Dangerous DNS server bug in Longhorn code, too

Microsoft Corp.’s troubles with its newest operating systems continued today as it confirmed that an unpatched vulnerability in its current server software also exists in the still-beta code for Longhorn Server. “Yes, Longhorn Server is affected,” a Microsoft spokeswoman said today in an e-mail. According to a security advisory released late yesterday, a zero-day vulnerability in the DNS Server Service in Windows 2000 Server (SP4) and Windows Server 2003 (SP1 and SP2) is being exploited by attackers, who send malformed RPC packets to the server. Although Microsoft does not rank vulnerabilities until they are patched, most security companies and organizations have pegged this bug at or near their highest warning levels. Danish vulnerability tracker Secunia, for instance, labeled it “highly critical,” while eEye Digital Security tagged it as “critical.”

click here for article

search for : server software, Longhorn Server, Windows 2000 Server

This entry was posted on Monday, April 16th, 2007 at 7:08 am and is filed under General interest. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.