RE: [Full-Disclosure] ISS Security Brief: "MS Blast" MSRPC DCOM WormPropagation (fwd)

[Nick FitzGerald <nick@virus-l.demon.co.uk>]

"Dennis Heaton" <dennish@comcast.net> wrote:

> On the car radio today I heard that the Maryland Dept. of Motor Vehicles was
> shutdown completely as well as numerous other state and federal agencies in
> the USA.

Wow -- really?

They cannot do _any business whatsoever_ if they cannot expose a  pile 
of crap like MS RPC to the Internet?  Code that MS now openly admits 
should never be exposed to "hostile environments"?  Who was responsible 
for such horrendous mis-design?

Is that monumentally stupid or what?

Or was a case of this type of thing:

   http://vmyths.com/rant.cfm?id=241&page=4

Or was it mis-reporting?


Regards,

Nick FitzGerald

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html