After issuing notification earlier today, of an imminent According to the notification given for the details of the update Microsoft stated: "A security issue has been identified that could allow an authenticated remote attacker to compromise your Microsoft Windows-based system and gain control over it."
Despite the unusual rush to get this patch out, it would be unfair to not give credit where credit is due to Microsoft for taking care of this vulnerability so quickly, albeit without much notice before and after the effect.
Link: For more information, or just run Windows Update.
and HOW!
A patch for fixing a critical hole in the Windows RPC security is kinda important in my book.
I'm guessing you wouldn't be so cool about it if it had already overwritten your security via some new worm.
Anyone remember sasser? Not the same flaw however the spread and result COULD be the same. Thanks to the fast respond by Microsoft, you're system is safer.
A patch for fixing a critical hole in the Windows RPC security is kinda important in my book.
I'm guessing you wouldn't be so cool about it if it had already overwritten your security via some new worm.
Anyone remember sasser? Not the same flaw however the spread and result COULD be the same. Thanks to the fast respond by Microsoft, you're system is safer.
The earlier title was 'Microsoft to release EMERGENCY patch for Windows today'.
Seemed like quite a bit of excitement went on there when writing up that title!
Don't ya know it?!!
Just got it on first of 6 machines. No thang to it!!
Did see the other article earlier this morning on here.
And what fun it is, too
Are you serious? Isn't that the whole point of authentication?
Need I say more?
Need I say more?
Indeed. They only need to be authenticated on Vista and Server 2008. Windows 2000, XP and 2003 can all be exploited without authentication. So without a personal firewall, a machine can be infected by malware written to exploit this vulnerability without user interaction. ala. Blaster and Nachi.
http://biz.yahoo.com/rb/081023/business_us_microsoft.html[/b]
No, it's a vulnerability that a nefarious person can exploit without needing to authenticate onto the computer they are attacking. In other words, they can infect your computer through the internet without you ever getting any kind of prompt. Only a desktop firewall or the patch will prevent this for machines on the internet.
The last vulnerability of this kind that I can remember, was the one that the Blaster and Nachi worms exploited a few years back. Thousands of computers around the world were infected with those worms and they are still floating around on the internet today. Put an unpatched XP SP1 machine on the internet now , and it'll be infected in a matter of minutes.
Last edited by TCLN Ryster on 24 Oct 2008 - 10:44
It directly attacks your Server (RPC) service and can take over you machine not matter how much anti-spyware or anti-virus software you are using.
It directly attacks your Server (RPC) service and can take over you machine not matter how much anti-spyware or anti-virus software you are using.
Google the name of that software
"XP Antispyware 2009 is a rogue anti-spyware program from the same family as XP Antivirus 2008."
It directly attacks your Server (RPC) service and can take over you machine not matter how much anti-spyware or anti-virus software you are using.
Thank you for the laugh. I know you were just kidding
http://www.nytimes.com/external/idg/2008/1...k-code-for.html
Took them only hours to hack it.
If there is a problem then fix it.
Don't wait till 30 days after the problem is found.
And for those who like to update once a month... please do so and be my guest. Let me do the update myself when a (critical) patch is released.
There is a place for the Patch Tuesday cycle, but "emergency" patches need to come out as soon as they can, regardless of what day of the month it is.
Commenting has either been disabled on this article or you are not logged in. Click here to login or register, its free!
Note: Anonymous commenting is disabled in order to keep the quality of responses to a high standard.