Sicurezza

Alert GCSA-08099 – MS08-059 Vulnerabilita’ in Microsoft Host

Inserito da 21 ottobre, 2008 (0) Commenti

Si tratta di :Sicurezza

Descrizione del problema

Questo aggiornamento di sicurezza risolve una vulnerabilita’
relativa a Microsoft Host Integration Server.

vulnerabilita’ consente l’esecuzione remota di arbitrario
se un attaccante invia su una affetta richieste RPC
appositamente forgiate.

:: e Sistemi affetti

Microsoft Host Integration Server 2000 SP2
Microsoft Host Integration Server 2000 Administrator Client
Microsoft Host Integration Server 2004 (Server)
Microsoft Host Integration Server 2004 SP1 (Server)
Microsoft Host Integration Server 2004 (Client)
Microsoft Host Integration Server 2004 SP1 (Client)
Microsoft Host Integration Server 2006 per sistemi 32-bit
Microsoft Host Integration Server 2006 per sistemi x64

:: Impatto

Esecuzione remota di codice arbritario

:: Soluzioni

Applicare la patch segnalata nel bollettino Microsoft MS08-059
http://www.microsoft.com/technet/security/Bulletin/MS08-059.mspx

:: Riferimenti

Microsoft Security Bulletin MS08-059
http://www.microsoft.com/technet/security/Bulletin/MS08-059.mspx

FrSirt:
http://www.frsirt.com/english/advisories/2008/2810

Secunia:
http://secunia.com/advisories/32233/

SecurityFocus:
http://www.securityfocus.com/bid/31620

CVE Mitre:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3466

Categories : Sicurezza Tags : , , , , , , , , , , , , ,

Vulnerabilita’ in Microsoft Excel (956416)

Inserito da 21 ottobre, 2008 (0) Commenti

Si tratta di :Sicurezza

Descrizione del problema

Questo aggiornamento di sicurezza risolve vulnerabilita’
relative a .

Le vulnerabilita’ consentono l’esecuzione remota di arbitrario
se un attaccante apre file di Excel appositamente predisposti.
Un attaccante che sia riuscito a sfruttare queste vulnerabilita’
potrebbe ottenere il controllo completo del sistema.

:: e Sistemi affetti

Microsoft Office 2000 SP3

Microsoft Office XP SP3

Microsoft Office 2003 SP2
Microsoft Office 2003 SP3

2007 Microsoft Office System
2007 Microsoft Office System SP1

Microsoft Office Excel Viewer

Microsoft Office Excel Viewer 2003
Microsoft Office Excel Viewer 2003 SP3

Microsoft Office Compatibility
Microsoft Office Compatibility Pack SP1

Microsoft Office SharePoint Server 2007
Microsoft Office SharePoint Server 2007 SP1
Microsoft Office SharePoint Server 2007 x64
Microsoft Office SharePoint Server 2007 x64 SP1

Microsoft Office 2004 per Mac

Microsoft Office 2008 per Mac

Open XML File Format Converter per Mac

:: Impatto

Esecuzione remota di codice arbritario

:: Soluzioni

Applicare segnalata nel bollettino Microsoft MS08-057
http://www.microsoft.com/technet/security/bulletin/ms08-057.mspx

:: Riferimenti

Microsoft Bulletin MS08-057
http://www.microsoft.com/technet/security/bulletin/ms08-059.mspx

FrSirt:
http://www.frsirt.com/english/advisories/2008/2808

Secunia:
http://secunia.com/advisories/32211/

SecurityFocus:
http://www.securityfocus.com/bid/31705

CVE Mitre:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3477
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3471
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4019

Categories : Sicurezza Tags : , , , , , , , , , , , , ,

Vulnerabilita’ in Microsoft Ancillary Function Driver (956803)

Inserito da 19 ottobre, 2008 (0) Commenti

Si tratta di :Sicurezza

Descrizione del problema

Questo aggiornamento di risolve una vulnerabilita’
relativa a Ancillary Function Driver.

vulnerabilita’ consente ad un attaccante locale di ottenere
il controllo completo del sistema.

La vulnerabilita’ consente ad un attaccante locale di ottenere
il controllo completo del sistema.

:: e Sistemi affetti

XP SP2
Microsoft Windows XP SP3

Microsoft Windows XP Professional x64
Microsoft Windows XP Professional x64 SP2

Microsoft Windows Server 2003 SP1
Microsoft Windows Server 2003 SP2

Microsoft Windows Server 2003 x64
Microsoft Windows Server 2003 x64 SP2

Microsoft Windows Server 2003 per Itanium SP1
Microsoft Windows Server 2003 per Itanium SP2

:: Impatto

Esecuzione di arbritario con privilegi superiori

:: Soluzioni

Applicare la segnalata nel bollettino Microsoft MS08-066
http://www.microsoft.com/technet/security/Bulletin/MS08-066.mspx

:: Riferimenti

Microsoft Security Bulletin MS08-066
http://www.microsoft.com/technet/security/Bulletin/MS08-066.mspx

FrSirt:
http://www.frsirt.com/english/advisories/2008/2817

Secunia:
http://secunia.com/advisories/32261/

SecurityFocus:
http://www.securityfocus.com/bid/31673

CVE Mitre:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3464

Categories : Sicurezza Tags : , , , , , , , , , , , , , ,

Vulnerabilita’ in Microsoft Windows Internet Printing Service (953155)

Inserito da 18 ottobre, 2008 (0) Commenti

Si tratta di :Sicurezza

Descrizione del problema

Questo aggiornamento di risolve una vulnerabilita’
relativa al Microsoft Windows Internet Printing Service.

vulnerabilita’ consente ad un attaccante di eseguire codice
arbitrario nel contesto ’utente corrente.

:: Software e Sistemi affetti

Microsoft Windows 2000 SP4

Microsoft Windows XP SP2
Microsoft Windows XP SP3

Microsoft Windows XP Professional x64
Microsoft Windows XP Professional x64 SP2

Microsoft Windows Server 2003 SP1
Microsoft Windows Server 2003 SP2

Microsoft Windows Server 2003 x64
Microsoft Windows Server 2003 x64 SP2

Microsoft Windows Server 2003 per Itanium SP1
Microsoft Windows Server 2003 per Itanium SP2

Microsoft Windows Vista
Microsoft Windows Vista SP1

Microsoft Windows Vista x64
Microsoft Windows Vista x64 SP1

Microsoft Windows Server 2008 per sistemi 32-bit
Microsoft Windows Server 2008 per sistemi x64
Microsoft Windows Server 2008 per sistemi Itanium

:: Impatto

Esecuzione remota di codice arbritario

:: Soluzioni

Applicare la segnalata nel bollettino Microsoft MS08-062
http://www.microsoft.com/technet/security/bulletin/ms08-062.mspx

:: Riferimenti

Microsoft Security Bulletin MS08-062
http://www.microsoft.com/technet/security/bulletin/ms08-062.mspx

FrSirt:
http://www.frsirt.com/english/advisories/2008/2813

SecurityFocus:
http://www.securityfocus.com/bid/31682

CVE Mitre:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1446

Categories : Sicurezza Tags : , , , , , , , , , , , , , , , , , , , , ,

Vulnerabilita’ in Microsoft SMB (957095)

Inserito da 17 ottobre, 2008 (0) Commenti

Si tratta di :Sicurezza

Descrizione del problema

Questo aggiornamento di sicurezza risolve una vulnerabilita’
relativa a Microsoft Server Message Block Protocol (SMB).

La vulnerabilita’ consente ad un attaccante di eseguire codice
arbitrario.

:: Software e Sistemi affetti

2000 SP4

Microsoft XP SP2
Microsoft Windows XP SP3

Microsoft Windows XP Professional x64
Microsoft Windows XP Professional x64 SP2

Microsoft Windows Server 2003 SP1
Microsoft Windows Server 2003 SP2

Microsoft Windows Server 2003 x64
Microsoft Windows Server 2003 x64 SP2

Microsoft Windows Server 2003 per Itanium SP1
Microsoft Windows Server 2003 per Itanium SP2

Microsoft Windows Vista
Microsoft Windows Vista SP1

Microsoft Windows Vista x64
Microsoft Windows Vista x64 SP1

Microsoft Windows Server 2008 per sistemi 32-bit
Microsoft Windows Server 2008 per sistemi x64
Microsoft Windows Server 2008 per sistemi Itanium

:: Impatto

Esecuzione remota di codice arbritario

:: Soluzioni

Applicare la patch segnalata nel bollettino Microsoft MS08-063
http://www.microsoft.com/technet/security/bulletin/Ms08-063.mspx

:: Riferimenti

Microsoft Bulletin MS08-063
http://www.microsoft.com/technet/security/bulletin/Ms08-063.mspx

FrSirt:
http://www.frsirt.com/english/advisories/2008/2814

Secunia:
http://secunia.com/advisories/32249/

SecurityFocus:
http://www.securityfocus.com/bid/31647

CVE Mitre:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4038

Categories : Sicurezza Tags : , , , , , , , , , , , , , , , , ,

Oracle Critical Patch Update (Ottobre 2008)

Inserito da 16 ottobre, 2008 (0) Commenti

Si tratta di :Sicurezza

Descrizione del problema

Oracle ha rilasciato una Critical Patch Update 2008.
Tale aggiornamento e’ una collezione di patch nata per porre
soluzione a 36 difetti di sicurezza presenti in vari prodotti
Oracle.

:: interessato

Oracle Database 11g, version 11.1.0.6
Oracle Database 10g Release 2, versions 10.2.0.2, 10.2.0.3, 10.2.0.4
Oracle Database 10g, version 10.1.0.5
Oracle Database 9i Release 2, versions 9.2.0.8, 9.2.0.8DV

Oracle Application Server 10g Release 3 (10.1.3), versions
10.1.3.3.0, 10.1.3.4.0
Oracle Application Server 10g Release 2 (10.1.2), versions
10.1.2.2.0, 10.1.2.3.0
Oracle Application Server 10g (9.0.4), version 9.0.4.3

Oracle E-Business Suite Release 12, version 12.0.4
Oracle E-Business Suite Release 11i, version 11.5.10.2

Oracle PeopleSoft Enterprise PeopleTools versions 8.48.18, 8.49.14
Oracle PeopleSoft Enterprise Portal versions 8.9, 9.0

Oracle WebLogic Server (formerly BEA WebLogic Server) 10.0 released
through MP1, 10.3 GA
Oracle WebLogic Server (formerly BEA WebLogic Server) 9.0 GA, 9.1 GA,
9.2 released through
Oracle WebLogic Server (formerly BEA WebLogic Server) 8.1 released
through SP6
Oracle WebLogic Server (formerly BEA WebLogic Server) 7.0 released
through SP7
Oracle WebLogic Server (formerly BEA WebLogic Server) 6.1 released
through SP7

Oracle Workshop for WebLogic (formerly BEA WebLogic Workshop) 10.0
released through MP1, 10.2 GA, 10.3 GA
Oracle Workshop for WebLogic (formerly BEA WebLogic Workshop) 9.0,
9.1, 9.2 released through MP3
Oracle Workshop for WebLogic (formerly BEA WebLogic Workshop) 8.1
released through SP6

:: Impatto

Security Bypass
Exposure of sensitive information
Privilege escalation
DoS
System access

L’impatto delle vulnerabilita’ varia in base alla configurazione
del sistema, del prodotto o della componente considerata.

:: Soluzioni

Applicare le patch appropriate o procedere all’opportuno
aggiornamento secondo le istruzioni rilasciate da Oracle:

http://www.oracle.com/technology/deploy/security/critical-patch-updates/cpujul2008.

:: Riferimenti

Oracle Critical Patch Updates and Security Alerts

http://www.oracle.com/technology/deploy/security/alerts.htm

SecurityFocus

http://www.securityfocus.com/bid/31683

Mitre’s CVE ID

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4008

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4009

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4010

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4011

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4012

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4013

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4000

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4001

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4002

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4003

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4004

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3985

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3988

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3998

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3619

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3993

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3975

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3977

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3588

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3986

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3987

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-39

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2624

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3996

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3992

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3976

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3982

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3983

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3984

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3994

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3980

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4005

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2625

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3990

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3991

Categories : Sicurezza Tags : , , , , , , , , , , , , , , , , , , ,
Pagina 5 di 29« Prima...2345678...Ultima »