RE: MS09-048 includes fixes for TCP/IP implementation issues reported more than a year ago

[Jim Duncan <jduncan () juniper net>]

bob () home com wrote:
> Does anyone have a reference pointing to the original announcement on
> here for these vulnerabilities? I would like to research them
> regarding the potential continued vulnerability of XP, since MS did
> not provide a patch for XP products.   

CERT-FI was the coordinator for these vulnerabilities, and the CERT-FI
advisory (referenced in the previous message from Juha-Matti Laurio)
is the best overall announcement.

        Jim

-- 
James N. Duncan, CISSP
Manager, Juniper Networks Security Incident Response Team (Juniper SIRT)
E-mail: jduncan () juniper net  Mobile: +1 919 608 0748
PGP key fingerprint: E09E EA55 DA28 1399 75EB  D6A2 7092 9A9C 6DC3 1821