Government Technology
Government Technology: State & Local Government News Articles

US-CERT Publishes List of Security Vulnerabilities



Print
Comment

Jan 26, 2005, By Corey McKenna

The United States Computer Emergency Response Team (US-CERT) has published a list of security vulnerabilities affecting a variety of platforms reported from around the Web. Vulnerabilities include

Microsoft Internet Explorer Remote Information Disclosure
Microsoft Internet Explorer 5.0, 5.0.1, SP1-SP4, 5.5, preview, SP1&SP2, 6.0 SP1&SP2
A vulnerability exists due to a failure to secure scripts residing on a local computer, which could let a remote malicious user obtain sensitive information. No workaround or patch was available at time of publishing. No exploit is required to take advantage of this vulnerability.
Threat level: Medium

Microsoft Windows Indexing Service Buffer Overflow
Microsoft Windows XP SP1 & prior service packs, 2003
A buffer overflow vulnerability exists in the Indexing Service due to the way query validation is handled, which could let a remote malicious user cause a denial of service or execute arbitrary code. Updates are available at http://www.microsoft.com/technet/ There are no known exploits for this vulnerability.
Threat level: Low. High if arbitrary code can be executed.

Apache 2.0.35-2.0.52
A vulnerability exists when the 'SSLCipherSuite' directive is used in a directory or location context to require a restricted set of cipher suites, which could let a remote malicious user bypass security policies and obtain sensitive information. No exploit code is required to take advantage of this vulnerability. Patches are available.
Threat level: Medium

OpenPKG:
>ftp://ftp.openpkg.org/release/

Gentoo:
glsa/glsa-200410-21.xml>http://security.gentoo.org/
glsa/glsa-200410-21.xml

Slackware:
ftp://ftp.slackware.com/pub/slackware/

Conectiva:
ftp://atualizacoes.conectiva.com.br/

Mandrake:
http://www.mandrakesoft.com/security/advisories

Fedora:
/linux/core/updates/2/>http://download.fedora.redhat.com/pub/fedora/linux/core/updates/2/

RedHat:
http://rhn.redhat.com/errata/RHSA-2004-562.html

SuSE:
In the process of releasing packages.

RedHat:
http://rhn.redhat.com/errata/RHSA-2004-600.html

Avaya:
ASA-2005-010_RHSA-2004-600.pdf>http://support.avaya.com/elmodocs2/security/
ASA-2005-010_RHSA-2004-600.pdf

VMware:
http://www.vmware.com/download/esx/

A complete list of vulnerabilties and other information can be found here.

If You Liked This Article, You May Also Like...


Latest Government Technology News


Industry Solutions for Government

Read real world deployments of technology in government from our sponsors.

View All Industry Solutions

Related Products and Services

Marketplace



This section
brought to you by:


Mobile Communications Survey Executive Summary

More than 200 responses were captured to help gauge the effectiveness and types of communications and situational awareness capabilities currently deployed for emergency response. View the Executive Summary Now!

Dispatch Operations and Interoperability

A New Era in Public Safety BlackBerry® smartphones running on Sprint networks deliver a wide range of applications that are transforming public safety operations.


Hurricane Preparedness Tips When a hurricane hits, are you prepared to keep in touch?


Case Study - Morris County, New Jersey The Morris County Communications Center upgraded to a new trunked radio system with the benefits of a cellular network, extending coverage beyond county lines


Case Study - Iredell County, North Carolina Spanning over 570 sq miles, it became imperative that the Iredell County Emergency Communications, Operations and Management extend it's communications systems to enhance reliability, security, and coverage.


Case Study - City of Anaheim, California The City of Anaheim saw an opportunity to leverage existing GST and partner with nearby cities to enhance safety operations through data interoperability.


Case Study - Charlottesville, Virginia Fire Department Taking advantage of a range of interoperability solution, the Charlottesville Fire Department has achieved a network that can serve as backup to their existing public safety network.


Sprint ERT Go-Kit with GST Optima Rapid, interoperable communications for emergencies, drills and field exercises.


Optimal Interoperability Until recently it was not possible to cost effectively connect commercial networks to LMR systems. Improvements in communications technology have resulted in greatly enhanced operational capability and have reduced the log-term cost of communications system ownership.


Multi-agency interoperability for Public Safety Establishing cross-agency, real-time situational awareness is critical to effective incident management as well as daily resource management.


Video


DHS Grant Links

DHS Grants and Assistance Programs Link to overview of available grants administered by The Department of Homeland Security (DHS)


Fact Sheet: Fiscal Year 2008 Preparedness Grants Major changes in funding and focus for 2008 DHS grant programs


Remarks on 2008 Homeland Security Grant Guidance DHS Secretary Michael Chertoff and FEMA Administrator David Paulison


$1.8 billion in DHS Homeland Security Grant Program Awards


Funding Public Safety Communications Whether you are a law enforcement agency, looking for funding to support an interoperable communications solution or a school, seeking to improve communications between building administrators, grants may provide the funding you need to implement a robust, scalable communication system.


Yes! I would like more information about Sprint's dispatch operations and interoperability solutions.