RE: New M$ vulnerability patch for Windows

["Steve Richter" <srichter@xxxxxxxxxxxxx>]

-----Original Message-----
From: midrange-l-bounces@xxxxxxxxxxxx
[mailto:midrange-l-bounces@xxxxxxxxxxxx]On Behalf Of Adam Lang
Sent: Friday, September 12, 2003 9:42 AM
To: Midrange Systems Technical Discussion
Subject: Re: New M$ vulnerability patch for Windows

>Here is a good example.  the Windows Messenger Service.    People can
>interface it over the internet and display pop ups on your computer.  It
>isn't a "bug" so there is no patch to prevent it.  You actually need to
>either uninstall windows messenger or have a firewall to block the ports.

other than a buffer overrun flaw in Windows Messenger Service, why would a
user need to block access to it?  If the protocol server, even FTP, does
what it is designed to do, why does access to it have to be completely
blocked?

I just question if we are all overreacting because we are not aware of the
details of how things work.

-Steve