Welcome to November's edition of Internet Security News, the monthly risks bulletin detailing the latest Internet software and system vulnerabilities from NTA Monitor, a leading Internet security testing company. It provides a convenient way to keep up to date with the fast changing world of Internet security; this month's edition includes a total of 9 risk issues: 6 High, 1 Medium, 1
Low and 1 Informational.
November 2005
BBC switches off BlackBerry service
(Low risk)
A flaw in a service pack released for BlackBerry Enterprise Server was cause for a major BlackBerry network to shut down.
Read More
|
HP-UX+Mozilla=VULN
(High risk)
Hewlett-Packard has released updated packages to address multiple security vulnerabilities identified in Mozilla for HP-UX. These flaws could be exploited by malicious websites to execute arbitrary commands or cause a denial of service.
Read More
|
KAV might mean KIV
(Medium risk)
A buffer overflow vulnerability exists in Kaspersky Labs' Anti-Virus Engine. It requires minimal interaction by a targeted user and allows remote attackers to execute arbitrary code.
Read More
|
KAV (again!)
(High risk)
A vulnerability in Kaspersky Anti-Virus has been reported, which can be exploited by malicious people to compromise a vulnerable system.
Read More
|
MS patches
(High risk)
The regular monthly MS patches ranging from critical to low.
Read More
|
Skype brought down to Earth
(High risk)
A security bug in the Skype user client, for all platforms, has been identified and fixed.
Read More
|
Snort Back Orifice users cover yourselves
(High risk)
The Snort Back Orifice pre-processor contains a buffer overflow vulnerability that could allow a remote attacker to execute arbitrary code on a vulnerable system.
Read More
|
A thunderous crash
(High risk)
An updated Thunderbird package that fixes various bugs is now available for Fedora Core 3.
Read More
|
Should you avoid VOIP?
(Informational)
The Voice over IP Security Alliance (VOIPSA) has released its first description of the security threats faced by Internet telephony.
Read More
|
About NTA Monitor
This bulletin is produced as a by-product of ongoing research carried out to develop NTA Monitor's Internet security
testing service, Regular Monitor. NTA are a full-service Internet security testing company with a comprehensive range of
testing services including:
- VPN Testing
- Onsite Auditing
- Web Application Test
- War Dialling
- Wireless Infrastructure Testing
- RM Vulnerability Testing
For more information on the above services please see our
services page.