|
|
|
|
|
Microsoft August 2010 Patch Tuesday
Published Aug 12, 2010
|
Microsoft has issued 14 security bulletins which address 34 vulnerabilities, 12 of which Microsoft has rated as critical. This represents a record number of bulletins issued in a single month, and ties the record for total vulnerabilities addressed.
“The SMB pool overflow vulnerability should be a real concern for enterprises,” said Joshua Talbot, security intelligence manager, Symantec Security Response. “Not only does it give an attacker system-level access to a compromised SMB server, but the vulnerability occurs before authentication is required from computers contacting the server. This means any system allowing remote access and not protected by a firewall is at risk.”
“Best practices dictate that file or print sharing services, such as SMB servers, should not be open to the Internet,” Talbot added. “But such services are often unprotected from neighboring systems on local networks. So, a cybercriminal could use a multi-staged attack to exploit this vulnerability. Such an attack would likely start by compromising an employee’s machine via a drive-by download or socially engineered email, and would end by using that compromised computer to attack neighboring machines on the same local network that have the SMB service running.”
“This issue affects more than just file servers using the SMB service,” Talbot concluded. “Workstations that have enabled file and print sharing are also at risk. Laptops with this configuration that connect to untrusted networks, such as public Wi-Fi, or that allow ad hoc connections could be attacked by neighboring computers. The user could then unwittingly carry their infected system back to the enterprise, opening the door to an organization’s entire network.”
Symantec strongly encourages users to patch their systems against all vulnerabilities addressed this month.
Please visit the Symantec Security Response blog for more information and also let me know if you’re interested in speaking with a Symantec expert in greater detail about any of the vulnerabilities addressed this month.
The Symantec Security Response blog can be viewed here:
http://www.symantec.com/connect/symantec-blogs/sr
Additional information on Microsoft’s security bulletins can be found here:
http://www.microsoft.com/technet/security/bulletin/ms10-aug.mspx
Rachel Watts
The Portsmouth Group
T: +971 4 369 35757
E: Rachel.watts@theportsmouthgroup.com
Symantec@theportsmouthgroup.com
Posted by
VMD - [Virtual Marketing Department]
|
|
|
