Microsoft Windows DHCP Vulnerability

Microsoft Windows DHCP Client Service Remote Code Execution Vulnerability

Microsoft Windows DHCP Client service is prone to a remote code-execution
vulnerability because the service fails to properly bounds-check
user-supplied input before copying it to an insufficiently sized memory
buffer.

This vulnerability allows remote attackers to execute arbitrary machine code
with SYSTEM-level privileges on affected computers. This facilitates the
complete compromise of affected computers.

http://www.securityfocus.com/bid/18923/discuss

-- Imhotep

ITCowboy
Thu Aug 03 10:32:02 CDT 2006

Why is it you feel the need to come in here and post known items that relate
to no questions anyone has asked? Do you hate microsoft that much? I feel
that if you do you might think about staying out of these forums as this is a
place where many of us use to answer, ask, or find information important to
us.

I see your name in here again and again with no helpful information, just
anti-microsoft campaigning. If that is your intent, you should try wasting
your time at another site as there are many around for that purpose, and stop
wasting our time with your personal agenda/vendetta/war with Microsoft. You
are just a grain of sand on a very large beach and will be forgotten long
before you make a diffrence.
--
To invent, you need a good imagination and a pile of junk.
Thomas A. Edison (1847 - 1931)



"imhotep" wrote:

> Microsoft Windows DHCP Client Service Remote Code Execution Vulnerability
>
> Microsoft Windows DHCP Client service is prone to a remote code-execution
> vulnerability because the service fails to properly bounds-check
> user-supplied input before copying it to an insufficiently sized memory
> buffer.
>
> This vulnerability allows remote attackers to execute arbitrary machine code
> with SYSTEM-level privileges on affected computers. This facilitates the
> complete compromise of affected computers.
>
> http://www.securityfocus.com/bid/18923/discuss
>
> -- Imhotep
>

imhotep
Mon Aug 07 23:49:54 CDT 2006

IT_Cowboy wrote:

> Why is it you feel the need to come in here and post known items that
> relate to no questions anyone has asked?

This was security informational post. This is a security group. Information
is knowledge, why do you fight it so much.

> Do you hate microsoft that much?

I only hate people that do not keep their systems secure. Rather than
mocking them I try to post article to keep them up to date. Now, what do
you do?

> I feel that if you do you might think about staying out of these forums as
> this is a place where many of us use to answer, ask, or find information
> important to us.

BS. This is not a helkdesk for watered down discussions only. This is a
forum for technical people also. Try participating.

> I see your name in here again and again with no helpful information, just
> anti-microsoft campaigning.

I post security articles. If the amount of security warnings annoy you,
contact Microsoft. What really does annoy me are people that do not patch.
And worse than that, winning "cowboys" like you. Information is knowledge.
Don't complain about it.

> If that is your intent, you should try wasting
> your time at another site as there are many around for that purpose, and
> stop wasting our time with your personal agenda/vendetta/war with
> Microsoft. You are just a grain of sand on a very large beach and will be
> forgotten long before you make a diffrence.


Maybe you should stop being a weenie. My agenda is a simple one. Get people
to take security seriously. It affects us all; Windows users and non
Windows users alike. What is *your* agenda? Hide problems. Worry about an
image? Now, who really belongs here and who does not?

Later IT Cowgirl,
Imhotep