Windows BROWSER protocol issue

tgell · Feb 17, 2011

Earlier this week a PoC exploit for a vulnerability in the BROWSER protocol was released on Full Disclosure. There has been some discussion regarding whether this issue can result in Remote Code Execution (RCE) or is only a Denial of Service (DoS). This blog post provides details on the exploitability based on our internal analysis.

Which systems are vulnerable

All versions of Windows are vulnerable, although the issue is more likely to affect server systems running as the Primary Domain Controller (PDC). In environments following best practices, the BROWSER protocol should be blocked at the edge firewalls thus limiting attacks to the local network.
Click to expand...

Article

DavidGP · Feb 18, 2011

Interesting that in the main they are thinking this could affect Windows Servers more, Windows Servers are not the predominent server OS used world wide, so is follwing a trend that the lesser but starting to be implimented apps are getting some attention,

Be that iPhone and Smart Phones, to Mozilla, Chrome, etc they where never the trargeted apps, but as Linux servers are the main ones used and attacked (hence a hell of alot of malware originates off Linux servers and not as you'd think Windows Servers) then the malware writers are going after the 2nd and 3rd listed used ones.

Although I dont know many users here that would know what the PDC or BROWSER protocol was as the BROWSER protocol is not IE or Firefox etc but a network service behind that and linked to TCP/IP.

dlb · Feb 20, 2011

More info about this is available in this article.

(I was going to post this story myself, but tgell beat me to it )

Log in or Sign up

Windows BROWSER protocol issue

tgell Major Geek Extraordinaire

DavidGP MajorGeeks Forum Administrator - Grand Pooh-Bah Staff Member

dlb MajorGeek