Viscious new worm Sasser..Patch now!

[VirtualLarry]

Originally posted by: Bucksnort
That applies to Win 2000 and you simply disable IPSEC service if problem is encountered. No one should use IPSEC.

Wrong. EVERYONE should be using IPSEC, at least at a theoretical level. Then we wouldn't have so many TCP/IP related attack issues. But no-one does, and it takes both ends of the link to upgrade, for it to work, so very few if any nodes do. :|

 

[aSnipingPenguin]

Tangentially, when I went to WindowsUpdate to get this patch, it didn't show in the list of critical updates. I d/l'ed it manually from the security bulletin, but now that I think about it, most of the recent security patches haven't shown up when I go to WindowsUpdate. I have the automatic updater set on auto download but manual install, so I'd know if they were getting installed. Does anybody know what might be going on? So far as Norton, AdAware, and Spybot can tell, I'm clean.

 

[stash]

What OS and service pack?

 

[aSnipingPenguin]

Oops, sorry. WinXP SP1.

 

[LiLithTecH]

aSnipingPenguin:

Microsoft is considering adding it to the Windows Update,
but as of yet has not done so.