Thursday, April 19, 2007

Limited Attack Potential From Microsoft DNS Worm


While Microsoft has not yet said when it will release a patch to fix an under-attack flaw in its server software, most properly protected servers should not be vulnerable.

"Any machine that gets successfully hit by this is poorly set up," says Ronald O'Brien, a senior security analyst at Sophos, a business security company.


The Delbot worm (known as Delbot, Nirbot, or Rinbot) exploits a zero-day flaw in the Domain Name System service on servers running Windows Server 2000 Service Pack 4 and Windows Server 2003 Service Pack 1 and Service Pack 2. Following a successful attack, the worm infects the machines with a 'bot' type of malware that gives the attacker remote control over the server, according to Sophos.


Source: pcworld.com
Add Photos & Videos

Tags: attack | domain | limited | Microsoft | O'Brien | pack | potential | ronald | Sophos | Technology | windows | worm | according | analyst | business | exploits | Flaw | gets | gives | INFECTS | malware | Patch | poorly | properly | protected | Release | remote | running | says | Security | SENIOR | Server | SERVICE | software | successfully | Vulnerable | Zero-day | Delbot | Nirbot | under-attack

No comments: