MS Critical Patch Fixes 8 Vulnerabilities

nandemoari writes "A hole allowing hackers to take control of Microsoft Exchange was just one 'critical' issue the Redmond-based company promises it has fixed with a patch correcting a total of eight vulnerabilities in its programs, including the Internet Explorer browser, Office, and its SQL Server. Three of the eight vulnerabilities patched yesterday were marked 'critical.' The most concerning is an issue with Exchange that would allow attackers to take over an Exchange server by simply forwarding a carefully crafted message to a corporate mail server. Microsoft has admitted that the vulnerability can be exploited when a user opens or previews an email in the Transport Neutral Encapsulation Format (TNEF)."

Comments

Re:I love the small of hot-fix patches in the morn

[Anonymous Coward]

OH Heavens! A local vulnerability which could leave to privilege escalation!

The exchange bugs in question were remote hole mr troll.

Re:Doesn't Sound so Bad

[subsoniq]

it isn't a pain in the ass if you actually have a *clue* to what you are doing, and as for scaling, we run 3000 users per exchange mailbox cluster, and we expect to be able to get well over twice that when we go to Exchange 2007.