RE: [ISSForum] MSRPC - events

["Chan, Jack" <jack.chan@xxxxxxxxxxxxx>]

Pretty sure I read in the release notes that it's related to Blaster or the recent MS03-039.

A XPU a month ago provided an update of this signature.

Jack



-----Original Message-----
From: Witkowski,Tytus,WARSAW,GLOBE IT-CC
[mailto:Tytus.Witkowski@xxxxxxxxxxxxx]
Sent: Thursday, 9 October 2003 9:15 p.m.
To: issforum@xxxxxxx
Subject: [ISSForum] MSRPC - events


Hi All
On our one network sensor (7.0) inside windows network I receive a lot of
events with description MSRPC_RemoteActivate_Bo. Is it connected to
MSOutlook client which start communication with Exchange server (port 135)
or is it some kind of MSRPC vulnerability (unpatched PC, infected PC)???

br
Tytus Witkowski
_______________________________________________
ISSForum mailing list
ISSForum@xxxxxxx

TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to https://atla-mm1.iss.net/mailman/listinfo

_______________________________________________
ISSForum mailing list
ISSForum@xxxxxxx

TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to https://atla-mm1.iss.net/mailman/listinfo