Microsoft warns of Windows security exploit

Microsoft has warned Windows users that exploit code circulating on the internet could take advantage of a critical security hole in its operating system.

Microsoft has warned Windows users that exploit code circulating on the internet could take advantage of a critical security hole in its operating system.

The exploit code was disclosed by internet security site Metasploit Project. Microsoft criticised the site for publicising the code, but Metasploit accused Microsoft of attempting to gag important security information.

Microsoft said, "Detailed exploit code has been published on the internet for the vulnerability that is addressed by Microsoft security bulletin MS06-025. Microsoft is not currently aware of active attacks that use this exploit code or of any customer impact at this time."

Microsoft is encouraging users to install the security patch as soon as possible to prevent any attack using the exploit.

MS06-025 was released as part of Microsoft’s monthly scheduled security patching cycle earlier this month. It addresses two related critical flaws in Windows’ Remote Access Connection Manager service.

The bug could be used to take over users’ Windows systems, said Microsoft, without any user interaction.

Read more on Antivirus, firewall and IDS products

Start the conversation

Send me notifications when other members comment.

Please create a username to comment.

-ADS BY GOOGLE

SearchCIO

SearchSecurity

SearchNetworking

SearchDataCenter

  • How do I size a UPS unit?

    Your data center UPS sizing needs are dependent on a variety of factors. Develop configurations and determine the estimated UPS ...

  • How to enhance FTP server security

    If you still use FTP servers in your organization, use IP address whitelists, login restrictions and data encryption -- and just ...

  • 3 ways to approach cloud bursting

    With different cloud bursting techniques and tools from Amazon, Zerto, VMware and Oracle, admins can bolster cloud connections ...

SearchDataManagement

Close