Don't Wait for Patches

Time line of the remote root exploit for the dtspcd service which belongs to the CDE (common desktop environment) that is used by many commercial UNIX operating systems:

November 12th, 2001: CERT publishes advisory CA-2001-31 which reports about the vulnerability of dtspcd.

January 2nd and January 5th: Two attacks on a non-existing dtspcd service on my Sun workstation at home.

January 8th: Sun publishes its security bulletin 00214 which includes patches for Solaris.

	November 12th, 2001: CERT publishes advisory CA-2001-31 which reports about the vulnerability of dtspcd.
	January 2nd and January 5th: Two attacks on a non-existing dtspcd service on my Sun workstation at home.
	January 8th: Sun publishes its security bulletin 00214 which includes patches for Solaris.