Attacker could bring down a network connection
vnunet.com, 19 May 2005
Microsoft has issued an advisory concerning problems with its software's handling of TCP/IP protocols.
The flaw could allow an attacker to set arbitrary timer values for a TCP connection and use these to bring down the network connection. It would not allow an intruder full access to machines afflicted with the vulnerability.
"For an attacker to try to exploit this vulnerability, they must first predict or learn the IP address and port information of the source and of the destination of an existing TCP network connection," said the company in a statement.
"Protocols or programs that maintain long sessions and that have predictable TCP/IP information are at an increased risk from this issue."
Microsoft has stressed that those users who have installed XP SP2 and Windows Server with SP1 are protected and that it does not consider this to be a significant threat.
The flaw was addressed with patch MS05-019, released in April, but this patch is being reissued as it causes other conflicts.
The latest advisory can be found here
Subscription-based security software promises to protect PCs
The latest wave of cyber-crimes and acts of vandalism have demonstrated once again that many systems are still vulnerable to attack.
Intel explains how its Xeon processors can handle data-intensive apps
More thoughts on how servers can help manage overload
Remote access - Three steps to getting connected
3.4 million UK professionals now work from home – is your company equipped?
Cost benefits of a global collaboration network
This white paper is a must read for organisations looking for evidence of the bottom-line benefits of high-definition video and voice communications
Keep up to date with the latest products, services and technologies from the world's leading IT companies; IThound.com brings you over 6,000 white papers, case studies and analyst reports.
We chat to Mike Maddison, UK head of Security, Privacy...
Update designed to give mobile users a richer, more personalised...
More thoughts on how servers can help manage overload
Do you agree?
Have your say on this article