SSL/OpenSSL vulnerability patched

Today’s bug patches and security alerts:

SSL vulnerability could bring down Cisco LAN/WAN gear

Cisco warns that an implementation of Secure Sockets Layer on some of its switches, routers and firewalls could leave these devices vulnerable to a denial-of-service attack. Network World Fusion, 03/17/04.

https://www.nwfusion.com/news/2004/0317ciscossl.html?nl

Cisco advisory:

https://www.nwfusion.com/go2/0315bug2a.html

OpenSSL advisory:

https://www.openssl.org/news/secadv_20040317.txt

More SSL and OpenSSL patches:

Debian:

https://www.debian.org/security/2004/dsa-465

EnGarde:

https://www.nwfusion.com/go2/0315bug2b.html

FreeBSD:

https://www.nwfusion.com/go2/0315bug2c.html

Mandrake Linux:

https://www.nwfusion.com/go2/0315bug2d.html

Red Hat:

https://rhn.redhat.com/errata/RHSA-2004-121.html

SuSE:

https://www.suse.com/de/security/2004_07_openssl.html

**********

HP patches Web-based Management System

A security flaw in HP’s Web-based Management System could allow someone without any privileges to gain remote access to the infected system with administrator rights. For more, go to:

https://www.nwfusion.com/go2/0315bug2e.html

**********

Macromedia patches flaw in ColdFusion MX and JRun 4.0

A flaw in the way Macromedia’s ColdFusion MX and JRun 4.0 handle certain SOAP-based Web services could be exploited in a denial-of-service attack against the affected machine. An update can be downloaded here:

https://download.macromedia.com/pub/security/mpsb04-04.zip

**********

Debian patches gdk-pixbuf

A flaw in the way BMP files are handled by gdk-pixbuf, the GdkPixBuf image library for Gtk, could be used to crash the application using the library. For more, go to:

https://www.debian.org/security/2004/dsa-464

**********

Red Hat patches Mozilla bug

An update is available for Red Hat’s Mozilla implementation that fixes the way certain S/MIME types are handled. For more, go to:

https://rhn.redhat.com/errata/RHSA-2004-112.html

**********

Today’s roundup of virus alerts:

Troj/Bdoor-CCK – A backdoor Trojan that drops the file ‘WMER.HTM’ into the Windows help folder. (Sophos)

W32/Protoride-F – This virus spreads via network shares and installs a backdoor on the infected machine accessible by IRC. (Sophos)

Troj/Prorat-D – Another backdoor Trojan that may try to counter its removal from the infected system. (Sophos)

W32/Agobot-ED – Yet another variant of the Agobot family of Trojan horse viruses that installs an IRC-accessible backdoor and terminates certain security and anti-virus applications. (Sophos)

W32/Agobot-FG – Similar to Agobot-ED, this Trojan tries to exploit the DCOM and RPC flaws in Windows to install its malicious code. (Sophos)

**********

From the interesting reading department:

Vericept announces anti-fraud product aimed at identity theft problem

Vericept this week announced a software-based anti-fraud product that monitors the outbound IP-based communications of an enterprise in order to prevent loss of sensitive data that could lead to identity theft. Network World Fusion, 03/17/04.

https://www.nwfusion.com/news/2004/0317vericept.html?nl

Mgmt. matters: Ace Hardware simplifies security management

This is the third in a special Fusion series spotlighting enterprise network managers’ innovative use of management products to automate processes, prevent outages and save money. Stay tuned for more. Network World Fusion, 03/17/04.

https://www.nwfusion.com/news/2004/0317mm3.html?nl