Dailydave: Re: MSRPC vulnerability 1 billion and six?

[Blue Boar <BlueBoar () thievco com>]

Dave Aitel wrote:
> I have to assume its just "connect to a service, send it a lot of data". 
> I don't see why that wouldn't work against SP2. You can connect to 
> services and send lots of data on SP2 as well.
Hm?  The mitigation is that you can't connect to RPC on XP SP2 without 
authenticating, isn't it?  You can connect, you just have to 
authenticate first.
                                        BB