Vista, Server 2008 and Win7 Better Read this - UGL

Doz · 09-10-2009, 02:40 PM

Everyone with Vista, Server 2008 and Win 7 better read this.

http://www.eweek.com/c/a/Security/Mi...utions-888283/

Hours after its latest Patch Tuesday release, Microsoft confirmed the presence of a serious zero-day bug in Windows Vista, Windows Server 2008 and release candidates of Windows 7.

The vulnerability, which lies in Windows' SMB (Server Message Block) 2, is due to the SMB implementation improperly parsing SMB negotiation requests. As of yesterday, Microsoft reported the flaw had not been the subject of attacks, but that could change as exploit code has been publicly available since Monday.

"An attacker who successfully exploited this vulnerability could take complete control of an affected system," Microsoft's advisory said. "Most attempts to exploit this vulnerability will cause an affected system to stop responding and restart."

While Microsoft officials said the company is working on a patch, they offered no timeline as to when it would be available. While users wait, the company recommends they disable SMB 2 via the Windows Registry Editor or block TCP ports 139 and 445 at the firewall. Both those workarounds, however, come with drawbacks. A mistake in the Registry Editor could force a user to reinstall Windows, while blocking ports 139 and 445 could stop applications from working.

The issue first came to light Monday when a researcher claimed he used it to trigger the infamous "Blue Screen of Death" on Windows Vista and Windows 7. Other researchers subsequently used the bug to crash other versions of Windows. After a day of investigation, Microsoft announced late Tuesday that the flaw was real, and reported it could not only cause a denial-of-service condition but could also be used to take over a system.

According to Microsoft, the Windows 7 RTM (release to manufacturing), Windows 2000, XP and Windows Server 2008 R2 are not affected by this vulnerability.

In addition to the latest zero-day, Microsoft has promised to fix a flaw in the file transfer protocol (FTP) service utilized by Internet Information Services (IIS). The flaw has come under attack by hackers, and Windows users are advised to leverage the information on workarounds and mitigations provided by Microsoft.

Doz · 10-21-2009, 12:40 PM

Microsoft's Windows 7 has been touted as a new, better-running operating system. But despite the addition of a few handy features, the GCN Lab finds that it looks just like the Vista OS, has a lot of the same annoying quirks as Vista and delivers no difference in performance from Vista.

http://www.1105newsletters.com/t.do?id=3567157:3377430

Doz · 10-23-2009, 07:34 PM

More Win7 info

http://www.crn.com/security/22090040...RSKH4ATMY32JVN

09-10-2009, 02:40 PM	#1
Doz Maniac Drummer Join Date: Feb 2008 Location: Florida Posts: 3,017	Vista, Server 2008 and Win7 Better Read this Everyone with Vista, Server 2008 and Win 7 better read this. http://www.eweek.com/c/a/Security/Mi...utions-888283/ Hours after its latest Patch Tuesday release, Microsoft confirmed the presence of a serious zero-day bug in Windows Vista, Windows Server 2008 and release candidates of Windows 7. The vulnerability, which lies in Windows' SMB (Server Message Block) 2, is due to the SMB implementation improperly parsing SMB negotiation requests. As of yesterday, Microsoft reported the flaw had not been the subject of attacks, but that could change as exploit code has been publicly available since Monday. "An attacker who successfully exploited this vulnerability could take complete control of an affected system," Microsoft's advisory said. "Most attempts to exploit this vulnerability will cause an affected system to stop responding and restart." While Microsoft officials said the company is working on a patch, they offered no timeline as to when it would be available. While users wait, the company recommends they disable SMB 2 via the Windows Registry Editor or block TCP ports 139 and 445 at the firewall. Both those workarounds, however, come with drawbacks. A mistake in the Registry Editor could force a user to reinstall Windows, while blocking ports 139 and 445 could stop applications from working. The issue first came to light Monday when a researcher claimed he used it to trigger the infamous "Blue Screen of Death" on Windows Vista and Windows 7. Other researchers subsequently used the bug to crash other versions of Windows. After a day of investigation, Microsoft announced late Tuesday that the flaw was real, and reported it could not only cause a denial-of-service condition but could also be used to take over a system. According to Microsoft, the Windows 7 RTM (release to manufacturing), Windows 2000, XP and Windows Server 2008 R2 are not affected by this vulnerability. In addition to the latest zero-day, Microsoft has promised to fix a flaw in the file transfer protocol (FTP) service utilized by Internet Information Services (IIS). The flaw has come under attack by hackers, and Windows users are advised to leverage the information on workarounds and mitigations provided by Microsoft. __________________ I am a USAF Veteran and LoveUSA

10-21-2009, 12:40 PM	#2
Doz Maniac Drummer Join Date: Feb 2008 Location: Florida Posts: 3,017	Microsoft's Windows 7 has been touted as a new, better-running operating system. But despite the addition of a few handy features, the GCN Lab finds that it looks just like the Vista OS, has a lot of the same annoying quirks as Vista and delivers no difference in performance from Vista. http://www.1105newsletters.com/t.do?id=3567157:3377430 __________________ I am a USAF Veteran and LoveUSA

10-23-2009, 07:34 PM	#3
Doz Maniac Drummer Join Date: Feb 2008 Location: Florida Posts: 3,017	More Win7 info http://www.crn.com/security/22090040...RSKH4ATMY32JVN __________________ I am a USAF Veteran and LoveUSA

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)