Re: RPC DCOM Patches

[<r1an () hush ai>]

John,

On Thu, 31 Jul 2003 05:31:57 -0700 John Sec <john_sec_lists () hotmail com>
wrote:
> The MS website says that the patch can only be applied to Windows
> 2000 systems with SP3 or SP4.  Has anybody tried to run the patch on
> an SP2 system?  

I've confirmed that the patch does install on SP2; however, M$ says it
won't support the configuration or vouch for the protection it provides.
 (Isn't that every patch? :)  I haven't yet confirmed whether HD's exploit
will work on that configuration (SP2 w/ MS03-026 patch) and haven't yet
played with NT 4.0 workstation.
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html