RE: [Full-Disclosure] ISS Security Brief: "MS Blast" MSRPC DCOM Worm Propagation (fwd)

[Joey <joey2cool@yahoo.com>]

svchost.exe listens on several ports on windows xp.
If microsoft is saying that it should never be on the
internet, couldn't there be more b0f's discovered in
the future? One peculiar service "DNS Client",
although listening on a few random ports just about
1024, also runs off of svchost.exe.

--- Nick FitzGerald <nick@virus-l.demon.co.uk> wrote:
> They cannot do _any business whatsoever_ if they
> cannot expose a  pile 
> of crap like MS RPC to the Internet?  Code that MS
> now openly admits 
> should never be exposed to "hostile environments"? 
> Who was responsible 
> for such horrendous mis-design?

__________________________________
Do you Yahoo!?
Yahoo! SiteBuilder - Free, easy-to-use web site design software
http://sitebuilder.yahoo.com
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html