Did you see this? – MS08-067 and the Security Development Lifecycle
Posted by: Troy Tate
administration, analysis, awareness, blog, Data security, debugging, design, Development, malware, Microsoft, Microsoft Windows, patching, risk, Security, server, vulnerability
As you probably already know, Microsoft issued an urgent out of cycle security patch recently for a Vulnerability in Server service could allow remote code execution. Look here for additional Microsoft Security Vulnerability Research and Defense information about this bulletin. If you have not already applied this patch, I urge you to do so as there are reports of MS08-067 exploits in the wild for this vulnerability. For those of you who are developers and QA testers out there and wonder about how this vulnerability slipped through testing at Microsoft. Look at this article about MS08-067 and the Security Development Lifecycle. Like many of the responses to this blog posting say: keep code as simple as possible. Automated testing is not a panacea and keeping things simple may head off signficant problems later for all users and administrators.
Comment
RSS Feed
Email a friend
