November 2005
Welcome to November's edition of Internet Security News, the monthly risks bulletin detailing the latest Internet software and system vulnerabilities from NTA Monitor, a leading IT security testing company. It provides a convenient way to keep up to date with the fast changing world of IT security; this month's edition includes a total of 9 risk issues: 6 High, 1 Medium, 1 Low and 1 Informational .
BBC switches off BlackBerry service
(Low risk) A flaw in a service pack released for BlackBerry Enterprise Server was cause for a major BlackBerry network to shut down. 30th November 2005 Read MoreHP-UX+Mozilla=VULN
(High risk) Hewlett-Packard has released updated packages to address multiple security vulnerabilities identified in Mozilla for HP-UX. These flaws could be exploited by malicious websites to execute arbitrary commands or cause a denial of service. 30th November 2005 Read MoreKAV might mean KIV
(Medium risk) A buffer overflow vulnerability exists in Kaspersky Labs' Anti-Virus Engine. It requires minimal interaction by a targeted user and allows remote attackers to execute arbitrary code. 30th November 2005 Read MoreKAV (again!)
(High risk) A vulnerability in Kaspersky Anti-Virus has been reported, which can be exploited by malicious people to compromise a vulnerable system. 30th November 2005 Read MoreMS patches
(High risk) The regular monthly MS patches ranging from critical to low. 30th November 2005 Read MoreSkype brought down to Earth
(High risk) A security bug in the Skype user client, for all platforms, has been identified and fixed. 30th November 2005 Read MoreSnort Back Orifice users cover yourselves
(High risk) The Snort Back Orifice pre-processor contains a buffer overflow vulnerability that could allow a remote attacker to execute arbitrary code on a vulnerable system. 30th November 2005 Read MoreA thunderous crash
(High risk) An updated Thunderbird package that fixes various bugs is now available for Fedora Core 3. 30th November 2005 Read MoreShould you avoid VOIP?
(Informational) The Voice over IP Security Alliance (VOIPSA) has released its first description of the security threats faced by Internet telephony. 30th November 2005 Read MoreAbout NTA Monitor
This bulletin is produced as a by-product of ongoing research carried out to develop NTA Monitor's Internet security testing service, Regular Monitor. NTA are a full-service Internet security testing company with a comprehensive range of testing services including:
- VPN Testing
- Onsite Auditing
- Web Application Test
- War Dialling
- Wireless Infrastructure Testing
- RM Vulnerability Testing
For more information on the above services please see our services page.