Exploits Available For Ms04-11 Vulns **patch Now**

FYI…

Information about code that attempts to exploit PCT in SSL
- http://www.microsoft.com/security/incident/pctdisable.asp
April 22, 2004
"Microsoft is aware of reports of code available on the Internet that seeks to exploit certain issues addressed in our April 13 security updates. This so-called exploit code affects the Private Communications Transport (PCT) protocol, which is part of the Microsoft Secure Sockets Layer (SSL) library. Microsoft considers these reports credible and serious and urges all customers to immediately install Security Update MS4-011 as well as the other critical updates provided on April 13…"

FYI…

MS rethinks security patch test scheme
- http://www.theregister.co.uk/2004/04/28/ms_testing_u-turn1/
28th April 2004
"…Microsoft is having second thoughts about the idea of testing security patches with select users prior to their release. At last year's Infosecurity Europe conference, the software giant said it was considering introducing an external testing programme to improve the quality of its security patches…Twelve months on, Microsoft's thinking is that external testing of security patches might create more problems than it solves…one of four security patches released by Microsoft this month (MS04-011) has caused trouble for several Register readers, reflected more widely in postings to Internet news groups. Some Windows 2000 users have reported troubles in booting PCs, using anti-virus packages and problems with their sound cards, after applying the fix…Not applying the patch creates DDoS and system compromise risks but applying the patch can create system instability problems. So users are damned if they do and damned if they don't…"

…After you install the security update that is described in Microsoft Security Bulletin MS04-011
- >>> http://support.microsoft.com/default.aspx?…kb;EN-US;841382
"…After you install the security update that is described in Microsoft Security Bulletin MS04-011, you may experience any one of the following symptoms:
Your computer appears to stop responding at startup.
You cannot log on to Windows.
Your CPU usage for the System process approaches 100 percent.
…Microsoft is researching this problem and will post more information in this article when the information becomes available…
The information in this article applies to:
Microsoft Windows 2000 Server
Microsoft Windows 2000 Professional
Microsoft Windows 2000 Advanced Server
Last Reviewed: 4/28/2004 (2.0) …"

(Gee thanks, M$…glad to hear you're still "researching this problem". Arrgghh!!)