Cisco patches WebEx Meeting Manager
According to Cisco, "An ActiveX control (atucfobj.dll) that is used by the Cisco WebEx Meeting Manager contains a buffer overflow vulnerability that may result in a denial of service or remote code execution." There's a manual workaround available as well as an updated version of WebEx Meeting Manager.
**********

Peer-to-peer client uTorrent fixes serious vulnerability
One of the most popular programs used by some to illegally share files under copyright has patched a serious software vulnerability. The problem affects the peer-to-peer program uTorrent as well as BitTorrent Mainline, another program based on the uTorrent code. It has been classified as "highly critical," the second most severe ranking of risk, by Secunia, a security vendor in Denmark. IDG News Service, 08/15/2008.

Secunia: uTorrent "created by" Buffer Overflow Vulnerability
**********

Three new patches from Mandriva:

cups (buffer overflow, code execution)

hplip (multiple flaws)

stunnel (authentication capture)
**********

Today's malware news:

Another Round of Peacomm Infections Under way
The Peacomm network has definitely turned out to be a survivor. With infections dating back to January 2007 and a P2P structure largely unchanged in about a year, Peacomm continues to evolve and infect new hosts. In early August our honeypots began capturing a new version of Peacomm. Symantec Security Response, 08/14/2008.

Anti-Georgia spammers building new botnet
Hackers targeting Georgia in the midst of its conflict with Russia have started sending out a new batch of malicious spam messages, apparently with the aim of building a new botnet network of remote-controlled computers. IDG News Service, 08/15/2008.
**********

From the interesting reading department:

VMware CEO apologizes for virtual-server bug
VMware's new CEO Paul Maritz has apologized to customers in a company blog posting after a major bug prevented VMware users from logging on to virtual servers this week. Network World, 08/14/2008.

Torvalds: Fed up with the 'security circus'
Linus Torvalds, creator of the Linux kernel, says he's fed up with what he sees as a "security circus" surrounding software vulnerabilities and how they're hyped by security people. Torvalds explained his position in an e-mail exchange with Network World this week. He also expanded on critical comments he made last month that caused a stir in the IT industry. Network World , 08/14/2008

Jason Meserve is multimedia editor at Network World.