Windows Fixes/Patches

[scuzzman]

Steve Gibson of Gibson Research Corp has developed a few patches that should be applied to all window systems. These patches are:

• UnPlugNPray

  eEye has discovered three vulnerabilities within Microsoft's UPnP implementation: a remotely exploitable buffer overflow that allows an attacker gain SYSTEM level access to any default installation of Windows XP, a Denial of Service (DoS) attack, and a Distributed Denial of Service (DDoS) attack. eEye would like to stress the extreme seriousness of this vulnerability. Network administrators are urged to immediately install the patch released by Microsoft at http://www.microsoft.com/technet/security/...in/MS01-059.asp

  
  
  
  
  
• DCOMbobulator - We've all heard of right?

  Since no typical Windows user has ever needed to have DCOM enabled, it should be shut down immediately and disabled (after first making sure that it's safely patched when it's enabled and running). The DCOMbobulator makes this as easy as pressing a single "Disable DCOM" button. You can then restart Windows and verify that DCOM has been safely taken out of service.

  
  
  
  
  
• Shoot The Messenger (NOT related to MSN Messenger)

  The Windows "Messenger Service" is being exploited to spray the Internet with unsolicited commercial eMail. The receipt of a single UDP packet can cause a "Messenger Service" dialog to pop-up on the user's screen. It is possible for the sender to "spoof" (falsify) the packet's "Source IP", making these packets impossible to trace back to their origin. If our experience with eMail Spam is any model, we can expect to see a lot more of this in the future.

*Note: All 3 of these exploits have yet to be fixed by Microsoft - although, their most exploited variants have been patched

These applications are available here:

WinFixes.zip

I apologize if this has been posted, but a search revealed nothing...