Microsoft releases patch for SNMP security flaw

javacool · Feb 18, 2002

The following is couresty of SecurityNewsPortal.com:

Microsoft releases patch for SNMP security flaw
I wonder if people will wait to hear how this patch works out...
02-18-2002 09:46:39 AM CST -- By MATT BERGER, IDG NEWS SERVICE

Microsoft Corp. Friday released a patch for two versions of its Windows operating system to secure a hole discovered in a critical networking technology that could allow an attacker to stage denial-of-service attacks or take over a user's computer system. The vulnerability lies in the way a number of companies implement a standard protocol that allows system administrators to manage devices in a network, such as firewalls, computers and routers, called SNMP (Simple Network Management Protocol). It was identified last week and publicized by the CERT Coordination Center, based at Carnegie Mellon University in Pittsburgh.

Microsoft provides an implementation of SNMP for all versions of Windows except Windows ME. The company said the protocol is not included in the operating system by default. Instead, a user must install it manually. The initial patches made available from Microsoft are for its Windows 2000 and Windows XP operating systems.

The patches for Windows 2000 and Windows XP can be downloaded at : http://www.microsoft.com/technet/security/bulletin/ms02-006.asp
Click to expand...

The patch is available for Windows 2000 and XP.

The link is available in the quote above.

Enjoy!

Zhen-Xjell · Feb 18, 2002

Re: Microsoft releases patch for SNMP security fla

Thanks.. you know, I saw that last night and it didn't occur to me to post it.

Checkout · Feb 19, 2002

Re: Microsoft releases patch for SNMP security fla

Er...should I, as an individual home XP user, be concerned at all and apply this patch? That isn't clear to me.

spy1 · Feb 19, 2002

Re: Microsoft releases patch for SNMP security fla

Hi, Checkout!

"Microsoft provides an implementation of SNMP for all versions of Windows except Windows ME. The company said the protocol is not included in the operating system by default."

So, that sort of seems to me that you should see if your system's vulnerable and apply the patch.

Check this thread for vulnerablity-checkers: http://www.security-pro.co.uk/yabb/YaBB.pl?board=osif;action=display;num=1013858367

I can't see where it would hurt to apply the patch - but then again, with MS patches, ya' never know! Pete

Log in or Sign up

Microsoft releases patch for SNMP security flaw

javacool BrightFort Moderator

Zhen-Xjell Security Expert

Checkout Security Rhinoceros

spy1 Registered Member

Log in or Sign up

Microsoft releases patch for SNMP security flaw

javacool BrightFort Moderator

Zhen-Xjell Security Expert

Checkout Security Rhinoceros

spy1 Registered Member

Useful Searches