Australian IT JOBS : Sydney IT jobs, UNIX jobs, Linux jobs, Java jobs, ASP jobs Linux.conf.au Linux.conf.au
Technology news and Jobs arrow Information Technology News arrow DNS fix expected in this week's MS updates
DNS fix expected in this week's MS updates PDF Print E-mail
Written by Stephen Withers   
Monday, 07 May 2007
Microsoft's May security bulletins should include a fix for an exploited vulnerability in the DNS Server service in Windows 2000 SP4 and Windows Server 2003 SP1/SP2.

Microsoft program manager Christopher Budd wrote in the Microsoft Security Response Center blog "we haven’t seen any new information around attacks against the issue... Also, the listing of updates slated for Tuesday does include the update we’ve been working on for this issue."

The vulnerability surfaced just after April's Patch Tuesday. This is an increasingly common occurrence, apparently aimed at maximising the time between the first exploit and the likely release of a patch.

In a blog post around 10 days ago, Budd wrote "our ongoing monitoring and work with our Microsoft Security Response Alliance (MSRA) partners shows no new malicious software attempting to exploit this vulnerability.. [and the] indications are that attacks are still not widespread."

The Siveras malware family is known to exploit the DSN Server service vulnerability, but none of the first five variants are able to automatically self-propagate.

On April 24, Microsoft published a support article explaining how to disable remote administration of the DSN Server service as a prophylactic measure against exploits pending the availability of a permanent fix.

Windows XP and Vista are not affected by this flaw, as they do not include the relevant service.{moscomment}


Get stories like this delivered daily - FREE - subscribe now
When you subscribe get a 12 months license for LiveProject
Valued at $99 USD


LiveWire - Desktop alerts Download the FREE iTWire desktop alert widget LiveWire - Desktop alerts


Del.icio.us!
 
< Prev   Next >
Contact , Register , Advertise with iTWire , Links , Register , About iTWire , Feedback , Post your jobs , Events , iTWire site map , Start Blogging
Industry Releases , Submit your release now , Start submitting to iTWire , How to post video