[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
RE: [Full-Disclosure] RE: Probable new MS DCOM RPC worm for Windo ws
- To: "'Ferris, Robin'" <R.Ferris@xxxxxxxxxxxx>, "'full-disclosure@xxxxxxxxxxxxxxxx'" <full-disclosure@xxxxxxxxxxxxxxxx>
- Subject: RE: [Full-Disclosure] RE: Probable new MS DCOM RPC worm for Windo ws
- From: "Neis, Mark" <Mark.Neis@xxxxxxxxx>
- Date: Fri, 26 Sep 2003 16:52:16 +0200
Ferris, Robin wrote:
>I have not yet verified if the files were installed or not and thats a very
>good point. I didnt and still dont know what files it changed or installed
>for the ms03-026. What are they?
Afaik, the fix for MS03-26 changes following DLLs:
ole32.dll (5.0.2195.6769)
rpcrt4.dll (5.0.2195.6753)
rpcss.dll (5.0.2195.6769)
Btw: If I'm not mistaken that's also the versions that are contained in
W2kSP4.
The following fix for MS03-29 changes the same DLLs to these versions:
ole32.dll (5.0.2195.6810)
rpcrt4.dll (5.0.2195.6802)
rpcss.dll (5.0.2195.6810)
Mark
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html