• Join Us |
  • |
  • Sign in with:

MS Security Patch

by Maarten Goldstein, May 26, 2000 10:18am PDT

There's a new Microsoft Security Bulletin, announcing the availability of a patch for NT4 and Win2k that fixes two security problems, "ResetBrowser Frame" and the NT4 specific "HostAnnouncement Flooding". There's a FAQ on these two problems here.


Read all the News


Comments

6 Threads | 8 Comments
  • #6
    Refresh Thread
    By: StimpyBoy-KNoB- x
    Reply
    Alright, I take some of this back:

    The computer browser protocol is implemented on all Windows systems. Why isnÂ’t there a patch for Windows 95, Windows 98 and Windows NT 4.0 Server, Terminal Server Edition?

    These systems do implement the Computer Browser protocol, but we have not developed a patch to add the RefuseReset and MaximumBrowseEntries functions for these systems. The reason is because the networks in which the attack at issue here would pose the greatest risk – large networks with many users – are exactly those most unlikely to use these systems as browsers.

    Unless I'm reading this wrong, that means Win9x is vulnerable too if you're the master browser for, oh say a workgroup. My understanding of SMB isn't superb, but doesn't that mean that university residences and other areas with large peer-to-peer sharing are vulnerable? What are the chances that all residence students that have NT or W2K (and believe me they're out there) are smart enough to patch up?

    God I hate slow work days sometimes.
    May 26, 2000 12:31pm PDT