SV: DCOM RPC exploit (dcom.c)

["Peter Kruse" <kruse () krusesecurity dk>]

Hi all,

FYI, Incidents.org reports: "Widespread scans for unpatched Windows
machines underway (RPC vulnerability). Patch systems and block ports
135-139 & 445". 

This might be caused by several tools in the hands of kiddies probing
IP´s for vulnerable systems. This could also be caused by a worm making
it´s first round crashing and exploiting boxes. I guess time will tell.

BTW - nothing here, it´s all quite around my firewalls.

Med venlig hilsen // Kind regards

Peter Kruse
Kruse Security
http://www.krusesecurity.dk

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html