Solomon Jones
CPSC 2106
Dr. Peker
09/17/2014

Vulnerability Analysis

1) As of today the network that consists of the small Microsoft workgroup LAN contains vulnerabilities, which are listed as viewed: * 1) Vulnerability in Microsoft Windows Kernel Could Allow Elevation of Privilege, 2) Vulnerability in DirectAccess and IPsec Could Allow Security Feature Bypass and 3) Vulnerability in Internet Explorer Could Allow Remote Code Execution, 4) Vulnerability in Microsoft Malware Protection Engine Could Allow Denial of Service, 5) Vulnerability in Internet Explorer Could Allow Remote Code Execution. All of these Vulnerabilities existed in the workgroup LAN in the past months. 2) While checking over the different vulnerability description, we found that one the Vulnerabilities involve privilege elevation, * which was dated January 01, 2014 where in Microsoft windows Kernel NDProxy Vulnerability could allow privilege elevation in telling that if you were to give me certain privilege to just “read only “and I change those privileges to include “read and write” then I would most defiantly consider this vulnerability a high priority being that this group is exposed to this elevation of privilege. 3) In this section I will be identifying three vulnerabilities and the solutions to the related client configurations for each LAN vulnerability. * The Vulnerability in DirectAccess and IPsec could allow Security feature bypass, the solution recommended would be to apply to the affected releases of Microsoft Windows using the Microsoft Update immediately using management software, or by checking for updates. * Secondly, for the Vulnerability in Internet Explorer Could Allow Remote Code Execution, the solution would be to issue an MS14-021, which is a Security Update for Internet Explorer. According to Technet.com, this security update resolves a publicly disclosed vulnerability in Internet Explorer. The vulnerability could allow remote code execution if a user views a specially crafted webpage using an affected version of Internet Explorer. An attacker who successfully exploited this vulnerability could gain the same user rights as the current user. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights. ("Microsoft Security Advisory 2963983.") * Last of all for Vulnerability in Microsoft Malware Protection Engine Could Allow Denial of Service, the solution I would suggest is according to Technet.com, Verify that the update is installed for the latest version of Microsoft Malware Protection Engine and definition updates are downloaded for the Microsoft antimalware products. If not then install this updated. (Microsoft Security Advisory 2974294)

Work Cited

"Microsoft Security Advisory 2963983." Microsoft Security Advisory 2963983. N.p., n.d. Web. 17 Sept. 2014.
"Microsoft Security Advisory 2974294." Microsoft Security Advisory 2974294. N.p., n.d. Web. 17 Sept. 2014.