There is a new vulnerability affecting Microsoft Windows Vista and Microsoft Server 2008 users that we would like to take some time to tell you about.

The vulnerability is in Microsoft’s SMBv2 code and can be exploited remotely by unauthenticated users.  This means any Windows Vista or Server 2008 user connected to the Internet could potentially have their system taken over by an attacker.  There are working exploits for this vulnerability and Microsoft has not released a Windows Security Update yet.

As a work around to the problem, until the official Windows Security Update is released, you can download a Microsoft Fix It package to disable the vulnerable SMBv2 code.  We have provided a link to the package below for your convenience.  (Note: Disabling SMBv2 may slow down SMB connections between Windows Vista and Windows Server 2008 machines.)

Microsoft Fix It – Disable SMBv2

Here is a link to the Microsoft Fix It package to re-enable SMBv2.  You can re-enable SMBv2 once Microsoft releases a security update for this problem.

Microsoft Fix It – Re-Enable SMBv2

For more information you can read the official Microsoft Security Advisory.

http://www.microsoft.com/technet/security/advisory/975497.mspx

CyberZone and Midwest Data Systems will gladly assist anyone with protecting their systems from this vulnerability.  Just stop in the store or give us a call.

1506 Cleveland Ave

Marinette, WI 54143

Toll Free: 877-678-9665

Local: 715-732-8500