Alert GCSA-08114 - MS08-068 Vulnerabilita' in Microsoft SMB (957097)

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1



************************************************************************

      Alert ID : GCSA-08114
          Data : 13 Novembre 2008
        Titolo : MS08-068 Vulnerabilita' in Microsoft SMB (957097)

************************************************************************


:: Descrizione del problema

   Questo aggiornamento di sicurezza risolve una vulnerabilita'
   relativa al protocollo Microsoft Server Message block (SMB).
   La vulnerabilita' consente l'esecuzione da remoto di codice
   arbitrario su un sistema affetto.


:: Software e Sistemi affetti

   Microsoft Windows 2000 SP4
   Microsoft Windows XP SP2
   Microsoft Windows XP SP3
   Microsoft Windows XP Professional x64
   Microsoft Windows XP Professional x64 SP2
   Microsoft Windows Server 2003 SP1
   Microsoft Windows Server 2003 SP2
   Microsoft Windows Server 2003 x64
   Microsoft Windows Server 2003 x64 SP2
   Microsoft Windows Server 2003 Itanium-based SP1
   Microsoft Windows Server 2003 Itanium-based SP2
   Microsoft Windows Vista
   Microsoft Windows Vista SP1
   Microsoft Windows Vista x64
   Microsoft Windows Vista x64 SP1
   Microsoft Windows Server 2008 32-bit
   Microsoft Windows Server 2008 64-bit
   Microsoft Windows Server 2008 Itanium-based


:: Impatto

   Esecuzione remota di codice arbitrario


:: Soluzioni

   Applicare la patch segnalata nel bollettino Microsoft MS08-068
   http://www.microsoft.com/technet/security/Bulletin/ms08-068.mspx


:: Riferimenti

Microsoft Security Bulletin MS08-068
   http://www.microsoft.com/technet/security/Bulletin/ms08-068.mspx

FrSirt:
   http://www.frsirt.com/english/advisories/2008/3110

Secunia:
   http://secunia.com/advisories/32633/

SecurityFocus:
   http://www.securityfocus.com/bid/7385

CVE Mitre:
   http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4037



-----BEGIN PGP SIGNATURE-----

iQCVAwUBSRwCXfOB+SpikaiRAQJo7QP/ZxGFniZDzqy4TYyG4NPDfG9gnUwYhIdP
F8W2JxB/qvNhC2HL74tXA7bHcl/nGWaa2zd/b3W+c4wW+JFkSacTpFgC7JHFWaOm
Sx21U+8uH0XYBHXJZpeDHOuT6msUgLki5rDmnQbin8S/QNcTgdQOAxA7cGX58ftm
FxE6qLurEx0=
=tT8D
-----END PGP SIGNATURE-----