Tuesday, November 18, 2014

Microsoft Out-of-Band Critical Security Update


One of the security updates that was delayed in the regular patch cycle last week has been released.

MS14-068 is a critical update that addresses a vulnerability in Kerbeos that could allow elevation of privilege.  Microsoft is aware of limited, targeted attacks that attempt to exploit this vulnerability.

As described in the security bulletin:
"An attacker could use these elevated privileges to compromise any computer in the domain, including domain controllers. An attacker must have valid domain credentials to exploit this vulnerability. The affected component is available remotely to users who have standard user accounts with domain credentials; this is not the case for users with local account credentials only."

References:


Home
Remember - "A day without laughter is a day wasted."
May the wind sing to you and the sun rise in your heart...


No comments: