Tuesday, August 15, 2006

Security: MS06-040 Patch

Microsoft has released a new patch to fix a buffer overrun vulnerability in a service that runs on Windows 2000, XP and 2003 systems. This is a remote code execution hole that would allow an attacker to take complete control of a system.

If you are behind a firewall that blocks ports 137-139 & 445 then you are somewhat shielded from this problem, however, it's best to apply the patch.

SANS has more information on the current worm activity.