Stefan Mileschin

Windows users are still suffering from a hole which was first discovered by Aaron Spangler in 1997.

The hole is so bad, that it makes Slough look somewhat attractive and leaves millions of Windows users open to attack, making it possible to extract encrypted credentials from a target machine.

Security experts at Cylance say the problem affects “any Windows PC, tablet or server” (including Windows 10) and is a slight progression of the Redirect to SMB attack.

Redirect to SMB is essentially a man-in-the-middle attack which involves taking control of a network connection.Victims are then redirected to a malicious SMB server which can extract usernames, domains and passwords. Cylance also reports that software from companies such as Adobe, Oracle and Symantec — including security and antivirus tools — are affected.

Writing in his bog, Brian Wallace explains that Cylance has spent the last month and half working with vendors to help fix the problem, but has now decided to make details of the vulnerability public.

http://www.techeye.net/security/wind...hole-from-hell