Alert GCSA-07113 - Vulnerabilita' in Microsoft Windows DNS Server

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


************************************************************************

    Alert ID : GCSA-07113
        Data : 14 Novembre 2007
      Titolo : Vulnerabilita' in Microsoft Windows DNS Server (MS07-062)

************************************************************************


:: Descrizione del problema

E' stata identificata una vulnerabilita' in Microsoft Windows DNS
server, che potrebbe permettere ad un attaccante di mandare risposte
a query DNS appositamente predisposte, mediante spoofing, o
redirezionando il traffico internet di un host legittimo verso una
destinazione arbitraria.


:: Piattaforme e software interessati

- - Windows Server 2000 Service Pack 4
- - Windows Server 2003 Service Pack 1
- - Windows Server 2003 Service Pack 2
- - Windows Server 2003 x64 Edition
- - Windows Server 2003 x64 Edition Service Pack 2
- - Windows Server 2003 with SP1 for Itanium-based Systems
- - Windows Server 2003 with SP2 for Itanium based Systems


:: Impatto

- - Spoofing e redirezione del traffico Internet
- - Exposure of sensitive information


:: Soluzioni

Applicare gli aggiornamenti rilasciati da Microsoft:
http://www.microsoft.com/technet/security/Bulletin/MS07-062.mspx


:: Riferimenti

Microsoft
http://www.microsoft.com/technet/security/Bulletin/MS07-062.mspx

Secunia
http://secunia.com/advisories/27584/

FrSIRT
http://www.frsirt.com/english/advisories/2007/3848

CVE Mitre
http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3898


-----BEGIN PGP SIGNATURE-----

iQCVAwUBRzsjlvOB+SpikaiRAQJolwQAsdU+58PRfoG9m+3IZkzLxtdc9Xr3vp/g
z9EntJLwH/LwAavyYP/N5Z6TbGQuD153WEug8wJPOvTKYbYDzRfKqBBYpVTZ9mNS
TRqOow0VTgoz7j+QiK9irinjo1GJmmZF0ZFnx3VCQ2DXrT2xuEdfLlhWca2OkE2w
y8UXEnKlo9g=
=tzRz
-----END PGP SIGNATURE-----