So, a few hours ago, a post was made to Bugtraq about a new version of the Windows RPC bug that exploits machines NOT patched with the MS03-039 patch.
Here is the Bugtraq post:
http://www.securityfocus.com/archive/1/342604
I have read a couple subsequent post from the people who posted this originally, and they are having a nightmare dealing with this! Their anti-virus software is NOT picking it up, since the virus is new. Their Snort sensors are full of infected machines flooding their network with this.
This virus they have is using the RPC2 exploit version, not the original version that Blaster and Welchia exploited. This is version two, that Microsoft patched with MS03-039. They had machines that didn’t have this patch.
So, this might get interesting tonight and into Tuesday. I hope everyone has this patch on their machines!
