*MAJOR* Hole in Windows XP - all you M$ users better get patched!

[ScoobMaster]

Details here:

http://apnews.excite.com/article/20011220/D7GH2TTO0.html

Linkified for the Lazy....

More info here

MS Tech bulletin and Patch here

Windows XP Security flaw..........Windows "security"??? HEH - Are any of you REALLY shocked that holes were found already???!!!

 

[bozo1]

Doesn't look like the patch is posted yet. All I see is an IE6 security patch from a week ago.

 

[stingygrrl]

bozo - try here

 

[Harvey]

Story on News.com (includes links):

Microsoft issues patch for XP security hole

By Wylie Wong
Staff Writer, CNET News.com
December 20, 2001, 11:15 a.m. PT


just in Microsoft may have touted Windows XP as the most secure operating system it has made, but the company on Thursday released a bug fix for a security hole that could leave some people's systems open to malicious attack.

Microsoft is recommending that every Windows XP customer apply the patch immediately. Customers using Windows 98, Windows 98 Second Edition and Windows ME with the "Universal Plug and Play" service up and running should also use the patch, the company said.

Universal Plug and Play is Microsoft software that uses Internet protocols to allow devicessuch as computers, scanners and printers to automatically discover one another so they can communicate. Microsoft said an attacker who exploited the hole could take over computers on such a network.

Windows users can download the patch from Microsoft's Web site.

More details to follow

 

[Psychoholic]

Most of you IT guys here are probably aware of the Microsoft Security Notification Service, so this is aimed more at the home user who might not be aware of this service.

To be notified of security related patches use the following:
Product Security Notification

Alternatively you can look up security related patches at the following:
HotFix & Security Bulletin Service

I would imagine Scoob subscribes to this. As his post here was time-stamped shortly after I received notification that the patch was available.

 

[Blayze]

thanks for the heads up

 

[ivwshane]

Thanks Psychoholic.

 

[Trashman]

thanx Psychoholic...

 

[Psychoholic]

<< Thanks Psychoholic. >>




<< thanx Psychoholic... >>



See there, I'm only trying to take care of you guys (and gals) here on the OS forum. And people try and say I'm a "meanie poo-poo head".

 

[n0cmonkey]

<<

<< Thanks Psychoholic. >>



<< thanx Psychoholic... >>

See there, I'm only trying to take care of you guys (and gals) here on the OS forum. And people try and say I'm a "meanie poo-poo head". >>



I dont say that. I just make fun of the fact you are a Windows guy

/me tip toes out without making Windows security cracks

 

[Sunner]

LOL, seems like MS's site is down, cant even do a telnet on port 80, maybe they've started upgrading their boxes to .NET server and got hit by this exploit

Damn it feels good to not have to worry about any Windows boxes but the ones at home anymore, and those at home are behind an OpenBSD(Thanks n0c) firewall.

 

[Jarwa]

I got my "patch" a couple of hours ago. The MS site was super slow. I just thought it was my new POS modem!

 

[corkyg]

The "patch" was on XP Windows Update yesterday . . . got it. But, a report from the FBI's security experts say it isn't good enough. The solution is to disable the extensive PnP capability in XP that is intended for future use with home security systems, etc. Anyone familiar with that route?