Is it time to upgrade?
It is no secret that many citizens believe that updating key systems is evil, working — do not touch.
Some reach in an effort to keep everything as it was to a very high level of antiquity - domain controllers with server 2003 and the appropriate level of domain and forest, Exchange 2010 without SP, past-generation antiviruses, instead of Next Generation (from well-known TRAPS), flat networks, SMB 1, the list goes on.
All of the above was exacerbated by the abominable organization ...
20 years of the First Chechen War: Part II. Morituri: going to die
In May 2017, many people paid a great price for this approach, at the time WannaCry started working, only two products prevented the spread of the virus, and both of them are not KAV with default settings. I wonder if someone would name these products in the comments?
')
A few days ago, Microsoft published CVE-2018-8265 | Microsoft Exchange Remote Code Execution Vulnerability , and on the leading site for space expertise, import substitution and insertion of tables * for some reason are silent, there is not even a comparison statistics that in (to substitute the product) this has never been and cannot be.
The description of the vulnerability is simple -
A remote code execution of vulnerability in the Microsoft Exchange software package specially for crafted email messages. An attacker who successfully exploited the system user. An attacker could then install programs; view, change, add, or delete data.
If you’re anxious, you’ll be able to send a message.
Microsoft Exchange parses specially crafted email messages.
This is not the first case of remote execution, for example, here is an earlier C VE-2018-8154 Remote Code Execution Vulnerability of May 2018, but at least they wrote about it in the article .
Knowledgeable people suggest about the existence of such a record , where drag.prer.ech. Sinitsyn tells a little about these vulnerabilities, from 48 minutes.
And how do you build a policy of update and control?
* By the way, experts - and align = "right" - also does not work on the leading site? Buttons of formatting the text to the right did not deliver or I do not see them?
Some reach in an effort to keep everything as it was to a very high level of antiquity - domain controllers with server 2003 and the appropriate level of domain and forest, Exchange 2010 without SP, past-generation antiviruses, instead of Next Generation (from well-known TRAPS), flat networks, SMB 1, the list goes on.
All of the above was exacerbated by the abominable organization ...
20 years of the First Chechen War: Part II. Morituri: going to die
In May 2017, many people paid a great price for this approach, at the time WannaCry started working, only two products prevented the spread of the virus, and both of them are not KAV with default settings. I wonder if someone would name these products in the comments?
')
A few days ago, Microsoft published CVE-2018-8265 | Microsoft Exchange Remote Code Execution Vulnerability , and on the leading site for space expertise, import substitution and insertion of tables * for some reason are silent, there is not even a comparison statistics that in (to substitute the product) this has never been and cannot be.
The description of the vulnerability is simple -
A remote code execution of vulnerability in the Microsoft Exchange software package specially for crafted email messages. An attacker who successfully exploited the system user. An attacker could then install programs; view, change, add, or delete data.
If you’re anxious, you’ll be able to send a message.
Microsoft Exchange parses specially crafted email messages.
This is not the first case of remote execution, for example, here is an earlier C VE-2018-8154 Remote Code Execution Vulnerability of May 2018, but at least they wrote about it in the article .
Knowledgeable people suggest about the existence of such a record , where drag.prer.ech. Sinitsyn tells a little about these vulnerabilities, from 48 minutes.
And how do you build a policy of update and control?
* By the way, experts - and align = "right" - also does not work on the leading site? Buttons of formatting the text to the right did not deliver or I do not see them?
Source: https://habr.com/ru/post/426257/
All Articles