Some Security Implications for XP SP2 (now out)

[vop]

Service Pack 2: It's Out There (now)

Quoted Excerpts:

… Lots of you had no problems at all, but others weren't so lucky. Following are some of the most common [b]complaints and kudos[/b] we're hearing. 


… Others are having problems with peer-to-peer software. The latter is based on the fact that SP2 limits connections per port to 10 (this is to help slow the spread of [COLOR=red]viruses and worms[/color] such as Sasser), so programs such as eMule, that open connections to a lot of different destinations, are slowed down, too. 

… We've also heard about [COLOR=red]conflicts with ZoneAlarm[/color]. This is probably because SP2 turns on the Windows Firewall by default. If you use a third party firewall product, you need to turn off the Windows Firewall. 

… On the other hand, the [COLOR=red]pop-up blocker[/color] that SP2 adds to Internet Explorer is getting a big thumbs up. 

… Another new feature that users like is the Add-ons manager. This option is added to the Tools menu and it shows you what has been added to IE and lets you disable them. This is great for turning off those [COLOR=red]spyware toolbars[/color] that get installed "accidentally."

Vince

 

[carrr]

On this topic, it's advisable that everyone be aware of this list (and be checking it for updates as more are likely to be found):

FYI...

http://support.microsoft.com/default.aspx?kbid=842242

Tired of waiting for an answer? Try asking better questions. See: faq222-2244

 

[bfralia]

I thought the limitation of 10 connections per port went back to Windows 2000? Keeps you from using 2K or XP Pro as a poor persons server.

 

[2ffat]

Someone has already pointed out some vulnerabilites in SP2 on BugTraq forums. These mainly deal with Zone Identifier (ZoneID) and running programs from the command line. It appears that CMD does not check for the Zone ID before running a program. It remains to be seen how much of a problem this is.


James P. Cottingham
-----------------------------------------
^{To determine how long it will take to write and debug a program, take your best estimate, multiply that by two, add one, and convert to the next higher units.}

 

[cmeagan656]

The list of affected software at this link is the latest one. I guess once SP2 got out in the real world M$ found it broke a few more things than they thought.

http://support.microsoft.com/default.aspx?kbid=884130&product=windowsxpsp2

Cheers.

 

[vop]

bfralia:

I believe that the 'limitation of 10 connections per port' is a client based limitation on local running processes. It has nothing to do with connecting to a server.

Vince