Slaptijack

Cisco EoL / EoS Batch #74

Scott Hebert — Wed, 03 Dec 2008 14:00:16 +0000

Don’t forget, most Cisco End-of-Life / End-of-Sale announcements include a list of product migration options. If you need help deciding which product is best for you, send me a message.

Related Posts (Automatically Generated)

Security Updates | 2008-12-02

Scott Hebert — Wed, 03 Dec 2008 02:00:09 +0000

The FreeBSD Project

arc4random(9) predictable sequence vulnerability

Microsoft Corporation

Red Hat, Inc.

Related Posts (Automatically Generated)

Tech Messages | 2008-11-28

Scott Hebert — Fri, 28 Nov 2008 23:02:59 +0000

A special extended edition of Tech Messages for 2008-11-21 through 2008-11-28:

SCE8000 SCOS 3.1.6S - Wrong Usage of 7600 Chassis OID in SCE8000 Chassis
The SNMP OID in the SCE8000 chassis IDPROM may contain a wrong value of cisco7604 instead of SCE8000. As a result, the chassis information in the entity MIB may show the value 1.3.6.1.4.1.9.5.1.2.1.42 (cisco7604) instead of 1.3.6.1.4.1.9.12.3.1.3.650 (SCE8000). (CCO login required.)
Memory Corruption in the VSD Process That May Cause an MDS SSM to Reload - SSI Software Upgrade Required
An SSM module in MDS series switch may unexpectedly reload due to memory corruption in the VSD process. This problem only affects SSI software images. (CCO login required.)
Cisco Emergency Responder - Memory Leak May Cause 911 Service Outage - Upgrade Required
This vulnerablity will manifest itself in various circumstances and is intermittent in nature. There is not one specific trigger that will cause this event to occur. (CCO login required.)

Related Posts (Automatically Generated)

Cisco EoL / EoS Batch #73

Scott Hebert — Mon, 24 Nov 2008 16:37:35 +0000

Don’t forget, most Cisco End-of-Life / End-of-Sale announcements include a list of product migration options. If you need help deciding which product is best for you, send me a message.

Related Posts (Automatically Generated)

Security Updates | 2008-11-21

Scott Hebert — Sat, 22 Nov 2008 04:15:59 +0000

Apple Inc.

iPhone OS 2.2 and iPhone OS for iPod touch 2.2

Cisco Systems Inc.

Cisco Response to TKIP Encryption Weakness

Sun Microsystems, Inc.

Related Posts (Automatically Generated)

Security Updates | 2008-11-20

Scott Hebert — Fri, 21 Nov 2008 02:00:48 +0000

Red Hat, Inc.

Related Posts (Automatically Generated)

ISC Releases BIND 9.4.3

Scott Hebert — Wed, 19 Nov 2008 15:11:43 +0000

After almost a year of development, the Internet Software Consortium (ISC) announced the newest release of their Domain Name System (DNS) server, BIND 9.4.3, today. This release includes over 140 fixes over BIND 9.4.2.

Although this maintenance release is mainly focused on bug fixes, it does include the following four security related updates:

inet_network() buffer overflow. CVE-2008-0122.
Fully randomize UDP query ports to improve forgery resilience. [RT #17949]
Additional support for query port randomization (change #2375) including performance improvement and port range specification. [RT #17949, #18098]
win32: UDP client handler can be shutdown. [RT #18576]

Related Posts (Automatically Generated)

Tech Messages | 2008-11-18

Scott Hebert — Tue, 18 Nov 2008 22:00:33 +0000

A special extended edition of Tech Messages for 2008-11-11 through 2008-11-18:

MDS Fabric and Blade Switches May Reload After 497 Days of Uptime
After 497 days of uptime the switch may restart due to a software defect. This problem is intermittent and may not happen every time. If the switch is running SAN-OS 3.3(2), NX-OS 4.1(1b) or above software, the switch is not vulnerable to this issue. (CCO login required)
FielCisco Clean Access New CCA Server Cannot Be Added to CCA Manager and CCA Manager Cannot Get Updates if the OS Detection Fingerprint Version on CCA Manager is 7
OSDF version 7 has a software defect that may result in a loss of service for NAC Servers (Clean Access Servers). This version has been removed from the update server. (CCO login required.)
MCS-78xx-H3 and MCS78xxH3 - Some Servers Have an Incorrect MAC Address Label
Between April 2008 and August 2008, some MAC Address Labels that HP placed on Cisco-Branded HP servers did not match the actual MAC Address of the Network Interface Card. (CCO login required.)

Related Posts (Automatically Generated)

Cisco EoL / EoS Batch #72

Scott Hebert — Mon, 17 Nov 2008 14:50:03 +0000

Don’t forget, most Cisco End-of-Life / End-of-Sale announcements include a list of product migration options. If you need help deciding which product is best for you, send me a message.

Related Posts (Automatically Generated)

Firefox 3.0.4 is ready for action

Scott Hebert — Sun, 16 Nov 2008 21:04:27 +0000

Mozilla has released Firefox 3.0.4 to address several issues with Firefox 3.0.3. This release includes a bunch of security fixes which I’ve enumerated in the table below.

In addition to the security fixes, the following bugs have been addressed:

Fixed an issue where the IME input tool used to enter Japanese, Korean, Chinese and Indic characters was covered by the “Add Bookmark” panel.
Fixed an issue where some passwords saved using Firefox 3.0.2 did not work properly.
In some cases, Firefox would not properly save proxy settings for protocols other than HTTP.

MFSA ID	Impact	Description
MFSA 2008-47	Moderate	Information stealing via local shortcut files
MFSA 2008-51	Moderate	file: URIs inherit chrome privileges when opened from chrome
MFSA 2008-52	Critical	Crashes with evidence of memory corruption (rv:1.9.0.4/1.8.1.18)
MFSA 2008-53	Critical	XSS and JavaScript privilege escalation via session restore
MFSA 2008-54	Critical	Buffer overflow in http-index-format parser
MFSA 2008-55	Critical	Crash and remote code execution in nsFrameManager
MFSA 2008-56	High	nsXMLHttpRequest::NotifyEventListeners() same-origin violation
MFSA 2008-57	High	-moz-binding property bypasses security checks on codebase principals
MFSA 2008-58	Low	Parsing error in E4X default namespace

Related Posts (Automatically Generated)