Skip to content
Silicon Shecky

Silicon Shecky

Infosec Practitioner

  • Security is Reactionary, No Matter What Security
  • New Year, New Post, from the start General
  • First Defcon – The results Reviews
  • Defender, KQL and Lockbit Microsoft
  • Do well, not be “popular” Ramblings
  • Defense Layers: A Case Study Microsoft
  • Device vs. User Microsoft
  • Ransomware, Are You Ready? General

Another Zero Day Exploit with SMB

Posted on November 12, 2009 By Michael Kavka No Comments on Another Zero Day Exploit with SMB

A new Zero day bug could crash Windows 7 and Server 2008 R2. Both new technologies, both have been officially released for less than a month, and to top it off, its related to the SMB protocol. It seems that we have been down this road before.

A couple of months ago Microsoft finally patched a different major problem with the SMB protocol. Just like that one, the recommendation is to turn of SMB, and close the ports for it. Now this is getting a bit ridiculous that something used for file sharing, that is a common protocol, and that has had major problems in Microsoft OSes before keeps having new issues.

The real question though is how long till there is a fix for it? The previous hole in SMB took a long time for them to fix. Now add on that Small Business, while they might not be using Server 2008 R2, could be starting to use Windows 7. How will this affect the adoption of Win 7 in the enterprise? Will it slow it down? Also does this hole affect Vista, XP, SBS 2008, SBS 2003, Server 2003, Server 2008 (non-R2)?

Hopefully, we will get answers.

Computers, Security, Software

Post navigation

Previous Post: Shecky Tweets for 2009-11-11
Next Post: Shecky Tweets for 2009-11-12

Related Posts

  • Security is Reactionary, No Matter What Security
  • Defender, KQL and Lockbit Microsoft
  • Defense Layers: A Case Study Microsoft
  • Device vs. User Microsoft
  • Ransomware, Are You Ready? General
  • Are you sure it is the execs? Ramblings

More Related Articles

Security is Reactionary, No Matter What Security
Defender, KQL and Lockbit Microsoft
Defense Layers: A Case Study Microsoft
Device vs. User Microsoft
Ransomware, Are You Ready? General
Are you sure it is the execs? Ramblings

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.

  • About
  • Links
    • Burbsec
    • BSides312
    • Infosec Exchange Mastodon
    • BSidesRoc
    • Hacks4Pancakes Blog
    • Krebs On Security
    • Bleeping Computer
  • Categories
    • General
    • Computers
    • Software
    • Rants
    • Security
    • Internet/Music
    • Reviews
    • Microsoft
    • Hardware
    • Mobile Computing
  • Archives
  • Social Media

Browse by tags

2008 Active Directory Android Antivirus Apple Beta CarbonBlack Chrome Computers Exchange Exchange 2007 Firefox General Thoughts Google InfoSec Internet Explorer iOS iPad IT Linux Mac Malware Microsoft OS OSx Patches SBS SBS 2008 Security Server SMB Software Support Surface TechEd Thotcon Tweets Ubuntu Verizon Virus Vista Windows Windows 7 Windows 8 XP
  • About
  • Links
    • Burbsec
    • BSides312
    • Infosec Exchange Mastodon
    • BSidesRoc
    • Hacks4Pancakes Blog
    • Krebs On Security
    • Bleeping Computer
  • Categories
    • General
    • Computers
    • Software
    • Rants
    • Security
    • Internet/Music
    • Reviews
    • Microsoft
    • Hardware
    • Mobile Computing
  • Archives
  • Social Media

Connect

  • Bluesky
  • LinkedIn
  • Mastodon
  • RSS
  • Twitter

RSS feed: iFin Intel Feed iFin Intel Feed

  • Google Doc Sidebar Sends Mac and Windows Users Down Different Paths to Malware September 15, 2026
  • Revolut confirms customer data breach through fake government requests September 12, 2026 Jagmeet Singh
  • Dutch NCSC: Critical Check Point VPN flaws exploitation is imminent September 12, 2026 Bill Toulas
  • Researchers say OpenAI agents were behind May hacking campaign targeting RubyGems September 12, 2026 djohnson
  • Cyberattack causes a flight delay? Airlines won’t owe you a hotel or meal September 11, 2026 Tim Starks
  • Hackers abused Claude to extract secrets from 1.8M Android apps September 11, 2026 Bill Toulas
  • Florida says motor vehicle data breach tied to credentials stolen from officer’s personal device September 11, 2026
  • CVE-2026-89332 - Kiro IDE Sensitive Workspace Data Exfiltration via Agent-Written Workspace Configuration September 11, 2026 aws@amazon.com
  • Florida confirms DMV database breached via stolen police account September 11, 2026 Lawrence Abrams
  • GitLab’s critical flaw is already drawing internet-wide probes September 11, 2026 Greg Otto
  • Microsoft sees some new wrinkles in invoice-scam emails September 11, 2026
  • More JFrog Artifactory bugs under attack, and all 3 have patches September 11, 2026

Browse by tags

2008 Active Directory Android Antivirus Apple Beta CarbonBlack Chrome Computers Exchange Exchange 2007 Firefox General Thoughts Google InfoSec Internet Explorer iOS iPad IT Linux Mac Malware Microsoft OS OSx Patches SBS SBS 2008 Security Server SMB Software Support Surface TechEd Thotcon Tweets Ubuntu Verizon Virus Vista Windows Windows 7 Windows 8 XP

RSS feed: iFin Intel Feed iFin Intel Feed

  • Google Doc Sidebar Sends Mac and Windows Users Down Different Paths to Malware September 15, 2026
  • Revolut confirms customer data breach through fake government requests September 12, 2026 Jagmeet Singh
  • Dutch NCSC: Critical Check Point VPN flaws exploitation is imminent September 12, 2026 Bill Toulas
  • Researchers say OpenAI agents were behind May hacking campaign targeting RubyGems September 12, 2026 djohnson
  • Cyberattack causes a flight delay? Airlines won’t owe you a hotel or meal September 11, 2026 Tim Starks
  • Hackers abused Claude to extract secrets from 1.8M Android apps September 11, 2026 Bill Toulas
  • Florida says motor vehicle data breach tied to credentials stolen from officer’s personal device September 11, 2026
  • CVE-2026-89332 - Kiro IDE Sensitive Workspace Data Exfiltration via Agent-Written Workspace Configuration September 11, 2026 aws@amazon.com
  • Florida confirms DMV database breached via stolen police account September 11, 2026 Lawrence Abrams
  • GitLab’s critical flaw is already drawing internet-wide probes September 11, 2026 Greg Otto
  • Microsoft sees some new wrinkles in invoice-scam emails September 11, 2026
  • More JFrog Artifactory bugs under attack, and all 3 have patches September 11, 2026
  • Security is Reactionary, No Matter What Security
  • New Year, New Post, from the start General
  • First Defcon – The results Reviews
  • Defender, KQL and Lockbit Microsoft
  • Do well, not be “popular” Ramblings
  • Defense Layers: A Case Study Microsoft
  • Device vs. User Microsoft
  • Ransomware, Are You Ready? General

Social Media

  • Bluesky
  • Mastodon
  • Twitter

Copyright © 2026 Silicon Shecky.