News
Microsoft Almost Done with SNMP Patches
- By Scott Bekker
- April 29, 2002
In the two-and-a-half months since a significant vulnerability was discovered in the industry-standard SNMP protocol, Microsoft has been steadily releasing patches for affected versions of Windows. With the release of patches for Windows 98 and Windows 98 SE, only Windows 95 still requires a patch.
A workaround has existed for all Windows platforms since shortly after the CERT/CC issued its warning about the SNMP problem. It was never a critical issue for Windows because the SNMP service is not installed or running by default in any version.
The Simple Network Management Protocol could be turned on in Windows 2000, Windows XP, Windows NT 4.0, Windows NT 4.0 Terminal Server Edition, Windows 98, Windows 98 SE and Windows 95.
Microsoft released patches since mid-February for Windows 2000 and Windows XP, then for Windows NT 4.0, then for Windows NT 4.0 Terminal Server Edition. The patch on Friday for Windows 98 and Windows 98 SE nearly brings the work to a close.
To find Microsoft's bulletin and patches, go to www.microsoft.com/technet/security/bulletin/ms02-006.asp.
About the Author
Scott Bekker is editor in chief of Redmond Channel Partner magazine.