90 likes | 189 Views
PREVIOUS GNEWS. Patch Tuesday. 2 Patches / 3 Vulns – 1 Critical Affecting Windows XP, Vista, 7, 2003, 2008 Other updates, MSRT, Defender Definitions, Junk Mail Filter. MS11-001 - Windows Backup Manager, Remote Code Execution
E N D
Patch Tuesday • 2 Patches / 3 Vulns – 1 Critical • Affecting Windows XP, Vista, 7, 2003, 2008 • Other updates, MSRT, Defender Definitions, Junk Mail Filter • MS11-001 - Windows Backup Manager, Remote Code Execution • MS11-002 - Microsoft Data Access Components, Remote Code Execution
Holes / Patches • Adobe, 3 patches (23 holes in Reader) • APSB10-28 Adobe Reader and Acrobat • APSB10-29 Adobe Illustrator CS5 • APSB10-30 Adobe PhotoShop CS5 • Apple, • Mac OS X v10.6.6 • Time Capsule and AirPort Base Station (802.11n) Firmware 7.5.2 • QuickTime 7.6.9 • Cisco • TLS, IPSEC VPN, Unified Videoconferencing • Change to Cisco Advisories • Starting on January 2011, any bug that has been reported to the Cisco PSIRT but will not be disclosed as part of a Cisco Security Advisory will include a “PSIRT Evaluation” section within its Release Note. The Release Note Evaluation (RNE) section will include, where appropriate and relevant, base and temporal CVSS scores and one or more CVE IDs. However, not all bugs will include a CVSS score or a CVE ID.
Holes / Patches • MS • Microsoft IIS FTP Server Telnet IAC Character Encoding • Microsoft Windows Fax Cover Page Editor Buffer Overflow • IE CSS
Hacking • AMD Registers • Geinimi Android Trojan • CCC Phone Hack, GSM phone and message interception - Sylvain Munaut and Karsten Nohl • CCC PS3 Hack, unlock/bypass all security – fail0verflow
Corp. Hell • Valdosta State University to report all p2p users to police • IBM patents the patent • Symantec 2010 Annual Security Report
Legal • California makes on-line impersonation illegal • California opts out of 4th Amendment, allows warrentless phone searches
Updates ?
All images scavenged without permission All images scavenged without permission