PREVIOUS GNEWS

1
PREVIOUS GNEWS
2
Patch Tuesday

• 2 Patches / 3 Vulns 1 Critical
• Affecting Windows XP, Vista, 7, 2003, 2008
• Other updates, MSRT, Defender Definitions, Junk
  Mail Filter

• MS11-001 - Windows Backup Manager, Remote Code
  Execution
• MS11-002 - Microsoft Data Access Components,
  Remote Code Execution

3
Holes / Patches

• Adobe, 3 patches (23 holes in Reader)
• APSB10-28 Adobe Reader and Acrobat
• APSB10-29 Adobe Illustrator CS5
• APSB10-30 Adobe PhotoShop CS5
• Apple,
• Mac OS X v10.6.6
• Time Capsule and AirPort Base Station (802.11n)
  Firmware 7.5.2
• QuickTime 7.6.9
• Cisco
• TLS, IPSEC VPN, Unified Videoconferencing
• Change to Cisco Advisories
• Starting on January 2011, any bug that has been
  reported to the Cisco PSIRT but will not be
  disclosed as part of a Cisco Security Advisory
  will include a PSIRT Evaluation section within
  its Release Note. The Release Note Evaluation
  (RNE) section will include, where appropriate and
  relevant, base and temporal CVSS scores and one
  or more CVE IDs. However, not all bugs will
  include a CVSS score or a CVE ID.

4
Holes / Patches

• MS
• Microsoft IIS FTP Server Telnet IAC Character
  Encoding
• Microsoft Windows Fax Cover Page Editor Buffer
  Overflow
• IE CSS

5
Hacking

• AMD Registers
• Geinimi Android Trojan
• CCC Phone Hack, GSM phone and message
  interception - Sylvain Munaut and Karsten Nohl
• CCC PS3 Hack, unlock/bypass all
• security fail0verflow

6
Corp. Hell

• Valdosta State University to report all p2p users
  to police
• IBM patents the patent
• Symantec 2010 Annual Security Report

7
Legal

• California makes on-line impersonation illegal
• California opts out of 4th Amendment, allows
  warrentless phone searches

8
Updates

• ?

9
All images scavenged without permission
All images scavenged without permission