Exploit code adds to Windows 2000 threat

By

Worm attack imminent as code hits the Web.

Exploit code adds to Windows 2000 threat
Code that exploits a critical flaw in Windows 2000 to access systems has been released onto the Internet, raising the possibility of a widescale worm attack. 

The vulnerability affects the Workstation Service in Windows 2000, which handles print and file requests.

Microsoft has already created a patch for the problem but the exploit code has taken just two days to appear on the Internet and could hit unpatched systems.

"Microsoft has patched 13 vulnerabilities this month and among them is one that can be used to create a worm targeting Windows 2000 systems," said a statement from antivirus vendor McAfee. 

"The MS06-070 Workstation Service vulnerability can be remotely exploited without user interaction. On Windows 2000, no authentication is needed when sending traffic to this service."

McAfee warned that adding the ability to replicate the software could lead to an attack similar to the Zotob worm. 

In that instance, Zotob appeared just a few days after Microsoft had patched a similar problem.

Got a news tip for our journalists? Share it with us anonymously here.
Copyright ©v3.co.uk
Tags:

Most Read Articles

Melbourne dev finds gift card PINs can be brute-forced

Melbourne dev finds gift card PINs can be brute-forced

Department of Health to centralise SecOps model

Department of Health to centralise SecOps model

Zero-click Apple and WhatsApp bug combo used to drop gov spyware

Zero-click Apple and WhatsApp bug combo used to drop gov spyware

Jaguar Land Rover hit by cyber incident

Jaguar Land Rover hit by cyber incident

Log In

  |  Forgot your password?