Run Windows Update now

Richelieu · September 10, 2003, 13:48

If you haven't done so today. New patch available.

FrustratedPoet · September 10, 2003, 13:57

You might also want to wonder why you haven't got it set on auto-update.

optimus2861 · September 10, 2003, 14:07

Excerpt from the MS security bulletin:

Quote:

The fix provided by this patch supersedes the one included in Microsoft Security Bulletin MS03-026.

Remote Procedure Call (RPC) is a protocol used by the Windows operating system. RPC provides an inter-process communication mechanism that allows a program running on one computer to seamlessly access services on another computer. The protocol itself is derived from the Open Software Foundation (OSF) RPC protocol, but with the addition of some Microsoft specific extensions.

There are three identified vulnerabilities in the part of RPCSS Service that deals with RPC messages for DCOM activation— two that could allow arbitrary code execution and one that could result in a denial of service. The flaws result from incorrect handling of malformed messages. These particular vulnerabilities affect the Distributed Component Object Model (DCOM) interface within the RPCSS Service. This interface handles DCOM object activation requests that are sent from one machine to another.

An attacker who successfully exploited these vulnerabilities could be able to run code with Local System privileges on an affected system, or could cause the RPCSS Service to fail. The attacker could then be able to take any action on the system, including installing programs, viewing, changing or deleting data, or creating new accounts with full privileges.

To exploit these vulnerabilities, an attacker could create a program to send a malformed RPC message to a vulnerable system targeting the RPCSS Service.

A patch for a patch that they released barely two months ago. Come on, MS, get your act together.

BeBro · September 10, 2003, 14:12

Maybe in some years we´re dl-ing patches all day long

Nikolai · September 10, 2003, 14:57

Quote:

Originally posted by FrustratedPoet
You might also want to wonder why you haven't got it set on auto-update.

I've done, but it hasn't got this yet...

Urban Ranger · September 10, 2003, 23:36

Yeah, so we need to apply yet another patch to all these 500 Wintel boxes, again. Smashin'!

Agathon · September 10, 2003, 23:42

Quote:

Originally posted by Urban Ranger
Yeah, so we need to apply yet another patch to all these 500 Wintel boxes, again. Smashin'!

Don't tell me that you think this is unreasonable. It's a monopoly and you'll get what you're given.

Urban Ranger · September 10, 2003, 23:46

No, this is great. Otherwise why would we have 25 MCSE flunkies doing that?

alva · September 11, 2003, 01:32

Quote:

Originally posted by FrustratedPoet
You might also want to wonder why you haven't got it set on auto-update.

I've turned off every automatic update possible, I just can't stand it.

Ted Striker · September 11, 2003, 01:36

Quote:

Originally posted by Agathon

Don't tell me that you think this is unreasonable. It's a monopoly and you'll get what you're given.

Have you guys patched the latest OpenSSH?

pchang · September 11, 2003, 01:41

Put your machine or network behind some sort of network cloak. If the virus can't see you, you can't get infected. That way, you don't have to worry about patching right away.

Sarxis · September 11, 2003, 03:17

Ran it- got my critical updates.

4 of them to be exact.

Dis · September 11, 2003, 03:19

my auto-update came up just an hour ago when I turned on my computer.

not happy about a 13.1 mb update though

. luckily I have high speed internet connection

Nikolai · September 11, 2003, 10:37

The update was only less than a MB for me.

BeBro · September 11, 2003, 10:55

Including the new security leaks?

Spiffor · September 11, 2003, 11:01

Quote:

Originally posted by optimus2861
A patch for a patch that they released barely two months ago. Come on, MS, get your act together.

They've learned from Firaxis

Q Classic · September 11, 2003, 11:10

Quote:

Yeah, so we need to apply yet another patch to all these 500 Wintel boxes, again. Smashin'!

remarkably easy with Microsoft SMS. you tell it to patch, and it goes out and patches all the clients.

Urban Ranger · September 12, 2003, 01:13

Quote:

Originally posted by pchang
Put your machine or network behind some sort of network cloak. If the virus can't see you, you can't get infected. That way, you don't have to worry about patching right away.

That's what we do.

But we patch up anyway. It's the policy.

Urban Ranger · September 12, 2003, 01:16

Quote:

Originally posted by Q Cubed

Quote:

Yeah, so we need to apply yet another patch to all these 500 Wintel boxes, again. Smashin'!

remarkably easy with Microsoft SMS. you tell it to patch, and it goes out and patches all the clients.

Smashing.

Instead of trying to make their software more secure, they capitalise on their own flaws to sell you more stuff.

Dis · September 12, 2003, 02:39

my update may have been large because I haven't updated in ages.

Maybe I checked the auto-update to only warn me on very important updates. I don't like to be bothered

Oerdin · September 12, 2003, 02:45

Fairly fast and painless.

Ted Striker · September 12, 2003, 02:46

Just like the recompile I had to do to patch OpenSSH

Q Classic · September 12, 2003, 06:55

Quote:

Smashing.

Instead of trying to make their software more secure, they capitalise on their own flaws to sell you more stuff.

brilliant, isn't it?

Drake Tungsten · September 12, 2003, 07:10

I really enjoy not having to worry about crap like this.

Q Classic · September 12, 2003, 07:25

maybe the people who constantly ***** about windows being unstable don't maintain their systems very well?

i run winupdate at least once a week... and have it defrag, run an av scan, and run system scans automatically at least once a week... and windows hasn't crashed on me in ages, even with 24hr uptimes...

Ari Rahikkala · September 12, 2003, 08:12

Quote:

Originally posted by Ted Striker
Just like the recompile I had to do to patch OpenSSH

Hey, for me installing software equals compiling... it's not like it's that strange

.

Q Classic · September 12, 2003, 08:16

where's asher? he might love this article.

or this one.

JohnT · September 12, 2003, 08:17

Asher is probably taking a luxurious week in Mingapulco.

Ari Rahikkala · September 12, 2003, 09:18

Quote:

Originally posted by Q Cubed
this one.

Um... what about it? It's not very negative toward Linux IMO... only realistic.

Q Classic · September 12, 2003, 09:21

oh, it doesn't put linux down too far, really. but he'd like it because i suppose it'd provide him ammo against people he thinks are misguided (anybody who isn't a windows-lover).