Saksan tietoturvavirasto (BSI) löysi samana päivänä kun Win 7 julkaistiin uuden vakavan tietoturva-aukon Windows 7:ssä. Ongelman takia Win 7-kone voidaan verkon yli sulkea Denial of Service (Dos)-hyökkäyksellä.
" Germany's federal IT security agency (BSI) has issued a warning [1] about a high-risk vulnerability in the SMB2 protocol. This can be exploited over the network to shut down a computer with a Denial of Service (DoS) attack.
This incident illustrates how proprietary software often poses a security risk. "Only Microsoft can fix the problem. But they have apparently closed their eyes to this vulnerability for a long time, hoping that it wouldn't spoil the retail launch of Windows 7 this Thursday," says Karsten Gerloff, President of the Free Software Foundation Europe (FSFE). "
http://fsfe.org/news/2009/news-20091019-01.en.html
" Germany's federal IT security agency (BSI) has issued a warning [1] about a high-risk vulnerability in the SMB2 protocol. This can be exploited over the network to shut down a computer with a Denial of Service (DoS) attack.
This incident illustrates how proprietary software often poses a security risk. "Only Microsoft can fix the problem. But they have apparently closed their eyes to this vulnerability for a long time, hoping that it wouldn't spoil the retail launch of Windows 7 this Thursday," says Karsten Gerloff, President of the Free Software Foundation Europe (FSFE). "
http://fsfe.org/news/2009/news-20091019-01.en.html
Vastaukset 4
Vanhimmat
.
"This is a new vulnerability, not the one described in Microsoft Security Advisory 975497. The listed operating systems can therefore still be successfully attacked even after installation of the updates of Microsoft's October patchday (MS09-050). "
Threat level: "4 high risk" (out of 1-5, with 5 being "very high").
Title: Microsoft Windows SMB2-Protocol: Another vulnerability allows denial of service (Windows Vista and Windows 7 vulnerable).
Date: 2009-10-06
Software: Microsoft Windows 7, Microsoft Windows 7 x64 Edition, Microsoft Windows Vista / SP1 / SP2, Microsoft Windows Vista x64 Edition / SP1 / SP2, Microsoft Windows Server 2008
Platform: Windows
Effect: Denial-of-Service
Remoteexploitable: Yes
Risk: high
Reference: internal research
BSI havaitsi tietoturvauhan jo aiemmin (kirjattu 10.6.2009). MICROSOFT EI OLE TEHNYT ASIALLE MITÄÄN JOTEN SE ON VIIME VIIKOLLA JULKAISTUSSA WINDOWS 7:SSA KUTEN MYÖS VISTASSAKIN.
Onnittelut kaikille Windows 7-käyttäjille!
Alkuperäinen viestinkirjoittaja floodaa
Asia on käsitelty jo täällä
http://keskustelu.suomi24.fi/node/8569803
sir-fracis-draken postaukset tästä aiheesta ovat pelkkää paskanjauhantaa.
Tuohon on saatu päivitys jo vähän aikaa sitten :)