Microsoft releases patch for SNMP security flaw

[javacool]

The following is couresty of SecurityNewsPortal.com:

Microsoft releases patch for SNMP security flaw
I wonder if people will wait to hear how this patch works out...
02-18-2002 09:46:39 AM CST -- By MATT BERGER, IDG NEWS SERVICE

Microsoft Corp. Friday released a patch for two versions of its Windows operating system to secure a hole discovered in a critical networking technology that could allow an attacker to stage denial-of-service attacks or take over a user's computer system. The vulnerability lies in the way a number of companies implement a standard protocol that allows system administrators to manage devices in a network, such as firewalls, computers and routers, called SNMP (Simple Network Management Protocol). It was identified last week and publicized by the CERT Coordination Center, based at Carnegie Mellon University in Pittsburgh.

Microsoft provides an implementation of SNMP for all versions of Windows except Windows ME. The company said the protocol is not included in the operating system by default. Instead, a user must install it manually. The initial patches made available from Microsoft are for its Windows 2000 and Windows XP operating systems.

The patches for Windows 2000 and Windows XP can be downloaded at :http://<br /> http://www.microsoft....n/ms02-006.asp

The patch is available for Windows 2000 and XP.

The link is available in the quote above.


Enjoy! *

[Zhen-Xjell]

Thanks.. you know, I saw that last night and it didn't occur to me to post it. *

[Checkout]

Er...should I, as an individual home XP user, be concerned at all and apply this patch? *That isn't clear to me.

[spy1]

Hi, Checkout!

"Microsoft provides an implementation of SNMP for all versions of Windows except Windows ME. The company said the protocol is not included in the operating system by default."

So, that sort of seems to me that you should see if your system's vulnerable and apply the patch.

Check this thread for vulnerablity-checkers: http://www.security-pro.co.uk/yabb/YaBB.pl?board=osif;action=display;num=1013858367

I can't see where it would hurt to apply the patch - but then again, with MS patches, ya' never know! Pete