Hey Mullen, won't patch management fix this problem...now we have public disclosure of the myraid of problems that MS has attempted to shield the end-user from only to find out that it is the product itself.

When will MS ship an operational server product that doesn't require a GUI console, ActiveX, an HTML/XML rendering engine, DirectX, or any of a number of problematic features?

It is difficult enough to secure application environments, it is even more difficult when the OS provides more opportunities for such events to occur.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/251/27253#27253