Network Computing is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them. Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

This week in Vulnerabilities

Courtesy of Security Threat Watch, comes this quick overview of last week's most important vulnerabilities and patches.

Many critical vulnerabilities have been found in Oracle and IBM DB2 database
servers. The vulnerabilities allow the remote compromise of the
databases and the systems they run on. Shops running either database
server product will want to grab the recently released vendor security
updates.
http://archives.neohapsis.com/

archives/cc/2004-q3/0005.html
http://archives.neohapsis.com/
archives/vulnwatch/2004-q3/0038.html

http://archives.neohapsis.com/
archives/vulnwatch/2004-q3/0041.html

Kerberos shops using the MIT flavor of Kerberos also will want to look
for security updates from their particular platform/vendor because of
some remotely exploitable vulnerabilities that could allow an attacker
to take over the KDC.

http://archives.neohapsis.com/
archives/cc/2004-q3/0006.html

http://archives.neohapsis.com/
archives/cisco/2004-q3/0005.html

http://archives.neohapsis.com/
archives/bugtraq/2004-08/0418.html

http://archives.neohapsis.com/
archives/bugtraq/2004-09/0038.html