RE: Windows Server 2003 Security Guide available

From: paul (xmlat_private)
Date: Tue Apr 29 2003 - 00:16:21 PDT

  • Next message: Rui Pimenta: "Re: PTNews v1.7.7 - Access to administrator functions without authentification"

    Jason Coombs wrote:
    
    > Anyone interested in downloading these guides must be aware that they
    > are distributed by Microsoft in the form of self-extracting .exe's
    > bearing digital signatures embedded in the Portable Executable file's
    > header section.
    
    Obviously use self-extracting .exes is a ludicrous idea from a security
    point of view, however, at least you don't have to run them:
    
    $ wget
    "http://download.microsoft.com/download/3/7/f/37fcf915-c19e-4c09-8b05-1573ea58b164/W2KHG 1.1.exe"
    $ unzip W2KHG%201.1.exe
    Archive:  /arch/W2KHG%201.1.exe
      inflating: Windows 2000 Hardening Guide.doc
      inflating: Templates/installSceregvl.bat
    ...
    
    Paul
    



    This archive was generated by hypermail 2b30 : Tue Apr 29 2003 - 10:44:18 PDT