Sasser Worm Alert

From Microsoft:
=====
On April 30th, Microsoft has been made aware that a worm identified as
"W32.Sasser.worm" is currently circulating on the Internet. The worm
exploits the Local Security Authority Subsystem Service (LSASS)
vulnerability
fixed in Microsoft Security Update MS04-011 on April 13, 2004. You or
someone
in your organization has likely received the Bulletin detailing these
security updates. As a valued customer, we are contacting you again so you
have the information and resources you need to help address any security
issues that may arise. If you or your customers are still evaluating or
testing these updates, we strongly recommend that you expedite your review
and deployment of these updates. For the latest information please go to
http://www.microsoft.com/security.

Microsoft Product Support Alert Details:

- Microsoft has been made aware of a worm identified as "W32.Sasser.worm"
and it is currently circulating on the Internet. The worm exploits the
Local
Security Authority Subsystem Service (LSASS) vulnerability fixed in
Microsoft
Security Update MS04-011 on April 13, 2004.

- Microsoft encourages customers to protect themselves against this worm by
installing Microsoft Security Bulletin MS04-011
<www.microsoft.com/technet/security/bulletin/ms04-011.mspx> immediately.

- Customers who have enabled the Windows XP Firewall are protected from the
vector this worm attacks, which is TCP Port 139. Most third party firewalls
also block this attack vector by default.

If you have any questions regarding the security updates or its
implementation after reading the above listed bulletin you should contact
Product Support Services in the United States at 1-866-PCSafety
(1-866-727-2338). International customers should contact their local
subsidiary.

Thank you,

Microsoft PSS Security Team
=====
--
Chris H.
Microsoft Windows MVP
Tablet Creations - http://nicecreations.us/
Associate Expert
Expert Zone - www.microsoft.com/windowsxp/expertzone