Microsoft Fesses Up To 19 Vulnerabilities, MSBlast-Level Worm Likely

TechWeb ^ | February 08, 2005 | Gregg Keizer

[Mannaggia l'America]

Guys who know, would the big bad problem they were talking about be blocked by a firewall?

Yes, assuming those ports are blocked from the outside world.

Some ISP's (including Comcast, I think) block traffic on the Netbios ports such as 139 already, before it even reaches you.

At a minimum, anyone with a broadband connection should have a private IP address. This would stop this type of thing from even getting to your computer.

If using Windows 95/98/ME, click on Start/Run and type "winipcfg" and see what IP address is assigned to your network card. If using Windows XP, click Start/All Programs/Accessories/Communications/Network Connections and right-click on Local Area Connection and choose Status, then go to the Support tab.

I forget how to check for NT/2000 via the GUI, but opening a command prompt and typing "ipconfig" will show it to you on NT/2000/XP.

If your IP address starts with anything other than 192.168, 10, or 172.16 through 172.31, then you have a public IP address and could be vulnerable, not just to this thing, but potentially other things. If you do have a private address, it is less likely you are vulnerable.

[Richard Kimball]

Thanks, guys. It's tough, sometimes, to figure out how severe some of these hacks are. The virus and tech writers make them sound horrible, the Mac/Win/Linux your system sucks crowd gets into it, and you don't really know what to think.

[Mannaggia l'America]

If your IP address starts with anything other than 192.168, 10, or 172.16 through 172.31, then you have a public IP address and could be vulnerable, not just to this thing, but potentially other things. If you do have a private address, it is less likely you are vulnerable.

Let me add to my previous post, quoted above.

If you do have a public IP address, you should quickly figure out how to not have one (i.e. get a firewall), unless you have a good reason for having a public address.

[Apple Pan Dowdy]

It is possible to use IE and Linux at the same time on the same computer."

Exactly... and thats what I do. I have all of the browsers I need to test on installed, so I can use whichever I need. But I use the Mozilla Firefox whenever possible.

[clyde asbury]

It would be interesting to know the results of the probe.

[js1138]

If you go to www.symantec.com they have a frees ecurity check. All the relevant ports are stealth, which means they don't respond at all.