"New" Win2k / NT4 Security Advisory and Patch

[vesselescape]

Have not seen a discussion of this posted, so thought I would pass it along.

As of January 22, 2003 MS has posted an alert and patch for the MS Locator service running on 2K servers (also NT4). Security level is critical for domain controlers where Locator Service is run by default. Buffer exploit can allow code of choice to be run by attacker. Properly configured firewall should preclude outside exploitation, but why take the chance? Full text of alert, and download here:

http://www.microsoft.com/security/security_bulletins/ms03-001.asp

 

[SgtB]

A nice way for disgruntled employees to rain hell upon your network. Is your trusted network really trusted?
________________________________________
Check out

http://www.security-forums.com

 

[SgtB]

PS - Thanks for the update vess! ________________________________________
Check out

http://www.security-forums.com