Bugtraq mailing list archives

RE: Too much misleading advice on the Universal Plug-and-Play security hole

From: Paul Schmehl <pauls () utdallas edu>
Date: Thu, 27 Dec 2001 20:11:57 -0600

Furthermore, if you run the patch and you're not vulneralble, the patchwill tell you that. So, if you have any of the vulnerable versions, justrun the patch. If you're not vulnerable, it won't hurt anything, and ifyou are, you'll be patched.

--On Wednesday, December 26, 2001 7:24 PM -0800 Marc Maiffret<marc () eeye com> wrote:


Good to try to clear things up like that however you just confused people
even more again. Windows 98 is also affected yet you fail to mention it.

Once again for those of us that missed it in Microsoft's bulletin the
first time:
Affected Software:
Microsoft Windows 98
Microsoft Windows 98SE
Microsoft Windows ME
Microsoft Windows XP

That means, and as I've said to one to many reporters, if you or someone
you know is running Windows 98/ME/XP then you/they need to install the
patch.


Paul Schmehl (pauls () utdallas edu)
Supervisor of Support Services
The University of Texas at Dallas
AVIEN Founding Member

Current thread:

Too much misleading advice on the Universal Plug-and-Play security hole Richard M. Smith (Dec 26)
- RE: Too much misleading advice on the Universal Plug-and-Play security hole Marc Maiffret (Dec 27)
  - RE: Too much misleading advice on the Universal Plug-and-Play security hole Richard M. Smith (Dec 29)
    - RE: Too much misleading advice on the Universal Plug-and-Play security hole David LeBlanc (Dec 30)
  - RE: Too much misleading advice on the Universal Plug-and-Play security hole Paul Schmehl (Dec 29)
  - Re: Too much misleading advice on the Universal Plug-and-Play security hole Matthew Caron (Dec 29)