MS01-059
Hello all,i was reading some intresting tips in a web site and just found this :HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\UPnP Control Point and add "DownloadScope"key and put a value of 0 to 3. Here is the description of these values:0 - on the same subnet 1 - same subnet or at a private address 2 - same subnet or at a private address or within 4 hops 3 - anywhere Navigate to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SSDPSRV\Parameters and add key "TTL" and sets its value to max number of rounter hops allowed in the PnP device search on Internetthis is intended to prevent Denial of service against Upnp stuff,so in theory this has been already fixed/patched after windows XP ....base article: http://www.microsoft.com/technet/security/bulletin/MS01-059.mspxso havent checked in my registry yet,but does windows 7 apply those patches by design already or if i want to get a better scope i should add those keys and change values,i dont belive in that but just in case i might ask u guys!Regards,RR
September 17th, 2009 6:09am

Hello all, i was reading some intresting tips in a web site and just found this : HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\UPnP Control Point and add "DownloadScope"key and put a value of 0 to 3. Here is the description of these values: 0 - on the same subnet 1 - same subnet or at a private address 2 - same subnet or at a private address or within 4 hops 3 - anywhere Navigate to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SSDPSRV\Parameters and add key "TTL" and sets its value to max number of rounter hops allowed in the PnP device search on Internet this is intended to prevent Denial of service against Upnp stuff,so in theory this has been already fixed/patched after windows XP .... base article: http://www.microsoft.com/technet/security/bulletin/MS01-059.mspx so havent checked in my registry yet,but does windows 7 apply those patches by design already or if i want to get a better scope i should add those keys and change values,i dont belive in that but just in case i might ask u guys! Regards, RR Why do you assume that a Security Bulletin from 2001, intended for Win 9x systems and Windows XP, has any relation whatsoever with Windows 7 ? In short, the Security Bulletin you cite is completely irrelevant in regards to Windows 7. MowGreen MVP Data Center Management - Update Services Consumer Security
Free Windows Admin Tool Kit Click here and download it now
September 17th, 2009 8:43pm

Hi MowGreen,i never assumed that had any relation with windows 7,i was jut wondering/asked if that would apply to windows 7 as well ,which was IMO clearly specified in the text above!im just a curious guy as my nick in this forum describes well and i like asking ppl about OLD/outdated stuff if it applies to the current date,so now knowing that what i said is completely irrelevant i may not consider that appliable to my system then,thats all i needed to know,as i many times said IM not an expert ,just an intuitive/curious guy!Sorry if i offended anyone asking that.Regards,RR
September 17th, 2009 9:10pm

Hi MowGreen, i never assumed that had any relation with windows 7,i was jut wondering/asked if that would apply to windows 7 as well ,which was IMO clearly specified in the text above! im just a curious guy as my nick in this forum describes well and i like asking ppl about OLD/outdated stuff if it applies to the current date,so now knowing that what i said is completely irrelevant i may not consider that appliable to my system then,thats all i needed to know,as i many times said IM not an expert ,just an intuitive/curious guy! Sorry if i offended anyone asking that. Regards, RR No apology is necessary as no offense was taken. Just was trying to convey to you that an 8 year old vulnerability in Win 9x and XP has no relevance to Windows 7. I tried to find some info on how 7 handles UPnP but apparently, nothing has been published for it as yet. Curiosity is a good thing but I hear that it killed the cat. <g> Take care, RR. MowGreen MVP Data Center Management - Update Services Consumer Security
Free Windows Admin Tool Kit Click here and download it now
September 17th, 2009 10:51pm

Hi MowGreen,ok thats just what i was looking for cause i tot it would have some info about that in windows 7 but i know so far its hard to find things for windows 7 and i know ppl is working hard to develop something to publish it out!yeah i know Curiosity Kills sometimes but i m just as caution as curious hehe,some professionals are watching carefully my traces ^^!btw that cat wasnt me ,was it?^^take care u too buddy :DRR
September 18th, 2009 1:26am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics