*MAJOR* Hole in Windows XP - all you M$ users better get patched!

bozo1

Diamond Member
May 21, 2001
6,364
0
0
Doesn't look like the patch is posted yet. All I see is an IE6 security patch from a week ago.
 

Harvey

Administrator<br>Elite Member
Oct 9, 1999
35,059
73
91
Story on News.com (includes links):

Microsoft issues patch for XP security hole

By Wylie Wong
Staff Writer, CNET News.com
December 20, 2001, 11:15 a.m. PT


just in Microsoft may have touted Windows XP as the most secure operating system it has made, but the company on Thursday released a bug fix for a security hole that could leave some people's systems open to malicious attack.

Microsoft is recommending that every Windows XP customer apply the patch immediately. Customers using Windows 98, Windows 98 Second Edition and Windows ME with the "Universal Plug and Play" service up and running should also use the patch, the company said.

Universal Plug and Play is Microsoft software that uses Internet protocols to allow devicessuch as computers, scanners and printers to automatically discover one another so they can communicate. Microsoft said an attacker who exploited the hole could take over computers on such a network.

Windows users can download the patch from Microsoft's Web site.

More details to follow
 

Psychoholic

Elite Member
Oct 11, 1999
2,704
0
76
Most of you IT guys here are probably aware of the Microsoft Security Notification Service, so this is aimed more at the home user who might not be aware of this service.

To be notified of security related patches use the following:
Product Security Notification

Alternatively you can look up security related patches at the following:
HotFix & Security Bulletin Service

I would imagine Scoob subscribes to this. As his post here was time-stamped shortly after I received notification that the patch was available.
 

Psychoholic

Elite Member
Oct 11, 1999
2,704
0
76


<< Thanks Psychoholic. >>




<< thanx Psychoholic... >>



See there, I'm only trying to take care of you guys (and gals) here on the OS forum. And people try and say I'm a "meanie poo-poo head". :p ;)
 

n0cmonkey

Elite Member
Jun 10, 2001
42,936
1
0


<<

<< Thanks Psychoholic. >>



<< thanx Psychoholic... >>

See there, I'm only trying to take care of you guys (and gals) here on the OS forum. And people try and say I'm a "meanie poo-poo head". :p ;)
>>



I dont say that. I just make fun of the fact you are a Windows guy ;)

/me tip toes out without making Windows security cracks ;)
 

Sunner

Elite Member
Oct 9, 1999
11,641
0
76
LOL, seems like MS's site is down, cant even do a telnet on port 80, maybe they've started upgrading their boxes to .NET server and got hit by this exploit ;)

Damn it feels good to not have to worry about any Windows boxes but the ones at home anymore, and those at home are behind an OpenBSD(Thanks n0c;)) firewall.
 

Jarwa

Golden Member
Jan 7, 2001
1,160
0
0
I got my "patch" a couple of hours ago. The MS site was super slow. I just thought it was my new POS modem! :eek:
 

corkyg

Elite Member | Peripherals
Super Moderator
Mar 4, 2000
27,370
240
106
The "patch" was on XP Windows Update yesterday . . . got it. But, a report from the FBI's security experts say it isn't good enough. The solution is to disable the extensive PnP capability in XP that is intended for future use with home security systems, etc. Anyone familiar with that route?