A new security hole in Windows 2000 operating system when used with Microsoft Corp.'s Web server software has allowed computer attackers to compromise machines, including a U.S. Army server, a security expert said on Monday.
Microsoft said it had released a patch and information for a workaround to protect computers from becoming so vulnerable an attacker could gain complete control over a machine.
The Army server was successfully attacked about one week ago, but was not connected to any critical systems, said Russ Cooper of research and security services firm TruSecure Corp. based in Herndon, Virginia.
An Army Network Command center spokeswoman did not immediately return a call seeking comment.
The incident is rare in that software companies usually are able to release a fix for a security vulnerability before it becomes public.
|