| Bulletin |
Exploit Types
/Technologies Affected |
System Types Affected |
Exploit
details public?
/ Being exploited? |
Comprehensive,
practical
workaround
available? |
MS severity rating |
Products Affected |
Notes |
Randy's recommendation |
MS08-037
953230 |
Spoofing
/ Windows DNS |
Servers, Terminal Servers and
Workstations |
No/No |
No |
Important |
Win2000
Win2003
Win2008
XP |
Restart Req’d; Both DNS Clients and Servers affected |
Patch after normal testing |
MS08-038
950582 |
Remote code
/ Windows Explorer |
Terminal Servers and
Workstations |
Yes/No |
Yes |
Important |
Vista
Win2008
|
Restart req’d; Workarounds will disable saved search feature |
Patch after minimal testing |
MS08-039
953747 |
Privilege elevation
/ Exchange Outlook Web Access |
Servers
|
No/No |
No |
Important |
Exch2003
Exch2007 |
Client’s email at risk |
Patch after testing |
MS08-040
941203 |
Privilege elevation; information disclosure
/ SQL Server |
All systems that use SQL Server
|
No/No |
No |
Important |
SQL Server; WMSDE; WYukon |
Restart req’d; Multiple vulnerabilities addressed |
Patch after normal testing |
