Silicon Shecky

Infosec Practitioner

  • About
  • Categories
    • General
    • Computers
    • Software
    • Rants
    • Security
    • Internet/Music
    • Reviews
    • Microsoft
    • Hardware
    • Mobile Computing
  • Links
    • Infosec
      • Burbsec
      • Infosec Exchange Mastodon
      • Hacks4Pancakes Blog
      • Krebs On Security
      • Bleeping Computer
  • Archives

Connect

  • Bluesky
  • LinkedIn
  • Mastodon
  • RSS
  • Twitter

[footer_backtotop]

Copyright © 2025 ·Sixteen Nine Pro Theme · Genesis Framework by StudioPress · WordPress

Another Zero Day Exploit with SMB

November 12, 2009 By Michael Kavka Leave a Comment

A new Zero day bug could crash Windows 7 and Server 2008 R2. Both new technologies, both have been officially released for less than a month, and to top it off, its related to the SMB protocol. It seems that we have been down this road before.

A couple of months ago Microsoft finally patched a different major problem with the SMB protocol. Just like that one, the recommendation is to turn of SMB, and close the ports for it. Now this is getting a bit ridiculous that something used for file sharing, that is a common protocol, and that has had major problems in Microsoft OSes before keeps having new issues.

The real question though is how long till there is a fix for it? The previous hole in SMB took a long time for them to fix. Now add on that Small Business, while they might not be using Server 2008 R2, could be starting to use Windows 7. How will this affect the adoption of Win 7 in the enterprise? Will it slow it down? Also does this hole affect Vista, XP, SBS 2008, SBS 2003, Server 2003, Server 2008 (non-R2)?

Hopefully, we will get answers.

Filed Under: Computers, Security, Software

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.

RSS Taggart Institute Intel Feed

  • Toward a Taiwan Truce October 28, 2025 Stephen Wertheim
  • Talking about “Kavanaugh stops” with law prof Anil Kalhan, who coined the term October 28, 2025 Chris Geidner
  • ISC Stormcast For Tuesday, October 28th, 2025 https://isc.sans.edu/podcastdetail/9674, (Tue, Oct 28th) October 28, 2025
  • WSUS attacks hit 'multiple' orgs as Google and other infosec sleuths ring Redmond’s alarm bell October 27, 2025 Jessica Lyons
  • Cybersecurity Reading List - Week of 2025-10-27 October 27, 2025 Ian Campbell
  • Conduent says data breach originally began with 2024 intrusion October 27, 2025 David Jones
  • US declines to join more than 70 countries in signing UN cybercrime treaty October 27, 2025
  • Google disputes false claims of massive Gmail data breach October 27, 2025 Lawrence Abrams
  • Attackers bypass patch in deprecated Windows Server update tool October 27, 2025 Matt Kapko
  • Microsoft WSUS Remote Code Execution (CVE-2025-59287) Actively Exploited in the Wild October 27, 2025 Unit 42

Browse by tags

Active Directory Android Antivirus Apple Beta Chrome Computers Exchange Exchange 2007 Firefox General Thoughts Google InfoSec Internet Explorer iOS iPad IT Linux Mac Malware Microsoft OS OSx Patches Rants SBS SBS 2008 Security Security Patches Server SMB Software Support Surface TechEd Tweets Ubuntu Verizon Virus Vista vulnerabilities Windows Windows 7 Windows 8 XP