-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
____/ Tony Manco on Tuesday 08 Sep 2009 22:29 : \____
> Roy Schestowitz wrote:
>
>> -----BEGIN PGP SIGNED MESSAGE-----
>> Hash: SHA1
>>
>> ____/ Tony Manco on Tuesday 08 Sep 2009 13:50 : \____
>>
>>> Roy Schestowitz wrote:
>>>
>>>> -----BEGIN PGP SIGNED MESSAGE-----
>>>> Hash: SHA1
>>>>
>>>> Windows Vista/7 : SMB2.0 NEGOTIATE PROTOCOL REQUEST Remote B.S.O.D.
>>>>
>>>> ,----[ Quote ]
>>>> | V. BUSINESS IMPACT
>>>> |
>>>> | An attacker can remotly crash without no user interaction, any
>>>> | Vista/Windows 7 machine with SMB enable. Windows Xp, 2k, are NOT
>>>> | affected as they dont have this driver.
>>>> |
>>>> | VI. SYSTEMS AFFECTED
>>>> |
>>>> | Windows Vista/7 All (64b/32b|SP1/SP2 fully updated) and possibly Win
>>>> | Server 2008 as it use the same SMB2.0 driver (not tested).
>>>> `----
>>>>
>>>> http://seclists.org/fulldisclosure/2009/Sep/0039.html
>>>>
>>>> I'm sure Vista 8 will solve everything! Just bear with Microsoft... some
>>>> day it will all be wonderful. They promise.
>>>
>>> You forgot an interesting part, the solution:
>>>
>>> ,----[ Quote ]
>>> | VII. SOLUTION
>>> | Vendor contacted, but no patch available for the moment. Close SMB
>>> | feature and ports, until a patch is provided.
>>> `----
>>>
>>> No patch available...
>>
>> I'm sure they'll fix it before the Vista 7 'house parties'... it would be
>> *blue* otherwise.
>>
>
> Let it be blue, remember the Olympics ceremony?
>
> http://gizmodo.com/5035456/blue-screen-of-death-strikes-birds-nest-during-opening-ceremonies-torch-lighting
Yes, that's what remember best from the whole thing. *That* and
Silver Lie fiasco.
- --
~~ Best of wishes
Roy S. Schestowitz | Y |-(1^2)|^(1/2)+1 K
http://Schestowitz.com | GNU is Not UNIX | PGP-Key: 0x74572E8E
roy pts/0 :0 Sun Sep 6 23:51 still logged in
http://iuron.com - proposing a non-profit search engine
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
iEYEARECAAYFAkqm4FcACgkQU4xAY3RXLo4HwgCfSHEkYPADycmlutgoIoDkCkFa
ALsAn2FgEbvZXGDuExgyIRc2fNPHGkK8
=dKN/
-----END PGP SIGNATURE-----
|
|
