BugTraq
RE: Windows Server 2003 Security Guide available Apr 29 2003 07:16AM
paul (xml mailandnews com)
Jason Coombs wrote:

> Anyone interested in downloading these guides must be aware that they
> are distributed by Microsoft in the form of self-extracting .exe's
> bearing digital signatures embedded in the Portable Executable file's
> header section.

Obviously use self-extracting .exes is a ludicrous idea from a security
point of view, however, at least you don't have to run them:

$ wget
"http://download.microsoft.com/download/3/7/f/37fcf915-c19e-4c09-8b05-15
73ea58b164/W2KHG 1.1.exe"
$ unzip W2KHG%201.1.exe
Archive: /arch/W2KHG%201.1.exe
inflating: Windows 2000 Hardening Guide.doc
inflating: Templates/installSceregvl.bat
...

Paul

[ reply ]


 

Privacy Statement
Copyright 2010, SecurityFocus