Remote Code Execution in RPC on Windows DNS Server
Microsoft has published an advisory on remote code executing via a vulnerability in RPC for Windows DNS Server. There are no details, however Microsoft is saying that it is a limited attack. This vulnerability has been assigned CVE-2007-1748. Successful exploitation would allow code to be executed under the context LOCAL SYSTEM and anonymous exploitation is possible against Windows 2000 Server and Windows 2003 Server.