[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [SAGE] What are you all doing about the WMF exploit?



On Wednesday 04 January 2006 11:01, Richard Johnson wrote:
> At 10:18 +0100 on 2006-01-03, Trey Darley wrote:
> > Have any of you deployed Guilfanov's patch? What do you think?
>
> Testing hasn't revealed any side effects.  The MSI version appears to
> uninstall properly, as well.
>
> We've mandated the unofficial patch in the face of 1) ~6 hosts per day
> on a /16 falling to one or more of the hundreds of exploit versions out
> there, 2) anti-virus firms not keeping up with the morph rate, and 3)
> Microsoft not planning on releasing their official patch in a more
> timely manner.

Richard, I really appreciate your response. 
Did you mean 6 out of 16 hosts? I did not understand the /16.

Also, can you elaborate on context, e.g., users  of the compromised hosts, 
e.g., 
ISP customers?
Engineers?
Office workers?

TIA