🚀 go-pugleaf

Crosspost be.comp.security <> alt.hack.nl

Bad news on RPC DCOM vulnerability
----------------------------------
There are few bad news on RPC DCOM vulnerability:

1.  Universal  exploit  for  MS03-039  exists in-the-wild, PINK FLOYD is
again actual.
2.  It  was  reported  by exploit author (and confirmed), Windows XP SP1
with  all  security  fixes  installed still vulnerable to variant of the
same bug. Windows 2000/2003 was not tested. For a while only DoS exploit
exists,  but  code execution is probably possible. Technical details are
sent to Microsoft, waiting for confirmation.

Dear  ISPs.  Please  instruct  you customers to use personal fireWALL in
Windows XP.
*/

| Exploit released op k-otic.com en securiteam.com

ANSA , ASP.NET Security Analyser
--------------------------------
Asp.Net Security Analyser (ANSA) is a Open Source, Windows based, online
tool, that tests the server's security for known vulnerabilities and
mis-configurations. The tool was initially designed to allow the
protection of ISPs that provide shared hosting services. You can
download the source code, use it in your servers and distribute it to
who ever you feel appropriate.

The project's objective is to create an Open Source tool that allows
system administrators (responsible for windows based shared hosting
environments) to easily identify and solve existent security problems.

<http://www.gotdotnet.com/community/workspaces/directory.aspx> and search
for 'ANSA'), of 
<http://www.gotdotnet.com/Community/Workspaces/Workspace.aspx?id=36ae9a2c-8740-4b52-924e-320edf64fba5>
*/

Groeten, Jan

-- 
/"\  ASCII Ribbon Campaign
\ /  No HTML in mail or news!
  X
/ \ 	Dutch Security Information Network: http://www.dsinet.org