Starlight
Dec 5 2003, 06:39 PM
I would like to know if there is a scanner which scan the fault:
Ms03-049 (workstation) Xp Sp0 and Sp1
Thx
boshcash
Dec 5 2003, 06:53 PM
i dont think there would be a scanner for the workstation exploit , scan port 135 and try everyone
FireAlwaysWorks
Dec 5 2003, 09:39 PM
| QUOTE (boshcash @ Dec 5 2003, 06:53 PM) |
| i dont think there would be a scanner for the workstation exploit , scan port 135 and try everyone |
Port 135 as well as all(almost) of the NetBios and rpc ports are locked tighter than the lock of a slutty farmers douther. Translation: you wont find much.
I sugest using ms03-043 and getting Paketto and serching for open UDP ports on udp 1025 or any random udp port between 1025-65535. A worm using ms03-043 is going to be nasty because that random port. See blaster only got stoped becase ISP's blocked the RPC ports. You can't block UDP 1025-65535 it would cause so many problems.
What can be done? Pray just pray that a "good" worm that patched the problem comes out. It won't stop the problem but it will lessen the dammange.
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please
click here.