Exploit code adds to Windows 2000 threat

By

Worm attack imminent as code hits the Web.

Exploit code adds to Windows 2000 threat
Code that exploits a critical flaw in Windows 2000 to access systems has been released onto the Internet, raising the possibility of a widescale worm attack. 

The vulnerability affects the Workstation Service in Windows 2000, which handles print and file requests.

Microsoft has already created a patch for the problem but the exploit code has taken just two days to appear on the Internet and could hit unpatched systems.

"Microsoft has patched 13 vulnerabilities this month and among them is one that can be used to create a worm targeting Windows 2000 systems," said a statement from antivirus vendor McAfee. 

"The MS06-070 Workstation Service vulnerability can be remotely exploited without user interaction. On Windows 2000, no authentication is needed when sending traffic to this service."

McAfee warned that adding the ability to replicate the software could lead to an attack similar to the Zotob worm. 

In that instance, Zotob appeared just a few days after Microsoft had patched a similar problem.

Got a news tip for our journalists? Share it with us anonymously here.
Copyright ©v3.co.uk
Tags:

Most Read Articles

CBA using facial recognition logins to verify disputed payments

CBA using facial recognition logins to verify disputed payments

Qantas contacted by "potential cyber criminal"

Qantas contacted by "potential cyber criminal"

SA Power Networks tackles IAM, cloud security under five-year strategy

SA Power Networks tackles IAM, cloud security under five-year strategy

Qantas facing 'significant' data theft after cyber attack

Qantas facing 'significant' data theft after cyber attack

Log In

  |  Forgot your password?