New Exploit Targeting MS06-040

New exploit code leveraging the vulnerability in the Windows server service is circulating. Unlike the previous MS06-040 exploit, which targeted only Windows 2000 systems, this latest exploit allegedly impacts Windows 2000 SP4, Windows XP SP1 and SP2, Windows XP Pro x64, and several versions of Windows Server 2003.

Microsoft released the MS06-040 security patch on August 8th. If you haven't already installed the patch, you risk a remote attack running with system-level privileges. Two words of advice: Patch now.