Symantec has released a new virus definitions update for Norton Antivirus.
McAfee Virus definitions has been updated to version 4194
DebPloitFix is a hotfix that closes the security hole (DebPloit exploit) discovered by Radim EliCZ Picha.
DebPloitFix is implemented as a kernel mode driver that can be run dinamically (no need to restart your system). DebPloitFix assigns the new security descriptor to the DbgSsApiPort LPC port so only the local system (SYSTEM user) will be able to access this port.
Download
More informations
About DebPloit: DebPloit is an exploit that shows weakness of the Windows NT/2000 security. It uses the security hole in the NT/2000 debugging subsystem and allows to any user (even Guest) execute processes in the security context of an administrator or a local system. Thus any person who have a local access to the computer running Windows NT or Windows 2000 can became an administrator and do everything he/she wants.
DebPloitFix is implemented as a kernel mode driver that can be run dinamically (no need to restart your system). DebPloitFix assigns the new security descriptor to the DbgSsApiPort LPC port so only the local system (SYSTEM user) will be able to access this port.
Download
More informations
About DebPloit: DebPloit is an exploit that shows weakness of the Windows NT/2000 security. It uses the security hole in the NT/2000 debugging subsystem and allows to any user (even Guest) execute processes in the security context of an administrator or a local system. Thus any person who have a local access to the computer running Windows NT or Windows 2000 can became an administrator and do everything he/she wants.
Internet privacy researcher Richard Smith released on Thursday a list of four issues that continue to undermine the security of Microsoft's Outlook 2002 and could leave the major mail program open to attack by virus writers.
Read more
Read more
McAfee Virus definitions has been updated to version 4192
ZDNet has posted a report about spam
Symantec has released a new virus definitions update for Norton Antivirus.
Microsoft has released security scripts for Windows 2000 Server
Microsoft has updated their security bulletin for the Cumulative VM Update
Thanks to Ryan for sending me this security alert from WatchGuard:
In a post to NTBugtraq on March 14, Radim EliCZ Picha described a design flaw in the Windows NT and 2000 debugging subsystem that could result in elevated privileges. Picha also included exploit code. Experts at WatchGuard have confirmed that a hacker can use this exploit to elevate any local user, even Guest, to local Administrator. There is no direct impact on WatchGuard products. Administrators using Windows NT and 2000, servers and workstations, should recognize this vulnerability and know how to defend against it. A patch is not yet available.
In a post to NTBugtraq on March 14, Radim EliCZ Picha described a design flaw in the Windows NT and 2000 debugging subsystem that could result in elevated privileges. Picha also included exploit code. Experts at WatchGuard have confirmed that a hacker can use this exploit to elevate any local user, even Guest, to local Administrator. There is no direct impact on WatchGuard products. Administrators using Windows NT and 2000, servers and workstations, should recognize this vulnerability and know how to defend against it. A patch is not yet available.
MooSoft has posted a new trojan definitions update for The Cleaner
VN Roundup has posted a Windows XP security guide
Symantec has released a new virus definitions update for Norton Antivirus.
A security flaw in open-source software used by Linux and Unix systems for compression may affect some Microsoft products that also use the code.
As reported earlier this week by CNET News.com, a flaw in the zlib software-compression library could leave much of the systems based on the open-source operating system Linux open to attack.
Read more
As reported earlier this week by CNET News.com, a flaw in the zlib software-compression library could leave much of the systems based on the open-source operating system Linux open to attack.
Read more
McAfee Virus definitions has been updated to version 4191
Microsoft has updated the "Unchecked Buffer in SNMP Service Could Enable Arbitrary Code to be Run" security bulletin
Symantec has released a new virus definitions update for Norton Antivirus.
PHP 4.1.2 for Windows is now available
Symantec has released a new virus definitions update for Norton Antivirus.
Microsoft has released a patch for the Unchecked Buffer in SNMP Service Could Enable Arbitrary Code to be Run problem in Windows NT 4.0 Terminal Server Edition
