 |
 |
http://blogs.technet.com/b/srd/archive/2014/11/18/additional-information-about-cve-2014-6324.aspx Their supplemental blog indicates that patching domain controllers is enough to resolve the problem and the patches for additional operating systems is part of their defense-in-depth strategy. On Tue, 18 Nov 2014 13:30:05 -0500, David Graff <[log in to unmask]> wrote: >https://technet.microsoft.com/en-us/library/security/MS14-068 > >For anyone running an AD environment, MS released a new critical update to >address a privilege elevation attack that allows anyone with valid domain >user rights to elevate to domain admin. Targeted attacks are already >occurring using this vector. Get it patched on servers as quickly as >possible, especially DCs.