Home page logo

fulldisclosure logo Full Disclosure mailing list archives

Re: Unofficial Microsoft patches help hackers, not security
From: Michael Holstein <michael.holstein () csuohio edu>
Date: Wed, 04 Jan 2006 16:51:47 -0500

This trend does nothing to prove netdev's post however. The situtation
that MW shows here, happens all the time. How many people are infected
with SDBot, but then apply the correct Microsoft patch to fix the hole.
They are still infected....the patch being applied after the fact has no
real effect on the security of the system.

Not to mention all the folks that installed the patch (including those that used automated roll-out tools) but didn't reboot the computer.

FWIW, the same is true of the patch to gdi32 and shimgvw.

Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]