RE: DCOM Worm

From: <Geoff.Shatz(at)pchelps.com>
Date: Wed Aug 13 2003 - 14:16:59 EDT

I may have spoken too soon. A couple of days ago it was on windowsupdate. I updated my home PC and was specifically looking for this patch among a couple of others. I just went back to windowsupdate from an unpatched test machine and it looks as if MS is no longer providing the patch through the windowsupdate service. I should have checked again before ripping off my last email. Doesn't make any sense to me why they would do this. Sorry again, egg on my face.

Geoff

-----Original Message-----

From: Mario Davids [mailto:MarioD@etv.co.za] Sent: Wednesday, August 13, 2003 12:17 PM To: Geoff Shatz; focus-ms@securityfocus.com Subject: RE: DCOM Worm
Importance: High

Thanks for your replies...

Well the reason I asked, is that I ran an update awhile back .. and when I ran one on Thursday there was no updates for my pc ... , When I called MS in ZA they replied that the patch was only released last night but when I run the update this morn ... there was still no update needed.. -g- Go figure ... So I thought it wise to get the real info ...

Thanks for the info guys

-----Original Message-----

From: Geoff.Shatz@pchelps.com [mailto:Geoff.Shatz@pchelps.com] Sent: Wednesday, August 13, 2003 5:51 PM To: MarioD@etv.co.za; focus-ms@securityfocus.com Subject: RE: DCOM Worm

Yes the patch is up on windowsupdate and no it is not included in SP4 but is considered a pre-SP5 patch. It actually creates a key in your registry stating it's part of SP5 even though SP5 has not yet been released.

Regards,

Geoff

-----Original Message-----

From: Mario Davids [mailto:MarioD@etv.co.za] Sent: Wednesday, August 13, 2003 4:25 AM To: focus-ms@securityfocus.com
Subject: DCOM Worm
Importance: High

Hey,

Has MS put the patch on http://windowsupdate.microsoft.com/ yet ? and Does SP4 have the fix ? ...

Thanks
Blue

---

Your network firewall and IDS products do not prevent Web application attacks - the most common form of online exploitation- resulting in Web defacement, data theft, sabotage and fraud. KaVaDo is the only company that provides a complete suite of Web application security products.
Download a FREE whitepaper on "Security Policy Automation for Web Applications":http://www.securityfocus.com/Kavado-focus-ms

---

---

Your network firewall and IDS products do not prevent Web application attacks - the most common form of online exploitation- resulting in Web defacement, data theft, sabotage and fraud. KaVaDo is the only company that provides a complete suite of Web application security products.
Download a FREE whitepaper on "Security Policy Automation for Web Applications":http://www.securityfocus.com/Kavado-focus-ms

---

Received on Wed Aug 13 16:42:49 2003