Infosecurity.US

Information Security & Occasional Forays Into Adjacent Realms

  • Web Log

Gift That Keeps On Giving →

April 14, 2015 by Marc Handelman in All is Information, Information Security, Network Security

via Steve Ragan, writing at CSO, comes a story of renewed interest in one of the older attackable network interefaces known - namely, the venerable Server Message Block (SMB) protocol, utilizing the equally old (two decades plus) UNC Share Block abuse . Interestingly, the number of vulnerable software platforms have increased exponentially, due to the know blossoming vector that can include both HTTP and HTTPS. Oops.

SPEAR, the research team at Cylance, has discovered new attack vectors for an 18-year-old vulnerability in Windows Server Message Block (SMB). The updated attack vector, called Redirect to SMB, impacts products from Microsoft, Apple, Adobe, Symantec, Box, Oracle, and more. - via CSO's Steve Ragan

April 14, 2015 /Marc Handelman
All is Information, Information Security, Network Security
  • Newer
  • Older