[29944] in bugtraq
RE: Windows Server 2003 Security Guide available
daemon@ATHENA.MIT.EDU (paul)
Tue Apr 29 13:44:47 2003
From: paul <xml@mailandnews.com>
To: bugtraq@securityfocus.com
Content-Type: text/plain
Message-Id: <1051600581.7933.11.camel@localhost.localdomain>
Mime-Version: 1.0
Date: 29 Apr 2003 08:16:21 +0100
Content-Transfer-Encoding: 7bit
Jason Coombs wrote:
> Anyone interested in downloading these guides must be aware that they
> are distributed by Microsoft in the form of self-extracting .exe's
> bearing digital signatures embedded in the Portable Executable file's
> header section.
Obviously use self-extracting .exes is a ludicrous idea from a security
point of view, however, at least you don't have to run them:
$ wget
"http://download.microsoft.com/download/3/7/f/37fcf915-c19e-4c09-8b05-1573ea58b164/W2KHG 1.1.exe"
$ unzip W2KHG%201.1.exe
Archive: /arch/W2KHG%201.1.exe
inflating: Windows 2000 Hardening Guide.doc
inflating: Templates/installSceregvl.bat
...
Paul
