Q326830

People should probably be aware that MS02-045 (Unchecked Buffer in Network Share Provider Can Lead to Denial of Service (Q326830)) now has a script kiddie tool available for it. I shalnt post the link to the program coz thats just silly, but you should (as always) patch your system asap!

You cant be attacked if you are blocking ports 139 and 445 on your firewall or not running SMB (Windows Filesharing) but this is not a reason to patch your box.

Its worth noting that for the program to work you need to know the netbios name of the box you are trying to kill, so you can be a little secure in that people dont know the name of your computer, but as always security through obscurity is not really protection.

Me

 

Note the following:

Title: Unchecked Buffer in Network Share Provider Can Lead to Denial of Service (Q326830)
Date: 22 August 2002
Software:

Microsoft Windows NT 4.0 Workstation
Microsoft Windows NT 4.0 Server
Microsoft Windows NT 4.0 Server, Terminal Sever Edition
Microsoft Windows 2000 Professional
Microsoft Windows 2000 Server
Microsoft Windows 2000 Advanced Server
Windows XP Professional

Impact: Denial of Service
Max Risk: Moderate
Bulletin: MS02-045

If you are running any of those sytems under the conditions described in Q326830, wisdom dictates fetching the fix.