标签: 补丁

  • 2003到2016各版服务器操作系统ms17-010补丁直链地址

    特别提醒:

    1、确保135,137,139,445端口已通过路由器、端口策略,防火墙封闭的,或者其他安全工具(比如360NSA武器库免疫工具:http://dl.360safe.com/nsa/nsatool.exe)补丁过的,可以不打微软补丁,但若不清楚或者不确定的,请务必打上微软的补丁

    2、2008和2003、XP必打,现在均有漏洞批量利用工具
    2012和2016好一些没有大面积被黑,但是都建议打上对应补丁,因为没有批量利用工具做出来,不代表这个漏洞是无法利用的,有可能只是工具还没开发出来而已


    20170513微软发布了Windows XP和Windows 2003的ms17-010特别补丁,详情请看以下链接

    https://blogs.technet.microsoft.com/msrc/2017/05/12/customer-guidance-for-wannacrypt-attacks/

    ——————————-
    winxp特别补丁 – KB4012598
    ——————————-
    winxp3 32位 Security Update for Windows XP SP3 (KB4012598)

    http://download.windowsupdate.com/d/csa/csa/secu/2017/02/windowsxp-kb4012598-x86-custom-chs_dca9b5adddad778cfd4b7349ff54b51677f36775.exe

    winxp2 64位 Security Update for Windows XP SP2 for x64-based Systems (KB4012598)

    http://download.windowsupdate.com/d/csa/csa/secu/2017/02/windowsserver2003-kb4012598-x64-custom-enu_f24d8723f246145524b9030e4752c96430981211.exe

    ——————————-
    win2003特别补丁 – KB4012598
    ——————————-
    2003SP2 32位 Security Update for Windows Server 2003 (KB4012598)

    http://download.windowsupdate.com/c/csa/csa/secu/2017/02/windowsserver2003-kb4012598-x86-custom-chs_b45d2d8c83583053d37b20edf5f041ecede54b80.exe

    2003SP2 64位 Security Update for Windows Server 2003 for x64-based Systems (KB4012598)

    http://download.windowsupdate.com/c/csa/csa/secu/2017/02/windowsserver2003-kb4012598-x64-custom-chs_68a2895db36e911af59c2ee133baee8de11316b9.exe

    ——————————-
    2008R2补丁 KB4012212、KB4012215
    ——————————-
    March, 2017 Security Only Quality Update for Windows Server 2008 R2 for x64-based Systems (KB4012212)

    http://download.windowsupdate.com/d/msdownload/update/software/secu/2017/02/windows6.1-kb4012212-x64_2decefaa02e2058dcd965702509a992d8c4e92b3.msu

    March, 2017 Security Monthly Quality Rollup for Windows Server 2008 R2 for x64-based Systems (KB4012215)

    http://download.windowsupdate.com/c/msdownload/update/software/secu/2017/03/windows6.1-kb4012215-x64_a777b8c251dcd8378ecda(论坛关键词屏蔽,请去掉我)fa81aefbe7f9009c72b.msu

    ——————————-
    win7补丁 KB4012212、KB4012215
    ——————————-
    win7 32位
    March, 2017 Security Only Quality Update for Windows 7 (KB4012212)

    http://download.windowsupdate.com/d/msdownload/update/software/secu/2017/02/windows6.1-kb4012212-x86_6bb04d3971bb58ae4bac44219e7169812914df3f.msu

    March, 2017 Security Monthly Quality Rollup for Windows 7 (KB4012215)

    http://download.windowsupdate.com/d/msdownload/update/software/secu/2017/03/windows6.1-kb4012215-x86_e5918381cef63f171a74418f12143dabe5561a66.msu

    win7 64位
    March, 2017 Security Only Quality Update for Windows 7 for x64-based Systems (KB4012212)

    http://download.windowsupdate.com/d/msdownload/update/software/secu/2017/02/windows6.1-kb4012212-x64_2decefaa02e2058dcd965702509a992d8c4e92b3.msu

    March, 2017 Security Monthly Quality Rollup for Windows 7 for x64-based Systems (KB4012215)

    http://download.windowsupdate.com/c/msdownload/update/software/secu/2017/03/windows6.1-kb4012215-x64_a777b8c251dcd8378ecda(论坛关键词屏蔽,请去掉我)fa81aefbe7f9009c72b.msu

    ——————————-
    win10 1607补丁 KB4013429
    ——————————-
    win10 1607 32位
    Cumulative Update for Windows 10 Version 1607 (KB4013429)

    http://download.windowsupdate.com/c/msdownload/update/software/secu/2017/03/windows10.0-kb4013429-x86_8b376e3d0bff862d803404902c4191587afbf065.msu

    win10 1607 64位
    Cumulative Update for Windows 10 Version 1607 for x64-based Systems (KB4013429)

    http://download.windowsupdate.com/d/msdownload/update/software/secu/2017/03/windows10.0-kb4013429-x64_ddc8596f88577ab739cade1d365956a74598e710.msu

    ——————————-
    2012R2补丁 KB4012213、KB4012216
    ——————————-
    March, 2017 Security Only Quality Update for Windows Server 2012 R2 (KB4012213)

    http://download.windowsupdate.com/c/msdownload/update/software/secu/2017/02/windows8.1-kb4012213-x64_5b24b9ca5a123a844ed793e0f2be974148520349.msu

    March, 2017 Security Monthly Quality Rollup for Windows Server 2012 R2 (KB4012216)

    http://download.windowsupdate.com/d/msdownload/update/software/secu/2017/03/windows8.1-kb4012216-x64_cd5e0a62e602176f0078778548796e2d47cfa15b.msu

    ——————————-
    2016补丁 KB4013429
    ——————————-
    Cumulative Update for Windows Server 2016 for x64-based Systems (KB4013429)

    http://download.windowsupdate.com/d/msdownload/update/software/secu/2017/03/windows10.0-kb4013429-x64_ddc8596f88577ab739cade1d365956a74598e710.msu

  • 【高危漏洞预警】Window系统SMB和RDP多个高危漏洞

    【高危漏洞预警】Window系统SMB和RDP多个高危漏洞

    2017年4月14日,国外黑客组织Shadow Brokers发出了NSA方程式组织的机密文档,包含了多个Windows远程漏洞利用工具,该工具包可以可以覆盖全球70%的Windows服务器,可以导致服务器被入侵,请您关注:
    [title]一.影响范围:[/title]

    已知受影响的Windows版本包括但不限于:

    Windows NT、Windows 2000、Windows XP、Windows 2003、Windows Vista、Windows 7、Windows 8,Windows 2008、Windows 2008?R2、Windows Server 2012 SP0;

     

    [title]二.排查方式[/title]

    本次曝出的工具利用SMB服务和RDP服务远程入侵,需要确认服务器是否对外开启了137、139、445、3389端口。

    排查方式如下:

    外网计算机上telnet 目标地址445,例如:telnet 【IP】 445

     

    [title]三.缓解措施[/title]

    微软已经发出通告?,强烈建议您更新最新补丁;

    ? ? ?工具名称? ? ? 解决措施
    “EternalBlue”Addressed by?MS17-010
    “EmeraldThread”Addressed by?MS10-061
    “EternalChampion”Addressed by?CVE-2017-0146?&?CVE-2017-0147
    “ErraticGopher”Addressed prior to the release of Windows Vista
    “EsikmoRoll”Addressed by?MS14-068
    “EternalRomance”Addressed by?MS17-010
    “EducatedScholar”Addressed by?MS09-050
    “EternalSynergy”Addressed by?MS17-010
    “EclipsedWing”Addressed by?MS08-067
WeChat