CVE-2010-3223: Windows Failover Cluster Disks Permissions Vulnerability

Critical Vulnerability Information Vulnerability Overview Vulnerability ID: CVE-2010-3223 Vulnerability Title: Vulnerability in Windows Shared Cluster Disks Could Allow Tampering (2294255) Release Date: October 12, 2010 Update Date: November 10, 2010 CVE Number: CVE-2010-3223 Affected Software Affected Operating Systems - Windows Server 2008 R2 for x64-based Systems - Windows Server 2008 R2 for Itanium-based Systems Vulnerability Details Severity Level: Moderate Vulnerability Type: Permissions on New Cluster Disks Vulnerability Attack Vector: An attacker who successfully exploits this vulnerability could tamper with, modify, delete, or read data on the affected file system. At-Risk Systems: Any system with Failover Clustering enabled. Detection and Deployment Tools and Guidance Tools: Microsoft Baseline Security Analyzer (MBSA), SMS, Configuration Manager 2007 Information Sources: Microsoft TechNet Security Web site, Microsoft Update Catalog Update Information Recommended Action: Customers should apply the security update using update management software, or check for updates via Microsoft Update service. Issues Resolved: None Known Issues: None Additional Resources FAQs: Related to This Security Update Security Update Deployment: Detection tools, deployment guidance, and command-line parameters. Related Links: Security Update Deployment, Frequently Asked Questions (FAQ) Related to This Security Update

Goal Reached Thanks to every supporter — we hit 100%!

CVE-2010-3223: Windows Failover Cluster Disks Permissions Vulnerability