More information is available at Original Post: 12:16:16 UTC Windows Vista and Server 2008 is only listed as important due to the additional security features with these newer operating systems. Windows 2000, XP, and Server 2003 are listed as critical. On our initial reviewed of the information available from Microsoft, we believe that client computers need to be updated with all due haste. It is expected that with the release of the update, much more of the hacker community will become aware of how to exploit this and create a major worm outbreak or botnet activity. Microsoft has detected limited, targeted attacks exploiting this flaw in the wild. As most of you remember, worms such as Blaster and its kin were able to propagate through RPC/DCOM vulnerabilities and is in a very similar area of code. The update addresses a vulnerability with RPC calls which can be referenced from SMB connections.
Read it at /msrc/archive/3/ms08-067-released.aspxĪs reported earlier today, Microsoft released a critical update today for Windows Operating System. There is much more discussion of the inner workings of the discovery and Microsoft's response to this critical vulnerability. Some further details are available at the SWI blog in relation to the impact of the netapi32.dll vulnerability.Ĭhristopher at the MSRC blog posted a short while ago more information. As Sourcefire have their sigs available, i would recommend to use these as they have been released via the MAPP program with Microsoft and offer broader coverage.
0 kommentar(er)
