Merit Network
Can't find what you're looking for? Search the Mail Archives.
  About Merit   Services   Network   Resources & Support   Network Research   News   Events   Home

Discussion Communities: Merit Network Email List Archives

North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: tech support being flooded due to IE 0day

  • From: Paul Vixie
  • Date: Fri Sep 22 11:26:01 2006

sean@donelan.com (Sean Donelan) writes:

> For assistance with Microsoft security issues in the US, call (866) PC-SAFETY

according to http://www.eweek.com/article2/0,1895,2019162,00.asp, microsoft has
not released a patch for the VML thing, so calling (866) PC-SAFETY isn't going
to be a universal fix (and who will $user call after that, we wonder?)

according to http://www.websense.com/securitylabs/alerts/alert.php?AlertID=628,
there is now malware-in-the-field that exploits the VML thing.  and according
to http://www.auscert.org.au/render.html?it=6771, there's already phishing.

last but not least, according to http://isotf.org/zert/ there is a non-MSFT
patch for the VML thing.  i don't expect ISP's to recommend its use, due to
liability reasons, but mentioning it or even proactively notifying about it
might be a way to get people off the phone (or keep them from calling in).

(i'll remove the ISC training ad from my .signature for this post, since i've
gone way over my NANOG quota here -- three messages in 24 hours, oops.)
--
Paul Vixie




Discussion Communities


About Merit | Services | Network | Resources & Support | Network Research
News | Events | Contact | Site Map | Merit Network Home


Merit Network, Inc.