Microsoft: Yes, the Windows Server DNS vuln exists
April 13th, 2007 by Juha-Matti, Filed under: Web, Microsoft, Commentary, Corporate Security
Microsoft has confirmed late on Thursday that the RPC vulnerability exists in DNS service implementation of Windows 2000 Server SP4, Windows 2003 Server 2003 SP1, and Windows 2003 Server SP2.
The official Security Advisory is located at
www.microsoft.com/technet/security/advisory/935964.mspx.
SANS ISC had reports about the related exploitation on Saturday 7th Apr already.
The date of the next monthly updates? Tuesday 8th May. More than three weeks.
-
Is your site safe from XSS Attacks? Sig nup for Beyond Security Vulnerability Scanner today!
Subscribe
Subscribe
Microsoft Windows 2000 Professional Service Pack 4, Windows XP Service Pack 2, and Windows Vista are NOT affected
Just as long as you do not manage to make them run DNS Server…
:p
XenoMuta: The vulnerability is specific to Microsoft’s DNS implementation, which does not run on anything other than server platforms (Windows 2000 Server, Windows Server 2003).
Yes, this is server-only issue as described at the title of the blog entry.