Internet Security Industry News

October 16, 2003

Security experts are warning of a flaw that could allow hackers to launch a denial of service (DoS) attack against PCs running Windows 2000 and XP. The vulnerability, in the Microsoft Remote Procedure Call (RPC) service, was discovered by security firm Internet Security Systems (ISS).

ISS warned that the flaw affects PCs even with the most current Windows patches installed, including computers patched against the devastating RPC flaw described in Microsoft Security Bulletin MS03-039.

According to ISS, the DoS vulnerability exists by exploiting the race condition, allowing attackers to crash the Microsoft RPC service and/or force vulnerable systems to reboot. But the firm added that "significant barriers exist" which may prevent reliable exploitation outside controlled lab conditions.

ISS said that Microsoft has not yet released a patch for the vulnerability, and urged network administrators to assess external exposure to vulnerabilities associated with Microsoft services running on ports 135, 137, 138, 139, 445 and 593 on both the network perimeter and VPN connections. Speaking at Microsoft's Partner Summit in New Orleans last week, chief executive Steve Ballmer criticised security researchers and their methods of disclosing vulnerabilities early.

"These are people who discover vulnerabilities, and it's part of their job to go public with them," he said. "What we have done over the last six months is intersect with them to make sure disclosure is done in a more responsible way. I wish these people would just be quiet, but that's not going to happen."

ISS countered that it had speeded up disclosure of the vulnerability because tools are in circulation to demonstrate the DoS condition.

Source: Vnunet

Save Internet Security.ca's URL to the list of your favorite web sites in your Web browser by clicking here.

        

Become an authorized reseller of Proxy Sentinel™ and Firewall Sentinel™. Do like the rest of our authorized resellers and have your clients benefit the important security features of our products and solutions, while increasing your sales at the same time. Click here for all the details.

You can link to the Internet Security web site as much as you like. Read our section on how your company can participate in our reciprocal link exchange program and increase your rankings in the major search engines such as
Google and all the others.