Windows Home Server Vulnerable to Critical Bug
14063
Microsoft adds another product to the list of those vulnerable to a critical bug patched nearly three weeks ago.
606020
(InfoWorld) - Microsoft's first server OS aimed at helping Windows users organize and share files on a home network is nearly ready for prime time. The companyÂ will releaseÂ Windows Home Server Release Candidate 1 (RC1) to early adopters this week in anticipation of the product's final release later this year. There are two ways for users to get the software. Developers can sign up for the Windows Home Server Code2Fame Challenge, a contest Microsoft has set up to encourage them to build new applications and add-on technology to the OS. Developers are eligible to win up to $50,000 worth of cash and prizes, according to Microsoft. For users who just want to experiment with the new OS, they can get RC1 by participating in a survey , after which they will be permitted to download the software. Microsoft unveiled Windows Home Server, formerly known by the code name Quattro, at the Consumer Electronics Show in Las Vegas in January. The software is aimed specifically at letting home Windows PC users share and store multimedia and other files, as well as install security to protect files on a home network. Initially Windows Home Server will be distributed through hardware vendors only, though Microsoft is mulling selling it out of the box as well. Hewlett-Packard Co. was the first hardware vendor to sign on to distribute the OS on its MediaSmart Servers, which will be available before the end of the year. The vendor was later joined by U.S. computer maker Gateway Inc., French external storage maker LaCie Group SA and German consumer electronics company Medion AG, which also will build hardware for Windows Home Server. Microsoft also will offer a version of the OS for custom system builders. Windows users said they are curious about the forthcoming OS, but are in no hurry to rush out and purchase a new home server unless it would solve a specific need they have. Windows XP user Matt Villano said he is interested in setting up a home network once he completes an upcoming move to a new residence in the San Francisco Bay area, and is considering Windows Home Server to help him do that. Villano, who works from home, said there are limitations to his current IT workflow, ones setting up a network would solve. "Right now when I print, I have to shut down, undock from my station, dock at [my wife's] and start up again," he said. "A home network would eliminate that." Villano said that Windows Home Server is only one option he is mulling to set up his network, but likes the idea of using the product to manage multimedia files as well as perform everyday tasks. However, he said he would need to read about and evaluate Windows Home Server carefully before making any final purchasing decisions.
694494
The latest release of Windows Small Business Server is at risk from a bug in Windows' networking software, Microsoft says.
376456
Vulnerability, rated as highly critical, could enable an attacker to compromise a user's machine.
735989
Anti-virus company Symantec warned its customers about a number of critical holes in Windows that surfaced late Thursday and that could make their systems vulnerable to compromise by remote attackers.
622956
As we detailed earlier this week, Windows Home Server -- Microsoft's latest iteration of Windows designed for linking together multiple computers in a home network and sharing media -- has reached Release Candidate 1 status. A 30-day trial download is now available.
60184
A flaw in popular Windows server software could allow remote attacks to be launched against systems, Microsoft has confirmed. The vulnerability is in Windows Internet Name Service, or WINS, a network infrastructure
395103
The emergence of a new Internet virus targeting a Microsoft Windows security flaw could cause more damage than usual because the company&#39;s system for fixing the problem is so complex that many
104990
Lament over Ultravox vuln A brace of bugs in Winamp pose a serious security risk for users of the popular media player package, security watchers warn.â¦
745683
How a simple bug betrays Microsoft's disdain for basic best practice principles
551854
InfoWorld - A hacker has released attack code that could be used to exploit a critical bug in some versions of the Windows operating system.
708807
Blog: Researcher finds a basic cookie-handling error that could compromise Windows PCs.
699559
Microsoft said Wednesday that another one of its operating system products is vulnerable to&#160;a critical vulnerability, first patched two weeks ago.In an update to its MS08-001 security bulletin, Microsoft said that the latest release of Windows Small Business Server was also critically at risk from a bug in Windows&#39; networking software.The flaw is also considered critical for Windows XP and Vista users. Microsoft did not say why it had initially omitted Small Business Server from its list of critically affected operating systems, but it said that the product&#39;s users were being offered patches via Microsoft&#39;s various automatic update services. &quot;Customers with Windows Small Business Server 2003 Service Pack 2 should apply the update to remain secure,&quot; Microsoft said in its updated bulletin.The bug lies in the way Windows processes networking traffic that uses IGMP (Internet Group Management Protocol) and MLD (Multicast Listener Discovery) protocols, which are used to send data to many systems at the same time. Microsoft said that an attacker could send specially crafted packets to a victim&#39;s machine, which could then allow the attacker to run unauthorized code on a system.Microsoft rates the flaw as &quot;important&quot; for Windows Server 2003, meaning that it would be more difficult for attackers to exploit the flaw on this operating system.Security experts are paying particular attention to this vulnerability because it could be exploited by attackers to create a self-replicating worm attack.The flaw is not being exploited in online attacks, but last week researchers at penetration-testing-software vendor Immunity made a sample exploit available to their customers. That&#160;software causes an unpatched system to crash, but the company is close to developing code that could be used to install unauthorized software on a victim&#39;s computer, according to Immunity Chief Technology Officer Dave Aitel.Aitel said it&#39;s no surprise that the small business version of Windows Server 2003 is at risk.&quot;I assumed most 2003 servers in the real world were vulnerable,&quot; he said via instant message. &quot;Windows Server 2003 by default does not have any multicast addresses active and would not be affected by this vulnerability. However, installing applications that use multicasting could cause the operating system to become vulnerable.&quot;He said that Microsoft could help its customers by giving them more details on how to avoid being at risk to this problem. &quot;What features can I enable on Windows Server 2003 to become vulnerable?&quot; he asked.&#160;
321195
Researchers warn that a number of critical holes have been found in Microsoft Windows XP which could be exploited. Symantec acted after security researchers published the details of the heap overflow vulnerabilities
512932
This year the turkey came late Microsoft has confirmed that its recently released Windows Home Server OS can corrupt data if users are reckless enough to put it under extreme loads.â¦
143929
Microsoft Windows users need to watch out for several flaws in non-Microsoft media players.
142347
p2pnet.net News:- Windows XP Service Pack 2 (SP2) has ten unpatched vulnerabilities, says Finjan Software. &quot;Microsoft, however, ardently disputed the claims and said that they were &#39;potentially misleading and possibly erroneous&#39;,&quot; says a TechWeb story.