Re: New M$ vulnerability patch for Windows

[Douglas Handy <dhandy1@xxxxxxxxxxxxx>]

Steve,

>other than a buffer overrun flaw in Windows Messenger Service, why would a
>user need to block access to it?  If the protocol server, even FTP, does
>what it is designed to do, why does access to it have to be completely
>blocked?

This is not a buffer overrun flaw.  It is working as designed.  But spammers
have realized that when the port is open and service not disabled, they can
perform the equivalent of text popup ads.  Kind of like getting a break message
whenever a spammer feels like it.

They are VERY annoying.  There is rarely a legitimate reason for one of these
messages to be accepted from outside  the firewall.  They can be useful for sys
admins for sending intranet messages, much like SNDBRKMSG on the iSeries.

But like SNDBRKMSG, it should be the exception not the rule, and not having them
popup every few minutes...

Doug