[AusNOG] AusCERT Week in Review - Week Ending 20/03/2008 (AUSCERT#20073f686)

[Paul Fahey]

AusCERT Week in Review
20 March 2008


AusCERT in the Media:
---------------------

Papers, Articles and other documents:
-------------------------------------


Web Log Entries:
----------------


Alerts, Advisories and Updates:
-------------------------------
Title: AA-2008.0046 -- [Win][UNIX/Linux] -- Mambo and Joomla components - SQL
       injections 
Date:  20 March 2008
URL:   http://www.auscert.org.au/8826

Title: AU-2008.0005 -- AusCERT Update - [Win] - Microsoft Security Bulletin
       MS08-014 Re-Releases 
Date:  20 March 2008
URL:   http://www.auscert.org.au/8988


External Security Bulletins:
----------------------------
Title: ESB-2007.1030 -- [Solaris] -- Multiple Security Vulnerabilities in
       Firefox and Thunderbird for Solaris 10 May Allow Execution of Arbitrary
       Code and Access to Unauthorized Data 
Date:  19 March 2008
OS:    Solaris 
URL:   http://www.auscert.org.au/8528

Title: ESB-2008.0297 -- [Appliance][Mac] -- AirPort Extreme Base Station
       Firmware 7.3.1 
Date:  20 March 2008
URL:   http://www.auscert.org.au/8993

Title: ESB-2008.0296 -- [Solaris] -- A Security Vulnerability in Solaris 10
       libexif May Allow Code Execution or a Denial of Service (DoS) Condition
Date:  20 March 2008
OS:    Solaris 
URL:   http://www.auscert.org.au/8992

Title: ESB-2008.0295 -- [Solaris] -- System Management Services (SMS) Patches
       124319-01 or Later and 120648-05 or Later may Cause Multiple Domains to
       Dstop 
Date:  20 March 2008
OS:    Solaris 
URL:   http://www.auscert.org.au/8991

Title: ESB-2008.0294 -- [HP-UX] -- HP StorageWorks Library and Tape Tools(LTT)
       Running on HP-UX, Local Unauthorized Access 
Date:  20 March 2008
OS:    HP-UX 
URL:   http://www.auscert.org.au/8990

Title: ESB-2008.0293 -- [RedHat] -- Important: redhat-idm-console security
       update 
Date:  20 March 2008
OS:    Red Hat Linux 
URL:   http://www.auscert.org.au/8989

Title: ESB-2008.0199 -- [Debian] -- New iceape packages fix several
       vulnerabilities 
Date:  20 March 2008
OS:    Debian GNU/Linux 
URL:   http://www.auscert.org.au/8861

Regards,

Paul

-- Paul Fahey --
Computer Security Analyst                       | Hotline: +61 7 3365 4417
Australian Computer Emergency Response Team     | Direct:  +61 7 3365 7924 
(AusCERT)                                       | Fax:     +61 7 3365 7031
The University of Queensland                    | WWW:     www.auscert.org.au
Qld 4072 Australia                              | Email: auscert at auscert.org.au