Australia's Leading Computer Emergency Response Team

AusCERT Week in Review for 3rd August 2012
Date: 03 August 2012
Original URL: http://www.auscert.org.au/render.html?cid=7066&it=16161

Happy Friday,

The week started off with a smaller, and less dramatic, than expected data release from Anonymous. Various media reports are not hard to find depending on your Google-Fu, however this article by Stilgherrian is a good primer.

Speaking of hackers, the Team Poison hacker who had some "lulz" at the expense of Tony Blair et al. was sentenced to six months jail this week, an unpleasant reminder of the possible consequences of illegal hacking. The comments section for this story has some interesting tidbits.

Onto my picks for the top 5 bulletins of the week:

1) ESB-2012.0721 - [Win][UNIX/Linux][RedHat] krb5: Multiple vulnerabilities
2) ESB-2012.0723 - ALERT [Win][UNIX/Linux] krb5: Multiple vulnerabilities
3) ESB-2012.0724 - [Debian] krb5: Multiple vulnerabilities

Kerberos remote code execution and denial of service vulnerabilities have been addressed by a number of vendors. As a critical part of businesses infrastructure, successful exploitation could be a serious headache.

4) ASB-2012.0109 - [Win][UNIX/Linux] Google Chrome: Multiple vulnerabilities

As one of the more popular browsers, vulnerabilities with Chrome are worth a mention. The latest release of Google Chrome includes a particularly large number of fixes, fifteen to be precise.

5) ESB-2012.0731 - [BlackBerry] BlackBerry PlayBook: Multiple vulnerabilities

BlackBerry have fixed a number of serious vulnerabilities with Adobe Flash Player that affect the BlackBerry PlayBook tablet software.

That's all folks,
Olivia