Printer Friendly
The Free Library
4,489,648 articles and books
Member login
User name  
Password 
 
Join us Forgot password?

IBM Internet Security Systems shields customers from critical Microsoft vulnerabilities.


IBM recently announced its Internet Security Systems division is keeping customers ahead of threats posed by the most recent Microsoft vulnerabilities. Earlier this month, IBM Internet Security Systems discovered active exploitation of a vulnerability in Microsoft's XML HTTP request handling through Internet Explorer, which Microsoft provided a patch for today. The vulnerability makes it possible for attackers to remotely execute malicious code on a victim's machine, leading to compromise of corporate networks and confidential information.

At the time of discovery in early November, IBM products were already providing customers with preemptive protection for this threat through its Buffer Overflow Exploit Prevention (BOEP) solution and through its protocol analysis module (PAM), the core engine that powers IBM Internet Security Systems intrusion prevention and detection technologies. IBM also alerted Microsoft of its findings and provided customers with additional protection at that time. "This particular threat to Microsoft's XML HTTP request handling demonstrates the criticality of preemptive protection," said Lamar Bailey, Senior Operations Manager for the IBM X-Force research and development team. "Without proactive security technologies in place, organizations leave themselves dangerously open to attack by zero-day exploits such as the ones that targeted this vulnerability. By waiting for a signature to protect your network, you are dramatically increasing the attackers' opportunities to compromise your system."

IBM is also providing protection for the latest critical threat to Microsoft users, a remote code execution vulnerability announced in the Microsoft Workstation Service, which maintains client connections to Windows Networking services and runs by default on Microsoft Operating Systems. According to X-Force, this vulnerability is simple to exploit and successful compromise could leave the attacker in complete control of the targeted machine. While authentication is required to access this service remotely in Windows XP, it is not required in Windows 2000, making this vulnerability a serious risk to Windows 2000 networks. This vulnerability could also be exploited by worms or other malware.

X-Force also encourages organizations to apply the patches provided today by Microsoft for the Internet Explorer vulnerabilities addressed in bulletin MS06-067. Several of these vulnerabilities have been exploited in the wild since September. IBM customers have been protected from these vulnerabilities since then, but other companies are urged to apply appropriate patches.

www.iss.net

COPYRIGHT 2006 A.P. Publications Ltd.
No portion of this article can be reproduced without the express written permission from the copyright holder.
Copyright 2006, Gale Group. All rights reserved. Gale Group is a Thomson Corporation Company.

 Reader Opinion

Title:

Comment:



 

Article Details
Printer friendly Cite/link Email Feedback
Title Annotation:Security News and Products
Publication:Database and Network Journal
Date:Dec 1, 2006
Words:371
Previous Article:Service providers hold key to blocking text message spam.(Security News and Products)
Next Article:Sophos protects Microsoft Windows Vista.(Security News and Products)
Topics:



Related Articles
Microsoft identfies critical security vulnerabilites.(Virus Notes)(Brief Article)
Internet Security Systems Protects Customers from Microsoft Flaws and Thwarts Phishing Attempts; ISS Virtual Patch(TM) Technology Protects Customers...
Internet Security Systems Warns Against Potential Microsoft Exchange Worm.(Company overview)
Internet Security Systems Shields Customers from Flaws in Internet Explorer and Windows Media Player; ISS Warns That Flaws Could Be Used to Launch...
Internet Security Systems Discovers and Protects Against Critical Flaws in Microsoft DNS Client; ISS Also Warns That Another Flaw Disclosed Today in...
IBM Internet Security Systems Discovers and Shields Customers from Veritas NetBackup Vulnerability.
IBM Internet Security Systems predicts security trends for 2007.(Security News and Products)
Security news and products; ISS discovers and protects in CA storage management product.(SOFTWARE WORLD DIGEST)
Security news and products; IBM internet security systems X-Force research team predicts security trends for 2007.(SOFTWARE WORLD DIGEST)
Security and products; ISS helps safeguard customers.(SOFTWARE WORLD DIGEST)

Terms of use | Copyright © 2008 Farlex, Inc. | Feedback | For webmasters | Submit articles