News

Critical Flaw Affects Windows Server 2003

Microsoft alerted users on Wednesday to the first critical flaw found so far in Windows Server 2003. The flaw with the Remote Procedure Call protocol could allow a remote attacker to take full control of a Windows machine. It affects all supported versions of Windows except the consumer-oriented Windows Me.

While Windows Server 2003 was included in a bulletin involving a critical flaw last week, Microsoft rated the flaw of "moderate" severity for Windows Server 2003 because the more secure default installation of the server OS blocked off the vulnerable services. An early June bulletin also affected Windows Server 2003, but only through Internet Explorer 6.0, which also ships in Windows XP and is available for separate download. Again with that bulletin, Windows Server 2003 users had some protection against the vulnerability by the locked-down default installation.

The new bulletin is Microsoft's 26th of the year, and can be found here: www.microsoft.com/technet/security/bulletin/ms03-026.asp.

To underline the severity of the recent Microsoft bulletin, CERT issued its own alert to users through its e-mail notification service: www.cert.org/advisories/CA-2003-16.html.

The critical RPC flaw is one of three security alerts Microsoft published on Wednesday. The other two were rated "important," the step below "critical" on Microsoft's internal threat scale. One affected Windows XP, the other involved Internet Security & Acceleration Server. The Windows XP bulletin is here. The ISA Server bulletin is here.

While Microsoft security bulletins had been fairly slow out of the gate in the first half of this year, their number has picked up in the last week. Microsoft has now issued six of this year's 28 Microsoft security bulletins since July 9.

About the Author

Scott Bekker is editor in chief of Redmond Channel Partner magazine.

Featured

  • Microsoft Nudging Skype for Business Users to Teams

    Microsoft on Thursday announced some perks and prods for Skype for Business unified communications users, with the aim of moving them to the Microsoft Teams collaboration service instead.

  • How To Improve Windows 10's Sound and Video Quality

    Windows 10 comes with built-in tools that can help users get the most out of their sound and video hardware.

  • Microsoft Offers More 'Solorigate' Advice Using Microsoft 365 Defender Tools

    Microsoft issued yet another article with advice on how to use its Microsoft 365 Defender suite of tools to protect against "Solorigate" advanced persistent threat types of attacks in a Thursday announcement.

  • Microsoft FastTrack Support Extended to Microsoft 365 Defender Solutions

    The Microsoft FastTrack support program has been extended to Microsoft 365 Defender products for certain qualified subscribers, Microsoft indicated this week.

comments powered by Disqus