Re: DCOM Hotfix breaks our software

[alex mole <alex.mole () realtimeworlds com>]

Unfortunately, the software needs DCOM, so that;s not really an option...


Christophor Rick wrote:
> Alex,
>
>  There was a workaround before the fix came out. On the Windows 2000 and XP
> machines you can run dcomcnfg and under Component Services --> Computer -->
> My computer right click to properties. Under the default properties tab you
> can uncheck "Enable Distributed COM on this computeer" that should close the
> vulnerability for the time being. It basically refuses connection on port
> 135 from what I understand. When you then run the 823980 scan utility it
> should show up as refused connection or unable to connect.
>
> Chris
>
> ---
> Christophor Rick
> Lapham Hall Room 240
> UW-Milwaukee
> Sr. Network Services
>
>
> ----- Original Message ----- 
> From: "alex.mole@realtimeworlds" <alex.mole () realtimeworlds com>
> To: <security-basics () securityfocus com>
> Sent: Tuesday, August 19, 2003 4:40 AM
> Subject: DCOM Hotfix breaks our software
>
>
>
> > Hi
> >
> > So, having diligently patched our PCs with hotfix 823980, it turns out
>
> that
>
> > it breaks a piece of software that is critical to our work. Removing the
> > hotfix fixes this software. It seems that the two are incompatible...
> >
> > We're speaking to our software vendor to see if anything can be done about
> > it, but:
> >
> > 1) Has anyone else had issues with this fix? I've not noticed any
> > mentioned...
> > 2) What would you suggest we do in the interim [until our software can be
> >   fixed]? We are behind a firewall, but there are several users who bring
> >   laptops into the office and use them on the network.
> >
> >
> > Thanks,
> >
> > Alex
> >
> >
> >
> > ________________________________________________________________________
> > This email has been scanned for all viruses by the MessageLabs Email
> > Security System. For more information on a proactive email security
> > service working around the clock, around the globe, visit
> > http://www.messagelabs.com
> > ________________________________________________________________________
> >
> > --------------------------------------------------------------------------
>
> -
>
> > --------------------------------------------------------------------------
>
> --
>
>
> ---
> Outgoing mail is certified Virus Free.
> Checked by AVG anti-virus system (http://www.grisoft.com).
> Version: 6.0.507 / Virus Database: 304 - Release Date: 8/4/2003
>
>
> ________________________________________________________________________
> This email has been scanned for all viruses by the MessageLabs Email
> Security System. For more information on a proactive email security
> service working around the clock, around the globe, visit
> http://www.messagelabs.com
> ________________________________________________________________________



________________________________________________________________________
This email has been scanned for all viruses by the MessageLabs Email
Security System. For more information on a proactive email security
service working around the clock, around the globe, visit
http://www.messagelabs.com
________________________________________________________________________

---------------------------------------------------------------------------
----------------------------------------------------------------------------