Pope Blaster I

Encyclical

"Murus Ignis Ex Officio". The RPC DCOM hole, found by The Last Stage of Delirium, touched practically every Windows NT, 2000, XP and 2003 box, and within weeks became Blaster and then Welchia, which claimed to cure it. That year gave us the monthly Patch Tuesday, and the next year XP SP2 shipped with the firewall on by default. Lesson: security you have to switch on by hand usually stays off.

Saint page: Saint RPC DCOM (Blaster)

Cardinals

WebDAV / ntdll.dll overflow in IIS 5 (MS03-007), exploited as a zero-day · Sendmail crackaddr header overflow