Mu Dynamics Discovers, Helps Repair Zero-Day Vulnerability for Microsoft Windows Server 2008

English news - Mu Dynamics, Inc. (www.mudynamics.com), the leader in testing next-generation network services, today announced that it discovered and helped remediate the fix for one of the zero-day vulnerabilities detailed in today's Microsoft Patch Tuesday security bulletin. Microsoft credited Mu Dynamics with finding TLSv1 Record Client Denial of Service Vulnerability (CVE-2010-3229), which is categorized as Important. The vulnerability pertains to a low-level Secure Channel (Schannel) package that handles security negotiations for networked applications of any Microsoft IIS-based web site or cloud service deployed on Windows Server 2008. As a result, un-authenticated users could crash the entire Windows Server 2008 using a single packet.

Using the Mu Studio Fuzz solution, Mu Dynamics worked closely with Microsoft to demonstrate and reproduce the vulnerability. Microsoft was able to quickly identify the problem, develop a patch and re-test to validate the fix.

As an active member of the Microsoft Security Development Lifecycle (SDL) Pro Network, Mu Dynamics periodically tests products, such as Windows Server 2008, for vulnerabilities using the Mu Test Suite. Input validation of error and exception handling is consistently one of the most challenging areas to test. The Mu Test Suite auto-generates tens of thousands of fuzz tests that systematically and intelligently manipulates the fields in every packet of a custom transaction. The Mu solution also enables quick and efficient remediation by isolating the issue, facilitating communication between the development and test teams, and integrating into automated regression test beds.

For more information on the Mu Dynamics testing solutions, please visit, http://www.mudynamics.com/solutions/solutions-overview.html

English news online - About Mu Dynamics:

Mu Dynamics is the leader in testing NGN services, enabling customers to meet the challenges of deploying services for the iGeneration. Unlike legacy testing tools, Mu transforms actual service interactions into test scenarios using our patent-pending Active Service Replication (ASR) technology. Mu allows customers to accurately test complex services including triple play, mobile and cloud, empowering them to innovate with confidence and deliver high quality services.

Founded in 2005, Mu today has over 100 customers including the top five global operators, leading technology companies, and numerous government agencies.

Headquartered in Sunnyvale, California, more information on Mu's products, solutions, and customers are online at http://www.mudynamics.com.
English news