Rengeteg Office és Linux sebezhetőség
A Sunbelt Network Security Inspector legújabb frissítése több Office biztonsági réssel és szép számú Linux sebezhetőséggel gazdagítja a hálózati felderítő szoftver adatbázisát. A frissítések továbbra is tartalmazzák a Mitre Common Vulnerabilities and Exposures (CVE) lista, az FBI/SANS lista, a CERT, CIAC Microsoft és FedCIRC (Department of Homeland Security) összes biztonsági figyelmeztetését.
Ha még nem ismeri az SNSI-t, töltsön le a termék honlapjáról egy ingyenes próbaváltozatot, ami rögtön megállapítja, hogy számítógépe hány befoltozatlan, távolról kihasználható bizonsági rést tartalmaz!
Az adatbázisba bekerült új és frissített sebezhetőségek:
W3288 Microsoft Office Could Allow Remote Code Execution - Office 2003 W3287 Microsoft Office Could Allow Remote Code Execution - Office 2002/XP W3286 Microsoft Office Could Allow Remote Code Execution - Office 2000 W3285 MS-Office Publisher 2003 Could Allow Remote Code Execution W3284 MS-Office Publisher XP/2002 Could Allow Remote Code Execution W3283 MS-Office Publisher 2000 Could Allow Remote Code Execution W3282 Microsoft Works File Converter Could Allow Remote Code Execution W3280 Cumulative Security Update for Internet Explorer - W2K, XP, W2K3 W3279 Microsoft Word Viewer Could Allow Remote Code Execution - W2K, XP, W2K3 W3278 Microsoft Word 2003 Could Allow Remote Code Execution - W2K, XP, W2K3 W3277 Microsoft Word XP Could Allow Remote Code Execution W3276 Microsoft Word 2000 Could Allow Remote Code Execution W3275 OLE Automation Could Allow Remote Code Execution - VB 6 W3048 SeaMonkey Multiple Vulnerabilities W2992 Java Runtime Environment 1.5 latest not installed W2559 Firefox multiple vulnerabilities S0453 Mozilla 1.7 browser, mail client JavaScript - Solaris 8 - 10 S0546 USB Mouse STREAMS driver may induce panic - Solaris 9-10 M0054 Firefox multiple vulnerabilities - Mac OS X L0444 LibTorrent bdecode_recursive stack exhaustion flaw - FC L0445 SDL_image LWZReadByte error - FC L0446 KDEbase password bypass & local DoS errors - FC L0449 Deluge bdecode_recursive stack exhaustion flaw - FC L0450 OpenLDAP BDB slapd NOOP modify error - FC L0451 Gnumeric XLS HLINK stack corruption error - FC L0452 TCL/TK animated GIF image error - FC L0453 Perl-Tk ReadImage GIF vulnerability - FC W1978 BitTorrent and uTorrent client string handling vulnerability W2568 Cisco WCS Tomcat mod_jk.so Vulnerability W3259 Adobe Connect Enterprise non secure SWF content generation vulnerability W3260 Adobe Dreamweaver / Contribute non secure SWF content generation W3261 Citrix IMA service vulnerability W3262 Lotus Samename Client Vulnerability W3263 Aurigma/FaceBook/MySpace image load ActiveX Vulnerabilities W3264 Yahoo! Music Engine / Jukebox parameter handing vulnerabilities S0544 ImageMagick file metacharacter handling Vulnerabilities - Solaris 9-10 S0545 Java JRE 1.6.0 (6.0) XML parsing vulnerability - Solaris N0076 CUCM Certificate Trust List flaw - ICS MCS L0403 Exiv2 exif.cpp EXIF crafting error - SuSE L0404 Tetex dvips and dviljk errors - SuSE L0405 Libsndfile FLAC crafted PCM error - SuSE L0407 ClamAV multiple code errors - SuSE L0409 Tog-pegasus CIM server PAM authentication errror - SuSE L0410 Xine-lib rmff_dump_cont SDP error - SuSE L0411 Libxml2 invalid UTF-8 xml CurrentChar error - SuSE L0412 QT4 SSL verification flaw - SuSE L0413 KRB5 multiple access vulnerabilities - SuSE L0414 OpenAFS callback race condition error - SuSE L0415 Apache Derby DropSchemaNode flaw - SuSE L0416 Thunderbird crafted HTML memory corruption - SuSE L0417 ISC BIND inet_network off-by-one error - FC L0418 Pulseaudio pa_drop_root return value flaw - FC L0419 ICU Group zero backreference and doInterval errors - FC L0425 ICU Group zero backreference and doInterval errors - RHE Frissített biztonsági rések L1525 Mozilla Firefox multiple vulnerabilities - RHE L1529 Seamonkey multiple vulnerabilities - RHE H0181 OpenView Operations Java GUI vulnerabilities - HP-UX 11 H0135 OpenView Operations/VantagePoint JRE vulnerability M0048 QuickTime Player RTSP response message-reason phase - Mac OS X S0441 Java 1.5 applet handling - Solaris S0539 PostgreSQL 8.1/8.2 multiple vulnerabilities - Solaris 10 W1142, W1986, W1999, W2067 Anti-Virus Signatures W2493 Microsoft Malware Removal Tool W2692 QuickTime RTSP response message-reason phase Vulnerability L0234 CUPS SNMP backend string function flaw - SuSE L0270 Wireshark multiiple vulnerabilities - RHE L0396 Xine-lib rmff_dump_cont SDP error - FC L1638 Xorg-X11 X-Font server and composite vulnerabilities - SuSE L1639 PHP4 PHP5 Multiple Vulnerabilities - SuSE L1667 Libexif EXIF image recursion & EXIF tag errors - SuSE W1982 P2P Software Detected - files W2618 VideoLAN VLC player multiple vulnerabilities W1142, W1986, W1999, W2067 Anti-Virus Signatures W3152 Firefox jar URI, cross-site request forgery vulnerabilities W3256 Oracle E-Business Suite Vulnerabilities (Jan. 2008) W2280 Excel 2000 Parameter Vulnerability W2281 Excel 2002 Parameter Vulnerability W2203 Outlook Express E-mail Header Vulnerability H0065 X Font Server Vulnerability - HP-UX 10,11
A frissítés minden felhasználónak ingyenes és automatikusan megtörténik.
Bővebb információ: SNSI hálózati sebezhetőség vizsgáló honlapja
