O CAIS esta' repassando o alerta da Microsoft, intitulado "MS06-045 -
Vulnerability in Windows Explorer Could Allow Remote Code Execution
(921398)", que trata de uma vulnerabilidade identificada no Windows
Explorer capaz de ser explorada remotamente permitindo o controle completo
do sistema atacado.
A vulnerabilidade deriva de uma falha no Windows ao lidar com eventos de
"Drag and Drop". Para ser explorada esta vulnerabilidade precisa da
interacao do usuario que e' solicitado a acessar um arquivo compartilhado.
Cabe alertar que ja' foram divulgadas provas de conceito que exploram esta
falha.
Sistemas afetados:
. Microsoft Windows 2000 Service Pack 4
. Microsoft Windows XP Service Pack 1
. Microsoft Windows XP Service Pack 2
. Microsoft Windows XP Professional x64 Edition
. Microsoft Windows Server 2003
. Microsoft Windows Server 2003 Service Pack 1
. Microsoft Windows Server 2003 para sistemas Itanium
. Microsoft Windows Server 2003 com SP1 para sistemas Itanium
. Microsoft Windows Server 2003 x64 Edition
Correcoes disponiveis:
Recomenda-se fazer a atualizacao para as versoes disponiveis em:
. Microsoft Windows 2000 Service Pack 4
http://www.microsoft.com/downloads/deta ... 836b9615ad (http://www.microsoft.com/downloads/details.aspx?FamilyId=38cee83e-b17a-4c08-90ce-fb836b9615ad)
. Microsoft Windows XP Service Pack 1
http://www.microsoft.com/downloads/deta ... e556f10ede (http://www.microsoft.com/downloads/details.aspx?FamilyId=6ef68858-4c91-47fb-ae34-0be556f10ede)
. Microsoft Windows XP Service Pack 2
http://www.microsoft.com/downloads/deta ... e556f10ede (http://www.microsoft.com/downloads/details.aspx?FamilyId=6ef68858-4c91-47fb-ae34-0be556f10ede)
. Microsoft Windows XP Professional x64 Edition
http://www.microsoft.com/downloads/deta ... 9cbb2b87cc (http://www.microsoft.com/downloads/details.aspx?FamilyId=50935f4e-e383-493e-97c6-599cbb2b87cc)
. Microsoft Windows Server 2003
http://www.microsoft.com/downloads/deta ... fa9d024f16 (http://www.microsoft.com/downloads/details.aspx?FamilyId=759435a3-98f9-4115-b52e-d7fa9d024f16)
. Microsoft Windows Server 2003 Service Pack 1
http://www.microsoft.com/downloads/deta ... fa9d024f16 (http://www.microsoft.com/downloads/details.aspx?FamilyId=759435a3-98f9-4115-b52e-d7fa9d024f16)
. Microsoft Windows Server 2003 para sistemas Itanium
http://www.microsoft.com/downloads/deta ... deccc42c3e (http://www.microsoft.com/downloads/details.aspx?FamilyId=462131c6-a728-4b3c-94de-85deccc42c3e)
. Microsoft Windows Server 2003 com SP1 para sistemas Itanium
http://www.microsoft.com/downloads/deta ... deccc42c3e (http://www.microsoft.com/downloads/details.aspx?FamilyId=462131c6-a728-4b3c-94de-85deccc42c3e)
. Microsoft Windows Server 2003 x64 Edition
http://www.microsoft.com/downloads/deta ... 0627aafc2a (http://www.microsoft.com/downloads/details.aspx?FamilyId=50eef5c5-861d-4802-85a2-6b0627aafc2a)
Mais informacoes:
. MS06-045 - Vulnerability in Windows Explorer Could Allow Remote Code Execution (921398)
http://www.microsoft.com/technet/securi ... 6-045.mspx (http://www.microsoft.com/technet/security/bulletin/ms06-045.mspx)
. Internet Explorer Information Disclosure and HTA Application Execution
http://secunia.com/advisories/20825 (http://secunia.com/advisories/20825)
. Microsoft Internet Explorer Information Disclosure and HTA File Execution Vulnerabilities
http://www.frsirt.com/english/advisories/2006/2553 (http://www.frsirt.com/english/advisories/2006/2553)
. Microsoft Brasil Security
http://www.microsoft.com/brasil/security (http://www.microsoft.com/brasil/security)
. Technet Brasil - Central de Seguranca
http://www.technetbrasil.com.br/seguranca (http://www.technetbrasil.com.br/seguranca)
Identificador CVE (http://cve.mitre.org (http://cve.mitre.org)): CVE-2006-3281
O CAIS recomenda que os administradores mantenham seus sistemas e
aplicativos sempre atualizados, de acordo com as ultimas versoes e
correcoes oferecidas pelos fabricantes.
Os Alertas do CAIS tambem sao oferecidos no formato RSS/RDF:
http://www.rnp.br/cais/alertas/rss.xml (http://www.rnp.br/cais/alertas/rss.xml)