Microsoft warns of Windows 2000 security hole

[imitechuk]

Flaw allows a user to gain new privileges on a computer network

"Security experts have discovered a fault in Microsoft's flagship operating system Windows 2000 that could allow a malicious user to hijack a system and perform any operation they wish."

"Microsoft said that the affected systems are Windows 2000 Professional, Windows 2000 Server, Windows 2000 Advanced Server and Windows 2000 Datacenter Server."

!<<DOWNLOAD THE PATCH>>

Take a look at the article

Download the patch
---------------------------------------------
There are two ways to write error-free programs. Only the third one works!

 

[JellyBaby]

My perception of Windows as a very secure platform has just been shattered.

 

[bacillus]

very worrying that! :Q

 

[imitechuk]

Exactly what I thought!!!

---------------------------------------------
There are two ways to write error-free programs. Only the third one works!

 

[NFS4]

Damnit, I'm am tired of installing all of these individual patches weekly. MS needs to make one big patch available on Windows Update that addresses all of these little fixes at once.

 

[Noriaki]

NFS4: That's what a service pack is!

Once you get SP2 every fix before it is rendered unneccesary.

I wonder if this will make into SP2? Or if SP2 is too close.

 

[Mr. Burns]

Yes, it's called SP2 and we are all eagerly awaiting it...

 

[NFS4]

I'm talking about putting them all available for download on Windows Update so I don't have to go to 50 fricken sites to download them individually.

Apply patch
Restart
Apply second patch
Restart

Funk that...make them available from Windows Update and let me check them off and download and install them all at once.

 

[Zenmervolt]

Had me worried there for a minute. The ZDNet article says that the security hole cannot be accessed remotely, it can exploited only by someone who has a user account on the computer already. Since it's not a problem allowing people to access the machine remotely, I'm not worried about it.

Zenmervolt

 

[PliotronX]

NFS4 makes a good point

 

[NFS4]

I mean comeon, I was looking over at FileFlash and there have been like 6 releases in the past week. Put them on Windows Update for gosh sakes. What the hell do you think the site is for Microsoft????

Damn slackers!

 

[GT1999]

Thanks for the tip. I just installed it on my machine and emailed work about it so they could patch all of the machines.

G|T

 

[Mr. Burns]

From MS knowledge base article Q285156:



<< A supported fix is now available from Microsoft, but it is only intended to correct the problem described in this article and should be applied only to systems that are determined to be at risk of attack ... If your computer is sufficiently at risk, Microsoft recommends that you apply this fix now. Otherwise, wait for the next Windows 2000 service pack that contains this fix. >>



Looks like microsoft doesn't intend to place this in windowsupdate until SP2. On the positive side though, this does not look like a particularly serious vulnerability. A user with user privileges on a network could do alot more damage than try to exploit this particular issue...

 

[Blizzak]

What windows needs is like a little flashing thing in the lower right hand corner.. so when you log on it tells you when an update/patch has come out.. b/c who wants to be searching around for new patches all the time..i dunno thats just my opinion.. thats why i like linux so much.. you have a update icon, on your desktop.. looks on the website .. and tells you all the packages that came out.. simple

 

[dcdomain]

Doesn't that Critical Update Notifyer do something similar? I personally don't have it installed...

 

[GT1999]

I've seen that Notifier in WinME. To tell you the truth, it's quite annoying. I hate things in my system tray.

G|T

 

[jpsj82]

when does SP2 come out?

 

[GT1999]

I've heard some people say it's supposed to be out next week, and others say not until the end of April or beginning of May.

G|T

 

[Mr. Burns]

critical update notifier will do this in win2k. Only for things deemed &quot;critical updates&quot; and placed on windowsupdate though.
As for SP2, there is a beta floating around the web. No one knows for sure when it will be released officially, but it will probably be soon...