Oracle has released updates that contains fixes to 43 different vulnerabilities. The fixes are part of the company's quarterly CPU (critical patch update). Of the updates 16 are for Oracle Database, 12 for Oracle Application Server, three for Oracle E-Business Suite, four for PeopleSoft Enterprise and JDEdwards Suite and eight updates for BEA product Suite.
Exact list of the vulnerabilities and instructions how to apply the fixes can be read from Oracle's Critical Patch Update Advisory.
Next critical patch update Oracle plans to release 14 July 2009.
Wednesday, April 15, 2009
Tuesday, April 14, 2009
April 2009 Updates From Microsoft
Microsoft has released updates for April. In total there are 23 vulnerabilities fixed in eight updates. Five of the updates are categorized as critical, two as important and one as moderate. Some of these vulnerabilities are exploited already.
Update MS09-009 fixes two vulnerabilities in Microsoft Office Excel. Both of these could allow an attacker to execute arbitrary code in target system. Update is categorized as critical.
Update MS09-010 fixes four vulnerabilities in Microsoft Wordpad and Office Text Converters. These could allow an attacker to execute arbitrary code in target system. Update is categorized as critical.
Update MS09-011 fixes a vulnerability in Microsoft DirectShow. This could allow an attacker to execute arbitrary code in target system. Update is categorized as critical.
Update MS09-013 fixes three vulnerabilities in Windows HTTP Services. These could allow an attacker to execute arbitrary code in target system. Update is categorized as critical.
Update MS09-014 fixes six vulnerabilities in Microsoft Internet Explorer. These could allow an attacker to execute arbitrary code in target system. Update is categorized as critical.
Update MS09-012 fixes four vulnerabilities in Microsoft Windows. These could allow an attacker to elevate privileges in target system. Update is categorized as important.
Update MS09-016 fixes two vulnerabilities in Microsoft ISA Server and Forefront Threat Management Gateway (Medium Business Edition). These could be used to cause denial of service in target system. Update is categorized as important.
Update MS09-015 fixes a vulnerability in SearchPath. This blended threat vulnerability could allow an attacker to elevate privileges in target system. Update is categorized as moderate.
New version of Microsoft Windows Malicious Software Removal Tool was released too.
More information about the updates can be read here.
For consumer the easist way to get the update is to use Microsoft automatic update service.
Update MS09-009 fixes two vulnerabilities in Microsoft Office Excel. Both of these could allow an attacker to execute arbitrary code in target system. Update is categorized as critical.
Update MS09-010 fixes four vulnerabilities in Microsoft Wordpad and Office Text Converters. These could allow an attacker to execute arbitrary code in target system. Update is categorized as critical.
Update MS09-011 fixes a vulnerability in Microsoft DirectShow. This could allow an attacker to execute arbitrary code in target system. Update is categorized as critical.
Update MS09-013 fixes three vulnerabilities in Windows HTTP Services. These could allow an attacker to execute arbitrary code in target system. Update is categorized as critical.
Update MS09-014 fixes six vulnerabilities in Microsoft Internet Explorer. These could allow an attacker to execute arbitrary code in target system. Update is categorized as critical.
Update MS09-012 fixes four vulnerabilities in Microsoft Windows. These could allow an attacker to elevate privileges in target system. Update is categorized as important.
Update MS09-016 fixes two vulnerabilities in Microsoft ISA Server and Forefront Threat Management Gateway (Medium Business Edition). These could be used to cause denial of service in target system. Update is categorized as important.
Update MS09-015 fixes a vulnerability in SearchPath. This blended threat vulnerability could allow an attacker to elevate privileges in target system. Update is categorized as moderate.
New version of Microsoft Windows Malicious Software Removal Tool was released too.
More information about the updates can be read here.
For consumer the easist way to get the update is to use Microsoft automatic update service.
Sunday, April 12, 2009
Conficker Hits Utah University Network
"University of Utah officials say a computer virus has infected more than 700 campus computers, including those at the school's three hospitals", writes Associated Press (AP).
According to the university health sciences spokesman Chris Nelson the outbreak of the Conficker was first detected on Thursday. By Friday, the virus had infiltrated computers at the hospitals, medical school, and colleges of nursing, pharmacy and health.
Nelson states that no patient data and medical records have been compromised.
According to the university health sciences spokesman Chris Nelson the outbreak of the Conficker was first detected on Thursday. By Friday, the virus had infiltrated computers at the hospitals, medical school, and colleges of nursing, pharmacy and health.
Nelson states that no patient data and medical records have been compromised.
Friday, April 10, 2009
New Version of Conficker Discovered
Trend Micro has discovered a new Conficker version, now known as WORM_DOWNAD.E, sourced by a known Conficker P2P IP node. New finding may indicate more serious attacks coming.
WORM_DOWNAD.E uses random file and service names and it is known to connect at least myspace.com, msn.com, ebay.com, cnn.com and aol.com sites. The new variant propagates also via MS08-067 to external IPs if the Internet is available. If connections are not found then the worm uses local IPs.
Good summary of third party information on Conficker aka Downadup worm can be accessed on dshield web site.
WORM_DOWNAD.E uses random file and service names and it is known to connect at least myspace.com, msn.com, ebay.com, cnn.com and aol.com sites. The new variant propagates also via MS08-067 to external IPs if the Internet is available. If connections are not found then the worm uses local IPs.
Good summary of third party information on Conficker aka Downadup worm can be accessed on dshield web site.
Wednesday, April 8, 2009
Security Threat Summary For Q1/2009 From F-Secure
F-Secure has released their threat summary for the first quarter of 2009.
The summary focuses on:
- widespread Conficker worm,
- social networking,
- database breaches,
- mobile phone threats and
- Mac OSX.
The summary can be read here
The summary focuses on:
- widespread Conficker worm,
- social networking,
- database breaches,
- mobile phone threats and
- Mac OSX.
The summary can be read here
Saturday, April 4, 2009
Patches Available For VMware software
VMware has patched some vulnerabilities found in its VMware -products. Vulnerabilities are related to ia VMware ESX Service Console's openssl, bind and vim implementations. Of vim there has been fixed a vulnerability that would make it possible to an attacker execute arbitrary code by luring user open specially crafted document. Among this, there have been fixed denial of service (DoS) and arbitrary code execution vulnerabilities in VMware ESX, ESXi, Server, ACE, Player and Workstation.
Vulnerable versions are:
- VMware Workstation 6.5.1 and earlier
- VMware Player 2.5.1 and earlier
- VMware ACE 2.5.1 and earlier
- VMware Server 2.0
- VMware Server 1.0.8 and earlier
- VMware ESXi 3.5 without updates ESXe350-200811401-O-SG and
ESXe350-200903201-O-UG
- VMware ESX 3.5 without updates ESX350-200811401-SG and
ESX350-200903201-UG
- VMware ESX 3.0.3 without updates ESX303-200811401-BG,
ESX303-200903406-SG, ESX303-200903405-SG and ESX303-200903403-SG
- VMware ESX 3.0.2 without updates ESX-1006980 ESX-1008409,
ESX-1008408 and ESX-1008406
Users of these mentioned versions are recommended to update by following VMware's instructions:
http://lists.vmware.com/pipermail/security-announce/2009/000053.html
http://lists.vmware.com/pipermail/security-announce/2009/000054.html
Vulnerable versions are:
- VMware Workstation 6.5.1 and earlier
- VMware Player 2.5.1 and earlier
- VMware ACE 2.5.1 and earlier
- VMware Server 2.0
- VMware Server 1.0.8 and earlier
- VMware ESXi 3.5 without updates ESXe350-200811401-O-SG and
ESXe350-200903201-O-UG
- VMware ESX 3.5 without updates ESX350-200811401-SG and
ESX350-200903201-UG
- VMware ESX 3.0.3 without updates ESX303-200811401-BG,
ESX303-200903406-SG, ESX303-200903405-SG and ESX303-200903403-SG
- VMware ESX 3.0.2 without updates ESX-1006980 ESX-1008409,
ESX-1008408 and ESX-1008406
Users of these mentioned versions are recommended to update by following VMware's instructions:
http://lists.vmware.com/pipermail/security-announce/2009/000053.html
http://lists.vmware.com/pipermail/security-announce/2009/000054.html
Friday, April 3, 2009
Vulnerability In Microsoft Office PowerPoint
Microsoft has released an advisory of a vulnerability in Microsoft Office PowerPoint that could allow remote code execution if a user opens a specially crafted PowerPoint file. Microsoft states in the advisory that the attacks they are currently aware of are limited and targeted ones.
Affected (supported) software versions are:
- Microsoft Office PowerPoint 2000 Service Pack 3
- Microsoft Office PowerPoint 2002 Service Pack 3
- Microsoft Office PowerPoint 2003 Service Pack 3
- Microsoft Office 2004 for Mac
Microsoft Office 2007 and Microsoft Office for Mac 2008 are not affected by this vulnerability.
Microsoft recommends Office users to avoid opening or saving Office files that are received from un-trusted sources or that are received unexpectedly from trusted sources.
About other workarounds can be read from the advisory.
Affected (supported) software versions are:
- Microsoft Office PowerPoint 2000 Service Pack 3
- Microsoft Office PowerPoint 2002 Service Pack 3
- Microsoft Office PowerPoint 2003 Service Pack 3
- Microsoft Office 2004 for Mac
Microsoft Office 2007 and Microsoft Office for Mac 2008 are not affected by this vulnerability.
Microsoft recommends Office users to avoid opening or saving Office files that are received from un-trusted sources or that are received unexpectedly from trusted sources.
About other workarounds can be read from the advisory.
Subscribe to:
Posts (Atom)
