- Remote Code Execution Critical Updates -

[Joe Gronlund]

Issued: April 13, 2004
Version Number: 1.0

An End User version of this advisory is available by visiting the following Web site.

Protect Your PC: Microsoft has provided information on how you can help protect your PC at the following locations:

• End Users can visit the Protect Your PC Web site.

• IT Professionals can visit the IT Pro TechNet Security Information Web site.



Affected Software - All Windows Versions , with the exclusion of Windows 95

Please See MS04 -011 - MS04-014
MS04-014 is considered most critical, however all issues are listed Critical.


-- Edit --

If you have SP2 installed for XP, you do not need these updates. (who woulda thought )


http://www.microsoft.com/technet/sec.../winapr04.mspx

[_| () R | Z]

Issued: April 13, 2004
Version Number: 1.0

An End User version of this advisory is available by visiting the following Web site.

Protect Your PC: Microsoft has provided information on how you can help protect your PC at the following locations:

• End Users can visit the Protect Your PC Web site.

• IT Professionals can visit the IT Pro TechNet Security Information Web site.



Affected Software - All Windows Versions , with the exclusion of Windows 95

Please See MS04 -011 - MS04-014
MS04-014 is considered most critical, however all issues are listed Critical.


http://www.microsoft.com/technet/sec.../winapr04.mspx

any idea when this file will able to be downloaded by my windows updater?

and is it this bug? ->http://www.kb.cert.org/vuls/id/323070

[Joe Gronlund]

any idea when this file will able to be downloaded by my windows updater?

and is it this bug? ->http://www.kb.cert.org/vuls/id/323070

looks like it already is, RE: MS04-013

[IDN]

I was just called by a wife of a Microsoft worker telling her to shut down the PC right away. She called us and said the same. I don't know what's going on so I unplugged the Cat5's until I know what's going on.

[tgillespie]

I was just called by a wife of a Microsoft worker telling her to shut down the PC right away. She called us and said the same. I don't know what's going on so I unplugged the Cat5's until I know what's going on.

Then how are you posting?

[IDN]

Then how are you posting?

My Slackware machine.

[Shining Arcanine]

So this was the auto update that my PC installed an hour ago. *reboots*

Edit: It seems that Windows Update is swamped with traffic, it went incredibly slow when I went to it to see what Auto Update installed, it seems Auto Update installed 5 patches. I suppose a good deal of holes were plugged as a few were culmerative if I recall (I'm stating this several minutes after I checked).

[IDN]

[QUOTE=Shining ArcanineIt seems that Windows Update is swamped with traffic[/QUOTE]

I tried to get the updates for the rest of the machines and some of my clients. It wouldn't show the updates, wouldn't download he updates or freeze in the middle of the updates. Quite crazy.

[someuser190826]

I was just called by a wife of a Microsoft worker telling her to shut down the PC right away. She called us and said the same. I don't know what's going on so I unplugged the Cat5's until I know what's going on.

Why shut it down?

[Shining Arcanine]

I suppose that would be because it is a Remote Code Execution vunerability. Meaning anyone without a decent firewall setup (I have hardware and software firewalls so I'm fine) can have their computers taken over.

It wouldn't be so urgent unless people were already using the exploit to take over computers...

[IDN]

Why shut it down?

Because she is non-technical. Easier then asking her to turn off the router; remove the cat5 cable or diasable the network connection. I'm not exactly sure as I haven't spoke with him yet.

[Dean C]

I had 5 updates yesterday - seems like a big day of ms releases

[Shining Arcanine]

Same here. They were Microsoft's April round of updates.

[Joe Gronlund]

Theyre critical updates, but nothing to panic over.

Microsoft knew about these issues last month. They where even compiled into XP_SP2_RC1

[IDN]

Theyre critical updates, but nothing to panic over.

Microsoft knew about these issues last month. They where even compiled into XP_SP2_RC1

Usually I would never worry about it and not update. I became worried when his wife called and said shut down the computer.