[23639] in bugtraq
The easy way to turn off Universal Plug-and-Play in Windows
daemon@ATHENA.MIT.EDU (Richard M. Smith)
Fri Dec 28 13:47:34 2001
From: "Richard M. Smith" <rms@computerbytesman.com>
To: <bugtraq@securityfocus.com>
Date: Fri, 28 Dec 2001 11:47:20 -0500
Message-ID: <000401c18fbf$514534a0$6401a8c0@rms>
MIME-Version: 1.0
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: 7bit
Hi,
Steve Gibson of Gibson Research has just released an easy-to-use utility
for turning off Universal Plug-and-Play (UPNP) in Windows XP/ME/98. The
utility, "UnPlug 'n Pray", is available for no charge at this download
page:
http://grc.com/UnPnP/UnPnP.htm
This utility is a great tool for folks who would rather turn off UPNP
altogether on their Windows systems instead of having to keep up with a
steady stream of UPNP security patches from Microsoft.
This tool also confirmed that the FBI is currently giving out incorrect
instructions on how to protect a Windows XP from the UPNP security
holes. I followed the FBI instructions, but Steve's utility was still
needed to get the right XP services turned off. The FBI/NIPC Web page
that needs to get fixed is located at:
http://www.nipc.gov/warnings/advisories/2001/01-030-2.htm
Richard M. Smith
http://www.computerbytesman.com
