[AusNOG] AusCERT Week in Review - Week Ending 23/06/2006

[matthew at auscert.org.au]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Greetings all,

This one is incredibly late - apologies for that - in Baltimore for the
FIRST conference at the moment.

- - Matt

AusCERT Week in Review
23 June 2006


Papers, Articles and other documents:
- -------------------------------------


Alerts, Advisories and Updates:
- -------------------------------
Title: AL-2006.0051 -- [Win] -- Microsoft Hyperlink Object Library stack
       buffer overflow 
Date:  23 June 2006
URL:   http://www.auscert.org.au/6421

Title: AU-2006.0022 -- AusCERT Update - [Win] - New domain names used by "NAB
       Bankrupt" trojan 
Date:  22 June 2006
URL:   http://www.auscert.org.au/6418

Title: AU-2006.0021 -- AusCERT Update - [Win][Mac][OSX] - Second unpatched
       buffer overflow found in Excel 
Date:  21 June 2006
URL:   http://www.auscert.org.au/6417

Title: AA-2006.0036 -- [Win] -- End of Life for Windows 98, 98SE and ME 
Date:  20 June 2006
URL:   http://www.auscert.org.au/6414

Title: AU-2006.0020 -- AusCERT Update - [Win][Mac][OSX] - Microsoft official
       advisory addressing unpatched Excel vulnerability 
Date:  20 June 2006
URL:   http://www.auscert.org.au/6413

Title: AL-2006.0050 -- [Win] -- Unpatched Microsoft Excel Vulnerability 
Date:  19 June 2006
URL:   http://www.auscert.org.au/6412


External Security Bulletins:
- ----------------------------
Title: ESB-2006.0425 -- [UNIX/Linux][Debian] -- New courier packages fix
       denial of service 
Date:  23 June 2006
OS:    Solaris, HP Tru64 UNIX, Debian GNU/Linux, Other BSD Variants, IRIX,
       OpenBSD, FreeBSD, Other Linux Variants, Red Hat Linux, HP-UX, AIX 
URL:   http://www.auscert.org.au/6422

Title: ESB-2006.0424 -- [OpenBSD] -- potential denial of service problem in
       sendmail 
Date:  23 June 2006
OS:    OpenBSD 
URL:   http://www.auscert.org.au/6420

Title: ESB-2006.0423 -- [Win] -- Cisco CallManager - RealVNC Remote
       Authentication Bypass Vulnerability 
Date:  23 June 2006
OS:    Windows 2000 
URL:   http://www.auscert.org.au/6419

Title: ESB-2006.0422 -- [HP-UX] -- HP Tru64 UNIX and HP Internet Express for
       Tru64 UNIX Running sendmail, Remote Execution of Arbitrary Code or
       Denial of Service (DoS) 
Date:  21 June 2006
OS:    HP Tru64 UNIX 
URL:   http://www.auscert.org.au/6416

Title: ESB-2006.0419 -- [Solaris] -- A Security Vulnerability in sendmail(1M)
       May Allow a Denial of Service (DoS) To Occur 
Date:  22 June 2006
OS:    Solaris 
URL:   http://www.auscert.org.au/6408


===========================================================================
Australian Computer Emergency Response Team
The University of Queensland
Brisbane
Qld 4072

Internet Email: auscert at auscert.org.au
Facsimile:      (07) 3365 7031
Telephone:      (07) 3365 4417 (International: +61 7 3365 4417)
                AusCERT personnel answer during Queensland business hours
                which are GMT+10:00 (AEST).
                On call after hours for member emergencies only.
===========================================================================
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (FreeBSD)
Comment: http://www.auscert.org.au/render.html?it=1967
Comment: http://www.auscert.org.au/render.html?it=1967

iQCVAwUBRKKdwyh9+71yA2DNAQItjQP/UqMfSG9lE6PhP67Jzy/mqPtdnh23G/rC
Chx0DjzCMIGkfujIo7X2bZuffih7kmdP0xxn+6smME4RAofgipSrA7kW897rwFOV
iJKanDiOPRTO2aXJ0+hjZGJA46FIzLOBf1V3J2mSPryfmtJ/LAWg+oGjln9zsu88
qul9v69UTMk=
=h9eN
-----END PGP SIGNATURE-----