November 2006
Welcome to November's edition of Internet Security News, the monthly risks bulletin detailing the
latest Internet software and system vulnerabilities from NTA Monitor, a leading IT security testing
company. It provides a convenient way to keep up to date with the fast changing world of IT security;
this month's edition includes a total of 10 risk issues:
3 High, 1 Medium, 3 Low and 3 Informational .
101 Oracle flaws patched
(
High risk)
101 flaws have been found in Oracle's database, application server, E-Business Suite and PeopleSoft and JD Edwards applications
1st November 2006
Read More
Multiple Firefox flaws found
(
High risk)
Multiple vulnerabilities have been reported in Mozilla Firefox, which can be exploited by malicious people to conduct man-in-the-middle, spoofing and cross-site scripting attacks, and potentially compromise a user's system
1st November 2006
Read More
New Windows flaws patched
(
High risk)
Numerous holes are found in Microsoft products as new patches cover 10 issues, six of which are critical
1st November 2006
Read More
Cache servers holding onto exploit codes
(
Medium risk)
It has recently been discovered that some cache servers are holding onto exploit code for two weeks after it's been removed from websites
1st November 2006
Read More
Google releases code search feature
(
Low risk)
Google has recently released its Beta Code Search, enabling anyone to query a massive database of publicly available source code and filter results based on license and programming language
1st November 2006
Read More
Thousands of US government machines could be infected by bots
(
Low risk)
Thousands of US government computers may be under the control of cybercriminals. Security vendor Trend Micro has compiled a list of organisations affected
1st November 2006
Read More
Fries with your spyware?
(
Low risk)
McDonald's is recalling Flash mp3 players given away in Japan after discovering up to 10,000 are loaded with a Trojan, and Apple finds a Windows virus on some of its video iPods
1st November 2006
Read More
British spammer sued by Microsoft
(
Informational)
A British spammer breaching the terms of Microsoft's Hotmail service has been fined £45,000, which is reportedly the largest civil award against a spammer in Europe
1st November 2006
Read More
iTunes copy protection code cracked
(
Informational)
At present, iPod users can only download music from iTunes. Now a hacker claims to have cracked the iTunes security code
1st November 2006
Read More
Phishing kits for sale
(
Informational)
Phishing kits are on sale for as little as £16, arming would-be hackers with exploit codes that take advantage of new, or unknown, vulnerabilities
1st November 2006
Read More
This bulletin is produced as a by-product of ongoing research carried out to develop NTA Monitor's Internet security
testing service, Regular Monitor. NTA are a full-service Internet security testing company with a comprehensive range of
testing services including: