Alert GCSA-08101 - MS08-066 Vulnerabilita' in Microsoft Ancillary

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1



************************************************************************

      Alert ID : GCSA-08101
          Data : 15 Ottobre 2008
        Titolo : MS08-066 Vulnerabilita' in Microsoft Ancillary Function

************************************************************************


:: Descrizione del problema

   Questo aggiornamento di sicurezza risolve una vulnerabilita'
   relativa a Microsoft Ancillary Function Driver.

   La vulnerabilita' consente ad un attaccante locale di ottenere
   il controllo completo del sistema.


:: Software e Sistemi affetti

   Microsoft Windows XP SP2
   Microsoft Windows XP SP3

   Microsoft Windows XP Professional x64
   Microsoft Windows XP Professional x64 SP2

   Microsoft Windows Server 2003 SP1
   Microsoft Windows Server 2003 SP2

   Microsoft Windows Server 2003 x64
   Microsoft Windows Server 2003 x64 SP2

   Microsoft Windows Server 2003 per Itanium SP1
   Microsoft Windows Server 2003 per Itanium SP2


:: Impatto

   Esecuzione di codice arbritario con privilegi superiori


:: Soluzioni

   Applicare la patch segnalata nel bollettino Microsoft MS08-066
   http://www.microsoft.com/technet/security/Bulletin/MS08-066.mspx


:: Riferimenti

Microsoft Security Bulletin MS08-066
   http://www.microsoft.com/technet/security/Bulletin/MS08-066.mspx

FrSirt:
   http://www.frsirt.com/english/advisories/2008/2817

Secunia:
   http://secunia.com/advisories/32261/

SecurityFocus:
   http://www.securityfocus.com/bid/31673

CVE Mitre:
   http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3464



-----BEGIN PGP SIGNATURE-----

iQCVAwUBSPX22vOB+SpikaiRAQLQowQAtI+haECUWKc62tFvFfUc/lVxX3uIMWJg
tdJplt0+Bq96/UmPc1mKsWLtdesQmaXDmwSJrVcrcxMd00ISnML9F3fPxe2pcWjq
4dTJJEEC42BwajJjw2RyP35DG3S5zXa22kfyGmGhRjSUHGf6AKD7WNhh+F3X7VNA
baq1s0OOoVk=
=rwP+
-----END PGP SIGNATURE-----