Threat Level: green Handler on Duty: Rob VandenBrink

SANS ISC: MS06-015 will not provide patch for windows 98 and ME. - Internet Security | DShield SANS ISC InfoSec Forums


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
MS06-015 will not provide patch for windows 98 and ME.
    Microsoft announced that they will not provide a patch for Windows 98 and ME for MS06-015 "Vulnerability in Windows Explorer Could Allow Remote Code Execution (908531)".  The choice appears to be related to the amount of effort needed to patch the problem and the fact that those Operating systems reach the end of their lifecycle on June 11th.
    The suggested workaround is blocking incoming traffic to TCP port 139 on any unpatched systems.  This should at best be a temporary step; unsupported operating systems are a greater liability than supported ones.
    Many thanks to everyone that sent us a pointer to this story.

    More details can be found at:
http://www.microsoft.com/technet/security/Bulletin/MS06-015.mspx
http://blogs.technet.com/msrc/archive/2006/06/09/434300.aspx

William

80 Posts

Sign Up for Free or Log In to start participating in the conversation!