Both Microsoft and Cisco announced patches today (Tuesday, 8 September 2009) for a TCP flaw that has been around for several years. The flaw allows an attacker to perform a denial of service attack against the vulnerable systems (Microsoft Windows 2000, Server 2003 and Server 2008, Vista and Windows 7; all versions of Cisco's IOS).
Microsoft provided patches today (good old patch Tuesday) for the affected versions of Windows except Server 2000 which is no longer supported.
A really good article explaining the flaw can be found at ThreatPost.
Folks may want to take a look at the ThreatPost main page. Threat Post includes a link to Kaspersky Lab Security News Service which you will also find interesting.
Cheers,
Dave
Subscribe to:
Post Comments (Atom)
About Me
- DaveAtFraud
- B.Sc. ('78) and M.Sc. ('80) in Math from Ohio State followed by 12 yrs at TRW and a variety of software development positions since then. Currently living in Colorado and enjoying "trial retirement". For fun I climb mountains in the summer and ski down them in the winter, fix gourmet food and have an excellent wine cellar.
Why is it that typos only reveal themselves AFTER you hit submit? I don't see a way to edit my post so "tears" should be "years" and the patched were released today 6 September 2009 (not the non-existent Tuesday September 2nd).
ReplyDeleteCheers,
Dave