Re: Patch for w98/igmp frag bug (alias kod) and ICMP-type 13 (aliasmoyari) DoS. Where?

[barakirs () NETVISION NET IL (R a v e N)]

Microsoft didn't release a working* patch against the IGMP headers attack
yet. It usually takes them a couple of months to release a patch against a
DoS attack.
I personally don't like the idea that even the dumbest script kiddie in
the world could DoS me when I use Windows to connect to the Internet and
run applications I don't have under Linux (I hate emulators and they hate
me. We never get along. lol).
Anyway, about that "downloader" you've mentioned: many products, whether
they are freeware or shareware, come as some kind of a "downloader". I
don't think Microsoft wants you to run this program in order to obtain
information about your computer. They have other ways...

* I said working because I saw some kind of an "experimental fix" (that's
how they called it) on M$'s website once. I tried it and it didn't work at
all (I tried all of the .c sources. kod.c, kox.c, fawx.c and that other
one, whatever it's name is. Some of them worked, some didn't. But the
point is that some of them worked.
I tried finding a URL for you guys on M$'s little webserver... no luck. It
seemed to have disappeared. So much for "experimental fixes"...

Roman Medina-Heigl Hernandez wrote:

> {Sorry if this is known... Aleph, feel free to discard this message.}
>
>  I've been looking for a M$ *w98* patch for these DoS bugs and I've
> found nothing. I visited M$ web, used the site' search engine (tried
> keywords like "kod", "igmp", etc), viewed w98 support section,
> security bulletins, ... with no success. :-(
>
>  M$ recommends a patch called "System Update" (included in Service
> Pack 1), although it says nothing about the related DoS. Same occurs
> with SP1 (for w98). Do they fix the problem? At least it seems not to
> be documented.
>
>  I also want to show my unconformity with M$ policy about w98 SP. You
> are forced to download an updater program in order to be able to
> download SP (the alternative method is paying some $$ for ordering a
> cd). Why do I need such a program? (I do not want to give the chance
> to send info about my machine to M$...). Most of w98 users are usually
> referred as dumb users, but I don't think they cannot use a patch in
> .exe form (like NT Service Packs). Don't you think so, Bill? ;-)
>
>  Yours, Román.
>
> ------ E.T.S. Ingenieros Telecomunicacion ---------
> ---\\     Roman Medina-Heigl Hernandez        //---
> ---//       E-Mail:  roman () esi us es          \\---
> ------- URL: http://www.esi.us.es/~roman ----------

--
It took the computing power of three Commodore 64 computers to fly to the
moon.
It takes a 486 66MHZ computer to run Windows 95. Anything wrong?

http://blacksun.jemix.com