In association with heise online

28 April 2010, 12:08

Revised patch for Windows 2000 Server claims to finally plug hole

  • Twitter
  • Facebook
  • submit to slashdot
  • StumbleUpon
  • submit to reddit

Microsoft Logo Microsoft has released a new version of its patch MS10-025, which aims to finally fix the vulnerability in Windows Media Services under Windows 2000 Server. Last week, the company was forced to withdraw the patch when it turned out that it failed to fix a remotely exploitable buffer overflow.

However, there is no easy way for users to test that the patch actually does what it says on the tin – illustrating the issues examined in the recently reignited discussion on full disclosure. Adherents of full disclosure generally publish demo exploits alongside information on vulnerabilities in order to demonstrate the problem in question. Such exploits allow users to determine whether a vendor patch actually fixes the vulnerability and whether workarounds work as promised.

See also:

(crve)

Print Version | Send by email | Permalink: http://h-online.com/-988754
 


  • July's Community Calendar





The H Open

The H Security

The H Developer

The H Internet Toolkit