News

Microsoft Discovers, Fixes Security Breaches

Two security vulnerabilities - one in Syskey, a utility that provides additional protection for Windows NT databases and one in Windows NT that could allow a malicious user to cause an NT machine to stop responding to requests for service - were discovered by Microsoft and have been remedied by a single patch.

Syskey is a utility that encrypts the hashed password in the SAM database in order to protect it against offline password cracking attacks. However, Syskey reuses the keystream used to perform some of the encryption. This significantly reduces the strength of the protection it provides by enabling a well-known cryptanalytic attack to be used against it.

The Windows NT Local Security Authority (LSA) provides a number of functions for enumerating and manipulating security information. One of these functions, LsaLookupSids(), is used to determine the Security Identifier (SID) associated with a particular user or group name. A flaw in the implementation of this function causes it to incorrectly handle certain types of invalid arguments. If an affected call were made to this function, it would cause the LSA to crash, thereby preventing the machine from performing useful work.

Both vulnerabilities affect Windows NT Workstation 4.0, Server 4.0, Server 4.0 Enterprise Edition, and Server 4.0 Terminal Server Edition. The patch remedies both vulnerabilities and is available in x86 version at http://www.microsoft.com/Downloads/Release.asp?ReleaseID=16798 and in Alpha version at http://www.microsoft.com/Downloads/Release.asp?ReleaseID=16799. -- Isaac Slepner

About the Author

Scott Bekker is editor in chief of Redmond Channel Partner magazine.

Featured

  • Basic Authentication Extended to 2H 2021 for Exchange Online Users

    Microsoft is now planning to disable Basic Authentication use with its Exchange Online service sometime in the "second half of 2021," according to a Friday announcement.

  • Microsoft Offers Endpoint Configuration Manager Advice for Keeping Remote Clients Patched

    Microsoft this week offered advice for organizations using Microsoft Endpoint Configuration Manager with remote Windows systems that need to get patched, and it also announced Update 2002.

  • Azure Edge Zones Hit Preview

    Azure Edge Zones, a new edge computing technology from Microsoft designed to enable new scenarios for developers and partners, emerged as a preview release this week.

  • Microsoft Shifts 2020 Events To Be Online Only

    Microsoft is shifting its big events this year to be online only, including Ignite 2020.

comments powered by Disqus

Office 365 Watch

Sign up for our newsletter.

Terms and Privacy Policy consent

I agree to this site's Privacy Policy.