Infosec Practitioner
It seems that a vulnerability in Direct X’s Direct Show subsystem is coming under attack. Now the vulnerability allows execution of code, but only as the logged on user, which means if you are smart, then the normal user account does not have admin rights, and code executed through this vulnerability won’t be able to…
IT World has a nice little article which gives some tools to help protect those running IIS 6.0 and earlier from the latest exploit. The fun thing is that they are both free tools from Microsoft that basically shut down the WebDAV protocol. Microsoft has acknowledged the problem, but has not said if or when…
A new flaw in Microsoft’s IIS web server software has popped up, and this one is serious. It affects version 6 of IIS and while you do need to have WebDAV turned on and running, it can allow an attacker to completely compromise data on the server. Threatpost has a very good description of it…