- Joined
- Mar 6, 2012
- Messages
- 5
- Reaction score
- 1
New Windows flaw to spark Conficker 2.0?
Microsoft is urging administrators to patch their machines after it discovered a vulnerability that could allow hackers to take complete control of PCs running Windows and potentially pave the way f...or the next Conficker worm or worse.
"Due to the attractiveness of this vulnerability to attackers, we anticipate that an exploit for code execution will be developed in the next 30 days,"
HackLabs director Chris Gatford said that a comparable vulnerability would be MS08-67, discovered in 2008, which affected Windows XP, 2000, Vista, Server 2003, Server 2008 and the then pre-beta version of Windows 7. It took hackers only four days to release an exploit for MS08-67 and it went on to become a key vector of attack for several worms, including Conficker, which went on to arguably become one of top 10 viruses that changed the world.
http://www.zdnet.com.au/new-windows-flaw-to-spark-conficker-20-339333749.htm
The RDP Service which was patched and closed just over 24hrs ago, But some security researchers and IT Administrators think it's far more serious.
The vulnerability exists in all currently-supported versions of Windows, i.e. back to Windows XP and Windows Server 2003.
A vulnerability in a widely-deployed internet-facing service that exists in every version of Windows is particularly attractive ...to criminals.
Even though patch MS12-020 was released Tuesday to fix the problem, many systems will remain unpatched and vulnerable for weeks or even months. And because Microsoft has released the patch, the bad guys can now start reverse engineering it to develop an exploit.
Personaly; "I would think that we'll see this getting exploited within a week" "I believe on past experience that exploit code is probably 10 days off, and highly likely in 30 days,"
"Because of the number of instances of this protocol sitting out on the web there are, and the type of vulnerability it is, I wouldn't be surprised if it turns into a worm at some point, and we could have another Conficker Worm like the one in 2008 or it could end up being something like Blaster or Sasser worms from 2003".
Microsoft is urging administrators to patch their machines after it discovered a vulnerability that could allow hackers to take complete control of PCs running Windows and potentially pave the way f...or the next Conficker worm or worse.
"Due to the attractiveness of this vulnerability to attackers, we anticipate that an exploit for code execution will be developed in the next 30 days,"
HackLabs director Chris Gatford said that a comparable vulnerability would be MS08-67, discovered in 2008, which affected Windows XP, 2000, Vista, Server 2003, Server 2008 and the then pre-beta version of Windows 7. It took hackers only four days to release an exploit for MS08-67 and it went on to become a key vector of attack for several worms, including Conficker, which went on to arguably become one of top 10 viruses that changed the world.
http://www.zdnet.com.au/new-windows-flaw-to-spark-conficker-20-339333749.htm
The RDP Service which was patched and closed just over 24hrs ago, But some security researchers and IT Administrators think it's far more serious.
The vulnerability exists in all currently-supported versions of Windows, i.e. back to Windows XP and Windows Server 2003.
A vulnerability in a widely-deployed internet-facing service that exists in every version of Windows is particularly attractive ...to criminals.
Even though patch MS12-020 was released Tuesday to fix the problem, many systems will remain unpatched and vulnerable for weeks or even months. And because Microsoft has released the patch, the bad guys can now start reverse engineering it to develop an exploit.
Personaly; "I would think that we'll see this getting exploited within a week" "I believe on past experience that exploit code is probably 10 days off, and highly likely in 30 days,"
"Because of the number of instances of this protocol sitting out on the web there are, and the type of vulnerability it is, I wouldn't be surprised if it turns into a worm at some point, and we could have another Conficker Worm like the one in 2008 or it could end up being something like Blaster or Sasser worms from 2003".