Exploit code adds to Windows 2000 threat

By

Code that exploits a critical flaw in Windows 2000 to access systems has been released onto the internet, raising the possibility of a widescale worm attack.

Exploit code adds to Windows 2000 threat
The vulnerability affects the Workstation Service in Windows 2000, which handles print and file requests.

Microsoft has already created a patch for the problem but the exploit code has taken just two days to appear on the internet and could hit unpatched systems.

"Microsoft has patched 13 vulnerabilities this month and among them is one that can be used to create a worm targeting Windows 2000 systems," said a statement from antivirus vendor McAfee. 

"The MS06-070 Workstation Service vulnerability can be remotely exploited without user interaction. On Windows 2000, no authentication is needed when sending traffic to this service."

McAfee warned that adding the ability to replicate the software could lead to an attack similar to the Zotob worm. 

In that instance, Zotob appeared just a few days after Microsoft had patched a similar problem.
Got a news tip for our journalists? Share it with us anonymously here.
Copyright ©v3.co.uk
Tags:

Most Read Articles

Phishing attack nets enormous npm supply chain compromise

Phishing attack nets enormous npm supply chain compromise

VicRoads to phase out passwords in favour of passkeys

VicRoads to phase out passwords in favour of passkeys

Service NSW centralises security, networking in mammoth CloudOps overhaul

Service NSW centralises security, networking in mammoth CloudOps overhaul

Apple adds "mercenary spyware" protection to new A19 chip

Apple adds "mercenary spyware" protection to new A19 chip

Log In

  |  Forgot your password?