Re: RPC DCOM exploit

Hmm...

I haven't seen system log corruption, yet. I'll have to keep my eye out for that.

I think that the Service Pack has a lot to do with this, or perhaps some other patch not directly related to MS03-026.

In my latest tests, I've gotten failed processes on Windows 2000 SP2 boxen but Windows 2000 SP3/4 boxen have functioned properly after the attack - with the attack only working once until a reboot occurs.

       -Barry

Peter Fry wrote:

>>Is anyone else on the list seeing that at least some of their target

Do you need help?

In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software: Learn more about Pantek's Technical Support offerings Place an order for 24/7/365 Technical Support here Learn more about Pantek, who we are, and what we do Chat with a Live Operator Related securityfocus.com Links bugtraq certification focus-bsd focus-ids focus-ih focus-linux focus-ms focus-sun focus-unix-other focus-virus forensics incidents libnet linux-secnews ms-secnews pen-test secpapers secprog sectools secureshell security-basics securityjobs sf-news vuln-dev webappsec Request more information about Pantek