FAQ: Windows DNS bug
I was browsing around and realized I hadn’t posted anything on the blog in a while. Fortunately, at the same time, I was at this site:
FAQ: Here’s the deal on the Windows DNS bug
April 18, 2007 (Computerworld) If this is how every month in 2007 is going to go, anyone using Windows might want to set up a cot next to the computer right now: You may be working overtime, all the time, patching zero-day vulnerabilities.
Last month, it was the animated cursor bug in Windows; this month it’s a hole in Microsoft Corp.’s server software line. What do they have in common? Both are critical flaws, both were being exploited by attackers before the bug was acknowledged by Microsoft — and attacks ramped up within days — and both deserve Computerworld’s FAQ treatment.
This FAQ spells out the at-risk population, details the bug and ticks off the stopgap measures that are — until Microsoft actually fixes the flaw — the only defense.
I realize that most people will not have to know this but, really, if you are one of those people who DOES have to know this then you might as well read the article. It is actually pretty good and well worth reading.
BlogMarks
Furl
Newsvine
Rojo
Email This to a Friend
If you like this then please subscribe to the
April 19th, 2007 at 2:40 am
Just an update that I happened to come across:
Don’t Expect Microsoft to Patch DNS Flaw Now:
http://securitywatch.eweek.com/exploits_and_attacks/dont_hold_your_breath_for_a_ms_dns_hole_patch.html