Microsoft Reports Limited Attacks Against FTP Vulnerability

The Microsoft Security Response Center reports that they have updated Security Advisory 975191 due to limited attacks in the wild and new exploits being noted.

From their blog:

Additionally, a new proof of concept published allowing for Denial of Service (DoS) attacks on Windows XP and Windows Server 2003 with read access to the File Transfer Protocol (FTP) service. This does not require Write access. Also, a new POC allowing DoS was disclosed this afternoon that affects the version of FTP 6 which shipped with Windows Vista and Windows Server 2008. Customers should be aware that the Download Center has FTP 7.5 available for Windows Vista and Windows Server 2008. FTP 7.5 is not vulnerable to any of these exploits.

More to come, but I'm betting this accelerates Microsoft's response and the release of an out-of-band patch for the core vulnerability.