Friday, September 19, 2014

Software and IT Partner News

Aug24

Written by:SuperUser Account
8/24/2010 7:54 AM RssIcon

Today we released Microsoft Security Advisory 2269637. This is different from other Microsoft Security Advisories because it's not talking about specific vulnerabilities in Microsoft products. Rather, this is our official guidance in response to security research that has outlined a new, remote vector for a well-known class of vulnerabilities, known as DLL preloading or "binary planting" attacks.  We are currently conducting a thorough investigation into how this new vector may affect Microsoft products. As always, if we find this issue affects any of our products, we will address them appropriately.

Additionally, today we are providing a defense-in-depth update that customers can deploy that will help protect against attempts to exploit vulnerable applications through this newly identified vector. Finally, we are using our strong connections with researchers and partners in the industry to help address this new class of vulnerability. Our Microsoft Vulnerability Research program has been working to coordinate communication between the researcher who first brought this new vector to us and other application developers who are affected by this issue.

Technical Background

What this new research demonstrates is a new remote vector for DLL preloading attacks. These attacks are not new or unique to the Windows platform. For instance, PATH attacks that are similar to this issue constitute some of the earliest class of attacks against the UNIX operating system. The attack focuses on tricking an application into loading a malicious library when it thinks it's loading a trusted library. For this to succeed, the application has to call the trusted library by name instead of properly using its full path (for example, calling dllname.dll rather than C:\Program Files\Common Files\Contoso\dllname.dll). The attacker then has to place a malicious copy of the library in a directory that the system will search to locate the library and have that be a directory it will search before the directory where the trusted library actually is. For example, if an attacker knows that the application simply calls for dllname.dll (rather than using the full path) and it will look for dllname.dll in the current working directory before looking in C:\Program Files\Common Files\Contoso\. Then if the attacker can plant a malicious copy of dllname.dll in the current working directory, the application will load it first executing the attacker's code in the application's security context.

PATH or DLL preloading attacks have so far required the attacker to plant the malicious library on the local client system. This new research outlines a way an attacker could levy these attacks by planting the malicious library on a network share. In this scenario, the attacker would create a data file that the vulnerable application would open, create a malicious library that the vulnerable application would use, post both of them on a network share that the user could access, and convince the user to open the data file. At that point, the application would load the malicious library and the attacker's code would execute on the user's system.

Because this is a new vector, rather than a new class of vulnerability, the existing best practices that protect against this class of vulnerability, automatically protect against this new vector: ensuring that applications make calls to trusted libraries using full path names.

While the best protection is following best practices, we are able to provide an additional layer of defense by offering a tool that can be configured to disable the loading of libraries from network shares. In particular, because this is altering functionality, we encourage customers to evaluate this tool before deploying it. As part of your evaluation, we encourage you to review the information at the Security Research and Defense (SRD) blog.

We will continue our work with the researchers and the industry to identify and address vulnerable applications. And as always, we will update you with any new information we have through our security advisories, security bulletins and the MSRC weblog as appropriate.

Original post is here.

Featured Microsoft Partners

 

CAL Business Solutions, Inc 
Office Location:  Harwinton, Connecticut, United States
Type:  Systems Integrator,Reseller,Training Firm,VAR
Industry Focus:  Distribution, Fuel Distribution, Staffing, Healthcare, Non Profit and Professional Services


CAL Business Solutions is a Connecticut based Microsoft Partner focused on Microsoft Dynamics GP (Great Plains) ERP/accounting software. If you are considering new accounting software, upgrading your existing system, or if you currently use Microsoft Dynamics GP (Great Plains) and want the best local support and training, contact CAL Business Solutions. http://www.calszone.com Get a personalized Dynamics GP Quick Quote online at http://www.calszone.com/quick-quote or download our popular white paper "30 Questions Every CFO Must Ask About The Cost of Accounting Software" at http://www.calszone.com/30questions

 

 

Primus Interpares Consulting 
Office Location:  New York, New York, United States
Type:  ISV,Systems Integrator,Reseller,System Builder,VAR
Industry Focus:  Server Instalations Microsoft CRM Sever, Electronic Medical Records; Website building and maintenence, computer repair.


computer technician providing assistance with hardware and software back-up issues, internet and networking, creation and maintenance of websites, networking and all other types of computer help for small business, large business and home office help. We also provide computer tutoring.

 

 

Metafile Information Systems 
Office Location:  Rochester, Minnesota, United States
Type:  ISV
Industry Focus:  Retail, Manufacturing, Distribution, Government


MetaViewer® Paperless ERP for Dynamics® Go beyond the electronic file cabinet to an integrated paperless ERP solution from MetaViewer®. Today’s business environment has heightened the need for cost-cutting efficiencies and executive visibility into all your financial processes. It has also brought heightened focus to the Accounts Payable function. The root of most of AP's challenges can be traced back to its dependence on paper and the resulting lack of automation and accurate analytics.

 

 

Congruent Software Inc. 
Office Location:  Bellevue, Washington, United States
Type:  Systems Integrator,VAR,Other
Industry Focus:  IT consulting services


Congruent, a Microsoft gold certified partner is a Global IT Services company which specializes in providing outsourced software development and systems integration services to ISVs and Fortune 500 companies alike. Being the single source for all your business technology needs, Congruent is headquartered at Seattle, Washington with its offshore development center based at Chennai, India.

 

 

Turnkey Technologies, Inc. 
Office Location:  Chesterfield, Missouri, United States
Type:  Systems Integrator,Reseller,VAR
Industry Focus:  Manufacturing, Distribution, Financial Services, Professional Services, Transportation, Healthcare and Non-Profit


Turnkey Technologies, Inc. is a Gold Microsoft Dynamics ERP, Gold Microsoft Dynamics CRM, Microsoft Office 365, Microsoft Lync, Microsoft Exchange, Silver Microsoft Platform Hosting and Cloud Accelerate partner servicing local, regional, national and international customer since being founded by Chris Gherardini in 1994. Turnkey has established itself as a client focused information technology solutions provider.Our team has been built with top-notch professionals that provide our clients with high value end-to-end analysis, implementation, deployment, customization, integration, training and support services. Our clients span multiple industries; as such we take pride in our ability to understand and speak our clients’ business language, creating an efficient line of communication.Today, Turnkey provides off-the-shelf business application software along with consulting and software development services to a wide range of satisfied clients. Our clients represent various industries such as financial services, healthcare, distribution, manufacturing, service, construction, oil & gas, aviation, government and others.If you are considering new accounting software, upgrading your existing system, or if you currently use Microsoft Dynamics GP (Great Plains), Microsoft Dynamics AX or Microsoft Dynamics CRM and want the best local support and training, contact sales@turnkeytec.com or go to www.turnkeytec.com today!

 

Search All Companies


Tag List

Minimize
mobile (19)
social media (12)
gaming (11)
Android (7)
security (7)
tablet (6)
Amazon (5)
CES (5)
management (5)
advertising (4)
EAM (4)
foursquare (4)
Microsoft Partner Network (4)
Nokia (4)
API (3)
Barnes & Noble Nook (3)
malware (3)
salesforce (3)
smb nation (3)
The Resource Group (3)
.NET (2)
analytics (2)
Australia (2)
Blackberry (2)
chrome (2)
developers (2)
Digg (2)
education (2)
Enterprise Asset Management (2)
facebook (2)
Government (2)
Green (2)
Hadoop (2)
Halo (2)
hotmail (2)
Legal (2)
McAfee (2)
PaaS (2)
Paul Allen (2)
planning (2)
RIM (2)
skype (2)
SMB (2)
SQL (2)
Staffing Software (2)
System Center (2)
usage (2)
Windows Live (2)
Yahoo (2)
3D Technology (1)
Active Directory (1)
adCenter (1)
Adobe (1)
ADP (1)
Alternative Energy (1)
Amazon Kindle (1)
annual enhancement (1)
AOL (1)
apache (1)
App Store (1)
Apple TV (1)
Arch Touch (1)
Asset Management (1)
Asset Point (1)
AT&T (1)
Atom (1)
Augmented Reality (1)
Aurora (1)
B2B (1)
B2C (1)
Ballmer (1)
Bill Gates Annual Letter (1)
Bob Scott's (1)
bots (1)
Browsers (1)
business (1)
business IT integrators (1)
business sales presentations (1)
Cameron Diaz (1)
CBS (1)
Cisco (1)
citrix (1)
CMMS (1)
Collins Computing (1)
consumer electronics (1)
Convergence.Keynote (1)
creative commons (1)
crm (1)
Crowd Sourcing (1)
crowdsourcing (1)
data visualization (1)
David Pogue (1)
Development (1)
Docs.com (1)
Document Management (1)
dropbox (1)
Dryad (1)
EAS (1)
e-book (1)
ecommerce (1)
email (1)
Enterprise Portfolio Management (1)
Epicor 9 (1)
Eric Ligman (1)
ERP (1)
Event (1)
Excel (1)
Facebook IPO (1)
farm (1)
FarmVille MSN (1)
FCC (1)
feeds (1)
Ford (1)
GameTuts (1)
Goldman Sachs (1)
golf (1)
google docs (1)
Google TV (1)
Government Contractors (1)
hardware (1)
Healthcare (1)
heat maps (1)
home (1)
HP (1)
HTC (1)
Hyper-V (1)
IaaS (1)
IBM (1)
IE6 (1)
Infor Visual (1)
Intel (1)
iphone 5 (1)
IPM Global (1)
IT (1)
iTunes (1)
JAVA (1)
Kevin Turner (1)
keywords (1)
KnowledgeLake (1)
LexisNexis (1)
LightSwitch (1)
Lime (1)
location (1)
Logo (1)
Mainframe (1)
Managed Services (1)
mapping (1)
MapReduce (1)
maps (1)
marketing (1)
Mass Notification (1)
Media Center (1)
MED-V (1)
menlo mobile (1)
metrics (1)
Micorsoft Partner Network (1)
Microsoft Entertainment & Digital Media (1)
Microsoft Store (1)
Microsoft System Center Operations Manage (1)
MirageTable (1)
Motally (1)
mouse (1)
MPN (1)
MPN Renewal (1)
MSN (1)
MySQL (1)
Natural User Interface (1)
net neutrality (1)
Nikkei (1)
Nook (1)
NY Times (1)
Oak Trail (1)
OASIS (1)
Online Training (1)
outlook (1)
Partner Logos (1)
PartnerEd (1)
PartnerPoint (1)
Patches (1)
Patent (1)
PayPal (1)
PerformancePoint (1)
PIPA (1)
PowerPoint (1)
presentations (1)
Professional Services (1)
Public Sector (1)
Rackspace (1)
Ray Ozzie (1)
RearType (1)
Red Hat (1)
redu (1)
ROI (1)
Salesforce.com (1)
scaling (1)
schools (1)
SDL (1)
search (1)
Search Market (1)
Security Flow (1)
selling (1)
server (1)
SherWeb (1)
slate (1)
small business (1)
Smart Phone (1)
SoC (1)
Social Search (1)
software (1)
SOPA (1)
Southwest Airlines (1)
spam (1)
speech TellMe (1)
Staffing (1)
Steve Jobs (1)
SugarCRM (1)
sun (1)
Sync (1)
techcrunch (1)
TechED (1)
TEDx (1)
Telecommunications (1)
T-Mobile (1)
training (1)
TV (1)
Vail (1)
venture capital (1)
Virtual Event (1)
Virtual Partner Concierge (1)
VMWare (1)
VPC (1)
Vulnerability (1)
W3C (1)
web (1)
White Paper Leads (1)
wifi (1)
WikiLeaks (1)
Wikipedia (1)
Win 95 (1)
Window Live (1)
windows (1)
Windows 8 (1)
Windows 8 Release Preview (1)
Windows Azure Media Services (1)
Windows Phone 8 (1)
WoW (1)
xp (1)
Print  
© 2005 - 2011 PartnerPoint