Does SP1 for XP include the RPC exploit patch?

  • Thread starter Thread starter Numb-Brrr
  • Start date Start date
N

Numb-Brrr

......and what about SP1 for 2003? I am most interested if
sp1 for XP has it installed already. I just installed XP
on a users machine and I did not patch it. I keep thinking
he is going to get hacked. I did a search for sp1 on XP
and found all the fixes it supposedly does and it didnt
mention the rpc eploit from what i saw. Yet, other techs
told me they thought it was included in sp1 for XP. Any
help would be appreciated. Perhaps a URL? Thanks in
advance if you help. :)
-Numb-Brrr
 
No. SP1 was released in Sept. 2002.

MS03-039: A Buffer Overrun in RPCSS Could Allow
an Attacker to Run Malicious Programs
http://support.microsoft.com/default.aspx?kbid=824146

--
Carey Frisch
Microsoft MVP
Windows XP - Shell/User

Be Smart! Protect your PC!
http://www.microsoft.com/security/protect/

------------------------------------------------------------------------------------------


| .....and what about SP1 for 2003? I am most interested if
| sp1 for XP has it installed already. I just installed XP
| on a users machine and I did not patch it. I keep thinking
| he is going to get hacked. I did a search for sp1 on XP
| and found all the fixes it supposedly does and it didnt
| mention the rpc eploit from what i saw. Yet, other techs
| told me they thought it was included in sp1 for XP. Any
| help would be appreciated. Perhaps a URL? Thanks in
| advance if you help. :)
| -Numb-Brrr
 
The first RPC patch was included in the post-SP 1 security
rollup, but this (ms03-026) was soon outdated by ms03-039.
Today, ms03-012 outdate both of these.

Just turn on the firewall and visit Windows Update until it
sees nothing more to be installed.
 
Back
Top