Skip Links

Network World

  • Social Web 
  • Email 
  • Close

Apple, Mozilla stomp multiple bugs

Patches from Apple, Mozilla, Gentoo, others Trojan lurks, waiting to steal admin passwords Microsoft scrutinizes WSUS patch snafu, and other interesting reading
Security: Threat Alert By Jason Meserve , Network World , 07/03/2008
Sign up for this newsletter now!

Jason Meserve provides up-to-the-minute news on vendor security alerts and fixes.

Apple patches 25 Mac OS X security vulnerabilities
Apple Tuesday issued its fourth security Mac OS X update of the year, patching 25 vulnerabilities, nearly half of them considered critical. The company also updated Safari for the Mac to plug a hole already fixed in the Windows version of the browser and released an update to bring the OS to version 10.5.4. Computerworld, 07/03/2008.

Apple advisory
**********

Mozilla patches 13 bugs in Firefox 2
After patching its older Firefox 2.0 yesterday to quash 13 bugs, Mozilla Corp. announced that it would end support for the browser in mid-December. Firefox 2.0.0.15 addresses 13 vulnerabilities, five of which the open-source company rated "critical," according to advisories posted on Mozilla's site Tuesday. Of the remaining bugs, four were labeled "high," two as "moderate," and two as "low." Computerworld, 07/02/2008.

Mozilla advisory

After reading the highlights of this survey ("Study: Unpatched Web browsers prevalent on the Internet"), it's important to update Firefox 2.0 browsers as soon as possible.
**********

Two new updates from Gentoo:

Python (multiple integer overflows, code execution)

Motion (multiple flaws, code execution)
**********

Two new fixes from rPath:

wireshark (denial of service, information disclosure)

mercurial (authenication bypass, file overwrite)
**********

Two new patches from Ubuntu:

Firefox (multiple flaws)

Samba (regression error)
**********

Today's malware news:

Trojan lurks, waiting to steal admin passwords
The criminals behind the Coreflood Trojan are using the software to steal banking and brokerage account usernames and passwords. They've amassed a 50G-byte database of this information from the machines they've infected, according to Joe Stewart, director of malware research with security vendor SecureWorks. IDG News Service, 07/01/2008.

F-Secure warns against new, efficient malware
Watch out for the newest generation of malware that is difficult to crack and efficient, warns antivirus firm F-Secure. Computerworld, 07/01/2008.
**********

From the interesting reading department:

Clear Choice Test: Security management tools come up short
After 10 years on the market, products should be better at reporting, usability and advanced correlation features. Network World, 06/30/2008.

Jason Meserve is multimedia editor at Network World.

Partner Content

Brilliantly simple security and control solutions for email, web and endpoint

www.sophos.com

Stopping data leakage

Learn how to exploit your current security investment to control the information that flows into, through and out of your network.

Download the white paper.

Why detection rates aren't enough

Evaluating endpoint security products is a time-consuming and daunting task. Learn the six critical questions you need to ask prospective vendors to get the right endpoint solution.

Download the white paper.

Applications: taking back control

Employees installing unauthorized applications is a growing threat to business security and productivity. Cost-effectively reduce this threat by integrating control into your malware protection.

Learn more today.

Comment
Login
Forgot your account info?
Add comment
Anonymous comments subject to approval. Register here for member benefits.
Have a NetworkWorld account? Log in here. Register now for a free account.

Videos

rssRss Feed

Whitepapers

Magic Quadrant for Application Delivery Controllers

Gartner summarizes its view on Application Delivery Controllers, evaluates strengths and weaknesses...

Vulnerability Management For Dummies

Download this concise book "Vulnerability Management for Dummies," to learn about the simple steps...

The ROI and TCO Benefits of Data Deduplication for Data Protection in the Enterprise

This paper examines and quantifies the costs and benefits of backup with deduplication storage as...

Webcasts

Transforming the Enterprise WAN Edge: Video from Cisco

Life on the edge of your WAN has changed dramatically. With the need to deliver advanced services,...

PoE Plus: Impact on the PoE Market

The standard for Power over Ethernet (PoE), IEEE Std. 802.3af(tm)-2003, advanced networking,...

Harnessing the power of communications to increase workplace performance

Due to the convergence of IT and telecommunications technologies, the business workplace has been...

Special Reports

The Evolution of Network Security

We have so many holes punched in our firewalls today that many industry insiders question the value...

The self-managed network

We aren't there yet, but advances in network and systems management tools are making it possible to...

Get instant email notification when white papers, webcasts, executive guides are added to our library. Stay informed and up-to-date with the latest on IT Technologies with Network World's Resource Alerts.