Main Menu

My Certifications

BB Training
Certified Ethical Hacker

Tags

This will be shown to users with no Flash or Javascript.

MS Security Alert - OCT 2008

Alert CVE-2008-4250 Microsoft MS08-67 security

MS Security ALERT

Please note a critical security patch has been released out-of-cycle for Microsoft Products.

Please patch ASAP.

http://www.microsoft.com/technet/security/Bulletin/MS08-067.mspx

http://voices.washingtonpost.com/securityfix/2008/10/microsoft_to_issue_emergency_s_1.html

http://blogs.technet.com/swi/archive/2008/10/23/More-detail-about-MS08-067.aspx

** UPDATE 10/24/08 11:00 EST **

Milw0rm POC: http://milw0rm.com/exploits/6824

Technical Analysis: http://blog.threatexpert.com/2008/10/gimmiva-exploits-zero-day-vulnerability.html

Reports of 7 Variantes at this time: http://blogs.authentium.com/virusblog/?p=284

Ensure you block the following at your Web Gateways:

hxxp://summertime.1gokurimu.com
hxxp://perlbody.t35.com
hxxp://doradora.atzend.com

** UPDATE 10/24/08 14:30 EST **

Details relating to the Microsoft Code that is effected by the worm: http://www.phreedom.org/blog/2008/decompiling-ms08-067/

Snort Rules By Secureworks: http://www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/EXPLOIT/EXPLOIT_MS08-067

** UPDATE 10/27/08 09:30 EST **

Details on the Milw0rm POC: http://www.dontstuffbeansupyournose.com/?p=35

Regards,

Jason

Add your comment

Jootags By Turtus Std.