Re: Patch up your security, folks, before the 15th...

drak0nian_at_yahoo.com (Paul Drake) wrote in message news:<1ac7c7b3.0308120931.2a0a903c_at_posting.google.com>...
> "Noons" <wizofoz2k_at_yahoo.com.au> wrote in message news:<3f38f318$1$10355$afc38c87_at_news.optusnet.com.au>...
> > Or lock up the gates at the firewall.
> > Here comnes another one...
> >
> > http://whirlpool.net.au/article.cfm/1175
>
> bad news: virus/worms tend to get around firewalls.
> there's these horrid things called mail servers ... and the worst
> threat of all:
>
> email client users.
> (best off to disable all of those)
>
> http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.html
> http://www.cert.org/advisories/CA-2003-20.html
> http://microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/MS03-026.asp
>
> Its going to be a long night.
>
> Pd

After further reading, I was wrong about this one - as it has no virus component to it, its just a worm. So a firewall should be sufficient to block this (as well as blocking such ports over any vpn connections).

In case you're being security-minded and decided to stop the service "Protected Storage", don't. The service "Task Scheduler" depends upon this service, and it will hang if it is not started.

other than that - no issues with applying SP4 on W2K Server.

It takes about 35 minutes to apply on decent hardware, after doing the usual stuff like exporting the registry to the filesytem (which its a good idea to compress and apply a password during the compress), running a system info report to list drivers, scheduled tasks, etc. and getting these off of the machine.

After applying SP4, you'll still need to run the Windows Update agent to get the 2 buffer overflow patches, which will require another reboot. Better off to set your oracle services to manual prior to applying SP4, and then set them back to automatic after you're done patching.

Pd Received on Wed Aug 13 2003 - 09:56:30 CDT