Microsoft untersucht derzeit eine gemeldete Sicherheitsanfälligkeit im Microsoft Server Message Block (SMB) Protocol.
Weitere Infos unten (engl.) oder demnächst auf
http://www.microsoft.com/germany/tec...n/default.mspx (dt).
What is the purpose of this alert?
This alert is to notify you that Microsoft has released Security Advisory 977544 - Vulnerabilities in SMB Could Allow Denial of Service - on November 13, 2009.
SUMMARY
Microsoft is investigating new public reports of a possible denial of service vulnerability in the Server Message Block (SMB) protocol. This vulnerability cannot be used to take control of or install malicious software on a user’s system. However, Microsoft is aware that detailed exploit code has been published for the vulnerability. Microsoft is not currently aware of active attacks that use this exploit code or of customer impact at this time. Microsoft is actively monitoring this situation to keep customers informed and to provide customer guidance as necessary.
We are actively working with partners in our Microsoft Active Protections Program (MAPP) to provide information that they can use to provide broader protections to customers.
Upon completion of this investigation, Microsoft will take the appropriate action to help protect our customers. This may include providing a security update through our monthly release process or providing an out-of-cycle security update, depending on customer needs.
MITIGATING FACTORS
Firewall best practices and standard default firewall configurations can help protect networks from attacks that originate outside the enterprise perimeter. Best practices recommend that systems that are connected to the Internet have a minimal number of ports exposed. In this case, the SMB ports should be blocked from the Internet.
|
