For those of you that haven't patched, (shame on you! ;), I just wanted to let you know that..  Yes, there is a remote exploit out for MS06-070.

When the patch came out initially,  Handler Pedro did a write-up on it here.  Obviously, I am not going to point out to you where the exploit is.  (Nice try ;)

The vulnerability is assigned CVE number 2006-4691.

So, if you haven't patched, I suggest you go do so now.

(BTW-  Yes, I am aware that this came out a few days ago, and its "old" news, but not everyone reads the exploit websites)


Joel Esler
/** Handler of the Day **/