NT Compatible - Security (Page 46)

Trend Micro Pattern File October 7, 2002

Security 10917 Published 2002-10-07 11:48 by Philipp Esselbach 0

Use this version of the pattern file for all Trend Micro products running on Intel or DEC Alpha based operating systems and for products using Trend’s virus scanning API Library. Because more than 200 new viruses are discovered every month, it is strongly suggested that you update your virus pattern files regularly.

Homepage
Download

Worm, Opasoft, targets Windows systems

Security 10917 Published 2002-10-05 10:55 by Philipp Esselbach 0

A NEW WORM that targets machines running Microsoft's Windows 95, 98, and ME operating systems is spreading, according to virus alerts posted by several leading antivirus software makers.

Named "Opasoft", "W32/Opasoft" or "Opaserv," the new virus takes advantage of a common Windows application program interface (API) and loose security practices to spread over local and wide-area networks.

Read more

New alerts have analysts doubting Microsoft security

Security 10917 Published 2002-10-04 09:40 by Philipp Esselbach 0

A STRING OF new security alerts from software maker Microsoft this week has prominent industry analysts and security experts predicting that the company's goal of making its software secure may remain elusive.

Read more

Norton AntiVirus Virus Definitions October 3, 2002

Security 10917 Published 2002-10-04 09:40 by Philipp Esselbach 0

This is the latest virus pattern to detect the latest viruses. This update will work on the following products: NAV 2000 for Win9x/NT/2000,
NAV 2001 for Win95b/98/NT/2000/Me,
NAV 2002 Professional Edition,
NAV 2002 for Win98/Me/NT/2000/XP Home/XP Pro,
NAV 4.0 for Windows 3.51,
NAV 5.0 and 2000 for Win9x,
NAV 5.0 and 2000 for WinNT,
NAV for Firewalls 1.5 or higher,
NAV for Lotus Notes (Intel),
NAV for MS Exchange (Intel),
Norton SystemWorks (all versions),
Norton Utilities for Windows 95/98 (all versions),
pcAnywhere32 7.5 and higher for WinNT.

Homepage
Download

Bugbear virus spreading rapidly

Security 10917 Published 2002-10-03 11:08 by Philipp Esselbach 0

THE BUGBEAR VIRUS is rapidly spreading around the world, according to alerts issued by antivirus companies and computer security experts. The virus first appeared Monday and has since spread rapidly.

The virus is sent as an e-mail attachment with a variety of subject lines including "bad news," "Membership Confirmation," "Market Update Report," and "Your Gift." Code in the virus generates random attachment names and subject lines to avoid easy detection by antivirus software and assigns multiple file extensions to the virus to disguise the fact that it is an executable file, according to Vincent Gullotto, vice president of the McAfee AVERT (Anti-Virus Emergency Response Team) at Network Associates.

Read more

Cumulative Patch for SQL Server (Q316333)

Security 10917 Published 2002-10-03 10:50 by Philipp Esselbach 0

This is a cumulative patch that includes the functionality of all previously released patches for SQL Server 7.0, SQL Server 2000, and Microsoft Data Engine (MSDE) 1.0, Microsoft Desktop Engine (MSDE) 2000. In addition, it eliminates four newly discovered vulnerabilities.

Read more

Unchecked Buffer in Windows Help Facility Could ...

Security 10917 Published 2002-10-03 10:49 by Philipp Esselbach 0

Unchecked Buffer in Windows Help Facility Could Enable Code Execution (Q323255)

The HTML Help facility in Windows includes an ActiveX control that provides much of its functionality. One of the functions exposed via the control contains an unchecked buffer, which could be exploited by a web page hosted on an attacker's site or sent to a user as an HTML mail. An attacker who successfully exploited the vulnerability would be able to run code in the security context of the user, thereby gaining the same privileges as the user on the system.

Read more

Flaw in Services for Unix 3.0 Interix SDK Could Allow ...

Security 10917 Published 2002-10-03 10:48 by Philipp Esselbach 0

Flaw in Services for Unix 3.0 Interix SDK Could Allow Code Execution (Q329209)

All three vulnerabilities discussed in this bulletin involve the inclusion of the Sun [TM] Microsystems RPC library in Microsoft's Services for UNIX (SFU) 3.0 on the Interix SDK. Developers who created applications or utilities using the Sun RPC library from the Interix SDK need to evaluate three vulnerabilities.

Windows Services for UNIX (SFU) 3.0 provides a full range of cross- platform services to integrate Windows into existing UNIX environ- ments. In version 3.0, the Interix subsystem technology is built in so that Windows Services for UNIX 3.0 can provide platform inter- operability and application migration in one fully integrated and supported product from Microsoft.

Read more

Unchecked Buffer in File Decompression Functions Could...

Security 10917 Published 2002-10-03 10:41 by Philipp Esselbach 0

Unchecked Buffer in File Decompression Functions Could Lead to Code Execution (Q329048)

Zipped files (files having a .zip extension) provide a means to store information in a way that uses less space on a hard disk. This is accomplished by compressing the files that are put into in the zipped file. On Windows 98 with Plus! Pack, Windows Me and Windows XP, the Compressed Folders feature allows zipped files to be treated as folders. The Compressed Folders feature can be used to create, add files to, and extract files from zipped files.

Two vulnerabilities exist in the Compressed Folders function.

Read more