nt4.0 too flawed to fix – official | the register

nt4.0 too flawed to fix – official | the register skip to content biting the hand that feeds it cash ’n’ carrion events hardwaresoftwaremusic & mediacommssecuritymanagementscienceodds & sods security: crimeenterprise securityanti-virusspamidspyware reg hardware reg developer channel register whitepapers news tools newsletters & feeds reg mobile reg desktop news alerts reg shops reg merchandise reg books mobile gadgets hosting top stories ukrainian ebay scam turns down syndrome man into cash machine chinese trojan on maxtor hdds spooks taiwan firefox broken jar vuln. menaces gmail doubleclick caught supplying malware-tainted ads botmaster owns up to 250,000 zombie pcs read more top stories related whitepapers gaining maximum value from information and data managing intellectual property assets data security in the public sector incorporating findings from the becrypt public sector survey oct 07 it security summit risk management, improving it security process, and regulatory compliance behavior-based security - the only technology to keep you steps ahead of hackers the key to staying a step ahead of the next unknown attack built-in manageability and improved security for desktop pcs down-the-wire security and manageability capabilities on the desktop enterprise voip security juniper networks: delivering 'voice-aware' networking the register » security » nt4.0 too flawed to fix – officialinsecure by designby john leyden → more by this authorpublished thursday 27th march 2003 17:48 gmt there's a nasty rider with microsoft's latest security problem for nt users. although a denial of service risk exists in an "important" security vulnerability, publicised yesterday affecting nt 4.0, redmond tells users not to expect a patch for that operating system anytime soon. windows 2000 and xp users do have access to a fix, designed to address a flaw involving endpoint mapper, but the best on offer for win nt users is advice to shelter vulnerable servers behind a firewall. the vulnerability involves the microsoft's implementation of remote procedure call protocol, more specifically the component that deals with message exchange over tcp/ip. malformed messages received by the endpoint mapper process, which listens on tcp/ip port 135, might cause a server to hang. microsoft has provided patches with this bulletin to correct this vulnerability for windows 2000 and windows xp, but not windows nt 4.0 - even though the os is affected. in a surprisingly candid admission, the company states that fixing nt4.0 is simply too difficult. "the architectural limitations of windows nt 4.0 do not support the changes that would be required to remove this vulnerability," microsoft says. "windows nt 4.0 users are strongly encouraged to employ the workaround discussed in the faq in the bulletin, which is to protect the nt 4.0 system with a firewall that blocks port 135." firewalling will probably keep external attackers at bay but the flaw gives attackers with intranet access considerable scope to crash, though not (it would seem root), inherently vulnerable nt4 boxes. ® external links microsoft's security bulletin related stories critical win2k flaw yields multiple attack vectors (different, even more serious, problem) too cool for secure code windows root kits a stealthy threat small winxp security glitch, not many dead track this type of story as a custom atom/rss feed or by email. post to slashdot digg this add to del.icio.us reddit previous article next article promote your events and training courses for free it & business books latest mobile gadgets mcsa/mcse self-paced training kit (exam 70-214): implementing and administering security in a microsoft windows 2000 network apple pro training series: advanced editing techniques in final cut pro 5 scott kelby's 7-point system for adobe photoshop cs3 adobe photoshop elements 4.0: a visual introduction to digital imaging paul wilmott on quantitative finance worklife: effective communications: get your message across & learn how to listen holux m-1200 bluetooth gps receiver: gps bluetooth miglia dialog phone: skype phones proporta solar bluetooth gps receiver: gps bluetooth samsung q1 ultra (uk 800mhz 1gb 60gb xp tablet): ultra-mobile pcs western digital passport 160gb usb 2.0 portable hard drive: external hard drives freecom 500gb network drive 3.5 lan/usb 2.0: external hard drives seagate freeagent pro 750gb usb 2.0/esata: external hard drives how to gain maximum value from your information and data managing intellectual property assets download here top 20 stories • all the week’s headlines • archive © copyright 2007 privacy policyadvertisingsite mapcontact usabout ussyndication

Acceuil

suivante

nt4.0 too flawed to fix – official | the register   NASA delays spacewalk to fix solar wing International Reuters  : : RegistrySmart : :  Clean PC Software :: Registry Fix It!, Error Scan and Fix, Free ...  Eric's Archived Thoughts: Framework Fix  Futurist: To fix education, think Web 2.0 Tech News on ZDNet  Traduction Garbage Fix Me Now lyrics - musique traduite  Video: Your daily Tesla fix! - AutoblogGreen  Patch: fix for PR java.lang/339  Tom Tromey - Patch: FYI: Fix for PR 4859  Multi-Fix N.V. - Professional Signmaking Films signmaking vinyl ...  Flickr: FIX MY PIC  The Fix (Heroes) - Wikipedia, the free encyclopedia  Daily Funny Fix / Media  Dent Fix Equipment  HTML FIX IT.COM: A site with free scripts, advanced scripts ...  Blog de jan-fix - jan-fix.skyblog.com - Skyrock.com  Decapitation Victim Tries To Fix Eyes - Health News Story - KGTV ...  Robert M. Ball - A Social Security Fix For 2008 - washingtonpost.com  Télécharger 433 eros fix up jamendo mp3 vbr 192k 2006 02 07 www ...  Lèvres Fix'Intense Tenue 10 h Brillance Ambre - Rouge à Lèvres ...  Mac Rumors: Apple Acknowledges iMac Freezing Issue, Fix In Works  Adobe - Photoshop : For Macintosh : Mac OS X Keyboard Shortcut Fix  Annonces.com : Pc fix *neuf* acer acerpower fh - celeron d 360 ...  XML.com: Using XSLT to Fix Swing  Blog de giangi-fix - gian - Skyrock.com  coding... and other random stuff - home of Bingo Caller  Balai FIX-O-MAT Le balai - Webmarchand.com  How to fix the Firefox memory leak (Firefox hack) « Internet Duct Tape  FixTheLogo.com: Sports  cherche board + fix pas cher ->plus2sport.com  Encyclopédie méthodique, ou par ordre de matières - Résultats Google Recherche de Livres  Credit Repair by Credit Clean Help Repair Bad Debts  :: SUSHI FIX RESTAURANTS :: WELCOME  Fix Blogger Sitemap XML Warnings Inside Google Webmaster at ...  fix tps  Fix APO ? - forum Snowboard  Deeper level of interest in climate fix csmonitor.com  Aural Fix Communique Online  SIGN FIX sur SOCIETE.COM  EAZ-FIX, Instantly undo your PC problems  'Fix' is finished :: CHICAGO SUN-TIMES :: Robert Feder  fix - Synonyms from Thesaurus.com  How to fix the GST mistake  Teardrop Parts  Linux.com :: DRAM Pricing: The Fix Is In  Journal de physique, de chimie, d'histoire naturelle et des arts ... - Résultats Google Recherche de Livres  Gaufrey: Chanson de Geste - Résultats Google Recherche de Livres  [Profil de fix] OverBlog - Le blog des blogs  [Profil de Fix] OverBlog - Le blog des blogs  Contes de Guillaume Vadé - Résultats Google Recherche de Livres  Sur le compte rendu au Roi en 1781: Nouveaux éclaircissemens - Résultats Google Recherche de Livres  Renaus de Montauban: oder Die Haimonskinder, altfranzösisches Gedicht - Résultats Google Recherche de Livres  Fixsuche.com Fix gesucht und schnell gefunden! Startseite  Dictionnaire historique de la ville de Paris et de ses environs - Résultats Google Recherche de Livres  Les vies des hommes illustres de la France, depuis le commencement ... - Résultats Google Recherche de Livres  Mercure de France - Résultats Google Recherche de Livres  Nukemods.com - FIX to the 5 last posts block on the front page  Nukemods.com - [FIX] Wrong url after search for "redirect"  Amazon.com: Fix-It and Forget-It Cookbook: Feasting with Your Slow ...  www.live.com fix - User JavaScript - Opera Community