Pope Netapi I

Encyclical

"Servitium Servorum". The Windows Server service accepted, from anyone and even anonymously, an RPC message able to run code, and the Mocbot and IRCbot families wasted no time. MS06-040 is the direct ancestor of MS08-067 and Conficker: same service, same family of path-canonicalisation mistakes. The year taught that a fixed bug often leaves siblings behind, and that exposed network code deserves stricter review than the rest.

Saint page: Saint MS06-040

Cardinals

IE VML vgx.dll zero-day (MS06-055) · Bleichenbacher RSA e=3 signature forgery