[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Full-Disclosure] netdde during update
- To: <full-disclosure@xxxxxxxxxxxxxxxx>
- Subject: [Full-Disclosure] netdde during update
- From: "morning_wood" <se_cur_ity@xxxxxxxxxxx>
- Date: Tue, 8 Feb 2005 21:06:33 -0800
while "netdde" is not started by default.
I did just notice "netdde" does run during
Windows update...
this would allow a window of opportunity
to exploit the service. a worm using the
netdde exploit could take advantage of
this before the user fully updates.
just noticing,
Donnie Werner
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html