The SMB Minute Aaron and Tim discuss technology and computing important to Small and Medium Businesses.

Today 8-23-08 Microsoft released an out of cycle patch to fix a problem in their implementation of RPC(Remote Procedure Call).  This flaw is reported to be very exploitable, and there is talk of “weaponizing” this to produce a worm.  This flaw has the potential to rival the Blaster worm which exploited a similar problem back in 2003.  Whether or not a worm is developed, this flaw will be exploited, and used for Penetration testing, and smaller scale directed attacks on individual companies and unpatched machines.

What does this mean to you as a Business owner or employee?  It means that you should take steps to get your systems patched, quickly.  You should probably aim to have this done with in a week, possibly push it to November 1st or 2nd to check that patch does not negatively affect your systems.

Here is a link to the microsoft advisory http://www.microsoft.com/technet/security/Bulletin/MS08-067.mspx

Update

This affects Most versions of windows, and is available on windows update.

– Admin

Posted under Information/Advisories