Microsoft Windows XP

[R_J]

Remote Desktop Services Remote Code Execution Vulnerability: May 14, 2019
If you still have a windows xp machine you may wont to install this update: KB4500331
Available from windows update catalog site

https://support.microsoft.com/en-us/...-cve-2019-0708

I found that without this update installed I could no longer check for any updates, (IE hardware updates), once it was installed windows update worked again.
This is just for information and there is no need to reply

[petehall347]

Re: MIcrosoft Windows XP

hope the banks and the supermarkets see it .

[diif]

Re: MIcrosoft Windows XP

hope the banks and the supermarkets see it .

I think they have a few people left, they've not all been offshored just yet.
Windows 7, Vista and Server 2008 R2 are also vulnerable.
It requires no user interaction so it could be like 2017 and WannaCry all over again, but worse.

[stj]

Re: MIcrosoft Windows XP

lol

[ChaosLegionnaire]

Re: Microsoft Windows XP

if u read the kb article describing the exploit, the mitigation measure from m$ says to just disable the remote desktop service if u dont need or use it so the exploit doesnt work. so for the average joe, i'd guess its a non-issue.

but for enterprise, corporate clients who manage their systems remotely, they'd have to block the incoming tcp port used by remote desktop at the enterprise perimeter firewall if the company doesnt use remote desktop via the internet and enable network level authentication to thwart the exploit.

[Topcat]

Re: Microsoft Windows XP

if its an issue for win7 and s2k8 r2, there's no patches for it.... I only have one XP system left in my fleet, and its for running older software. Its access to the outside world is limited.

[brethin]

Re: Microsoft Windows XP

Its a patch for commerical machines not for average joe blow home user..��

[Topcat]

Re: Microsoft Windows XP

Its a patch for commerical machines not for average joe blow home user..��

S2K8 R1 or R2 isn't intended for the joe blow home user.....yet no patch...

[brethin]

Re: Microsoft Windows XP

exactlly home users dont tend to run server operating systems and your not a VLF client or someone that would get a update just running it on a home machine. If you had oh say 1000 systems running it you be notified and given a link for any updates you need.

[brethin]

Re: Microsoft Windows XP

Hum lets see, this company paid a million dollars to us for software, lets keep them informed. Hum this guy bought 1 package (maybe he bought it) he can get updates on the update server when and if we have time to put them there. See what Im saying yet?

[brethin]

Re: Microsoft Windows XP

The patches will leak down eventually, just dont expect to be informed asap on release unless your a serious volume customer.

[Topcat]

Re: Microsoft Windows XP

exactlly home users dont tend to run server operating systems and your not a VLF client or someone that would get a update just running it on a home machine. If you had oh say 1000 systems running it you be notified and given a link for any updates you need.

I think you missed the point..... *IF* this flaw indeed affected S2K8 and/or win7, I'm sure there would be a patch for it if something like XP & S2K3 (years past EoL) got a patch for it....so the real question was whether this is indeed really an issue for W7.

[R_J]

Re: Microsoft Windows XP

I also spoted this: rumored shutdown of 2000/xp update servers after July 19 2019
https://www.theinquirer.net/inquirer...all-over-again

[Topcat]

Re: Microsoft Windows XP

I also spoted this: rumored shutdown of 2000/xp update servers after July 19 2019
https://www.theinquirer.net/inquirer...all-over-again

I didn't think updates have been available for win2k for years.....

[R_J]

Re: Microsoft Windows XP

You are likely correct, I was reading this site: https://msfn.org/board/topic/178377-...-of-july-2019/ and they mentioned 2000, and I have'nt installed 2000 for years also.