Microsoft weist in der gestern Nacht veröffentlichten Sicherheitsempfehlung (958963) auf die Verfügbarkeit von Angreifer-Code hin, der die in Security Bulletin MS08-067 adressierte Sicherheitsanfälligkeit im Serverdienst ausnutzt und Remotecodeausführung ermöglichen kann. Betroffen sind Systeme unter Windows 2000, Windows XP und Windows Server 2003, auf denen das in MS08-067
Microsoft Security Bulletin MS08-067*– Kritisch: Sicherheitsanfälligkeit im Serverdienst kann Remotecodeausführung ermöglichen*(958644) bereitgestellte Sicherheitsupdate noch nicht installiert wurde.
Weitere Infos findet Ihr unten (engl.) oder in den nächsten Tagen auf
Microsoft-Sicherheitsempfehlungen - Security Advisories (dt).
What is the purpose of this alert?
This alert is to notify you that Microsoft has released Security Advisory 958963 – Exploit Code Published Affecting the Server Service - on October 27, 2008.
SUMMARY
Microsoft is aware that detailed exploit code demonstrating code execution has been published on the Internet for the vulnerability that is addressed by security update MS08-067. This exploit code demonstrates code execution on Windows 2000, Windows XP, and Windows Server 2003. Microsoft is aware of limited, targeted attacks that use this exploit code. At this time, there are no self-replicating attacks associated with this vulnerability. Microsoft has activated its Software Security Incident Response Process (SSIRP) and is continuing to investigate this issue.
Our investigation of this exploit code has verified that it does not affect customers who have installed the updates detailed in MS08-067 on their computers. Microsoft continues to recommend that customers apply the updates to the affected products by enabling the Automatic Updates feature in Windows.
We continue to work with our Microsoft Security Response Alliance (MSRA) and Microsoft Active Protections Program (MAPP) partners so their products can provide additional protections for customers. We have updated our Windows Live Safety Scanner, Windows Live One Care, and Forefront security products with protections for customers. We have also been working with our partners in the Global Infrastructure Alliance for Internet Safety (GIAIS) program to take steps to help keep attacks from spreading.
MITIGATING FACTORS
• Customers who have installed the MS08-067 security update are not affected by this vulnerability.
• Windows 2000, Windows XP, and Windows Server 2003 systems are primarily at risk from this vulnerability. Customers running these platforms should deploy MS08-067 as soon as possible.
• While installation of the update is the recommended action, customers who have applied the mitigations as identified in MS08-067 will have minimized their exposure and potential exploitability against an attack.
