Lost in translation: Microsoft forced to pull update due t…[ad_1]
Microsoft has been forced to pull an update it issued as part of its August Patch Tuesday after it was found that the patch in question, meant to fix a spoofing vulnerability in Microsoft Exchange Server, would not install properly on non-English systems.
The company issued the patch, assigned CVE-2023-38181, on 8 August [Tuesday], describing it as follows: "An attacker who successfully exploited this vulnerability could access a user's Net-NTLMv2 hash which could be used as a basis of an NTLM Relay attack against another service to authenticate as the user."
In the update, issued on 9 August, the company said: "...an issue has been discovered with the non-English August updates of Exchange Server and you should postpone installing these updates.
"The script protecting customers from the vulnerability documented by CVE-2023-21709 can be run to protect against the vulnerability without installing the August updates. Microsoft recommends running the script."
The CVE-2023-21709 was assigned to an elevation of privilege flaw that had a CVSSv3 score of 9.8, but Microsoft rated it as an important flaw, not critical.
"We are aware of Setup issues on non-English servers and have temporarily removed August SU from Windows / Microsoft update," Microsoft said.
"If you are using a non-English language server, we recommend you wait with deployment of August SU until we provide more information."
Commenting on the incident, experienced British security guru Kevin Beaumont said: "Microsoft should really take their staff off trying to find exploits in other vendor's products and put their staff on their own products.
"The customer experience here is basically being shot at constantly by the same person with the same gun while MS are running around with their wangs out going 'we're the experts!!'
"(This vuln allows PowerShell remoting, btw (not just spoofing) which is really powerful... and the patch got pulled as it breaks non-English Exchange servers)."
Beaumont was referring to the fact that Microsoft often issues advisories about security issues with other companies' software, witrhout bothering to keep its own house in order.
GARTNER MARKET GUIDE FOR NDR 2022You probably know that we are big believers in Network Detection and Response (NDR).
Did you realise that Gartner also recommends that security teams prioritise NDR solutions to enhance their detection and response?
Picking the right NDR for your team and process can sometimes be the biggest challenge.
If you want to try out a Network Detection and Response tool, why not start with the best?
Vectra Network Detection and Response is the industry's most advanced AI-driven attack defence for identifying and stopping malicious tactics in your network without noise or the need for decryption.
Download the 2022 Gartner Market Guide for Network Detection and Response (NDR) for recommendations on how Network Detection and Response solutions can expand deeper into existing on-premises networks, and new cloud environments.
PROMOTE YOUR WEBINAR ON ITWIREIt's all about Webinars.
Marketing budgets are now focused on Webinars combined with Lead Generation.
If you wish to promote a Webinar we recommend at least a 3 to 4 week campaign prior to your event.
The iTWire campaign will include extensive adverts on our News Site itwire.com and prominent Newsletter promotion https://itwire.com/itwire-update.html and Promotional News & Editorial. Plus a video interview of the key speaker on iTWire TV https://www.youtube.com/c/iTWireTV/videos which will be used in Promotional Posts on the iTWire Home Page.
Now we are coming out of Lockdown iTWire will be focussed to assisting with your webinars and campaigns and assistance via part payments and extended terms, a Webinar Business Booster Pack and other supportive programs. We can also create your adverts and written content plus coordinate your video interview.
We look forward to discussing your campaign goals with you. Please click the button below.
MORE INFO HERE!
Tags: Don Lichterman, IT Industry, SCA Sunset, Sunset Host Co