Email us! Subscribe to Liquidmatrix!

Vulnerability in RPC on Windows DNS

Possible remote code execution problem.

From Microsoft:

Microsoft is investigating new public reports of a limited attack exploiting a vulnerability in the Domain Name System (DNS) Server Service in Microsoft Windows 2000 Server Service Pack 4, Windows Server 2003 Service Pack 1, and Windows Server 2003 Service Pack 2. Microsoft Windows 2000 Professional Service Pack 4, Windows XP Service Pack 2, and Windows Vista are not affected as these versions do not contain the vulnerable code.

Microsoft’s initial investigation reveals that the attempts to exploit this vulnerability could allow an attacker to run code in the security context of the Domain Name System Server Service, which by default runs as Local SYSTEM.

Article Link

Tags: , ,

Tag It:
  • Digg
  • del.icio.us
  • Slashdot
  • Technorati
  • SphereIt
  • StumbleUpon
  • Fark
  • YahooMyWeb
  • Furl
  • Spurl
  • Ma.gnolia
  • NewsVine
Related Articles:

  • Windows DNS Cache Poisoning (MS07-062)
  • Patch Tuesday Approaches
  • Vulnerability in Citrix Presentation Server
  • Hoff: DNS Debacle In Poetic Review
  • Liquidmatrix DNS Issues
  • Liquidmatrix Security Digest » Patch Tuesday Approaches said,

    May 3, 2007 @ 8:34 pm

    [...] that time again. In this upcoming patch release from Microsoft we find a fix for the DNS issue. As well as the patches there will be a nonsecurity update for various windows updating services [...]

    RSS feed for comments on this post · TrackBack URI

    Leave a Comment