IP DOS attacks -- Win95 patches available

Paul Leach (paulle@MICROSOFT.COM)
Fri, 21 Nov 1997 12:52:23 -0800

There are patches available for the "land" attack for Windows 95. They
include fixes for all the previous IP DOS attacks we have seen, including
jolt, ssping, exploit, synk4, teardrop, winnuke (in conjunction with the
VTCPUPD patch).

There are two patches, one if you have Winsock 1.1, and one if you have
Winsock2. (If you have a file called ws2_32.dll in \windows\system, then
you've got Wisock2)

> For Winsock 1.1:
> http://support.microsoft.com/download/support/mslfiles/Vipup11.exe
>
> For Winsock 2:
> http://support.microsoft.com/download/support/mslfiles/Vipup20.exe
>
You also need to install the VTCPUPD patch:
http://support.microsoft.com/download/support/mslfiles/Vtcpupd.exe

Remember -- we can't test all configurations, etc., in this little time, so
don't apply to large numbers of machines blindly. I'd advise that you make a
backup copy of your current vip.386, vtcp.386 and vnbt.386 before applying
-- if things go badly, just put them back. (They're in \windows\system.)

Paul