Posté par: igor51 le mai 29, 2019, 15:00:03
May’s Patch Tuesday saw what is likely to be one of the most prominent vulnerabilities this year with the “wormable” Windows Terminal Services vulnerability (CVE-2019-0708). However, there’s another remote code execution (RCE) vulnerability that would be hard to ignore: CVE-2019-0725, an RCE vulnerability in Windows Dynamic Host Configuration Protocol (DHCP) Server. It’s worth noting that DHCP-related vulnerabilities are drawing more attention in Patch Tuesdays this year. An example is a different RCE flaw (CVE-2019-0626) that was patched in the DHCP server last February.
CVE-2019-0725 doesn’t require user interaction, and affects all versions of Windows Server. How bad — and exploitable — is CVE-2019-0725, exactly?
The post CVE-2019-0725: An Analysis of Its Exploitability appeared first on .
Source: CVE-2019-0725: An Analysis of Its Exploitability (http://feeds.trendmicro.com/~r/Anti-MalwareBlog/~3/3268yMf2sDY/)