| Dinesh 的个人资料SamuraiDinesh照片日志列表 |  工具  帮助 |
|
4月19日 New ClamAV version fixes buffer overflow vulnerabilityIf you're running a version of ClamAV 0.90, now is the time to upgrade to version 0.90.2, released last Friday. This version contains a fix for a buffer overflow vulnerability,
CVE-2007-1997, identified by iDefense. An attacker can convince a user
(or mail gateway) to scan a maliciously crafted CAB file that could
lead to arbitrary code execution under the user account running the
scanner. As a temporary workaround, you could drop CAB files prior to executing the scanner. This is particulary relevant for e-mail gateways, which generally only need to allow a limited set of filetypes. The CAB format is an archive often used by Microsoft for software distribution, so on a web proxy this may be problematic. 4月13日 Oracle Critical Patch Update Pre-Release AnnouncementOracle has released their announcements for April. http://www.oracle.com/technology/deploy/security/critical-patch-updates/cpuapr2007.html "This Critical Patch Update contains 37 security fixes across all products." So, if you are running Oracle, it's that time of the month again! Apple Releases Boot Camp 1.2 with Windows Vista 32bit SupportApple has posted a new version of Boot Camp today. Boot Camp 1.2 brings several updates, including Windows Vista support.
MS Live Labs Unveils Deepfish - New Mobile Web BrowserAt the O'Reilly Emerging Technology Conference in San Diego Gary Flake presented Deepfish this afternoon. Microsoft Live Labs announced the limited public availability of Deepfish, a preview of a technology that can be used to improve mobile browsing. In its current form, Deepfish provides users of mobile phones or other small screen devices a full ‘as designed’ view of websites on their mobile device. Because the site looks as you would expect it to on your desktop, pages are easier to navigate than the typical experience with mobile browsers today. The interface lets people zoom in and out on the parts of a web page that interest them in an intuitive way, making it easy to use these large screen formatted pages on a mobile device.
Metasploit Framework 3.0 ReleasedThe Metasploit Project released new Metasploit Framework 3.0 today. It is one of best tools to perform penetration tests system administrators to verify patch installations product vendors to perform regression testing. The version 3.0 contains 177 exploits 104 payloads 17 encoders and 3 nop modules. Additionally 30 auxiliary modules are included that perform a wide range of tasks including host discovery protocol fuzzing and denial of service testing. The new version is available The Metasploit Framwork site. Microsoft: Windows Vista Safer than OS X, LinuxMicrosoft security strategy director Jeff Jones this week published a report comparing the security vulnerability profile for various high-profile operating systems in the 90 days of their existence. Surprisingly, Vista came out in front: Vista had 5 vulnerabilities in its first 90 days, one of them fixed, and one pending with a High severity rating. By comparison, XP had a total of 17 vulnerabilities in its first 90 days, 8 of which were rated High, when it shipped in 2001. The surprises, however, come when you compare the non-Microsoft competition. Mac OS X 10.4, a darling of the press, actually suffered from 20 vulnerabilities in its first 90 days, 8 of which were rated High. Worse, OS X 10.4 still suffered from 17 publicly disclosed but unpatched vulnerabilities at the end of those 90 days. "The data doesn't support [Apple's] marketing," Jones writes. Linux fared even worse: Ubuntu 6.06 suffered from a whopping 71 vulnerabilities in its first 90 days, 27 of those rated High. And there were at least 29 unpatched vulnerabilities in that OS after the 90 day period ended. And so on. You can read the entire report (PDF), and look forward to Jones' 6-month and 1-year updates. source : www.windowsitpro.com |
|
|
