August 8th, 2006 Microsoft Tuesday Nessus Checks
Tenable Direct Feed and Security Center users have updated Nessus plugins to check for all vulnerabilities disclosed by the recent "Microsoft Tuesday" patches. The majority of these checks are for client-side issues and require local access with domain credentials. There were 12 local checks in total including two for Microsoft Office.
There is one highly critical remote flaw (MS06-040) which is a stack overflow. It is possible to exploit Windows 2000 and XP SP1 remotely if they are not protected by a firewall. Windows 2003 SP1 and XP SP2 may also be exploitable, but could just be subject to a denial of service attack. Tenable has developed Nessus plugin 22194 which can check for MS06-040 remotely without any credentials at all.
Tenable is also actively analyzing these patches for detection with the Passive Vulnerability Scanner.
Related Articles
Cybersecurity Snapshot: Many Employees Overshare Work Info with AI Tools, Report Finds, as ‘Cybersecurity Awareness Month’ Kicks Off
October 4, 2024Check out the best practices cyber agencies are promoting during Cybersecurity Awareness Month, as a report warns that staffers are feeding confidential info to AI tools. Meanwhile, a study highlights how business decisions can derail OT security. Plus, get the latest on Active Directory security, CISO salary trends and ransomware attacks!
How to Unlock Advanced IoT Visibility for Cyber-Physical Systems
October 1, 2024As the number of IoT devices deployed globally continues to rise, cyber-physical systems and business operations are exposed to greater risk. Improving asset visibility, monitoring and risk management are critical steps to preventing breaches.
Cybersecurity Snapshot: NIST Program Probes AI Cyber and Privacy Risks, as U.S. Gov’t Tackles Automotive IoT Threat from Russia, China
September 27, 2024A new NIST program will revise security frameworks like NIST’s CSF as AI risks intensify. Plus, the U.S. may ban cars with Russian and Chinese IoT components. Meanwhile, the CSA adds AI insights to its zero trust guide. And get the latest on cybersecurity budgets, SBOMs and the Ghost cybercrime platform!