Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
Fear, Uncertainty and Doubt, Inc.
Tim Mullen, 2001-12-31

Everyone from the FBI to the L.A. Times has something scary to say about the new XP vulnerability. Here's why they all have it wrong.

Comments Mode:
Fear, Uncertainty and Doubt, Inc. 2001-12-31
Anonymous (1 replies)
Fear, Uncertainty and Doubt, Inc. 2002-01-03
Patrik Birgersson (3 replies)
Autoupdate in XP 2002-01-04
jpostel
Fear, Uncertainty and Doubt, Inc. 2002-01-07
Anonymous
Fear, Uncertainty and Doubt, Inc. 2002-01-07
Anonymous
Fear, Uncertainty and Doubt, Inc. 2001-12-31
ALI ABOLFATHI
RE: Fear, Uncertainty and Doubt, Inc. 2001-12-31
J Horner <jjhorner@bellsouth.net> (2 replies)
RE: Fear, Uncertainty and Doubt, Inc. 2001-12-31
Anonymous
RE: Fear, Uncertainty and Doubt, Inc. 2001-12-31
Anonymous (1 replies)
RE: Fear, Uncertainty and Doubt, Inc. 2002-01-03
Anonymous (1 replies)
RE: Fear, Uncertainty and Doubt, Inc. 2002-01-05
Anonymous
Fear, Uncertainty and Doubt, Inc. 2001-12-31
Anonymous (2 replies)
Fear, Uncertainty and Doubt, Inc. 2001-12-31
Anonymous (1 replies)
Fear, Uncertainty and Doubt, Inc. 2002-01-05
Anonymous
Fear, Uncertainty and Doubt, Inc. 2002-01-02
Anonymous
Fear, Uncertainty and Doubt, Inc. 2001-12-31
Anonymous
No worm? Tim, lay off the meds 2001-12-31
Anonymous (9 replies)
No worm? Tim, lay off the meds 2001-12-31
Anonymous
No worm? Tim, lay off the meds 2001-12-31
Anonymous
No worm? Tim, lay off the meds 2002-01-01
Anonymous
A lesson in comprehension... 2002-01-02
Anonymous (1 replies)
A lesson in... Comprehend this: MS has 36+Billion in Liquidity (4x next on list) 2002-01-06
gained by monopoly + inferior product = superior pricing (does this compute?) (1 replies)
A lesson in... Comprehend this: MS has 36+Billion in Liquidity (4x next on list) 2002-01-16
Anonymous
No worm? Tim, lay off the meds 2002-01-02
Anonymous
No worm? Tim, lay off the meds, or maybe you should take more ... 2002-01-02
Anonymous
No worm? Tim, lay off the meds 2002-01-02
Anonymous
Anon posting, was => No worm? Tim, lay off the meds 2002-01-03
keydet89@yahoo.com (1 replies)
Anon posting, was => No worm? Tim, lay off the meds 2002-01-04
Anonymous
A great article, but ... 2002-01-13
Der HexXer (@gmx.net)
In your bias opinion. 2002-01-01
Carnivore Knows
Actually, it's 3 vulnerabilities associated with the hole 2002-01-01
Anonymous
Fear, Uncertainty and Doubt, Inc. 2002-01-01
Mike Bunyard
Fear, Uncertainty and Doubt, Inc. 2002-01-01
Anonymous
Fear, Uncertainty and Doubt, Inc. 2002-01-02
Nai Rolf
Exploit out it appears 2002-01-02
Anonymous
Fear, Uncertainty and Doubt, Inc. 2002-01-02
Anonymous
Fear, Uncertainty and Doubt, Inc. 2002-01-02
Anonymous
Fear, Uncertainty and Doubt, Inc. 2002-01-02
Anonymous
Huh? 2002-01-03
guest@netpixies.net
Interesting article 2002-01-03
keydet89@yahoo.com
I know this is not the place, but 2002-01-03
Demostenes
Fear, Uncertainty and Doubt, Inc. 2002-01-03
Nighthawk
Fear, Uncertainty and Doubt, Inc. 2002-01-04
Anonymous
Fear, Uncertainty and Doubt, Inc. 2002-01-04
Anonymous (2 replies)
Fear, Uncertainty and Doubt, Inc. 2002-01-04
Anonymous
Fear, Uncertainty and Doubt, Inc. 2002-01-04
Anonymous
Fear, Uncertainty and Doubt, Inc. 2002-01-04
MJ Loy
Reduced to perpetual apologist 2002-01-04
Paul Lembo
UPnP, an old vulnerability 2002-01-04
Alberto Cozer
I do agree with Tim's article. People got scared with "SYSTEM COMPRIMISE", "root level" and other stuff written down in an advisorie. But, in fact, this vulnerability won't cause too much problem.

I don't really belive that a massive worm will be released for this vulnerability. First of all, this vulnerability has born old, with Windows Windows 98 and ME being listed in the affected systems row.

As far as I can see everybody had time to discover this bug and build up (or, at least, figure out) an exploit, and I don't know the existance of any exploit yet (even "in the wild").

The only reason to justify the panic created with this vulnerability would be "SYSTEM COMPROMISE" and remote "root level" access in the hand of scriptie kiddies. And, in accordance with the last paragraph, scriptie kidddies had enough time to find out an exploit and they've failed. Now Microsoft released the patches and whether someone release a patch this patch will be probably less effective.





[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/50/9677#9677
Here you go Tim, the exploit is out ! 2002-01-04
Chad Cyrisse (1 replies)
Exploit for another vuln! 2002-01-15
Der HexXer (1 replies)
Exploit for another vuln! 2002-01-17
JHendo
How about Stupidity, Suckers, and Loathing in Cyberspace? 2002-01-05
dave.williams@gte.net
Give me a break 2002-01-08
Burleyman (1 replies)
Give me a break 2002-01-08
aSteve (1 replies)
Give me a break 2002-01-09
Burleyman
Fear, Uncertainty and Doubt, Inc. 2002-01-11
Anonymous
I love you 2002-01-16
bill.gates@microsoft.com
Does anyone take Tim seriously anymore? 2002-01-17
Anonymous (3 replies)
Does anyone take Tim seriously anymore? 2002-01-19
Anonymous
Does anyone take Tim seriously anymore? 2002-01-19
Anonymous
Does anyone take Tim seriously anymore? 2002-01-20
Anonymous
The bottom line... 2002-01-19
Carnivore knows (1 replies)
Re: The bottom line... 2006-02-24
Anonymous







 

Privacy Statement
Copyright 2009, SecurityFocus