Welcome to July's edition of Internet Security News, the monthly risks bulletin detailing the latest Internet software and system vulnerabilities from NTA Monitor, a leading Internet security testing company. It provides a convenient way to keep up to date with the fast changing world of Internet security; this month's edition includes a total of 10 risk issues: 5 High, 2 Medium, 0
Low and 3 Informational.
July 2005
Cisco under fire for VPN vulnerability
(High risk)
VPNs are not as secure as they were thought to be: Groupname enumeration flaw discovered.
Read More
|
Is it a flaw or functionality?
(Medium risk)
Microsoft does not plan to patch against pop-up phishing. What Secunia calls a less critical vulnerability, Microsoft says is just standard functionality.
Read More
|
Hackers get organised
(Informational)
Global enterprises under siege from high-level high-tech crime organisations.
Read More
|
Patches for various flavours of Linux
(High risk)
Various, highly critical vulnerabilities and patches for varieties of Linux
Read More
|
Microsoft security update
(High risk)
An average month on the MS Patch Train
Read More
|
The MS Patch Day
(Informational)
Love it or hate it, MS touches the lives of all of us to various degrees. Ever wonder what goes into all the MS patches? Attached are excerpts from an article which took a rare glimpse into the inside workings of the MSRC (Microsoft Security Response Center).
Read More
|
Opera Web Browser may be the favourite of phishers
(Medium risk)
Opera Web Browser fails to properly enforce security restrictions on the XMLHttpRequest Object. This may allow a remote, unauthenticated attacker to insert content from potentially malicious web sites.
Read More
|
Is someone scanning your port 445?
(Informational)
A recent rise in scanning activities on port 445 may well be the prelude to major attacks.
Read More
|
Don't let the Sun go down
(High risk)
A program used in both Solaris and Java Desktop System contains a highly critical vulnerability
Read More
|
VERITAS Backup Exec allows for more than remote backup
(High risk)
Buffer overflow vulnerability in VERITAS Software Backup Exec Web Administration Console (BEWAC)
Read More
|
About NTA Monitor
This bulletin is produced as a by-product of ongoing research carried out to develop NTA Monitor's Internet security
testing service, Regular Monitor. NTA are a full-service Internet security testing company with a comprehensive range of
testing services including:
- VPN Testing
- Onsite Auditing
- Web Application Test
- War Dialling
- Wireless Infrastructure Testing
- RM Vulnerability Testing
For more information on the above services please see our
services page.