Internet Security Systems (ISS) strongly believes that the security vulnerability that Microsoft disclosed in the MS06-019 bulletin can originate a new worm that will affect unpatched Exchange Server systems throughout the World. According to them:
“Testing done by X-Force confirms denial of service of the Exchange Server is easily achieved with no user interaction and is not mitigated by firewall best practices.
Further analysis of this issue reveals that code execution is possible, but difficult to obtain. However, with the high profile of Microsoft Exchange as a target and the nature in which it is typically deployed, we expect to see active exploitation of this issue in the wild with the possibility of a worm.”
The keyword is patch, patch, patch!
Related links: