Totally agree microsoft should have properly tested and picked this bug up long ago, however microsoft are wallet fat and damn right lazy when it comes to actually fixing issues in their OS. They would much rather push out a new OS with old security flaws in place.... however thats no excuse for exploiting this flaw. End blame however should go to IT staff for a) not patching the systems when they had more than sufficent time, b) not having good uptodate antivirus with heuristic scanning enabled which detects a large portion of these worms and viruses, and c) for not configuring their firewalls correctly!

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/articles/8581/26282#26282