Boston (MA) - A new worm has been discovered by Internet security company Sophos, which it says can make computers vulnerable to remotely controlled attacks.

The unpatched hole affects the Windows DNS server interface and its Remote Procedure Call (RPC).  The worm, dubbed W32/Delbot-AI, can exploit the server by sending corrupt RPC packets.

The worm allows hackers to gain remote access to affected PCs.  Microsoft says most versions of Windows 2000, Windows Server 2003, and Windows XP are open to the hack.  Vista does not contain the vulnerable code, said the software company in a security advisory.

In addition, W32/Delbot-AI can exploit a small vulnerability in a handful of Symantec anti-virus software titles.  However, a patch that was released a year ago from Symantec will prevent the attack.

no such thing as a "zero day flaw"

Apr 18, 2007 16:48     

I think you were trying for "zero day exploit". the zero day bit refers to the time between the flaw being published and the availability of an exploit for said flaw.
Anonymous report abuse vote down vote up Votes: +0

thats deep...

Apr 19, 2007 12:24     

thats deep
taylor freeman report abuse vote down vote up Votes: +0