Jan 13, 2009 - Important Windows Update Patch - Apply ASAP

[mouser]

This is an update people should apply right away -- I've applied it without incident.

This security update resolves two privately reported vulnerabilities and one publicly disclosed vulnerability in Microsoft Server Message Block (SMB) Protocol. The vulnerabilities could allow remote code execution on affected systems. An attacker who successfully exploited these vulnerabilities could install programs; view, change, or delete data; or create new accounts with full user rights. Firewall best practices and standard default firewall configurations can help protect networks from attacks that originate outside the enterprise perimeter. Best practices recommend that systems that are connected to the Internet have a minimal number of ports exposed.

This security update is rated Critical for all supported editions of Microsoft Windows 2000, Windows XP, and Windows Server 2003, and Moderate for all supported editions of Windows Vista, and Windows Server 2008.

http://www.microsoft.com/technet/security/Bulletin/MS09-001.mspx

from http://www.ghacks.net/ (actually dc member ewmoa told me about this yesterday but i thought someone else would have posted about it by now!)

[gexecuter]

WOW all this time and still windows XP isn't fully secured? it's crap like this that makes me wanna switch to linux...unfortunately i can't live without my games. Anyway i will download the update right away, thanks mouser!

[ewemoa]

I have applied it on a few machines (virtual included) without problems too -- thanks mouser for braving it first

[f0dder]

Keep in mind that if you're not being retarded about your internet security (meaning: keep your LAN NAT'ed, do not use DMZ, and keep Windows Firewall enabled) you shouldn't ever be hit by this (and similar) problems.

Doesn't mean it's not a good idea to patch, though.

[J-Mac]

Thanks mouser.

And now if I could just get a little excited about the Malicious Software Removal Tool that finds its way onto my computer each month via MS Update....  

It scans for but a small fraction of malware that dedicated Anti-Spyware applications do and it doesn't tell you a darn thing about what it is finding - or not.

Does anyone know who or what actually develops this tool?

Jim