Microsoft Releases The MS08-002 Update

By Lashan Clarke

A second update, MS08-002, was released to address a potential attack using local access to Windows 2000, XP, and Server 2003. This attack could be gained by simple access and would allow the attacker to “elevate their privilege” to further access of the system.

Microsoft also updated their Windows Malicious Software Removal Tool and released it on their Update site as part of their download center.

Qualys, a security firm specializing in network vulnerabilities, indicated that an attacker who exploits this security breach could gain complete control over the affected system. This access would allow them to install programs; view, change, or delete data; and create new accounts with full administrative rights.