We support Microsoft .NET Framework 2.0 & 1.1, all versions of Access, SQL 2000, SQL 7.0, SQL 2005 Express, SOAP, FrontPage 2002, 2003, Visual Studio 2005, Index Server, XML, UDDI, & Mobile device support. We also offer great third party tools like SmarterMail, Merak Mail, SmarterStats, PHP, Perl, MySql, DeepMetrix Livestats XSP 8.0.   We support Microsoft .NET Framework 2.0 & 1.1, all versions of Access, SQL 2000, SQL 7.0, SQL 2005 Express, SOAP, FrontPage 2002, 2003, Visual Studio 2005, Index Server, XML, UDDI, & Mobile device support. We also offer great third party tools like SmarterMail, Merak Mail, SmarterStats, PHP, Perl, MySql, DeepMetrix Livestats XSP 8.0.
 Tuesday, August 23, 2005
Big Business caught by worm?

Opinion: Nobody who takes security seriously could get hit through Windows 2000 PnP vulnerability, yet lots of large corporations were hit. You do the math.

Quotes From Larry Seltzer
August 16, 2005


After reading both of Larry Seltzers posts on the 16th over a patch MS05-039 that MS released on August 9th. It really is amazing that while this seemed to be straight forward worm easy enough to prevent it was over the network news channels as if it were terminal.

Everything he said in his column about mitigating factors on this vulnerability holds: "the stupidest firewall in the world would block this worm from spreading and only Windows 2000 systems are vulnerable". I also liked the possible cause.

"So it makes sense that it's Fortune 500 corporations that are being attacked, since they are the heartland for Windows 2000 usage. Of course, all these companies have firewalls at their perimeters, so the attack had to come from the inside. It's a cliche in the security business by now, but someone took their unpatched, unfirewalled Windows 2000 system out into the real world and got it infected with this worm. Then they took it back to the office, plugged it in and logged on, and soon everyone else on the network segment was hit hard."  As he stated it is 'NOT' the only a possible cause though likely.

New Worms Catch Big Business With Pants Down
August Patch Winds Fade
Threats
8/23/2005 8:36:33 AM (Pacific Daylight Time, UTC-07:00)  #    Disclaimer  |  Comments [0]  | 
Related Posts:
UPS phishing again
Obama sex video
Attack Breaks DNS Patches!
Kaminsky provides the why
DNS vulnerability
MPack: the Strange Case of the Mass-Hacking Tool
Name
E-mail
Home page

Comment (HTML not allowed)  

Enter the code shown (prevents robots):