Week in Review 07/12/2007 - Week of Patches

Date: 06 December 2007 Original URL: http://www.auscert.org.au/render.html?cid=7066&it=8470 Greetings AusCERT members, Patch is the word of the week. We have seen some very serious vulnerabilities in some very popular applications. The first major player - Cisco, brought to light a vulnerability that spread across 16 different software packages [1]. HP released patches correcting an execution of arbitrary code vulnerability in its OpenView Network Node Manager [2]. Squid released updated packages correcting a remote DoS (Denial of Service) vulnerability [3]. Be sure to update your systems where applicable and stay secure. Paul References [1] AusCERT AL-2007.0123 https://www.auscert.org.au/8459 [2] AusCERT AL-2007.0124 https://www.auscert.org.au/8465 [3] AusCERT AL-2007.0125 https://www.auscert.org.au/8467