[ubuntu-tn] Fwd: [ZDNET] Microsoft patch fails; Google knows what you're thinking; Opt-in botnets

Saara Israa Väätti israa.frej at tut.fi
Ven 23 Avr 23:19:57 UTC 2010


Hi,

Microsoft has yanked the security updates shipped in the MS10-025  
bulletin after realizing the patch did not fix the underlying security  
vulnerability.

The withdrawal of the bulletin means that affected Windows 2000 Server  
users should immediately consider applying mitigations and workarounds  
to avoid malicious hacker attacks.

The company did not explain why the bulletin was shipped with an  
inadequate patch.  A brief blog post from Microsoft’s Jerry Bryant  
offered the following:

We pulled the update because we found it does not address the  
underlying issue effectively. We are not aware of any active attacks  
seeking to exploit this issue and are targeting a re-release of the  
update for next week.

The issue only affects Windows 2000 Server customers who have  
installed Windows Media Services (a non-default configuration).

Bryant urged affected users  with internet facing systems with Windows  
Media Services installed to evaluate and use firewall best practices  
to limit their overall exposure.

The MS10-025 bulletin is rated “critical” because attackers could  
launchi remote code execution if an attacker sent a specially crafted  
transport information packet to a Microsoft Windows 2000 Server system  
running Windows Media Services.




----- Message transféré de newsletters at zdnet.online.com -----
     Date : Fri, 23 Apr 2010 11:43:11 -0700 (PDT)
      De : ZDNet Must-Read News Alerts <newsletters at zdnet.online.com>
Répondre à : newsletters at zdnet.online.com
  Objet : [ZDNET] Microsoft patch fails; Google knows what you're  
thinking; Opt-in botnets
       À : israa.frej at tut.fi

    ZDNet Must-Read News Alert

Trouble viewing this mail? Read it online[1] | Manage my
newsletters[2]

	ZDNet Must-Read News Alert
	ZDNet Member  | April 23, 2010

	  Home[3] | News & Blogs[4] | Videos[5] | White Papers[6] |
Downloads[7] | Reviews[8] | Photo Galleries[9] | Podcasts[10] | RSS
Feeds[11]

	IT News Happening Now

Microsoft admits patch didn't fix vulnerability[12]

  Microsoft has yanked the security updates shipped in the MS10-025
bulletin after realizing the patch did not fix the underlying
security vulnerability. by Ryan Naraine

READ FULL STORY

			'Google even knows what you're thinking'[13]
			Attack of the Opt-In Botnets[14]
			Can cyberattacks usurp U.S. superpower status?[15]

	Top Stories Right Now

			A little Spring refresh on ZDNet[16]
			Don't bet on Lenovo saving Palm[17]
			Amazon to build out capacity for cloud, fulfillment and third
party services[18]
			How the health IT stimulus could hit device market[19]
			The worst thing Oracle can do to open source is not care[20]

			Become a fan on Facebook[21]
			Follow ZDNet on Twitter[22]

Send us your feedback here.

Sign up for more free newsletters from ZDNet! | To manage your
account settings or to remove yourself from all ZDNet communications,
please visit our Subscription Center.

The e-mail address for your subscription is israa.frej at tut.fi.
Unsubscribe from this e-mail | FAQ | Advertise | Privacy Policy
(updated)

Copyright CBS Interactive, Inc. All rights reserved.
ZDNet is a registered service mark of CBS Interactive, Inc.

ZDNet
235 Second Street
San Francisco, CA 94105
U.S.A.



Liens:
------
[1]  
http://ct.zdnet.com/clicks?t=537525707-5d036ab2ce8143f1bb03703fc4ddfeec-bf&brand=ZDNET&s=5
[2]  
http://ct.zdnet.com/clicks?t=537525708-5d036ab2ce8143f1bb03703fc4ddfeec-bf&brand=ZDNET&s=5
[3] #
[4]  
http://ct.zdnet.com/clicks?t=537525710-5d036ab2ce8143f1bb03703fc4ddfeec-bf&brand=ZDNET&s=5
[5]  
http://ct.zdnet.com/clicks?t=537525712-5d036ab2ce8143f1bb03703fc4ddfeec-bf&brand=ZDNET&s=5
[6]  
http://ct.zdnet.com/clicks?t=537525714-5d036ab2ce8143f1bb03703fc4ddfeec-bf&brand=ZDNET&s=5
[7]  
http://ct.zdnet.com/clicks?t=537525715-5d036ab2ce8143f1bb03703fc4ddfeec-bf&brand=ZDNET&s=5
[8]  
http://ct.zdnet.com/clicks?t=537525716-5d036ab2ce8143f1bb03703fc4ddfeec-bf&brand=ZDNET&s=5
[9]  
http://ct.zdnet.com/clicks?t=537525717-5d036ab2ce8143f1bb03703fc4ddfeec-bf&brand=ZDNET&s=5
[10]  
http://ct.zdnet.com/clicks?t=537525718-5d036ab2ce8143f1bb03703fc4ddfeec-bf&brand=ZDNET&s=5
[11]  
http://ct.zdnet.com/clicks?t=537525719-5d036ab2ce8143f1bb03703fc4ddfeec-bf&brand=ZDNET&s=5
[12]  
http://ct.zdnet.com/clicks?t=537525720-5d036ab2ce8143f1bb03703fc4ddfeec-bf&brand=ZDNET&s=5
[13]  
http://ct.zdnet.com/clicks?t=537525722-5d036ab2ce8143f1bb03703fc4ddfeec-bf&brand=ZDNET&s=5
[14]  
http://ct.zdnet.com/clicks?t=537525723-5d036ab2ce8143f1bb03703fc4ddfeec-bf&brand=ZDNET&s=5
[15]  
http://ct.zdnet.com/clicks?t=537525724-5d036ab2ce8143f1bb03703fc4ddfeec-bf&brand=ZDNET&s=5
[16]  
http://ct.zdnet.com/clicks?t=537525726-5d036ab2ce8143f1bb03703fc4ddfeec-bf&brand=ZDNET&s=5
[17]  
http://ct.zdnet.com/clicks?t=537525727-5d036ab2ce8143f1bb03703fc4ddfeec-bf&brand=ZDNET&s=5
[18]  
http://ct.zdnet.com/clicks?t=537525728-5d036ab2ce8143f1bb03703fc4ddfeec-bf&brand=ZDNET&s=5
[19]  
http://ct.zdnet.com/clicks?t=537525729-5d036ab2ce8143f1bb03703fc4ddfeec-bf&brand=ZDNET&s=5
[20]  
http://ct.zdnet.com/clicks?t=537525730-5d036ab2ce8143f1bb03703fc4ddfeec-bf&brand=ZDNET&s=5
[21]  
http://ct.zdnet.com/clicks?t=537525731-5d036ab2ce8143f1bb03703fc4ddfeec-bf&brand=ZDNET&s=5
[22]  
http://ct.zdnet.com/clicks?t=537525732-5d036ab2ce8143f1bb03703fc4ddfeec-bf&brand=ZDNET&s=5


----- Fin du message transféré -----


-- 
Best regards,
Saara Israa Väätti
Ph.D student at Tampere University of Technology (TUT), Software  
Engineering department.

Master degree student in Information Technology (Networks and  
Protocols, Communication Engineering department) at TUT, Finland.

Engineer in Computer Networks and Telecommunications from
National Institute of Applied Sciences and Technology (INSAT), Tunis, Tunisia.

Mobile: +358 40 87 32 385
          +216 98 537 162
----------------------------------------------------------------------





Plus d'informations sur la liste de diffusion Ubuntu-tn