March 2006
Welcome to March's edition of Internet Security News, the monthly risks bulletin detailing the
latest Internet software and system vulnerabilities from NTA Monitor, a leading IT security testing
company. It provides a convenient way to keep up to date with the fast changing world of IT security;
this month's edition includes a total of 10 risk issues:
3 High, 2 Medium, 2 Low and 3 Informational .
Multiple vulnerabilities are discovered by Protos test suite
(
High risk)
Multiple vulnerabilities have been reported in IKEv1, the protocol used by many products worldwide
3rd March 2006
Read More
82 unwanted security bugs
(
Medium risk)
Updates are available for multiple Oracle products, covering a total of 82 security risks
4th March 2006
Read More
Maliciously creative
(
Low risk)
Local users can bypass security restrictions to remove files
1st March 2006
Read More
How to crash Firefox till the end of history
(
High risk)
On 1st February, Mozilla issued Firefox 1.5 updates, classifying the need to update to version 1.5.0.1 as "highly critical"
1st March 2006
Read More
Microsoft's February update addresses 9 issues
(
High risk)
Microsoft's most recent monthly update was issued on 14th February and covered 7 vulnerabilities, 2 of which were deemed to be highly critical
1st March 2006
Read More
Sometimes there's a lot more to 'I love you' than meets the eye
(
Low risk)
Malicious Valentine's e-cards and fake dating websites surfaced days before Valentine's Day
1st March 2006
Read More
A lot more phish than you think
(
Informational)
The Anti-Phishing Working Group has issued its Phishing Activity Trends Report 2005
10th March 2006
Read More
Goldilocks burglar bears his identity by going online
(
Informational)
A 24-year-old drug abuse centre escapee broke into 5 properties in February and made himself at home
9th March 2006
Read More
IE Beta anyone?
(
Informational)
IE7 Beta is available but is experiencing mixed reactions
5th March 2006
Read More
IBM Notes 6ix flaws
(
Medium risk)
Six highly critical Lotus Notes vulnerabilities have been fixed by IBM, all of which related to file attachments
31st March 2006
Read More
This bulletin is produced as a by-product of ongoing research carried out to develop NTA Monitor's Internet security
testing service, Regular Monitor. NTA are a full-service Internet security testing company with a comprehensive range of
testing services including: