Onderwerp: Did MS pull an Ilfak? (MS patch bindiff results)

Ren and Stimpy do it again. You can find their post here:
http://blogs.securiteam.com/index.php/archives/184

Gadi.

Question: Is Ilfak's patch still needed for Windows 95, 98, SE and ME
systems, for which Microsoft is refusing to provide a patch? To what
extent are these systems vulnerable if not patched?

--Brett Glass

Brett Glass wrote:

>Question: Is Ilfak's patch still needed for Windows 95, 98, SE and ME
>systems, for which Microsoft is refusing to provide a patch? To what
>extent are these systems vulnerable if not patched?
>
>--Brett Glass
>
>
>
>
Actually, Ilfak never tested his patch on a Win 9x machine. Steve
Gibson, however, plans to write a
patch for 95, 98, and ME if Microsoft doesn't.

JP

Joe Polk wrote:

> Actually, Ilfak never tested his patch on a Win 9x machine. Steve
> Gibson, however, plans to write a patch for 95, 98, and ME if Microsoft doesn't.

The patch Ilfak wrote can't work on a Windows 9x machine since it relies
on technology that did not exist in Windows 9x.

The idea that Gibson is going to "write" a patch for Windows 9x and save
the mankind sounds pretty ridiculous. Even if there will be a patch for
Windows 9x written by third parties *and* GRC happens to be one of them
(or at least claims being one of them, probably the best and/or the only
one), I am pretty confident that Gibsons solution is to be considered
the least trustworthy one. He never published sophisticated software
(and still there is no claim that he really wrote the software he
publishes) and he apparently has absolutely no clue about the security
implications he is talking about. GRC looks like a huge marketing bubble
without *any* fundamental security researcher knowledge behind it.

For more information on the status of the WMF vulnerability in Windows
9x i'd like to refer to an article by Swa Frantzen at SANS ISC:
http://isc.sans.org/diary.php?storyid=1024

For more non-marketing information on GRC please refer to:
http://www.grcsucks.com/

Regards,

Denis Jedig
syneticon networks GbR

The only attack vector we know about for Win9x, ME platforms is through
printing. I'm afraid that "fixing" that would break some functionality.

Greg
------------
This post is provided as is and confers no rights or whatever.

-----Original Message-----
From: Joe Polk [mailto:listuser.jav@gmail.com]=20
Sent: Tuesday, January 10, 2006 6:21 AM
To: Brett Glass
Cc: bugtraq@securityfocus.com
Subject: Re: Did MS pull an Ilfak? (MS patch bindiff results)

Brett Glass wrote:

>Question: Is Ilfak's patch still needed for Windows 95, 98, SE and ME
>systems, for which Microsoft is refusing to provide a patch? To what
>extent are these systems vulnerable if not patched?
>
>--Brett Glass
>
>
> =20
>
Actually, Ilfak never tested his patch on a Win 9x machine. Steve=20
Gibson, however, plans to write a
patch for 95, 98, and ME if Microsoft doesn't.

JP