[Full-Disclosure] Re: Microsoft Security Update
Anthony Saffer
anthonysaffer at yahoo.com
Fri Sep 5 23:15:51 BST 2003
> It's not something you could directly own the box with, unlike RPC vuln
> that Blaster uses; it merely exposes some trivia, thus the "low" rating.
Yeah, but what if that "trivia" is your credit card information or your SSN
or some other important piece of data? I personally think this should have a
higher rating and IMHO think MS knows it too but is going to downplay it due
to it's severity.
Anthony
Full-Disclosure is hosted and sponsored by Secunia.