questions?

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

i read this article somewhere about a worm.
Windows XP SP2 users should be safe unless they have
enabled Null sessions. How do i find out if Null Sessions
is disabled?
 
You caught that one fast (I hope)--I cancelled it and revised it to read
remote unauthenticated attack.

Yes, I agree--it sounds as though one or more of the variants attempt to
spread by other means, including email attachments. The only real-world
experience I've seen posted, however, indicates simply that machines are
being infected via TCP port 445--however that begs the question of where the
infected packets are coming from. I believe what I am hearing about are
infections internal to large networks, and not from the Internet--these
folks are quite savvy enough to not have that open.

--
 
That's the popular stereotype, but I sure wish we had some real analysis. I
guess it doesn't really matter--the lesson is that you either need to have
patched, or need an effective quarantine on attachment to the network
mechanism. I'm not sure how well that works with Windows Server 2003 at the
moment. I think by Vista it may actually be effective.

--
 
Back
Top