FAO Windows Users [Archive]

Daz

23-10-2008, 21:09

Microsoft has released a critical bug fix outside of the normal patch schedule (a rarity). It's a remote code exploit already in the wild, and affects all NT versions of Windows (2000 -> Vista, though it's not rated 'Critical' for Vista and 2008 Server), which attacks RPC.

In short go to Windows update and get the patch, which will require a reboot :) Admins, if you're not subscribed to security bulletin updates (which you are, right? ;)), the advisory is here (http://www.microsoft.com/technet/security/Bulletin/MS08-067.mspx), get testing and pushing it out, it's a serious hole.

NokkonWud

23-10-2008, 21:11

Cheers Daz.

Haly

23-10-2008, 21:34

Cheers Daz.

^ :D

AboveTheSalt

23-10-2008, 21:45

Will do this tonight - :thanks:

MarcLister

23-10-2008, 21:55

Ja got this earlier. :)

Mark

23-10-2008, 22:10

Lovely. I have at least one machine that can't be patched (ever). :/

It's behind a firewall, but that's only good until the perimeter gets breached.

Feek

23-10-2008, 22:13

I shall update my server thingie immediately.

Daz

23-10-2008, 22:18

Lovely. I have at least one machine that can't be patched (ever). :/

It's behind a firewall, but that's only good until the perimeter gets breached.
It's probably vulnerable to more than this one anyway!

semi-pro waster

23-10-2008, 22:38

Cheers for the pointer, I've been meaning to check that I've got all relevant patches/updates for a while and this gave me the prompt I needed. :)

Mark

23-10-2008, 23:53

It's probably vulnerable to more than this one anyway!
True, but there are very few of those that are truly self-replicating, and RPC seems to get more than its fair share. Most of the rest require user-intervention, and there's only one user - me.

Zico

24-10-2008, 01:26

Is this being pushed out via Windows Update or just as a standalone download for now?

Only ask as I'm too lazy to go round updating the other PCs in the house and have them set to auto download & install anyway.

Daz

24-10-2008, 09:22

It's live on Windows Update yes :)

Justsomebloke

24-10-2008, 09:30

Chars :p

Mark

24-10-2008, 11:11

No sign of it here, though I just applied the updates from the monthly update cycle last night so it's possible I missed it.

Davey_Pitch

24-10-2008, 11:18

Spotted this earlier today, already rolling it out to all school pc's now :)

NokkonWud

24-10-2008, 11:21

My windows update found it this morning, "Published Yesterday" and it was a security fix, so I'm guessing that's it.

Wyrdo

24-10-2008, 15:47

Bleh I'm on call now this weekend because of this bloody thing.