forum .  You may find some formatting was lost in the conversion and the older versions of the posts to be more readable....

But at least it's all here.

Enjoy!

  Viruswarn Forums
Subject: Remote Procedure Call Vulnerability

You are not authorized to post a reply.   
Author Messages
Lee Drake
Posts:238

07/30/2003 6:55 PM  
What is it? Microsoft recently released a bulletin informing users of a vulnerability in their computers that could be used either to allow an attacker to run code of their choice on your machine OR to crash your machine remotely. This vulnerability labeled by Microsoft as MS03-026 (the 26th vulnerability released in the year 2003) applies to virtually all versions of Microsoft operating systems. The vulnerability is through port 135 on your computer (the port used by the NetBIOS protocol). All hardware and most good software firewalls block this port for external access. If you don't have a firewall though you may well be vulnerable to this danger. Since it travels via a typically open port, and many users do not have firewall protection, this is the perfect route by which a worm writer could spread a worm quickly across the internet. What should you do?
  • Be sure to run Microsoft Windows Update and accept ALL critical security patches. Review optional patches and apply all those that are labeled as "security updates".
  • If you only want to apply this patch go to: www.microsoft.com/technet/treeview/?url=/technet/security/bulletin/MS03-026.asp and download the version for your operating system.
  • If you wish to double check your security updates in a more rigorous manner download and install the Microsoft Baseline Security Analyzer available at: www.microsoft.com/downloads/details.aspx?FamilyID=9a88e63b-92e3-4f97-80e7-8bc9ff836742&DisplayLang=en
  • Keep good, up to date virus signatures, and be sure your virus software is updating.
  • Run a program such as Zone-Alarm to prevent programs from running on your machine and accessing the internet without your knowledge Acquire a hardware firewall to isolate your local network from the internet. Examples of easy to use hardware firewalls include the Linksys BEFSR41 and the DLink brand of firewalls.
For more information: www.microsoft.com/technet/treeview/?url=/technet/security/bulletin/MS03-026.asp Lee Drake Aztek Computer Solutions, Inc. After July 31st - 274 N. Goodman St Suite B269 39 N. Goodman St. Rochester, NY 14607 the human side of computing Email: ldrake@azcomputer.net Web: www.azcomputer.net Office Phone: 585-242-2060 Fax number: 585-242-9441
Lee Drake
Posts:238

08/12/2003 4:18 PM  
For additional information about the MS Blaster worm, please see the following thread: http://www.leedrake.com/forum/topic.asp?TOPIC_ID=853
You are not authorized to post a reply.
Forums > Viruswarning Forum > Viruswarning archive > Remote Procedure Call Vulnerability



ActiveForums 3.6
  Register or Login


Forgot Password ?
Copyright 2006 by OS-Cubed, Inc.   Terms Of Use  Privacy Statement