[AusNOG] AusCERT Week in Review - Week Ending 19/11/2010 (AUSCERT#20073f686)

[Jonathan Levine]

AusCERT Week in Review
19 November 2010

Alerts, Advisories and Updates:
- -------------------------------
Title: ASB-2010.0237.3 - UPDATE [Win][Linux][OSX] Google Chrome prior to
       7.0.517.44: Multiple vulnerabilities 
Date:  17 November 2010
URL:   http://www.auscert.org.au/13569

External Security Bulletins:
- ----------------------------
Title: ESB-2010.1062 - [Win] Novell iPrint Client: Execute arbitrary
       code/commands - Remote with user interaction 
Date:  19 November 2010
OS:    Windows 2003, Windows XP, Windows 2000, Windows 7, Windows Vista,
       Windows Server 2008 
URL:   http://www.auscert.org.au/13630

Title: ESB-2010.1061 - [Win][Mac][OSX] Safari: Multiple vulnerabilities 
Date:  19 November 2010
OS:    Windows 2003, Windows XP, Windows 2000, Windows 7, Windows Vista,
       Windows Server 2008, Mac OS X 
URL:   http://www.auscert.org.au/13629

Title: ESB-2010.1060 - [Win] Relevant Content (Drupal third-party module):
       Access privileged data - Remote with user interaction 
Date:  18 November 2010
OS:    Windows 2003, Windows XP, Windows 2000, Windows 7, Windows Vista,
       Windows Server 2008 
URL:   http://www.auscert.org.au/13628

Title: ESB-2010.1059 - ALERT [Cisco] Cisco Unified Videoconferencing
Products:
       Multiple vulnerabilities 
Date:  18 November 2010
OS:    Cisco Products 
URL:   http://www.auscert.org.au/13627

Title: ESB-2010.1058 - [RedHat] thunderbird: Multiple vulnerabilities 
Date:  18 November 2010
OS:    Red Hat Linux 
URL:   http://www.auscert.org.au/13625

Title: ESB-2010.1057 - [Linux][RedHat] systemtap: Multiple vulnerabilities 
Date:  18 November 2010
OS:    Red Hat Linux, SUSE, Other Linux Variants, Ubuntu, Debian GNU/Linux 
URL:   http://www.auscert.org.au/13626

Title: ESB-2010.1056 - ALERT [Win][UNIX/Linux] Adobe Reader and Adobe
Acrobat:
       Multiple vulnerabilities 
Date:  17 November 2010
OS:    IRIX, HP Tru64 UNIX, Solaris, Red Hat Linux, Windows 2003, Windows 7,
       Mac OS X, Ubuntu, Debian GNU/Linux, HP-UX, Windows XP, Other BSD
       Variants, SUSE, OpenBSD, Windows 2000, AIX, FreeBSD, Windows Vista,
       Other Linux Variants, Windows Server 2008 
URL:   http://www.auscert.org.au/13624

Title: ESB-2010.1055 - [VMware ESX] VMware ESX and VMware ESXi: Multiple
       vulnerabilities 
Date:  17 November 2010
OS:    Virtualisation 
URL:   http://www.auscert.org.au/13623

Title: ESB-2010.1054 - [VMware ESX] VMware ESX: Multiple vulnerabilities 
Date:  17 November 2010
OS:    Virtualisation 
URL:   http://www.auscert.org.au/13622

Title: ESB-2010.1053 - [RedHat] kernel: Multiple vulnerabilities 
Date:  17 November 2010
OS:    Red Hat Linux 
URL:   http://www.auscert.org.au/13621

Title: ESB-2010.1052 - [Linux][RedHat] openswan: Execute arbitrary
       code/commands - Remote with user interaction 
Date:  17 November 2010
OS:    Red Hat Linux, SUSE, Other Linux Variants, Ubuntu, Debian GNU/Linux 
URL:   http://www.auscert.org.au/13620

Title: ESB-2010.1051 - [RedHat] pam: Multiple vulnerabilities 
Date:  17 November 2010
OS:    Red Hat Linux 
URL:   http://www.auscert.org.au/13618

Title: ESB-2010.1050 - [RedHat] pidgin: Denial of service - Remote with user
       interaction 
Date:  17 November 2010
OS:    Red Hat Linux 
URL:   http://www.auscert.org.au/13617

Title: ESB-2010.1049 - [Win][UNIX/Linux][RedHat] freetype: Execute arbitrary
       code/commands - Remote with user interaction 
Date:  17 November 2010
OS:    IRIX, HP Tru64 UNIX, Solaris, Red Hat Linux, Windows 2003, Windows 7,
       Mac OS X, Ubuntu, Debian GNU/Linux, HP-UX, Windows XP, Other BSD
       Variants, SUSE, OpenBSD, Windows 2000, AIX, FreeBSD, Windows Vista,
       Other Linux Variants, Windows Server 2008 
URL:   http://www.auscert.org.au/13619

Title: ESB-2010.1048.2 - UPDATE [UNIX/Linux][RedHat] openssl: Denial of
       service - Remote/unauthenticated 
Date:  17 November 2010
OS:    Other Linux Variants, FreeBSD, AIX, OpenBSD, SUSE, Other BSD
Variants,
       HP-UX, Ubuntu, Debian GNU/Linux, Mac OS X, Red Hat Linux, Solaris, HP
       Tru64 UNIX, IRIX 
URL:   http://www.auscert.org.au/13616

Title: ESB-2010.1047 - [SUSE][OpenSUSE] SUSE: Multiple vulnerabilities 
Date:  17 November 2010
OS:    Other Linux Variants, SUSE 
URL:   http://www.auscert.org.au/13615

Title: ESB-2010.1046 - [Printer] HP LaserJet Printers: Unauthorised access -
       Remote/unauthenticated 
Date:  16 November 2010
OS:    Printer 
URL:   http://www.auscert.org.au/13614

Title: ESB-2010.1045 - [Win][Linux][HP-UX][Solaris][AIX] IBM WebSphere MQ:
       Denial of service - Remote/unauthenticated 
Date:  16 November 2010
OS:    Solaris, Windows 2003, Red Hat Linux, Windows 7, Ubuntu, Debian
       GNU/Linux, Windows XP, HP-UX, SUSE, Windows 2000, AIX, Windows Vista,
       Windows Server 2008, Other Linux Variants 
URL:   http://www.auscert.org.au/13613

Title: ESB-2010.1044 - [OSX] Mac OS X Server: Access privileged data -
       Unknown/unspecified 
Date:  16 November 2010
OS:    Mac OS X 
URL:   http://www.auscert.org.au/13612

Title: ESB-2010.1043 - [RedHat] kernel: Multiple vulnerabilities 
Date:  15 November 2010
OS:    Red Hat Linux 
URL:   http://www.auscert.org.au/13611

Title: ESB-2010.1042 - [Debian] pidgin: Denial of service - Remote with user
       interaction 
Date:  15 November 2010
OS:    Debian GNU/Linux 
URL:   http://www.auscert.org.au/13610

Title: ESB-2010.1039.2 - UPDATE [OSX] Mac OS X: Multiple vulnerabilities 
Date:  17 November 2010
OS:    Mac OS X 
URL:   http://www.auscert.org.au/13606

Title: ESB-2010.0789.4 - UPDATE [VMware ESX] VMware ESX: Multiple
       vulnerabilities 
Date:  17 November 2010
OS:    Virtualisation 
URL:   http://www.auscert.org.au/13280

===========================================================================
Australian Computer Emergency Response Team
The University of Queensland
Brisbane
Qld 4072

Internet Email: auscert at auscert.org.au
Facsimile:      (07) 3365 7031
Telephone:      (07) 3365 4417 (International: +61 7 3365 4417)
                AusCERT personnel answer during Queensland business hours
                which are GMT+10:00 (AEST).
                On call after hours for member emergencies only.
==========================================================================