So I thought I'd share an example of the timely updates that our customers receive on a daily basis from our Nevis Labs service. Subscribers obviously get a lot more information, and access to the Threat Encyclopedia that we maintain, but I've received a few requests to give a taste of the service, so thought today was a good day to do exactly that.
Vulnerabilities
MS07-061
Windows URI Handling Remote Code Execution Vulnerability
Description
Windows URI Handling Remote Code Execution Vulnerability refers to a vulnerability which exists in the way the Windows shell handles specially crafted URIs that are passed to it. An attacker could exploit this by including a specially crafted URI in an application or attachment, which could potentially allow remote code execution
This vulnerability can be exploited through a variety of applications, including Adobe PDF Reader, mIRC, Firefox, Outlook, Netscape Navigator, and others.
Impact
Windows XP Service Pack 2
Windows XP Professional x64 Edition and Service Pack 2
Windows Server 2003 Service Pack 1 and Service Pack 2
Windows Server 2003 Service Pack 1 and Service Pack 2
Windows Server 2003 x64 Edition and Service Pack 2
Windows Server 2003 with SP1 for Itanium-based Systems and SP2
Severity
Critical
Solution
On LANenforcer, update the CEI profile to the latest version
To check for CEI profile version, type “show version” on the CLI prompt of the LANenforcer.
MS07-062
DNS Spoofing Attack Vulnerability
Description
DNS Spoofing Attack Vulnerability refers to a vulnerability which exists in Windows DNS Servers. It could allow non-administrative users to send malicious responses to DNS requests, thereby spoofing or redirecting Net traffic from legitimate locations.
Impact
Microsoft Windows 2000 Server Service Pack 4
Windows Server 2003 Service Pack 1 and Windows Server 2003 Service Pack 2
Windows Server 2003 x64 Edition and Windows Server 2003 x64 Edition Service Pack 2
Windows Server 2003 with SP1 for Itanium-based Systems and Windows Server 2003 with SP2 for Itanium-based Systems
Severity
High
Solution
On LANenforcer, update the CEI profile to the latest version.
To check for CEI profile version, type “show version” on the CLI prompt of the LANenforcer.
Comments