stargeek
PHP news website logo.
home    PHP scripts    articles    seo tools    links    search    contact    shop    realtors


Microsoft issues patches for three new Windows vulnerabilities







Microsoft issues patches for three new
Windows vulnerabilities

Microsoft issues patches for three new
Windows vulnerabilities
02/10/2004 05:35 PM

The critical flaw involves an unchecked buffer in Microsoft's Abstract Syntax Notation One (ASN.1) Library, which is widely used by Windows security subsystems.




This is a GrokNews Entry: (what is grok?)





Similar Items

Microsoft issues patches for three new Windows vulnerabilities

Grok Headline matches for Microsoft issues patches for three new Windows vulnerabilities

Microsoft patches 18 vulnerabilities


Microsoft patches 18 vulnerabilities 04/13/2005 06:48 AM
iTnews Apr 13 2005 11:16AM GMT

Microsoft Patches 12 Vulnerabilities -
SMB Bug "Definitely Serious"


Microsoft Patches 12 Vulnerabilities -
SMB Bug "Definitely Serious"
06/17/2005 04:44 PM

4 new Microsoft patches to close 20
vulnerabilities


4 new Microsoft patches to close 20
vulnerabilities
04/14/2004 03:47 PM
Thor Larholm (Apr 13 2004)

Microsoft Issues 3 Patches; IE Fix
Delayed


Microsoft Issues 3 Patches; IE Fix
Delayed
01/16/2004 11:01 AM
UPDATE: First major patch of the year includes three big fixes, but five 'extremely critical' holes in Internet Explorer are pending.

Microsoft Issues Security Patches


Microsoft Issues Security Patches 11/11/2003 10:17 PM
PC Magazine Nov 11 2003 9:32PM ET

FW: [Unpatched] 4 new Microsoft patches,
4 old updated, 24 vulnerabilities


FW: [Unpatched] 4 new Microsoft patches,
4 old updated, 24 vulnerabilities
04/15/2004 06:20 PM
Thor Larholm (Apr 13 2004)

Microsoft issues seven security patches,
two critical


Microsoft issues seven security patches,
two critical
07/13/2004 05:08 PM
Software updates released today by Microsoft include fixes for previously unknown flaws in the Windows OS, including critical holes in the Windows Task Manager and HTML help features.

Microsoft issues flood of critical
patches


Microsoft issues flood of critical
patches
04/13/2004 06:18 PM
Microsoft Corp. on Tuesday released a flood of information on new and previously disclosed holes in a wide range of software products, many of them rated "critical" and well-suited to use by malicious hackers or computer virus writers, according to one security expert.

Microsoft Issues Update To Fix IE
Vulnerabilities


Microsoft Issues Update To Fix IE
Vulnerabilities
07/02/2004 04:38 PM
Enterprise Windows I.T. Jul 2 2004 8:13PM GMT

Microsoft Issues Update To Fix IE
Vulnerabilities (NewsFactor)


Microsoft Issues Update To Fix IE
Vulnerabilities (NewsFactor)
07/02/2004 02:56 PM
NewsFactor - After a grueling seven days in which two viruses exploited vulnerabilities in the Internet Explorer browser, and the federal government, no less, warned users away from IE -- Microsoft (Nasdaq: MSFT) has responded with software updates.

BindView RAZOR Team Issues RapidFire
Updates for Microsoft and Cisco
Vulnerabilities


BindView RAZOR Team Issues RapidFire
Updates for Microsoft and Cisco
Vulnerabilities
04/13/2005 07:29 PM
Business Wire UK Apr 13 2005 11:05PM GMT

Microsoft To Provide IE Patches for
Windows XP Only


Microsoft To Provide IE Patches for
Windows XP Only
09/23/2004 11:30 AM

MICROSOFT Patches New Windows Flaws


MICROSOFT Patches New Windows Flaws 06/08/2004 04:59 PM
“Microsoft released software updates for versions of Windows XP and Windows Server 2003 and warned customers about a security vulnerability in a Windows component called IDirectPlay4, which is used to support multiplayer network games.The security hole, if successfully exploited, could allow a remote attacker to cause a Windows application using the affected component to fail, creating a denial of service attack.”Read more…

Microsoft release seven more Windows
patches


Microsoft release seven more Windows
patches
07/14/2004 03:21 PM
IT Vibe Jul 14 2004 6:51PM GMT

Microsoft Patches More Windows Holes


Microsoft Patches More Windows Holes 04/13/2004 03:47 PM
Redmond releases four new collections of Windows fixes, three of which it has deemed critical.

Microsoft Releases Windows 98, Me
Patches


Microsoft Releases Windows 98, Me
Patches
03/14/2005 04:02 PM
Contrary to the view that Microsoft has totally abandoned anything older than Windows XP, they’ve released new patches for the old operating systems. It’s a welcome sign that they realize that whether or not the official support for Win 9x/ME has ended, the people still running them won’t be part of the security problem simply because their OS hasn’t been patched….

Direct and Related Links for 'Microsoft Releases Windows 98, Me Patches'


Microsoft patches new Windows flaw


Microsoft patches new Windows flaw 05/11/2004 04:29 PM
The software company says the security hole, which could enable an attacker to remotely execute malicious code, poses an "important" risk.

Microsoft Releases 3 New Windows Patches


Microsoft Releases 3 New Windows Patches 04/13/2004 03:35 PM
AP via Baltimore Sun Apr 13 2004 8:14PM GMT

UPDATE: Microsoft patches new Windows
flaw


UPDATE: Microsoft patches new Windows
flaw
05/11/2004 10:29 PM

Microsoft Patches Buggy Windows SSL
Patch


Microsoft Patches Buggy Windows SSL
Patch
04/29/2004 01:22 PM
Workarounds issued for bugs found in a recently issued Windows security patch that could cause systems to freeze or lead to system usage overload.

Microsoft releases patches for Windows
flaws


Microsoft releases patches for Windows
flaws
04/15/2004 12:58 PM
CNN Apr 15 2004 5:39PM GMT

Microsoft releases critical patches for
Windows


Microsoft releases critical patches for
Windows
04/13/2004 09:02 PM
Straits Times Apr 14 2004 1:55AM GMT

Microsoft Patches New Windows Flaws (PC
World)


Microsoft Patches New Windows Flaws (PC
World)
06/08/2004 03:14 PM
PC World - Moderate security vulnerabilities found in XP, Windows Server 2003.

Microsoft releases new patches for
Windows flaws


Microsoft releases new patches for
Windows flaws
04/13/2004 06:24 PM
SiliconValley.com Apr 13 2004 11:09PM GMT

Microsoft patches "critical" Windows
security bug


Microsoft patches "critical" Windows
security bug
02/11/2004 12:12 PM
Microsoft issues a patch for a critical eight-month-old vulnerability. Why did it take so long?

Microsoft Patches Critical Bugs in IE,
Windows


Microsoft Patches Critical Bugs in IE,
Windows
06/17/2005 05:39 PM

Microsoft Patches 'Critical' Windows
2000 Flaw


Microsoft Patches 'Critical' Windows
2000 Flaw
03/19/2003 10:42 PM
An exploit for the security vulnerability is already publicly available, increasing the urgency for the application of the patch.

Microsoft issues Windows alert


Microsoft issues Windows alert 02/11/2004 06:57 PM
Courier Mail Feb 11 2004 11:10PM GMT

Microsoft issues Windows warning


Microsoft issues Windows warning 02/11/2004 12:00 AM
Glasgow Herald Feb 11 2004 4:34AM GMT

Microsoft Issues First Patch for Windows
XP Service Pack 2 (NewsFactor)


Microsoft Issues First Patch for Windows
XP Service Pack 2 (NewsFactor)
09/23/2004 03:42 PM
NewsFactor - Microsoft (Nasdaq: MSFT) has issued its first patch for Service Pack 2, which has been on the market for just a month and a half. The patch fixes a flaw in the VPN, or virtual private network.

Secure-It™ Protects Against
Various Windows Vulnerabilities
Including some Not Patched by Microsoft


Secure-It™ Protects Against
Various Windows Vulnerabilities
Including some Not Patched by Microsoft
04/05/2005 09:12 AM
Computer Security News Apr 5 2005 1:23PM GMT

Microsoft issues Windows Server 2003
update blocking tool


Microsoft issues Windows Server 2003
update blocking tool
06/22/2005 02:56 AM

Microsoft on Tuesday released a blocking tool for corporate users that will prevent the automatic download of the first service pack for Windows Server 2003.

Microsoft provided a similar blocking tool when Windows XP SP2 was released. The tool allowed companies to keep using Automatic Updates while they decided on if, how and when they would upgrade to XP SP2.

The new blocking tool, which works with a registry key, a script or a group policy setting in Active Directory, will prevent the automatic download of Windows Server 2003 SP1 through Microsoft’s online patch download services, Automatic Update, Windows Update or the newly launched Microsoft Update.

Those services automatically bring security and other patches down to the operating systems and installs them. During the release of XP SP2, Microsoft caused an uproar among users, especially those in the higher education community, when it decided to deliver the service pack through its automatic update services. Just months earlier, Microsoft had said it would not do that. Users were concerned because XP SP2 was not compatible with some desktop applications. No such similar concerns, however, surround Windows Server 2003 SP1.

But most corporate users do not have updates automatically installed on desktops and certainly not servers because it would not allow for proper testing before deployment. But during the XP SP2 fiasco, even Microsoft was surprised how many corporate users had activated Automatic Updates on their corporate desktops.

Most companies use Microsoft’s System Management Server, Windows Server Update Services or third-party patch management tools to control patch downloads and distribution.

“There are more people than you would expect with [auto updates] turned on at the server,” says Samm DiStasio, director of product management for the Windows Server division. “We are just trying to make sure the tool is available well in advance of us turning on automatic updates. But let’s be clear, this is a tool for blocking automatic updates. You can still install SP1 on their servers if you have the disk or you want to download the bits on your own.”

Windows Server 2003 SP1 was officially released on March 30, however, its availability over the Web is slated for July 26.

The new blocking tools, which will keep Windows Server 2003 SP1 off the automatic update cycle until March 30, 2006, has three components: a Microsoft signed executable, a script and an ADM template.

The executable creates a registry key with a switch that will block or unblock the download of the service pack while allowing all other patches and fixes to be downloaded. The key used is called HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate.

The script will do the same thing as the registry key, but Microsoft says it allows users to specify a block or unblock on a specific machine name.

Microsoft also issued a warning saying “the executable and script have been tested only as command-line tools and not in conjunction with other systems management tools or remote execution mechanisms.

The third option is the ADM template, which works in conjunction with Active Directory’s group policy technology. The template includes new group policy settings to block or unblock delivery of the service pack.

Microsoft also noted that Windows Server 2003 SP1 requires users to accept and initiate its installation so even if the service pack is automatically downloaded it must be explicitly accepted and installed by a server administrator.

SEE ALSO:

  • Update - Microsoft preps Web front-end to IM server
  • Microsoft to sell antivirus software separately
  • ADVERTISEMENT
    NetScaler
    makes any application run up to 5 times faster. See how.


    Vulnerabilities: Microsoft Windows Samba
    File Sharing Resource Exhaustion
    Vulnerability


    Vulnerabilities: Microsoft Windows Samba
    File Sharing Resource Exhaustion
    Vulnerability
    01/24/2004 05:00 PM
    SecurityFocus Jan 24 2004 9:12PM GMT

    Oracle Patches Database Vulnerabilities


    Oracle Patches Database Vulnerabilities 04/13/2005 10:56 PM
    The second quarterly "patch day" from the database company brings protection for a range of products, including servers, PeopleSoft applications and Oracle Database 10g, and analysts approve.

    Patches on Parade: Eight Updates for 18
    Vulnerabilities


    Patches on Parade: Eight Updates for 18
    Vulnerabilities
    04/13/2005 02:30 PM
    Microsoft's Patch Tuesday was a busy one. The company posted eight security bulletins covering 18 vulnerabilities. Five of the eight bulletins earned a critical rating.

    Oracle issues critical patches


    Oracle issues critical patches 04/16/2005 02:44 AM
    OptusNet Apr 16 2005 6:16AM GMT

    RealNetworks Patches Player, Rhapsody
    Vulnerabilities


    RealNetworks Patches Player, Rhapsody
    Vulnerabilities
    06/24/2005 09:28 PM
    Information Week Jun 25 2005 1:16AM GMT

    WebSTAR Update Patches Vulnerabilities
    (26-Jul-2004; 1.2K)


    WebSTAR Update Patches Vulnerabilities
    (26-Jul-2004; 1.2K)
    07/26/2004 09:16 PM

    broadband » News » Pirated
    Windows and Worms - Should Microsoft
    supply patches for bootleg copies?


    broadband » News » Pirated
    Windows and Worms - Should Microsoft
    supply patches for bootleg copies?
    05/08/2004 03:46 AM
    Should these infected PC's be allowed to grab timely critical updates, simply to help lessen the impact of worms web-wide? .. Pirated Windows and Worms: Should Microsoft supply patches for bootleg copies? .. bei DSL-Reports .. DSLReports .. discussion

    dslreports.com/shownews/43503
    track this site | 5 links


    Grok Description matches for Microsoft issues patches for three new Windows vulnerabilities
    GrokA matches for Microsoft issues patches for three new Windows vulnerabilities

    Microsoft issues patches for three new Windows vulnerabilities

    The following phrases have been identified by the grok system as matching this entry:

















    Also check out:


    Grok

    Ipod Porn on the
    Rise

    Brief Abstract of
    Wikipedia's
    Mesothelioma Cancer
    page

    Get first aid
    instructions in your
    cell phone

    IE is crap
    JSPWiki gains
    podcasting support

    Recapturing The
    Magic

    Volvo recalling
    105,000 vehicles

    Device 'handed in'
    to station

    Football: Arsenal
    win to stay top

    Yale Students
    Replace Kazaa With
    Humans Swapping CDs

    Vodafone May Have
    Bigger Fish To Fry -
    Or Not

    Robots With Wearable
    Computers?

    Is AOL Making
    Political
    Adjustments To
    Google Searches?

    Is The Contact Info
    You Provide Someone
    Public Or Private
    Info?

    The Seattle Times:
    Nation & World: Bush
    report: Sending jobs
    overseas helps U.S.

    shows his data
    Telegraph | Opinion
    | Kerry won't
    scare any of the big
    beasts

    Convicted DC Sniper
    Appeals Verdict,
    Death Penalty
    (Reuters)

    Al Qaeda Under
    Pressure for New
    Strike -Spy Chief
    (Reuters)

    Atkins' Records
    Spark Another Diet
    Fight (AP)

    9/11 Panel to Get
    More Access to Memos
    (AP)

    AP: 1,341 Priests
    Accused Since 1950
    (AP)

    Secure WebMail
    Research Project
    Helper

    Market Regulation
    Services - Trade
    Resumption - Phoenix
    Technology Services
    Inc. - PHX

    Cognos tightens
    planning software
    integration

    Intel updates
    software tools for
    Prescott, threading

    New Apple Store
    Sighted In Bethesda,
    MD

    Apple Adds Music
    Creation To Its
    Suite

    New 'Doomjuice' worm
    emerges, targets
    Microsoft

    Microsoft warns on
    Windows security
    flaws

    BugTraq: Another Low
    Blow From Microsoft:
    MBSA Failure!

    BugTraq: RE: Another
    Low Blow From
    Microsoft: MBSA
    Failure!

    BugTraq: RE: EEYE:
    Microsoft ASN.1
    Library Length
    Overflow Heap
    Corruption

    Microsoft warns of
    hacker-friendly flaw

    Next News: Using
    computer models to
    predict elections

    New federal antispam
    law having little
    initial effect

    [CLA-2004:812]
    Conectiva Security
    Announcement - vim

    iDEFENSESecurityAdvi
    sory02.10.04:
    XFree86FontInformati
    onFileBufferOverflow

    Why doesn't HTML
    support this:

    Sun Unveils Opteron
    Server (PC World)

    Democrats Close Out
    Southern Campaigns
    With 2 Primaries

    Facing Questions,
    White House Releases
    Bush Military Data

    Malicious doctors
    hiding behind a
    non-profit

    Microsoft admits
    'critical' flaw

    Intel Adds Dev Tools
    for 'Prescott',
    'Bulverde'

    PC-Telephone v5.0
    Patriot, Intel in
    patent squabble

    IBM details
    cross-brand sales
    strategy

    Buy Everything On
    Sale!

    mkxvcd.sh 2.0.2
    Monkey HTTP Daemon
    0.8.2 (Stable)

    libtclapp 0.1.4
    EEYE: Microsoft
    ASN.1 Library Length
    Overflow Heap
    Corruption

    EEYE: Microsoft
    ASN.1 Library Bit
    String Heap
    Corruption

    what is grok?