Re: [Full-Disclosure] Scanning the PCs for RPC Vulnerability

["Ty Bodell" <tebodell@xxxxxxxxx>]

<P>Mr. Rafi--</P>
<P>Definitely try the eEye Digital tool</P>
<P><A 
href="http://www.eeye.com/html/Research/Tools/RPCDCOM.html";>http://www.eeye.com/html/Research/Tools/RPCDCOM.html</A></P>
<P>detects and patches the machine i believe.</P>
<P>Cheers,</P>
<P>--Ty Bodell<BR><BR>----- Original Message -----<BR>From: Nadeem Rafi 
<NRAFI@xxxxxxxxxxx><BR>Date: Wed, 03 Sep 2003 13:06:46 +0300<BR>To: 
full-disclosure@xxxxxxxxxxxxxxxx<BR>Subject: [Full-Disclosure] Scanning the PCs 
for RPC Vulnerability<BR><BR></P>
<DIV>
<DIV>
<DIV>I have found some faults in the scanning tools available from Foundstone 
and Microsoft for RPC vulnerable machines. Both of&nbsp; these tools are not 
error free. These tools are showing the ip addresses of even those machines 
which are Windows 9x, Windows98/Sec, Windows ME. Both tools are not free from 
this error.</DIV>
<DIV>And Foundstone's RPC Scan tool is even more error prone. If you even 
applied all the patches in correct&nbsp; sequence even then some of my machines 
are reported as "Vulnerable".</DIV>
<DIV>&nbsp;</DIV>
<DIV>Any body have any experience with these problems or any suggestions please 
let me know.</DIV>
<DIV>&nbsp;</DIV>
<DIV>Best Regards,</DIV>
<DIV>&nbsp;</DIV>
<DIV>Nadeem Rafi</DIV></DIV></DIV>
-- 
<p>_______________________________________________<br>
Sign-up for your own personalized E-mail at <a 
href="http://www.mail.com/?sr=signup"; target="_new"><font color="#0000FF"> 
Mail.com</font></a><br><br>
<a href="http://corp.mail.com/careers"; target="_blank">CareerBuilder.com</a> 
has over 400,000 jobs. Be smarter about your job search</p>

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html