On March 13 Microsoft released six security updates to patch seven vulnerabilities, among them a critical Windows bug, which hackers can try to exploit with a network worm.
Andrew Storms, director of security operations at nCircle Security, claimed that the bug would allow network execution without any authentication, and has all the ingredients for a class worm.
The bug, patched by Microsoft, was found in Windows Remote Desktop Protocol (RDP) that allows users to get a remote access to a PC or server.
Microsoft stated that the critical vulnerability, dubbed CVE-2012-0002, could be exploited by an attacker by sending specially-crafted data packets to a system with RDP enabled. Vulnerability was tagged with an exploitability index “1”. This means that hackers can develop reliable exploits within 30 days.
Microsoft strongly recommended its users to patch this bug before others.
Experts think that to exploit the vulnerability hackers would first use search engines and port sniffing to find as many RDP-enabled machines as possible. After that crooks will target administrators’ PCs, which they use to get a remote access to their companies’ data servers.
|
Security Bulletins
Latest Malware Updates
Downloader.Busadom!g102/27/2015Infostealer.Posteal02/26/2015Downloader.Busadom02/26/2015Trojan.Ladocosm02/26/2015SONAR.SuspDocRun02/25/2015SONAR.SuspHelpRun02/25/2015W32.Tempedreve.D!inf02/25/2015SONAR.PUA!AlnadInsta02/25/2015SONAR.Infostealer!g502/25/2015SONAR.Infostealer!g402/25/2015 |
2012-03-14
Microsoft patches Remote Control Desktop Protocol bug(c) Naked Security |
Security Advisories Database
Remote Code Execution Vulnerability in Microsoft OpenType Font DriverA remote attacker can execute arbitrary code on the target system. 07/21/2015Multiple Vulnerabilities in Linux kernel03/04/2015SQL Injection Vulnerability in PiwigoSQL inection vulnerability has been discovered in Piwigo. 02/05/2015Cross-site Scripting Vulnerability in DotNetNukeA cross-site scripting (XSS) vulnerability has been discovered in DotNetNuke. 02/05/2015Cross-site Scripting Vulnerability in Hitachi Command SuiteA cross-site scripting vulnerability was found in Hitachi Command Suite. 02/02/2015Denial of service vulnerability in FreeBSD SCTP RE_CONFIG Chunk HandlingAn attacker can perform a denial of service attack. 01/30/2015Denial of service vulnerability in Apache Traffic Server HTTP TRACE Max-ForwardsAn attacker can perform a denial of service attack. 01/30/2015Denial of service vulnerability in MalwareBytes Anti-Exploit "mbae.sys"An attacker can perform a denial of service attack. 01/30/2015Denial of service vulnerability in Linux Kernel spliceAn attacker can perform a denial of service attack. 01/29/2015Denial of service vulnerability in Python Pillow Module PNG Text Chunks DecompressionAn attacker can perform a denial of service attack. 01/20/2015 |
