MS04-036: NNTP Proof of Concept exploit developed

  Please update Windows and Office products with the latest security updates to ensure the best levels of protection as active development of exploits continues.

MS04-036: NNTP Proof of Concept exploit developed
http://isc.sans.org//diary.php?date=2004-10-15

If you were wondering how quickly you needed to apply the patches that Microsoft released a couple of days ago, please keep in mind that proof-of-concept exploit code for the Windows NNTP vulnerability (MS04-036) is publicly available. The recent Core Security advisory includes the exploit code, and provides detailed technical information about the vulnerability, which they seem to have reported to Microsoft in mid-August.

The Core Security advisory was published just hours after the patches became publicly available--this is a good illustration of the rapidly shrinking time window in which you need to apply security patches.

http://www.coresecurity.com/common/showdoc.php?idx=420&idxseccion=10