Full Disclosure mailing list archives

netdde during update


From: "morning_wood" <se_cur_ity () hotmail com>
Date: Tue, 8 Feb 2005 21:06:33 -0800

while "netdde" is not started by default.
I did just notice "netdde" does run during
Windows update...

this would allow a window of opportunity
to exploit the service. a worm using the
netdde exploit could take advantage of
this before the user fully updates.

just noticing,

Donnie Werner
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


Current thread: