Re: DCOM95 for Windows 95

From: V Khosla (vikas_khosla1at_private)
Date: Mon Aug 18 2003 - 13:00:48 PDT

  • Next message: Ken Eichman: "Re(2): Increasing ICMP Echo Requests" 

    
 ('binary' encoding is not supported, stored as-is)
In-Reply-To: <MKEAIJIPCGAHEFEJGDOCCEDOLHAA.marcat_private>

We cannot find the v1.0.4 scanner. We keep getting Win95 PC's showing up 
in the scanner output file. Can you list the link for this version of the 
scanner? 

>Received: (qmail 23823 invoked from network); 8 Aug 2003 19:00:05 -0000
>Received: from outgoing3.securityfocus.com (205.206.231.27)
>  by mail.securityfocus.com with SMTP; 8 Aug 2003 19:00:05 -0000
>Received: from lists.securityfocus.com (lists.securityfocus.com 
[205.206.231.19])
>	by outgoing3.securityfocus.com (Postfix) with QMQP
>	id ABB17A30B4; Fri,  8 Aug 2003 13:03:18 -0600 (MDT)
>Mailing-List: contact incidents-helpat_private; run by ezmlm
>Precedence: bulk
>List-Id: <incidents.list-id.securityfocus.com>
>List-Post: <mailto:incidentsat_private>
>List-Help: <mailto:incidents-helpat_private>
>List-Unsubscribe: <mailto:incidents-unsubscribeat_private>
>List-Subscribe: <mailto:incidents-subscribeat_private>
>Delivered-To: mailing list incidentsat_private
>Delivered-To: moderator for incidentsat_private
>Received: (qmail 14183 invoked from network); 8 Aug 2003 10:45:18 -0000
>From: "Marc Maiffret" <marcat_private>
>To: "Eric Appelboom" <ericat_private>, <incidentsat_private>
>Subject: RE: DCOM95 for Windows 95
>Date: Fri, 8 Aug 2003 09:44:48 -0700
>Message-ID: <MKEAIJIPCGAHEFEJGDOCCEDOLHAA.marcat_private>
>MIME-Version: 1.0
>Content-Type: text/plain;
>	charset="US-ASCII"
>Content-Transfer-Encoding: 7bit
>X-Priority: 3 (Normal)
>X-MSMail-Priority: Normal
>X-Mailer: Microsoft Outlook IMO, Build 9.0.6604 (9.0.2911.0)
>In-Reply-To: <CD47646EDB471B4AAC0AD514F731FD1E0624A3at_private>
>Importance: Normal
>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165
>
>The bugs with the scanner detecting 95/98 as vulnerable have been fixed in
>version 1.0.4 of the free scanner.
>
>Signed,
>Marc Maiffret
>Chief Hacking Officer
>eEye Digital Security
>T.949.349.9062
>F.949.349.9538
>http://eEye.com/Retina - Network Security Scanner
>http://eEye.com/Iris - Network Traffic Analyzer
>http://eEye.com/SecureIIS - Stop known and unknown IIS vulnerabilities
>
>| -----Original Message-----
>| From: Eric Appelboom [mailto:ericat_private]
>| Sent: Monday, August 04, 2003 11:03 AM
>| To: incidentsat_private
>| Subject: DCOM95 for Windows 95
>|
>|
>|
>| Does anyone know if DCOM installed from
>| http://www.microsoft.com/com/dcom/dcom95/dcom1_3.asp is really vulnrable
>| and exploitable?
>|
>| Or 98
>| http://www.microsoft.com/com/dcom/dcom98/dcom1_3.asp
>|
>| The eEye scanner seems to think so.
>|
>| Cheers
>| Eric
>|
>|
>|
>|
>|
>| ------------------------------------------------------------------
>| ---------
>| ------------------------------------------------------------------
>| ----------
>|
>|
>
>
>--------------------------------------------------------------------------
-
>--------------------------------------------------------------------------
--
>
>

---------------------------------------------------------------------------
Captus Networks - Integrated Intrusion Prevention and Traffic Shaping  
 - Instantly Stop DoS/DDoS Attacks, Worms & Port Scans
 - Automatically Control P2P, IM and Spam Traffic
 - Ensure Reliable Performance of Mission Critical Applications
 - Precisely Define and Implement Network Security and Performance Policies
**FREE Vulnerability Assessment Toolkit - WhitePapers - Live Demo
Visit us at: 
http://www.securityfocus.com/sponsor/CaptusNetworks_incidents_030814
----------------------------------------------------------------------------

    

    



    

    


This archive was generated by hypermail 2b30 
: Mon Aug 18 2003 - 23:27:34 PDT