MS03-039: A Buffer Overrun in RPCSS

MS03-039: A Buffer Overrun in RPCSS May Allow Code Execution
http://support.microsoft.com/?kbid=824146

Who should read this bulletin: Users running Microsoft ® Windows ®

Impact of vulnerability: Three new vulnerabilities, the most serious of which could enable an attacker to run arbitrary code on a user#%92s system.

Maximum Severity Rating: Critical

Recommendation: System administrators should apply the security patch immediately

End User Bulletin:
An end user version of this bulletin is available at:

http://www.microsoft.com/security/security_bulletins/ms03-039.asp.

Affected Software:

Microsoft Windows NT Workstation 4.0
Microsoft Windows NT Server® 4.0
Microsoft Windows NT Server 4.0, Terminal Server Edition
Microsoft Windows 2000
Microsoft Windows XP
Microsoft Windows Server 2003
Not Affected Software:
Microsoft Windows Millennium Edition


Gaurav
Moderator
Man thrives, oddly enough, only in the presence of a challenging environment- L. Ron Hubbard

Does anyone else find these constant vulnerabilities to be an enormous pain in the rear end? we've just had to patch all our servers for MS03-026. Now they're telling us we've got to do it ALL over again? It's enough to make you have a long hard look at alternative technologies.

Tom Pullen
DBA, Oxfam GB