News

Microsoft Acknowledges Problem with Services for Unix

Microsoft Corp. this week patched a memory leak in the latest version of its Unix interoperability software that an attacker could exploit to take down Windows NT and Windows 2000 servers.

The patches for Services for Unix (SFU) 2.0 represent the 39th security bulletin out of Microsoft so far in 2001. Like many of the patches issued this year, the bulletin wraps up fixes for a couple of problems.

Services for Unix provides Windows-based implementations of common Unix tools and services and heterogeneous network management tools for administrators in mixed Windows/Unix environments.

Memory leaks in two SFU services, one that implements the Network File System (NFS) and one for the Telnet protocol, could be exploited in a denial-of-service attack, Microsoft acknowledged in the bulletin. Administrators targeted by such an attack would need to reboot to get their servers running properly again.

SFU 1.0 is not affected, nor are the standard Windows implementations for Telnet in Windows NT 4.0 and Windows 2000 servers.

Microsoft notes that the vulnerabilities afford attackers no possibility to usurp administrative control over the server. Nonetheless, the company says system administrators using NFS or Telnet services provided in SFU 2.0 should install the patch, which causes SFU to correctly release memory.

The patch will be included in Services for Unix 3.0.

About the Author

Scott Bekker is editor in chief of Redmond Channel Partner magazine.

Featured

  • Microsoft Highlights Emerging Kubernetes Scalability and Governance Efforts

    Microsoft this week highlighted some emerging efforts to improve both the scalability and governance of the open source Kubernetes container orchestration service.

  • Microsoft Ending Azure Container Service Support in 2020

    Microsoft gave notice earlier this month that it will be ending its Azure Container Service on Jan. 31, 2020.

  • Microsoft Releases Surface Diagnostic Toolkit for Business

    Microsoft released a new tool, Surface Diagnostic Toolkit for Business, earlier this month, providing a means for IT pros to find and troubleshoot problems on Microsoft Surface devices.

  • How To Enable Guest Access for Office 365

    While it's possible to give outside users access to certain content in your organization's Office 365 environment, the process of setting them up requires a few extra steps.

comments powered by Disqus
Most   Popular

Office 365 Watch

Sign up for our newsletter.

Terms and Privacy Policy consent

I agree to this site's Privacy Policy.