SMB Networking Holes Patched by Microsoft
Microsoft Security
Heads up on three updates for networks that have holes, which could leave you vulnerable.
Two of the three vulnerabilities are rated critical for Windows 2000, Windows XP and Windows Server 2003; the third is rated Moderate for those platforms. Two are rated Moderate for Windows Vista and Windows Server 2008, and the third does not affect those platforms at all.
The first vulnerability, SMB Buffer Overflow Remote Code Execution Vulnerability (CVE-2008-4834), is a frightening one: an unauthenticated networking bug. This is the one that doesn’t affect Windows Vista or Server 2008, but on 2000, XP or Server 2003 an unauthenticated user could invoke a remote code execution over the network.
The second vulnerability, SMB Validation Remote Code Execution Vulnerability (CVE-2008-4835), is very similar to the last one: an unauthenticated network vulnerability that can theoretically allow remote code execution, but more likely denial of service.
The third vulnerability, SMB Validation Denial of Service Vulnerability (CVE-2008-4114), is rated Moderate for all platforms. A specially-crafted network request could cause the system to stop responding and then restart.
Head on over to Microsoft Security Bulletin MS09-001 - Critical
January 16th, 2009 at 3:49 pm
[...] Taylor Swift Set for CSI Guest Appearance Singer and budding actress Taylor Swift will appear in a CSI episode later this season. She’ll play a “a troubled teenager whose parents own a motel.” The episode begins in the present and [. ...[Continue Reading] [...]
June 3rd, 2010 at 9:39 am
Hello, I don’t usually publish feedback on blogs, as I wish to read only. However I discover the article that you’ve written earlier has very insightful information, and I find it very informational. Anyway, I’m questioning whether you are open for hyperlink change, as I hope that we will agree on a mutual hyperlink alternate agreement. Hope to listen to a positive reply from you, and have an excellent day!