Requires Free Membership to View
SearchSecurity.com members gain immediate and unlimited access to breaking industry news, virus alerts, new hacker threats, highly focused security newsletters, and more -- all at no cost. Join me on SearchSecurity.com today!
Michael S. Mimoso, Editorial Director
 |
||||
|
|
|||
|
||||
Microsoft updated an advisory, warning customers that attacks have been detected against a zero-day flaw affecting its FTP Service in Microsoft Internet Information Services (IIS). Meanwhile, new exploit code surfaced last weekend, targeting a zero-day vulnerability in Microsoft Server Message Block (SMB).
The updated security advisory warns that limited, active attacks against the IIS FTP service have been detected. In addition, new proof of concept code was published allowing for denial-of-service (DoS) attacks on Windows XP and Windows Server 2003 with read access to the File Transfer Protocol (FTP) service.
|
||||
|
|
|||
|
||||
Exploit code targeting the FTP vulnerability in the Web server began circulating on the Milw0rm site last week. Microsoft warned that while a patch is being tested, it's unlikely it will be released in time for the monthly Patch Tuesday updates.
As a workaround, customers can bar FTP users from creating directories. In addition, FTP 7.5, which is not vulnerable to the attack, is available for download for Windows Vista and Windows Server 2008.
Meanwhile, the SANS Internet Storm Center warned Tuesday that it received reports of exploit code surfacing targeting a flaw in the Microsoft SMB. The attack does not require authentication and can enable a hacker to remotely crash the SMB.
SANS said Windows 2000 and XP are not affected by the vulnerability. Any Vista or Windows 7 machine with SMB enabled is vulnerable to the attack.
|
|
"We recommend filtering access to port TCP 445 with a firewall," SANS vulnerability handler Guy Bruneau said in an advisory.
Microsoft issued its September advance notification on Thursday, notifying customers that it expected to release five critical updates Tuesday, repairing flaws in Microsoft Windows that could be remotely attacked by hackers.
The patches affect Windows 2000, XP and Vista, as well as all three of Microsoft's server platforms 2000, 2003 and 2008.