Exploits Attack Flaw In Windows DNS

Last Thursday, Microsoft released a Security Advisory regarding a flaw in Windows 2000 and Windows Server 2003 DNS. By Sunday, there were exploits for the flaw circulating in the wild. There is no patch yet available, but Microsoft recommends that server administrators implement workarounds such as blocking TCP and UDP port 445 and any unsolicited traffic on ports higher than 1024. For more details about the flaw, read Variants of Rinbot worm attack Windows Server DNS flaw from SC Magazine.