Looks like some proof-of-concept code may already be coming out for yesterday’s Exchange Patch:

“Immunity [Security] has released an iCal fuzzer to their product partners,” read the Symantec warning. “Although it is not known if this fuzzer is capable of triggering the bug addressed by this alert, there is a possibility it will in the future, or may find other unreported vulnerabilities. The fuzzer has been distributed as a module for the CANVAS exploit framework. Given the rapid development of this tool, it is likely that an exploit for this issue will be developed in the near future.”

Since it’s wormable, if your organization runs Exchange you should be seriously concerned about this one. If you can’t get it patched soon, you may consider using your spam filters to block the iCal and vCal messages from ever getting to your Exchange server.

Hackers Expected To Target Exchange [InformationWeek]

Post a Comment...