RE: RE: Probable new MS DCOM RPC worm for Windo ws

["Neis, Mark" <Mark.Neis () enviam de>]

Ferris, Robin wrote:

> I have not yet verified if the files were installed or not and thats a very
> good point. I didnt and still dont know what files it changed or installed
> for the ms03-026. What are they?

Afaik, the fix for MS03-26 changes following DLLs:

   ole32.dll  (5.0.2195.6769)
   rpcrt4.dll  (5.0.2195.6753)
   rpcss.dll  (5.0.2195.6769)

Btw: If I'm not mistaken that's also the versions that are contained in
W2kSP4.


The following fix for MS03-29 changes the same DLLs to these versions:

   ole32.dll   (5.0.2195.6810)   
   rpcrt4.dll   (5.0.2195.6802)
   rpcss.dll   (5.0.2195.6810)


Mark

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html