• There seems to be an uptick in Political comments in recent months. Those of us who are long time members of the site know that Political and Religious content has been banned for years. Nothing has changed. Please leave all political and religious comments out of the forums.

    If you recently joined the forums you were not presented with this restriction in the terms of service. This was due to a conversion error when we went from vBulletin to Xenforo. We have updated our terms of service to reflect these corrections.

    Please note any post refering to a politician will be considered political even if it is intended to be humor. Our experience is these topics have a way of dividing the forums and causing deep resentment among members. It is a poison to the community. We appreciate compliance with the rules.

    The Staff of SOH

  • Server side Maintenance is done. We still have an update to the forum software to run but that one will have to wait for a better time.

Emergency Windows Update Released

hey_moe

Retired SOH Administrator
Microsoft released an emergency "out of band" update to Windows today. This is a highly unusual event, as over the last several years only a few patches have come out on days other than Patch Tuesday, the second Tuesday of the month. And it's worthy of the special treatment.

MS08-067: Vulnerability in Server Service Could Allow Remote Code Execution describes a vulnerability in the Windows Server service which could allow remote code execution through a specially crafted RPC request over the network.
On Windows 2000, Windows XP and Windows Server 2003 the vulnerability may be invoked by unauthenticated users, and the vulnerability is rated critical. On Windows Vista and Windows Server 2008 the users must be authenticated and the vulnerability is rated Important.
This vulnerability is one of those rare ones that could result in a true network worm, where a system could be successfully attacked over the network with no user action at all. The advisory states that "Firewall best practices and standard default firewall configurations can help protect network resources from attacks that originate outside the enterprise perimeter." Thus it appears that firewalls, including the default Windows Firewall included in Windows XP and above, will block it.
Updates are available through all the usual channels including Windows Update.
 
I didn't find that particular update on "Windows Update" but I did find the nVidea 178.13 driver. It is so much easier and quicker to update the driver from Windows Update rather than the nVidea exe.
 
Back
Top