Microsoft releases patch for SNMP flaw

Microsoft on Friday released a patch for two versions of its Windows operating system to secure a hole discovered in a critical networking technology that could allow an attacker to stage denial-of-service attacks or take over a user's computer system.

The vulnerability lies in the way a number of companies implement a standard protocol that allows system administrators to manage devices in a network, such as firewalls, computers and routers, called SNMP (Simple Network Management Protocol). It was identified last week and publicised by CERT/CC (Computer Emergency Response Team/Coordination Center), a US Government funded security group.

Microsoft provides an implementation of SNMP for all versions of Windows except Windows ME. The company said the protocol is not included in the operating system by default. Instead, a user must install it manually. The initial patches made available from Microsoft are for its Windows 2000 and Windows XP operating systems.

In addition to Windows, SNMP is used by a variety of vendors, including Sun Microsystems and most network equipment vendors. A list of affected vendors and fixes or workarounds for vulnerable products is available at http://www.cert.org/advisories/CA-2002-03.html#vendors/.

A workaround for the flaw as it is implemented in Windows was detailed on Tuesday in a security bulletin from Microsoft. The patches released on Friday should be installed in place of the workaround, Microsoft said. Patches for the remaining versions of Windows were not yet available.

Microsoft has made patches available for Windows 2000 and Windows XP users on its Web site at http://www.microsoft.com/technet/security/bulletin/ms02-006.asp.

Join the newsletter!

Or

Sign up to gain exclusive access to email subscriptions, event invitations, competitions, giveaways, and much more.

Membership is free, and your security and privacy remain protected. View our privacy policy before signing up.

Error: Please check your email address.
Keep up with the latest tech news, reviews and previews by subscribing to the Good Gear Guide newsletter.

Matt Berger

Computerworld
Show Comments

Brand Post

Most Popular Reviews

Latest Articles

Resources

PCW Evaluation Team

Tom Pope

Dynabook Portégé X30L-G

Ultimately this laptop has achieved everything I would hope for in a laptop for work, while fitting that into a form factor and weight that is remarkable.

Tom Sellers

MSI P65

This smart laptop was enjoyable to use and great to work on – creating content was super simple.

Lolita Wang

MSI GT76

It really doesn’t get more “gaming laptop” than this.

Jack Jeffries

MSI GS75

As the Maserati or BMW of laptops, it would fit perfectly in the hands of a professional needing firepower under the hood, sophistication and class on the surface, and gaming prowess (sports mode if you will) in between.

Taylor Carr

MSI PS63

The MSI PS63 is an amazing laptop and I would definitely consider buying one in the future.

Christopher Low

Brother RJ-4230B

This small mobile printer is exactly what I need for invoicing and other jobs such as sending fellow tradesman details or step-by-step instructions that I can easily print off from my phone or the Web.

Featured Content

Product Launch Showcase

Don’t have an account? Sign up here

Don't have an account? Sign up now

Forgot password?