Full Disclosure mailing list archives
RE: RE: Probable new MS DCOM RPC worm for Windo ws
From: "Schmehl, Paul L" <pauls () utdallas edu>
Date: Fri, 26 Sep 2003 13:19:17 -0500
-----Original Message----- From: Randal, Phil [mailto:prandal () herefordshire gov uk] Sent: Friday, September 26, 2003 10:21 AM To: full-disclosure () lists netsys com Subject: RE: [Full-disclosure] RE: Probable new MS DCOM RPC worm for Windo ws Why not? Easy enough to check in a login script if you're using something like Kixtart (www.kixtart.org).
And how many patches are you going to verify this way? Pretty soon the logon will take 15 minutes while the script is checking hundreds of files. Yes, it's doable, and I would have little trouble writing such a script, but it's impractical. Furthermore, it wouldn't even be comprehensive here, because less than half the machines on campus actually are logging in to the domain. Paul Schmehl (pauls () utdallas edu) Adjunct Information Security Officer The University of Texas at Dallas AVIEN Founding Member http://www.utdallas.edu/~pauls/ _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
Current thread:
- RE: RE: Probable new MS DCOM RPC worm for Windo ws Schmehl, Paul L (Sep 26)
- Re: RE: Probable new MS DCOM RPC worm for Windo ws Gary Flynn (Sep 26)
- RE: RE: Probable new MS DCOM RPC worm for Windo ws Jay Sulzberger (Sep 26)
- <Possible follow-ups>
- RE: RE: Probable new MS DCOM RPC worm for Windo ws Schmehl, Paul L (Sep 26)
- RE: RE: Probable new MS DCOM RPC worm for Windo ws Jerry Heidtke (Sep 26)
- RE: RE: Probable new MS DCOM RPC worm for Windo ws Schmehl, Paul L (Sep 26)
- RE: RE: Probable new MS DCOM RPC worm for Windo ws Schmehl, Paul L (Sep 26)
- RE: RE: Probable new MS DCOM RPC worm for Windo ws Schmehl, Paul L (Sep 26)
- Re: RE: Probable new MS DCOM RPC worm for Windows Cael Abal (Sep 26)
- Re: RE: Probable new MS DCOM RPC worm for Windows Paul Schmehl (Sep 26)
- Re: RE: Probable new MS DCOM RPC worm for Windows Karl DeBisschop (Sep 27)
- Re: RE: Probable new MS DCOM RPC worm for Windows Brent J. Nordquist (Sep 29)
- Re: RE: Probable new MS DCOM RPC worm for Windows Cael Abal (Sep 26)
- RE: RE: Probable new MS DCOM RPC worm for Windo ws Jay Sulzberger (Sep 26)