Bugtraq mailing list archives

The easy way to turn off Universal Plug-and-Play in Windows


From: "Richard M. Smith" <rms () computerbytesman com>
Date: Fri, 28 Dec 2001 11:47:20 -0500

Hi,

Steve Gibson of Gibson Research has just released an easy-to-use utility
for turning off Universal Plug-and-Play (UPNP) in Windows XP/ME/98.  The
utility, "UnPlug 'n Pray", is available for no charge at this download
page:

   http://grc.com/UnPnP/UnPnP.htm

This utility is a great tool for folks who would rather turn off UPNP
altogether on their Windows systems instead of having to keep up with a
steady stream of UPNP security patches from Microsoft.  

This tool also confirmed that the FBI is currently giving out incorrect
instructions on how to protect a Windows XP from the UPNP security
holes.  I followed the FBI instructions, but Steve's utility was still
needed to get the right XP services turned off.  The FBI/NIPC Web page
that needs to get fixed is located at:

   http://www.nipc.gov/warnings/advisories/2001/01-030-2.htm

Richard M. Smith
http://www.computerbytesman.com


Current thread: