A Sunbelt Network Security Inspector legújabb frissítése több Office biztonsági réssel és szép számú Linux sebezhetőséggel gazdagítja a hálózati felderítő szoftver adatbázisát. A frissítések továbbra is tartalmazzák a Mitre Common Vulnerabilities and Exposures (CVE) lista, az FBI/SANS lista, a CERT, CIAC Microsoft és FedCIRC (Department of Homeland Security) összes biztonsági figyelmeztetését.
Ha még nem ismeri az SNSI-t, töltsön le a termék honlapjáról egy ingyenes próbaváltozatot, ami rögtön megállapítja, hogy számítógépe hány befoltozatlan, távolról kihasználható bizonsági rést tartalmaz!
Az adatbázisba bekerült új és frissített sebezhetőségek:
W3288 Microsoft Office Could Allow Remote Code Execution - Office 2003
W3287 Microsoft Office Could Allow Remote Code Execution - Office 2002/XP
W3286 Microsoft Office Could Allow Remote Code Execution - Office 2000
W3285 MS-Office Publisher 2003 Could Allow Remote Code Execution
W3284 MS-Office Publisher XP/2002 Could Allow Remote Code Execution
W3283 MS-Office Publisher 2000 Could Allow Remote Code Execution
W3282 Microsoft Works File Converter Could Allow Remote Code Execution
W3280 Cumulative Security Update for Internet Explorer - W2K, XP, W2K3
W3279 Microsoft Word Viewer Could Allow Remote Code Execution - W2K, XP, W2K3
W3278 Microsoft Word 2003 Could Allow Remote Code Execution - W2K, XP, W2K3
W3277 Microsoft Word XP Could Allow Remote Code Execution
W3276 Microsoft Word 2000 Could Allow Remote Code Execution
W3275 OLE Automation Could Allow Remote Code Execution - VB 6
W3048 SeaMonkey Multiple Vulnerabilities
W2992 Java Runtime Environment 1.5 latest not installed
W2559 Firefox multiple vulnerabilities
S0453 Mozilla 1.7 browser, mail client JavaScript - Solaris 8 - 10
S0546 USB Mouse STREAMS driver may induce panic - Solaris 9-10
M0054 Firefox multiple vulnerabilities - Mac OS X
L0444 LibTorrent bdecode_recursive stack exhaustion flaw - FC
L0445 SDL_image LWZReadByte error - FC
L0446 KDEbase password bypass & local DoS errors - FC
L0449 Deluge bdecode_recursive stack exhaustion flaw - FC
L0450 OpenLDAP BDB slapd NOOP modify error - FC
L0451 Gnumeric XLS HLINK stack corruption error - FC
L0452 TCL/TK animated GIF image error - FC
L0453 Perl-Tk ReadImage GIF vulnerability - FC
W1978 BitTorrent and uTorrent client string handling vulnerability
W2568 Cisco WCS Tomcat mod_jk.so Vulnerability
W3259 Adobe Connect Enterprise non secure SWF content generation vulnerability
W3260 Adobe Dreamweaver / Contribute non secure SWF content generation
W3261 Citrix IMA service vulnerability
W3262 Lotus Samename Client Vulnerability
W3263 Aurigma/FaceBook/MySpace image load ActiveX Vulnerabilities
W3264 Yahoo! Music Engine / Jukebox parameter handing vulnerabilities
S0544 ImageMagick file metacharacter handling Vulnerabilities - Solaris 9-10
S0545 Java JRE 1.6.0 (6.0) XML parsing vulnerability - Solaris
N0076 CUCM Certificate Trust List flaw - ICS MCS
L0403 Exiv2 exif.cpp EXIF crafting error - SuSE
L0404 Tetex dvips and dviljk errors - SuSE
L0405 Libsndfile FLAC crafted PCM error - SuSE
L0407 ClamAV multiple code errors - SuSE
L0409 Tog-pegasus CIM server PAM authentication errror - SuSE
L0410 Xine-lib rmff_dump_cont SDP error - SuSE
L0411 Libxml2 invalid UTF-8 xml CurrentChar error - SuSE
L0412 QT4 SSL verification flaw - SuSE
L0413 KRB5 multiple access vulnerabilities - SuSE
L0414 OpenAFS callback race condition error - SuSE
L0415 Apache Derby DropSchemaNode flaw - SuSE
L0416 Thunderbird crafted HTML memory corruption - SuSE
L0417 ISC BIND inet_network off-by-one error - FC
L0418 Pulseaudio pa_drop_root return value flaw - FC
L0419 ICU Group zero backreference and doInterval errors - FC
L0425 ICU Group zero backreference and doInterval errors - RHE
Frissített biztonsági rések
L1525 Mozilla Firefox multiple vulnerabilities - RHE
L1529 Seamonkey multiple vulnerabilities - RHE
H0181 OpenView Operations Java GUI vulnerabilities - HP-UX 11
H0135 OpenView Operations/VantagePoint JRE vulnerability
M0048 QuickTime Player RTSP response message-reason phase - Mac OS X
S0441 Java 1.5 applet handling - Solaris
S0539 PostgreSQL 8.1/8.2 multiple vulnerabilities - Solaris 10
W1142, W1986, W1999, W2067 Anti-Virus Signatures
W2493 Microsoft Malware Removal Tool
W2692 QuickTime RTSP response message-reason phase Vulnerability
L0234 CUPS SNMP backend string function flaw - SuSE
L0270 Wireshark multiiple vulnerabilities - RHE
L0396 Xine-lib rmff_dump_cont SDP error - FC
L1638 Xorg-X11 X-Font server and composite vulnerabilities - SuSE
L1639 PHP4 PHP5 Multiple Vulnerabilities - SuSE
L1667 Libexif EXIF image recursion & EXIF tag errors - SuSE
W1982 P2P Software Detected - files
W2618 VideoLAN VLC player multiple vulnerabilities
W1142, W1986, W1999, W2067 Anti-Virus Signatures
W3152 Firefox jar URI, cross-site request forgery vulnerabilities
W3256 Oracle E-Business Suite Vulnerabilities (Jan. 2008)
W2280 Excel 2000 Parameter Vulnerability
W2281 Excel 2002 Parameter Vulnerability
W2203 Outlook Express E-mail Header Vulnerability
H0065 X Font Server Vulnerability - HP-UX 10,11
A frissítés minden felhasználónak ingyenes és automatikusan megtörténik.
Bővebb információ: SNSI hálózati sebezhetőség vizsgáló honlapja
