I may have spoken too soon. A couple of days ago it was on windowsupdate. I updated my home PC and was specifically looking for this patch among a couple of others. I just went back to windowsupdate from an unpatched test machine and it looks as if MS is no longer providing the patch through the windowsupdate service. I should have checked again before ripping off my last email. Doesn't make any sense to me why they would do this. Sorry again, egg on my face.

Geoff

-----Original Message-----
From: Mario Davids [mailto:MarioD (at) etv.co (dot) za [email concealed]]
Sent: Wednesday, August 13, 2003 12:17 PM
To: Geoff Shatz; focus-ms (at) securityfocus (dot) com [email concealed]
Subject: RE: DCOM Worm
Importance: High

Thanks for your replies...

Well the reason I asked, is that I ran an update awhile back .. and when I
ran one on Thursday there was no updates for my pc ... , When I called MS in
ZA they replied that the patch was only released last night but when I run
the update this morn ... there was still no update needed.. -g- Go figure
... So I thought it wise to get the real info ...

Thanks for the info guys

-----Original Message-----
From: Geoff.Shatz (at) pchelps (dot) com [email concealed] [mailto:Geoff.Shatz (at) pchelps (dot) com [email concealed]]
Sent: Wednesday, August 13, 2003 5:51 PM
To: MarioD (at) etv.co (dot) za [email concealed]; focus-ms (at) securityfocus (dot) com [email concealed]
Subject: RE: DCOM Worm

Yes the patch is up on windowsupdate and no it is not included in SP4 but is
considered a pre-SP5 patch. It actually creates a key in your registry
stating it's part of SP5 even though SP5 has not yet been released.

Regards,

Geoff

-----Original Message-----
From: Mario Davids [mailto:MarioD (at) etv.co (dot) za [email concealed]]
Sent: Wednesday, August 13, 2003 4:25 AM
To: focus-ms (at) securityfocus (dot) com [email concealed]
Subject: DCOM Worm
Importance: High

Hey,

Has MS put the patch on http://windowsupdate.microsoft.com/ yet ? and Does
SP4 have the fix ? ...

Thanks
Blue

------------------------------------------------------------------------
---
Your network firewall and IDS products do not prevent Web application
attacks - the most common form of online exploitation- resulting in Web
defacement, data theft, sabotage and fraud.
KaVaDo is the only company that provides a complete suite of Web
application security products.
Download a FREE whitepaper on "Security Policy Automation for Web
Applications":http://www.securityfocus.com/Kavado-focus-ms
------------------------------------------------------------------------
---

------------------------------------------------------------------------
---
Your network firewall and IDS products do not prevent Web application
attacks - the most common form of online exploitation- resulting in Web
defacement, data theft, sabotage and fraud.
KaVaDo is the only company that provides a complete suite of Web
application security products.
Download a FREE whitepaper on "Security Policy Automation for Web
Applications":http://www.securityfocus.com/Kavado-focus-ms
------------------------------------------------------------------------
---

[ reply ]