Wazup, I'm a security analyst for a company here in brazil and I noticed something odd, so I was wondering if anyone else had this problem aswell and how was it solved. The company I work for were running IIS 5.0 SP1 with all patches applied (all 3 billion of them hahaaha) And everything was running smoothly untill they decided to install SP2. At first all I noticed was that some patches were removed, so I told them to re-apply those patches missing. The wierd thing was that when they tried to apply the missing patches a pop up error message came up saying that they were not allowed to install patches before the SP2. I've contacted microsoft but the reply was "READ TECHNET" (in other words they didn't have a clue on what to do). BY D WAY MICROSOFT I DIDN'T FIND A THING ABOUT THIS PROBLEM IN TECHNET. So people beware... The main vulnerabilities that I found after they installed SP2 were: -Shtml.exe Denial of Service -Internet Printing Buffer Overflow Peace in the middle east Leandro Malaquias ---------------------------------------------------------------------------- This list is provided by the SecurityFocus Security Intelligence Alert (SIA) Service. For more information on SecurityFocus' SIA service which automatically alerts you to the latest security vulnerabilities please see: https://alerts.securityfocus.com/
This archive was generated by hypermail 2b30 : Tue Oct 23 2001 - 14:52:26 PDT