Microsoft has issued an advisory concerning problems with its software's handling of TCP/IP protocols.
The flaw could allow an attacker to set arbitrary timer values for a TCP connection and use these to bring down the network connection. It would not allow an intruder full access to machines afflicted with the vulnerability.
"For an attacker to try to exploit this vulnerability, they must first predict or learn the IP address and port information of the source and of the destination of an existing TCP network connection," said the company in a statement.
"Protocols or programs that maintain long sessions and that have predictable TCP/IP information are at an increased risk from this issue."
Microsoft has stressed that those users who have installed XP SP2 and Windows Server with SP1 are protected and that it does not consider this to be a significant threat.
The flaw was addressed with patch MS05-019, released in April, but this patch is being reissued as it causes other conflicts.
Network and Infrastructure Manager, Leeds When you join us, you'll develop and implement our Information Systems Strategy with respect to hardware, network infrastructure and security management, and develop business cases that support procurement. More specifically, ... more >
Posts of IT Assistants, Strasbourg, France The Council of Europe, based in Strasbourg, France, is a political organisation founded in 1949 to promote greater unity among its member States. Today its membership numbers 47 States ... more >
Install and Configuration Engineer, London, £38,000 (inc bens) The role is to provide a technical engineer who is responsible for installation and configuration controls of a software product (aCP). aCP is an outcome based strategy ... more >
Junior Systems Administrator, Leeds As part of a new, national initiative, you'll help our Systems Administrators provide our Co-ordinating Centre with the best possible support. Whether it's the network, servers, local workstations or desktop support, ... more >More job opportunities
Print
Discuss
Send to friend
RSS feeds
Daily news podcast
Two further 'high-risk' flaws added to existing unplugged holes 17 May 2005
Subscription-based security software promises to protect PCs 13 May 2005
The latest wave of cyber-crimes and acts of vandalism have demonstrated once again that many systems are still vulnerable to attack. 15 Apr 2004
del.icio.us
Digg this
reddit!
