Action Required: Turn off RPC management of DNS on all DCs. Do it now.

 If you administer a Windows domain, or a domain with Windows DNS/DC Servers, you will want to take care of this problem before you leave for the weekend.  According to the advisory here,  Microsoft has received public reports of a limited attack exploiting a vulnerability in the Domain Name System (DNS) Server Service.  According to the advisory, Microsoft’s initial investigation reveals that the attempts to exploit this vulnerability could allow an attacker to run code in the security context of the Domain Name System Server Service, which by default runs as Local SYSTEM.

At present, the following Operating Systems are vulnerable: Microsoft Windows 2000 Server Service Pack 4, Windows Server 2003 Service Pack 1, and Windows Server 2003 Service Pack 2. Microsoft Windows 2000 Professional Service Pack 4, Windows XP Service Pack 2, and Windows Vista are not affected as these versions do not contain the vulnerable code.

The security mechanisms that were architected into Windows Vista (and the forthcoming Longhorn Server) operate under the assumption that services (such as the currently vulnerable DNS Service) WILL be compromised at some point, and steps are taken so that a compromise will not affect the security of the rest of the OS. Within Windows Vista (and Longhorn Server), services have been hardened and secured in four ways: running services with Least Privilege, Service Isolation, Restricted Network Access, and Session 0 Isolation.  The TechNet Article on Services Hardening can be found here, and goes into depth on each of the mitigations.

Customers who believe they are affected can contact Product Support Services. Contact Product Support Services in North America for help with security update issues or viruses at no charge using the PC Safety line (1-866-PCSAFETY). International customers can use any method found at this location:

Jesper Johansson (former MS Employee and security luminary) has posted a way to implement the current workaround on a large scale at the following site: (*Note: The following link/suggestions are from a 3rd Party site, and are not endorsed by Microsoft.  Test thoroughly in a lab environment and implement at your own risk)

Comments (7)

  1. BooRadely says:

    Make sure to bounce the DNS service after adding the REG key!

  2. dgrr says:

    Beijing on June 10 morning news, according to Bloomberg survey report GTM Research and the American Solar Energy Industries Association released the first quarter of this year, US home solar power system capacity increase of 76% over last year, to 437
    megawatts (MW) ,Solar Batteries the nation’s new generating capacity, more than half of which is a photovoltaic power generation. The report shows that a quarter of the US solar power capacity by
    1.3 gigawatts (GW), the sixth consecutive quarterly increase of over 1 GW. The total annual installed capacity is expected to reach 7.9 GW, Solar Power Penerator , Solar Power Pack representing an increase of 27%.
    The report predicts that by 2016 solar power will meet the electricity needs of about 800 million households in the United States to offset 45 million metric tons of carbon emissions, equivalent to removing 10 million cars. energy storage system

  3. qw says:

    Call Prachi for 24/7 sexy Mumbai escorts direct to your room in 20 minutes or less. Pink Angels of Mumbai have girls who come from a range of backgrounds and include glamour, fashion and young students. They are all beautiful, elegant, sexy, warm, fresh,
    sweet, young and stunning.

  4. da says: offers you the finest escort’s in Mumbai. Call 24 hrs Ms Nimita to find quality Mumbai escorts service like Airhostess, Models, College girls, Housewife, working girls, Russian and more.

  5. wa says:

    Call SARA: we provide High quality Escorts service in Mumbai city. Here you will get fantastic Escorts Girls like College girls, Models, Airhostess, Housewife, Russian, Mumbai call girls and independent call girls in Mumbai for full service.

  6. se says:

    Call PIYA: Mumbai Escorts. If you wish to obtain escorts in Mumbai, is the place for you, your source for different type of College girls, Models, Airhostess, Housewife, Russian, Mumbai call girls and independent call girls in Mumbai.

  7. za says:

    Call ZUHI . We provide High quality Escorts service in Mumbai. Here you will get fantastic Escorts Girls, Service offering by our beautiful escorts models. 3/5/7 Star hotel and home 24 hrs service in all Mumbai.