OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
[Full-Disclosure] netdde during update

From: morning_wood (se_cur_ityhotmail.com)
Date: Tue Feb 08 2005 - 23:06:33 CST

while "netdde" is not started by default.
I did just notice "netdde" does run during
Windows update...

this would allow a window of opportunity
to exploit the service. a worm using the
netdde exploit could take advantage of
this before the user fully updates.

just noticing,

Donnie Werner
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html