Active Directory bugs / vulnerability november 2021 CVE-2021-42287

I thought my holidays already started, but there is a very critical sercurity vulnerability included in Microsoft Active Directory. More precisely there are two vulnerabilities, CVE-2021-42287 and CVE-2021-42278 . Vulnerability CVE-2021-42278 contains an attack which is also known as sAMAccountName spoofing or impersonation. It is possible to rename Computer Accounts of DomainController to impersonate them. …

Merry Christmas everyone

Dear readers, I would like to take this opportunity to wish you a Merry Christmas and a good start into the year 2022. The year 2021 was very turbulent for my family and me. We have had a new family member and have also implemented some other projects around the house.Not to forget the professional …

No new Exchange Update december 2021

Exchange Team just released a new announcement, there will be no CU for Exchange Servers in december 2021. Also if there are no new updates, keep your server updated! As mentioned keep your onpremises exchange servers updated, see also this link: https://techcommunity.microsoft.com/t5/exchange-team-blog/why-exchange-server-updates-matter/ba-p/2280770 If your servers are already patched enjoy pre-christmas time.

Urgent Exchange 2019/2016/2013 Security Patch November 2021 KB5007409

Another very important security patch is enrolled the last 24 hours for Exchange 2013/2016/2019. See CVE-2021-42321. This CVE is also known als Remote Code Execution vulnerability. If you want to know some more information about this Exchange Update and the vulnerabilities see this link: https://techcommunity.microsoft.com/t5/exchange-team-blog/released-november-2021-exchange-server-security-updates/ba-p/2933169 Just choose your exchange version and download this patch from …