Posts Tagged ‘security’
Posted in SANSNB on November 11th, 2008 by SANS
Adobe has released security updates for Adobe Reader and Adobe Acrobat to address flaws that could be exploited to gain control of vulnerable computers…….
Tags: exploit, security |
Posted in SANSNB on November 11th, 2008 by SANS
Microsoft plans to release two security bulletins on Tuesday, November 11, 2008…….
Tags: microsoft, patch, security |
Posted in ISC on November 10th, 2008 by ISC Handler
Apple have released iLIfe support version 8.3.1 which addresses three security issues with the ImageIO component.
These addresses issues in Mac OSX releases 10.4.9 through 10.4.11 and can be found on the Apple support site.
The following CVE's are covered:
CVE-2008-2327 : Viewing a maliciously crafted TIFF image may lead to an unexpected application termination or arbitrary code execution
CVE-2008-2332 : Viewing a maliciously crafted TIFF image may lead to an unexpected application termination or arbitrary code execution
CVE-2008-3608 : Viewing a large maliciously crafted JPEG image may lead to an unexpected application termination or arbitrary code execution
Apple indicate that if your on Leopard version 10.5.5 this is already fixed, so it would appear that if your not at 10.5.5 you should upgrade for these issues too.
Tags: application, code, cve, security |
Posted in SANSRR on November 10th, 2008 by SANS
Category: Mac/Apple Issues
Paper Added: November 10, 2008
Tags: Knowledge, security, whitepapers |
Posted in E-Week on November 10th, 2008 by E-Week
Research performed by The Measurement Factory uncovered 25 percent of DNS servers still have not been fixed to address the DNS flaw publicized by security researcher Dan Kaminsky and others earlier this year. A separate study found that many companies feel they don't have the resources or the expertise to address the issue.
- New research offers a peak into the state of security of domain
name server security and its not all pleasing to the eye.
In an annual study of
domain name servers (DNS) connected to the Internet by The Measurement
Factory, it was uncovered that roughly one in four DNS servers does not
perf...
Tags: patch, security |
Posted in E-Week on November 10th, 2008 by E-Week
The recent Web 2.0 summit was more like a boxing match, as CEO's and Presidents made jabs at their competition. Microsoft is planning a quiet patch Tuesday, only announcing 2 security bulletins. This month ties with January for the smallest Patch Tuesday release of 2008. However one of those bulletins is listed as critical. Ashley takes you through both. Advanced Micro Devices has a lot going on right now. Last week the chip maker announced that it will be cutting nearly 3% of its staff. However in the coming weeks, A.M.D. will release a new version of its Opteron server processor, code-named Shanghai. AMD has also joined forces with Red Hat who recently demonstrated new virtualization capabilities that will allow virtual machines to migrate between servers based on Intel processors and systems using AMD's quad-core Opteron processors. Lenovo is facing financial woes as the economy worsens. Additional competition from HP, Dell and Acer also had an impact on Lenovo's bottom line.
- Video Content....
Tags: code, microsoft, patch, security, web |
Posted in CGI Security on November 10th, 2008 by CGI
“With the news that Google’s Android shipped with an embarrassing security hole being followed by a simple two-step method to ‘jailbreak’ the OS, you’d think that the company had ironed out most of the remaining bugs – but you’d be wrong. According to ZDnet’s Ed Burnette, the open-source Linux-based smartphone platform…
Tags: linux, security |
Posted in SANSRR on November 10th, 2008 by SANS
Category: Management & Leadership
Paper Added: August 19, 2008
Tags: Knowledge, security, whitepapers |
Posted in SANSRR on November 10th, 2008 by SANS
Category: Management & Leadership
Paper Added: August 7, 2008
Tags: Knowledge, security, whitepapers |
Posted in SANSRR on November 10th, 2008 by SANS
Category: Firewalls & Perimeter Protection
Paper Added: November 5, 2008
Tags: Knowledge, security, whitepapers |