New vulnerability in Windows

[Mr. Boy]

Link

 

[Evolution.]

I use XP SP2 so I'm fine, from what the article says.

I keep a complete clone of my system on an external 100 GB Hard Disk anyways (I scan for viruses/spyware/adware etc. then clone it, so it isn't infected both ways)

 

[Jordan]

I use XP SP2 so I'm fine, from what the article says.

I keep a complete clone of my system on an external 100 GB Hard Disk anyways (I scan for viruses/spyware/adware etc. then clone it, so it isn't infected both ways)

What software do you use to clone your system?

 

[Evo7GTA]

 

[Evolution.]

What software do you use to clone your system?

I don't actually "Clone" it per-say...I just transfer all of my files and such to the hard disk and save it. I don't worry about actually putting the XP install,system folders and such on there. It's a useful tool for making sure your always going to have your files (unless it gets run over by a Mack truck or something)

 

[Vasco]

My files are too disorganised to backup, so I just burn them ISO by ISO onto DVDs.

 

[Slick6]

Did anyone else happen to notice the last line under the "Workaround" section?

 

[Shannon]

This is not-so-new news. And MachOne, even fully patched SP2 systems are vulnerable.

Unofficial patch

 

[Evolution.]

This is not-so-new news. And MachOne, even fully patched SP2 systems are vulnerable.

Unofficial patch

It never listed XP SP2 as being vulnerable...

 

[Shannon]

http://www.f-secure.com/weblog/archives/archive-122005.html#00000752

"Right now, fully patched Windows XP SP2 machines machines are vulnerable, with no known patch."

 

[Seanman]

This is not-so-new news. And MachOne, even fully patched SP2 systems are vulnerable.

Unofficial patch

"Account for domain hexblog.com has been suspended"

 

[Shannon]

"Account for domain hexblog.com has been suspended"

Try this one:

http://handlers.sans.org/tliston/wmffix_hexblog14.exe

 

[Seanman]

An official patch for the vulnerability has been released.

You can download it here:

http://www.microsoft.com/technet/security/Bulletin/ms06-001.mspx

 

[amp88]

An official patch for the vulnerability has been released.

You can download it here:

http://www.microsoft.com/technet/security/Bulletin/ms06-001.mspx

Thanks, just applied it.

 

[Omnis]

Yeah. Do you need to restart or are you cool once you do it?

 

[ROAD_DOGG33J]

Yeah. Do you need to restart or are you cool once you do it?

You need to restart.

 

[Omnis]

It didn't tell me to restart.

 

[ROAD_DOGG33J]

It didn't tell me to restart.

On the site, it says "may have to restart." It told me to restart, maybe you got lucky.

 

[Solid Lifters]

On the site, it says "may have to restart." It told me to restart, maybe you got lucky.

I guess I'm lucky. I wasn't asked to restart.

 

[RSCosworth]

Man, I think 2005 was a record year for discovering WinXP vulnerabilities.

Patched! 👍

 

[cardude2004]

I didn't install that. I wasn't awake at 11:49 PM CST last night and I just went into Windows Update and it told me, 0 New Updates.

 

[Seanman]

I didn't install that. I wasn't awake at 11:49 PM CST last night and I just went into Windows Update and it told me, 0 New Updates.

Then it probably updated automatically.

 

[Shannon]

I didn't install that. I wasn't awake at 11:49 PM CST last night and I just went into Windows Update and it told me, 0 New Updates.

Go into Add/Remove Programs and look for "Security Update for Windows XP (KB912919)". If it's listed there, then the patch is installed (automatically?). Else, go download it directly from the link evilgenius provided earlier.

 

[cardude2004]

Yes, it exists on my Add/Remove page. It says I installed it on 1/06/2005, but I don't remember doing it, and I know for a fact that I went to bed last night at 10 PM CST.

Anyways, who cares, the problem is updated!

 

[kikie]

What software do you use to clone your system?

I use "Ghost" and I have a clean Image of my system.

 

[kikie]

I guess I'm lucky. I wasn't asked to restart.

I wasn't asked to restart, either.