Microsoft fixes critical flaws

GreyGhost · 11th April 2007, 15:22

From the BBC today 11/4/2007

http://news.bbc.co.uk/1/hi/technology/6544089.stm

Critical flaws fixed in W 2000 and Server 2003
Only taken 7 and 5 years respectively.

I presume these flaws have only just been found by the hacking community, hence the fix.

JohnDotCom · 11th April 2007, 16:56

This week GG 5 Critical Fixes were needed for Windows XP, one of these we fed back to Microsoft over 3 years ago as a Vulnerability, a hack by which you managed to control computers remotely, and gain control of it via this fault.
Not passed onto public till this week when several massive hits were made using one of these faults, (but not by us).
They seem to continue to release flawed products, do not even start to get me going on Vista!

Jürgen · 11th April 2007, 16:59

There are a few security patches from April 9th for XP, too.

So go to http://update.microsoft.com regularly, if you don't use these automatic updates. (But with IE only.

)

Simon · 11th April 2007, 17:01

Quote:

Originally Posted by JohnDotCom

This week GG 5 Critical Fixes were needed for Windows XP, one of these we fed back to Microsoft over 3 years ago as a Vulnerability, a hack by which you managed to control computers remotely, and gain access via this fault.
Not passed onto public till this week when several massive hits were made using one of these faults, (but not by us).
They seem to continue to release flawed products, do not even start to get me going on Vista!

If they released a fully-functioning product then they'd have nothing to do for the rest of the year...

A comment a friend of mine said still holds true today:-
"...it's a Microsoft product, therefore it wont work properly until at least version three..."

He may have been saying it in jest, but how very true it is....

JohnDotCom · 11th April 2007, 17:05

quote=Juergen. There are a few security patches from April 9th for XP, too

They are calling some Critical Fixes, Security Fixes sometimes now,
which this weeks ones are Critical if you go on Wireless or WWW.
Microsoft Partner Program Flag them as Critical seem to be altering names just to confuse you more.

Rich · 11th April 2007, 18:01

I spent an entire DAY today sorting out machines that have downloaded these "patch tuesday" updates via WSUS.

For some reason, svchost.exe would hang at 100% processor usage and the machine would practically lock up completely. Kill the task and all is well.

Driven me mad today, still haven't found out what the cause is. Roll on tomorrow

JohnDotCom · 11th April 2007, 21:18

Rich, Don't know if relevant but a Laptop was dropped off for me tonight at home with this fault, and if not connected to internet / wireless or Network (all disabled) works fine but when they are turned back on locks up for some time.
svchost.exe on system when ended kills other areas of computer running, so will be looking at it again at work tomorrow to see whats going on.
Keep you in touch.

Rich · 11th April 2007, 21:25

Yes please, myself and another tech spent literally the entire day on it.

Couldn't pattern it, affected around 15 laptops and 4 desktops across a WAN.

Help

11th April 2007, 15:22	#1
GreyGhost Banned 180+ Sport Auto Join Date: Oct 2006 Location: Bedford Middle Level Posts: 17,787 Thanks: 0 Thanked 18 Times in 5 Posts	Microsoft fixes critical flaws From the BBC today 11/4/2007 http://news.bbc.co.uk/1/hi/technology/6544089.stm Critical flaws fixed in W 2000 and Server 2003 Only taken 7 and 5 years respectively. I presume these flaws have only just been found by the hacking community, hence the fix.

11th April 2007, 16:56	#2
JohnDotCom * Rover 75 FaceLift Tourer CDTi 170BHP Auto ConnSE 2005 Model Starlight Silver Join Date: Nov 2006 Location: Abergele Posts: 28,735 Thanks: 0 Thanked 6 Times in 5 Posts	This week GG 5 Critical Fixes were needed for Windows XP, one of these we fed back to Microsoft over 3 years ago as a Vulnerability, a hack by which you managed to control computers remotely, and gain control of it via this fault. Not passed onto public till this week when several massive hits were made using one of these faults, (but not by us). They seem to continue to release flawed products, do not even start to get me going on Vista! Last edited by JohnDotCom; 11th April 2007 at 17:01..

11th April 2007, 16:59	#3
Jürgen Posted a thing or two 75 Join Date: Nov 2006 Location: N/A Posts: 1,728 Thanks: 0 Thanked 0 Times in 0 Posts	There are a few security patches from April 9th for XP, too. So go to http://update.microsoft.com regularly, if you don't use these automatic updates. (But with IE only. ) __________________ Jürgen

11th April 2007, 18:01	#6
Rich Posted a thing or two http://Roadca.ms - Letting you see what they see! Join Date: Nov 2006 Location: Yup Posts: 1,786 Thanks: 0 Thanked 7 Times in 1 Post	I spent an entire DAY today sorting out machines that have downloaded these "patch tuesday" updates via WSUS. For some reason, svchost.exe would hang at 100% processor usage and the machine would practically lock up completely. Kill the task and all is well. Driven me mad today, still haven't found out what the cause is. Roll on tomorrow __________________ https://VehicleGPS.UK http://www.MotorwayCameras.co.uk

11th April 2007, 21:25	#8
Rich Posted a thing or two http://Roadca.ms - Letting you see what they see! Join Date: Nov 2006 Location: Yup Posts: 1,786 Thanks: 0 Thanked 7 Times in 1 Post	Yes please, myself and another tech spent literally the entire day on it. Couldn't pattern it, affected around 15 laptops and 4 desktops across a WAN. Help __________________ https://VehicleGPS.UK http://www.MotorwayCameras.co.uk

11th April 2007, 17:05	#5
JohnDotCom * Rover 75 FaceLift Tourer CDTi 170BHP Auto ConnSE 2005 Model Starlight Silver Join Date: Nov 2006 Location: Abergele Posts: 28,735 Thanks: 0 Thanked 6 Times in 5 Posts	quote=Juergen. There are a few security patches from April 9th for XP, too They are calling some Critical Fixes, Security Fixes sometimes now, which this weeks ones are Critical if you go on Wireless or WWW. Microsoft Partner Program Flag them as Critical seem to be altering names just to confuse you more.

11th April 2007, 21:18	#7
JohnDotCom * Rover 75 FaceLift Tourer CDTi 170BHP Auto ConnSE 2005 Model Starlight Silver Join Date: Nov 2006 Location: Abergele Posts: 28,735 Thanks: 0 Thanked 6 Times in 5 Posts	Rich, Don't know if relevant but a Laptop was dropped off for me tonight at home with this fault, and if not connected to internet / wireless or Network (all disabled) works fine but when they are turned back on locks up for some time. svchost.exe on system when ended kills other areas of computer running, so will be looking at it again at work tomorrow to see whats going on. Keep you in touch.