"HyperTerminal Buffer Overflow" Patch

Security 11021 Published by Philipp Esselbach 0

Microsoft has released a patch that eliminates a security
vulnerability in the HyperTerminal application that ships with
several Microsoft(r) operating systems. This vulnerability could,
under certain circumstances, allow a malicious user to execute
arbitrary code on another user´s system.

Frequently asked questions regarding this vulnerability and the patch
can be found at
http://www.microsoft.com/technet/security/bulletin/fq00-079.asp

Affected Software Versions
==========================
- Microsoft Windows 98 and Windows 98SE
- Microsoft Windows Me
- Microsoft Windows 2000

Patch Availability
==================
- Windows 98 and 98SE:
Download
- Windows Me:
Download
- Windows 2000 (can be applied to both Gold and Service Pack 1):
Download

"Web Server Folder Traversal" Patch

Security 11021 Published by Philipp Esselbach 0

Microsoft has released a patch that eliminates a security
vulnerability in Microsoft(r) IIS 4.0 and 5.0. The vulnerability
could potentially allow a visitor to a web site to take a wide range
of destructive actions against it, including running programs on it.

This vulnerability is eliminated by the patch that accompanied
Microsoft Security Bulletin MS00-057. Customers who have applied
that patch are already protected against the vulnerability and do not
need to take additional action. Microsoft strongly urges all
customers using IIS 4.0 and 5.0 who have not already done so to apply
the patch immediately.

Frequently asked questions regarding this vulnerability
and the patch can be found at
http://www.microsoft.com/technet/security/bulletin/fq00-078.asp

Affected Software Versions
==========================
- Microsoft IIS 4.0
- Microsoft IIS 5.0

Patch Availability
==================
- Microsoft IIS 4.0:
http://www.microsoft.com/ntserver/nts/downloads/critical/q269862
- Microsoft IIS 5.0:
http://www.microsoft.com/windows2000/downloads/critical/q269862

Note: The IIS 4.0 patch can be installed on systems running Windows
NT(r) 4.0 Service Packs 5 and 6a. It will be included in Windows NT
4.0 Service Pack 7. The IIS 5.0 patch can be installed on systems
running either Windows(r) 2000 Gold or Service Pack 1. It will be
included in Windows 2000 Service Pack 2.

"NetMeeting Desktop Sharing" Patch

Security 11021 Published by Philipp Esselbach 0

Microsoft has released a patch that eliminates a security
vulnerability in NetMeeting, an application that ships with
Microsoft(r) Windows 2000 and is also available as a separate
download for Windows NT 4.0. The vulnerability could allow a
malicious user to temporarily prevent an affected machine from
providing any NetMeeting services and possibly consume 100% CPU
utilization during an attack.

Frequently asked questions regarding this vulnerability and the patch
can be found at
http://www.microsoft.com/technet/security/bulletin/fq00-077.asp

Affected Software Versions
==========================
NetMeeting Version 3.01 (4.4.3385) on Windows 2000 or Windows NT 4.0.

Patch Availability
==================
- Windows 2000 and Windows NT 4.0:
http://www.microsoft.com/Downloads/Release.asp?ReleaseID=25029

"Cached Web Credentials" Patch

Security 11021 Published by Philipp Esselbach 0

Microsoft has released a patch that eliminates a security
vulnerability in Microsoft(r) Internet Explorer. Under a daunting
set of conditions, the vulnerability could enable a malicious user to
obtain another user´s userid and password to a web site.

Frequently asked questions regarding this vulnerability
and the patch can be found at
http://www.microsoft.com/technet/security/bulletin/fq00-076.asp

Affected Software Versions
==========================
- Microsoft Internet Explorer 4.x
- Microsoft Internet Explorer 5.x prior to version 5.5

Note: Internet Explorer 5.5 is not affected by this vulnerability.
Customers using IE 5.5 do not need to take any action.

Patch Availability
==================
- http://www.microsoft.com/windows/ie/download/critical/q273868.htm

Note: The patch requires IE 5.01 SP1 to install. Customers who
install this patch on other versions may receive a message reading
"This update does not need to be installed on this system". This
message is incorrect. More information is available in KB article
Q273868.

Note: As discussed in Affected Software Versions, this vulnerability
does not affect IE 5.5.

"Microsoft VM ActiveX Component" Patch

Security 11021 Published by Philipp Esselbach 0

Microsoft has released a patch that eliminates a security
vulnerability in Microsoft(r) virtual machine (Microsoft VM). If a
malicious web site operator were able to coax a user into visiting
his site, the vulnerability could allow him to take any desired
action on a visiting user´s machine.

Frequently asked questions regarding this vulnerability and the patch
can be found at
http://www.microsoft.com/technet/security/bulletin/fq00-075.asp

Affected Software Versions
==========================
Versions of the Microsoft VM are identified by build numbers, which
can be determined using the JVIEW tool, as discussed in the FAQ. The
following builds of the Microsoft VM are affected:

- All builds in the 2000 series.
- All builds in the 3100 series.
- All builds in the 3200 series.
- All builds in the 3300 series.

Patch Availability
==================
- 2000-series Microsoft VM customers will be provided with an update
soon.
- 3100-series Microsoft VM customers upgrade to build 3318 or later
from:
http://www.microsoft.com/java/vm/dl_vm40.htm
- 3200-series Microsoft VM customers upgrade to build 3318 or later
from:
http://www.microsoft.com/java/vm/dl_vm40.htm
- 3300-series Microsoft VM customers upgrade to build 3318 or later
from:
http://www.microsoft.com/java/vm/dl_vm40.htm

Patch for "Word Mail Merge" Vulnerability

Security 11021 Published by Philipp Esselbach 0

Microsoft has released a patch that eliminates a security
vulnerability in Microsoft(r) Word 2000 and 97. The vulnerability
could allow a malicious user to run arbitrary code on a victim´s
computer without their approval.

Frequently asked questions regarding this vulnerability and the patch
can be found at
http://www.microsoft.com/technet/security/bulletin/fq00-071.asp

Affected Software Versions
==========================
- Microsoft Word 2000
- Microsoft Word 97

Patch Availability
==================
- Microsoft Word 2000:
http://officeupdate.microsoft.com/2000/downloadDetails/wrdacc.htm
- Microsoft Word 97: Patch will be available shortly.

Note Additional security patches are available at the Microsoft
Download Center

Patch for Multiple LPC and LPC Ports Vulnerabilities

Security 11021 Published by Philipp Esselbach 0

Microsoft has released a patch that eliminates several security
vulnerabilities in Microsoft(r) Windows NT(r) 4.0 and Windows(r)
2000. The vulnerabilities could allow a range of effects, from denial
of service attacks to, in some cases, privilege elevation.

Frequently asked questions regarding this vulnerability and the
patch can be found at
http://www.microsoft.com/technet/security/bulletin/fq00-070.asp

Affected Software Versions
==========================
- Microsoft Windows NT 4.0 Workstation
- Microsoft Windows NT 4.0 Server
- Microsoft Windows NT 4.0 Server, Enterprise Edition
- Microsoft Windows NT 4.0 Server, Terminal Server Edition
- Microsoft Windows 2000 Professional
- Microsoft Windows 2000 Server
- Microsoft Windows 2000 Advanced Server
- Microsoft Windows 2000 Datacenter Server

Patch Availability
==================
- Microsoft Windows NT 4.0 Workstation, Server, and Server,
Enterprise Edition:
http://www.microsoft.com/Downloads/Release.asp?ReleaseID=24650
- Microsoft Windows NT 4.0 Server, Terminal Server Edition:
To be released shortly
- Microsoft Windows 2000 Professional, Server, Advanced Server,
and Datacenter Server:
http://www.microsoft.com/Downloads/Release.asp?ReleaseID=24649

Note: The Windows NT 4.0 patch can be installed on systems running
Service Pack 6a, and will be included in Service Pack 7. The Windows
2000 patch can be installed on systems with or without Service Pack
1, and will be included in Service Pack 2.

"Simplified Chinese IME State Recognition" Vulnerability Patch

Security 11021 Published by Philipp Esselbach 0

Microsoft has released a patch that eliminates a security
vulnerability in Microsoft(r) Windows(r) 2000. The vulnerability
could allow a malicious user to gain complete control over an
affected machine.

Frequently asked questions regarding this vulnerability and the patch
can be found at
http://www.microsoft.com/technet/security/bulletin/fq00-069.asp

Affected Software Versions
==========================
- Microsoft Windows 2000

Note: Only the Simplified Chinese version of Windows 2000 is affected
by default. Customers running any other language version of Windows
2000 only need to take action if they installed a Simplified Chinese
IME during system setup.

Patch Availability
==================
- Microsoft Windows 2000, Simplified Chinese version:
http://www.microsoft.com/Downloads/Release.asp?ReleaseID=24631
- Microsoft Windows 2000, English version:
http://www.microsoft.com/Downloads/Release.asp?ReleaseID=24627

Outlook 2000 SR-1 Update: MultiLanguage Pack E-mail Security

Security 11021 Published by Philipp Esselbach 0

The Outlook:registered: 2000 SR-1 E-mail Security Update for the MultiLanguage Pack ensures that the Outlook 2000 SR-1 E-mail Security Update performs with complete functionality when you use an Office 2000 MultiLanguage Pack.

Note - For the Outlook 2000 SR-1 E-mail Security Update for the MultiLanguage Pack to work correctly, you must have installed the Office 2000 Service Release 1 (or Office 2000 Service Release 1a (SR-1a)), the Outlook 2000 SR-1 E-mail Security Update & the Office 2000 MultiLanguage Pack Service Release 1 for the language you are using.

Read more/Download

The Cleaner Database v3169

Security 11021 Published by Philipp Esselbach 0

MooSoft has posted a updated database for The Cleaner.

To update simply go to Start->Programs->The Cleaner->MooLive

Database v3169 09-29-2000
----------------------------
Added Keylog Trojan
Added Magic Horse

Updated InCommand
Updated MTX
Updated NetBus

"OCX Attachment" Vulnerability Patch

Security 11021 Published by Philipp Esselbach 0

Microsoft has released a patch that eliminates a security
vulnerability in Microsoft(r) Windows Media Player (WMP) 7 but
primarily affects e-mail applications. The net effect of the
vulnerability is that it could enable a malicious user to create an
e-mail that, when closed after being read, could cause the e-mail
application to fail.

Frequently asked questions regarding this vulnerability and the patch
can be found at
http://www.microsoft.com/technet/security/bulletin/fq00-068.asp

Affected Software Versions
===========================
- Microsoft Windows Media Player 7

Patch Availability
==================
- Microsoft Windows Media Player 7
http://www.microsoft.com/Downloads/Release.asp?ReleaseID=24421

Previous Page

Next Page

Windows

Linux

macOS

Community

  • gavindi
    Mt. Sync is a native GNOME desktop application that puts ...
  • Lexonight
    Hey everyone,Wanted to share a project I've been b ...
  • SeveG
    need some help here... situationPC= Packard BellOS= win1 ...