Confusion with RPC Patches...

F

Fabio

Hi all

I am a little confused as to what the new RPC Patch will
really patch.

I understand that in the MS03-039 Patch the MS03-026 Patch
is included. Fine.

However, some time ago, in the Cert Advisory for the MS03-
026 Patch, it said the following:

"Systems running Windows 2000 may still be vulnerable to
at least a denial of service attack via VU#326746 if their
DCOM RPC service is available via the network. Therefore,
sites are encouraged to use the packet filtering tips
below in addition to applying the patches supplied in MS03-
026."

(http://www.cert.org/advisories/CA-2003-19.html)

Since there are 4 flaws patched altogether with MS03-026
Patch, I wondered whether this patch also patches against
the above mentioned vulnerability?

I have seen all the KB Articles and Security Bulletins.
However, I could not draw any conclusion whether this
patch is included. (i guess probably not?)

Any help/reaction with this would be greatly appreciated.

Thanks and Regards,

Fabio
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top