Dave - Dave.net.nz wrote:
> PseUDO wrote:
>
>> XP Service pack 2 will start coming in today via the automatic updates
>> feature of xp.
>> So if you have windows xp and automatic updates turned on then you may
>> see an increase in activity as the download sarts.
>> Around 80MB's for XP home , 100MB's for XP pro, and an extra 20MB's
>> for both if service pack 1 isn't installed.
>
>
> just as a trial I grabbed a windows XP(pro) machine from work last
> night, did all updates except SP2, and then ran the network install.
> It only grabbed 36MB of downloads, so thats not too painful... I did it
> via dialup,and it only took ~90 mins(I wasnt timing it, and 90 mins is
> an over estimate).
>
And SP2 already requires patching.
http://www.theregister.co.uk/2004/08...curity_crater/
Windows XP SP2 features security crater - report
By Andrew Orlowski
Published Wednesday 25th August 2004 18:03 GMT
Windows XP Service Pack 2 has a flaw that gives users a false sense of
security - quite literally. One report describes the security hole as a
'crater'. The vulnerability lies in the web systems management interface
(WBEM), which allows downloadable code to spoof firewall status information.
It's a convoluted exploit, but in theory, a rogue application could wait
until the firewall is down and then generate false system information
indicating that the firewall is in fact up and working. That's because
the WMI database - Microsoft's implementation of WBEM - is set to
read/write, not read-only, reports eWeek. The magazine's labs used a
simple script to generate false firewall status information.
No known malware uses this technique, but a mysterious communique signed
by malware authors in 144 countries vowed not to use the latest exploit
regarding it as "unethical" and "unnecessarily disruptive".
Of course we made that last part up. More usefully, if system
administrators have a way of locking down the WMI database, we'll pass
it right along to you. On Friday, the first Internet Explorer
vulnerability of the SP2 era was discovered. ®
Similar Threads
