New Windows Attack Can Disable Firewall

Posted by ryuzaki0 on Monday October 30, 2006 @07:40PM from the he-shoots-he-scores dept.

BobB writes to tell us NetworkWorld is reporting that new code released on Sunday could allow a fully patched Windows XP PC's personal firewall to be disabled via a malicious data packet. The exploit depends on the use of Microsoft's Internet Connection Service. From the article: "The attacker could send a malicious data packet to another PC using ICS that would cause the service to terminate. Because this service is connected to the Windows firewall, this packet would also cause the firewall to stop working, said Tyler Reguly, a research engineer at nCircle Network Security Inc."

2 of 273 comments (clear)

Re:What can you trust? by gbobeck · 2006-10-30 20:59 · Score: 4, Funny

You use an IPS/IDS appliance that goes up to level 7.

For extra effectiveness, make sure your level 7 IPS/IDS appliance is armed with nothing less than a +3 Sword of Packet Smiting.

--
Navicula hydraulica plena anguilarum est. Omnes castelli tuus nostri sunt. Ed elli avea del cul fatto trombetta.
Re:What can you trust? by pedestrian+crossing · 2006-10-30 21:51 · Score: 5, Funny

You use an IPS/IDS appliance that goes up to level 7.

Mine goes up to 11.

--
A house divided against itself cannot stand.