The Week in Photos: Laptops, red spots, and missiles by the bay

May 23, 2008

View online | Manage newsletters | Unsubscribe | Send us feedback

		This week's top photo galleries 1 Meet the OLPC's $75 laptop The One Laptop per Child project shows off its laptop of the future. The XO-2, it says, will be dirt cheap, easier to tote, and also an e-book. 2 Visiting a Nike missile site At one time, there were more than 200 Nike missile sites in the U.S., each tasked with protecting a specific city. Today, the only one left is a restored site for tourists in the Marin Headlands, near San Francisco. 3 New red spot appears on Jupiter Astronomers were amazed when a second giant red spot suddenly appeared on Jupiter two years ago. Now, there's a third one. 4 Cracking open the Compaq Presario V2000 Check out the insides of this stripped down laptop, everything from the motherboard to the kitchen--er, heatsink. More from CNET News.com:  Latest image galleries:  Get more news:  Green Tech:  Business Tech:  Cutting Edge:  Wireless:  Security:  Media:  Personal Tech:
	Sign up for more free newsletters from CNET! To manage your account settings or to remove yourself from all CNET communications, please visit our Subscription Center. The e-mail address for your subscription is boy.blogger@gmail.com Unsubscribe from this e-mail | FAQ | Advertise | Privacy Policy
	Copyright 2008 CNET Networks, Inc. All rights reserved. CNET Networks, Inc. 235 Second Street San Francisco, CA 94105 U.S.A.

Optimize Backup for Virtualized Servers

Featured Resource: Optimum Backup for Virtualized Servers If you ask IT professionals what their hot topics are in IT right now, you can be sure that the subject of virtualization comes up. Whether it is application virtualization or virtualization for server consolidation, the ability to deliver virtualized services is a key one for IT departments today and for those planning their future growth. Virtualization simply makes technical and economic sense when looked at in terms of improving the efficiencies of your operations. Download this podcast today! For more great technical information, check out Windows IT Pro Resources to see a full listing of available eBooks, white papers and essential guides. Don't keep it all to yourself...Send this valuable info to a friend!

You are subscribed as boy.blogger@gmail.com. You received this email because you have an existing business relationship with Windows IT Pro, a division of Penton Media. Periodically, we will inform you of special Penton-related shows, products and other offers that we believe you will find helpful in your business or career. To STOP receiving promotional e-mails from Windows IT Pro, please click here to opt-out. Windows IT Pro| Penton Media | 249 W. 17th Street | New York, NY 10011 | Privacy Policy

ubuntu-security-announce Digest, Vol 44, Issue 10

This summary is not available. Please click here to view the post.

SecurityFocus Microsoft Newsletter #395

SecurityFocus Microsoft Newsletter #395
----------------------------------------

This issue is sponsored by Sphinx-Soft

VistaFirewallControl - controls Vista 32/64-bit applications outbound/inbound activity by a single click.
Based on Vista security core; provides unbeatable stability and filtering quality of Microsoft; Synchronizes external uPnP hardware with applications network permissions;
Download here http://sphinx-soft.com/Vista/order.html?SF

SECURITY BLOGS
SecurityFocus has selected a few syndicated sources that stand out as conveying topics of interest for our community. We are proud to offer content from Matasano at this time and will be adding more in the coming weeks.
http://www.securityfocus.com/blogs

------------------------------------------------------------------
I. FRONT AND CENTER
1.Thinking Beyond the Ivory Towers
2.Click Crime
II. MICROSOFT VULNERABILITY SUMMARY
1. Foxit Reader 'util.printf()' Remote Buffer Overflow Vulnerability
2. Computer Associates ARCserve Backup 'caloggerd' and 'xdr' Functions Multiple Remote Vulnerabilities
3. Symantec Altiris Deployment Solution Tooltip Local Privilege Escalation Vulnerability
4. Microsoft Internet Explorer 'Print Table of Links' Cross Zone Script Injection Vulnerability
5. IDAutomation Barcode ActiveX Controls Multiple Arbitrary File Overwrite Vulnerabilities
6. Symantec Altiris Deployment Solution Domain Credential Unauthorized Access Vulnerability
7. Symantec Altiris Deployment Solution 'axengine.exe' SQL Injection Vulnerability
8. Symantec Altiris Deployment Solution Install Directory Local Privilege Escalation Vulnerability
9. Symantec Altiris Deployment Solution Registry Keys Local Unauthorized Access Vulnerability
10. Symantec Altiris Deployment Solution Agent User Interface Local Privilege Escalation Vulnerability
11. Multiple Platform IPv6 Address Publication Denial of Service Vulnerabilities
12. Jenkins Software RakNet Autopatcher Multiple Unspecified SQL Injection Vulnerabilities
13. Microsoft Windows Intelligent Input/Output (I2O) Multiple Local Privilege Escalation Vulnerabilities
14. Microsoft Publisher Memory Object Handler Data Remote Code Execution Vulnerability
15. Microsoft Word CSS Handling Memory Corruption Remote Code Execution Vulnerability
16. Microsoft Word RTF Malformed String Handling Memory Corruption Remote Code Execution Vulnerability
17. Microsoft Malware Protection Engine Disk Space Exhaustion Remote Denial Of Service Vulnerability
18. Microsoft Malware Protection Engine File Processing Remote Denial Of Service Vulnerability
III. MICROSOFT FOCUS LIST SUMMARY
1. Binding Windows Services to Specific Addresses Only
IV. UNSUBSCRIBE INSTRUCTIONS
V. SPONSOR INFORMATION

I. FRONT AND CENTER
---------------------
1.Thinking Beyond the Ivory Towers
By Dave Aitel
In the information-security industry, there are clear and vast gaps in the way academia interacts with professional researchers. While these gaps will be filled in due time, their existence means that security professionals outside the hallowed halls of colleges and universities need to be aware of the differences in how researchers and professionals think.

http://www.securityfocus.com/columnists/472

2. Click Crime
By Mark Rasch
It has long been a crime not only to commit an illegal act, but also to attempt -- or conspire with others -- to commit one.

http://www.securityfocus.com/columnists/471

II. MICROSOFT VULNERABILITY SUMMARY
------------------------------------
1. Foxit Reader 'util.printf()' Remote Buffer Overflow Vulnerability
BugTraq ID: 29288
Remote: Yes
Date Published: 2008-05-20
Relevant URL: http://www.securityfocus.com/bid/29288
Summary:
Foxit Reader is prone to a remote buffer-overflow vulnerability when handling PDF files with specially crafted JavaScript code.

Exploiting this issue may allow attackers to corrupt memory and execute arbitrary machine code in the context of users running the affected application. Failed exploit will likely cause denial-of-service conditions.

This issue affects Foxit Reader 2.3 build 2825; other versions may also be affected.

2. Computer Associates ARCserve Backup 'caloggerd' and 'xdr' Functions Multiple Remote Vulnerabilities
BugTraq ID: 29283
Remote: Yes
Date Published: 2008-05-19
Relevant URL: http://www.securityfocus.com/bid/29283
Summary:
Computer Associates ARCserve Backup is prone to multiple remote vulnerabilities:

- An arbitrary-file-overwrite vulnerability
- A stack-based buffer-overflow vulnerability.

An attacker can exploit these issues to execute arbitrary code with SYSTEM-level privileges. Successfully exploiting these issues will result in the complete compromise of affected computers. Failed exploit attempts will result in a denial-of-service condition.

3. Symantec Altiris Deployment Solution Tooltip Local Privilege Escalation Vulnerability
BugTraq ID: 29218
Remote: No
Date Published: 2008-05-14
Relevant URL: http://www.securityfocus.com/bid/29218
Summary:
Symantec Altiris Deployment Solution is prone to a local privilege-escalation vulnerability.

An attacker can exploit this issue to gain access to a privileged command prompt. Successfully exploiting this issue will result in the complete compromise of affected computers.

4. Microsoft Internet Explorer 'Print Table of Links' Cross Zone Script Injection Vulnerability
BugTraq ID: 29217
Remote: Yes
Date Published: 2008-05-14
Relevant URL: http://www.securityfocus.com/bid/29217
Summary:
Microsoft Internet Explorer is prone to a script-injection vulnerability because it fails to adequately sanitize user-supplied input when printing a table of links.

Attackers can exploit this issue by enticing an unsuspecting user to initiate the printing procedure while viewing a specially crafted page. Successful exploits will cause malicious script code to run in the 'Local Machine Zone' of a victim's computer.

Internet Explorer 7.0 and 8.0b are vulnerable; other versions may also be affected.

Reports indicate that successful exploits on Windows Vista platforms running UAC can cause only information disclosure.

5. IDAutomation Barcode ActiveX Controls Multiple Arbitrary File Overwrite Vulnerabilities
BugTraq ID: 29204
Remote: Yes
Date Published: 2008-05-14
Relevant URL: http://www.securityfocus.com/bid/29204
Summary:
IDAutomation Barcode ActiveX controls are prone to multiple vulnerabilities that allow attackers to overwrite arbitrary files.

An attacker can exploit these issues by enticing an unsuspecting victim to view a malicious HTML page.

Successfully exploiting these issues will allow the attacker to corrupt and overwrite arbitrary files on the victim's computer in the context of the vulnerable application using the ActiveX control (typically Internet Explorer).

The following applications are vulnerable:

Linear Barcode ActiveX Control 1.6.0.6
Data Matrix Barcode Font & Encoder 1.6.0.6
PDF417 Barcode Font and Encoder 1.6.0.6
Aztec Barcode Font & Encoder 1.7.1.0

Other versions may also be affected.

6. Symantec Altiris Deployment Solution Domain Credential Unauthorized Access Vulnerability
BugTraq ID: 29199
Remote: Yes
Date Published: 2008-05-14
Relevant URL: http://www.securityfocus.com/bid/29199
Summary:
Symantec Altiris Deployment Solution is prone to a vulnerability that allows an attacker to gain unauthorized access to the affected application.

The attacker can exploit this issue to gain administrative access to the application. Successfully exploiting this issue will compromise the affected application.

7. Symantec Altiris Deployment Solution 'axengine.exe' SQL Injection Vulnerability
BugTraq ID: 29198
Remote: Yes
Date Published: 2008-05-14
Relevant URL: http://www.securityfocus.com/bid/29198
Summary:
Symantec Altiris Deployment Solution is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to execute arbitrary code with SYSTEM-level privileges. Successfully exploiting this issue will facilitate in the complete compromise of affected computers.

Versions prior to Symantec Altiris Deployment Solution 6.9.176 are vulnerable.

8. Symantec Altiris Deployment Solution Install Directory Local Privilege Escalation Vulnerability
BugTraq ID: 29197
Remote: No
Date Published: 2008-05-14
Relevant URL: http://www.securityfocus.com/bid/29197
Summary:
Symantec Altiris Deployment Solution is prone to a local privilege-escalation vulnerability.

An attacker can exploit this issue to execute arbitrary commands with SYSTEM-level privileges. Successfully exploiting this issue will result in the complete compromise of affected computers.

9. Symantec Altiris Deployment Solution Registry Keys Local Unauthorized Access Vulnerability
BugTraq ID: 29196
Remote: No
Date Published: 2008-05-14
Relevant URL: http://www.securityfocus.com/bid/29196
Summary:
Symantec Altiris Deployment Solution is prone to a local unauthorized-access vulnerability.

An attacker with local access to the computer may be able to access certain registry keys. A successful attack may allow the attacker to obtain information or to disrupt service.

10. Symantec Altiris Deployment Solution Agent User Interface Local Privilege Escalation Vulnerability
BugTraq ID: 29194
Remote: No
Date Published: 2008-05-14
Relevant URL: http://www.securityfocus.com/bid/29194
Summary:
Symantec Altiris Deployment Solution is prone to a local privilege-escalation vulnerability.

An attacker can exploit this issue to gain access to a privileged command prompt. Successfully exploiting this issue will result in the complete compromise of affected computers.

11. Multiple Platform IPv6 Address Publication Denial of Service Vulnerabilities
BugTraq ID: 29190
Remote: Yes
Date Published: 2008-05-13
Relevant URL: http://www.securityfocus.com/bid/29190
Summary:
Multiple operating systems are prone to remote denial-of-service vulnerabilities that occur when affected operating systems are acting as IPv6 routers.

Successful exploits allow remote attackers to cause computers to consume excessive CPU resources or to stop responding to advertised routes in a network. This will potentially deny further network services to legitimate users.

Microsoft Windows XP, Microsoft Windows Server 2003, and Linux are prone to these issues. Other operating systems may also be affected.

12. Jenkins Software RakNet Autopatcher Multiple Unspecified SQL Injection Vulnerabilities
BugTraq ID: 29178
Remote: Yes
Date Published: 2008-05-12
Relevant URL: http://www.securityfocus.com/bid/29178
Summary:
RakNet Autopatcher is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in SQL queries.

Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

Versions prior to RakNet 3.23 are vulnerable.

13. Microsoft Windows Intelligent Input/Output (I2O) Multiple Local Privilege Escalation Vulnerabilities
BugTraq ID: 29171
Remote: No
Date Published: 2008-05-12
Relevant URL: http://www.securityfocus.com/bid/29171
Summary:
Microsoft Windows is prone to multiple local privilege-escalation vulnerabilities.

An attacker can exploit these issues to execute arbitrary code with kernel-level privileges. Successfully exploiting these issues will completely compromise affected computers.

These issues affect Windows XP prior to SP3.

14. Microsoft Publisher Memory Object Handler Data Remote Code Execution Vulnerability
BugTraq ID: 29158
Remote: Yes
Date Published: 2008-05-13
Relevant URL: http://www.securityfocus.com/bid/29158
Summary:
Microsoft Publisher is prone to a remote code-execution vulnerability.

An attacker could exploit this issue by enticing a victim to open a malicious Publisher file.

Successfully exploiting this issue would allow the attacker to execute arbitrary code in the context of the currently logged-in user.

15. Microsoft Word CSS Handling Memory Corruption Remote Code Execution Vulnerability
BugTraq ID: 29105
Remote: Yes
Date Published: 2008-05-13
Relevant URL: http://www.securityfocus.com/bid/29105
Summary:
Microsoft Word is prone to a remote code-execution vulnerability.

An attacker could exploit this issue by enticing a victim to open a malicious Word file.

Successfully exploiting this issue would allow the attacker to execute arbitrary code in the context of the currently logged-in user.

16. Microsoft Word RTF Malformed String Handling Memory Corruption Remote Code Execution Vulnerability
BugTraq ID: 29104
Remote: Yes
Date Published: 2008-05-13
Relevant URL: http://www.securityfocus.com/bid/29104
Summary:
Microsoft Word is prone to a remote code-execution vulnerability.

An attacker could exploit this issue by enticing a victim to open a malicious RTF file.

Successfully exploiting this issue would allow the attacker to execute arbitrary code in the context of the currently logged-in user.

17. Microsoft Malware Protection Engine Disk Space Exhaustion Remote Denial Of Service Vulnerability
BugTraq ID: 29073
Remote: Yes
Date Published: 2008-05-13
Relevant URL: http://www.securityfocus.com/bid/29073
Summary:
Microsoft Malware Protection Engine is prone to a remote denial-of-service vulnerability because it fails to properly validate certain data structures when parsing specially crafted files.

Attackers can exploit this issue to cause an affected computer to stop responding or to restart. Successful attacks will deny service to legitimate users.

18. Microsoft Malware Protection Engine File Processing Remote Denial Of Service Vulnerability
BugTraq ID: 29060
Remote: Yes
Date Published: 2008-05-13
Relevant URL: http://www.securityfocus.com/bid/29060
Summary:
Microsoft Malware Protection Engine is prone to a remote denial-of-service vulnerability because it fails to properly validate user-supplied input when parsing specially crafted files.

Attackers can exploit this issue to cause an affected computer to stop responding or to restart. Successful attacks will deny service to legitimate users.

III. MICROSOFT FOCUS LIST SUMMARY
---------------------------------
1. Binding Windows Services to Specific Addresses Only
http://www.securityfocus.com/archive/88/491595

IV. UNSUBSCRIBE INSTRUCTIONS
-----------------------------
To unsubscribe send an e-mail message to ms-secnews-unsubscribe@securityfocus.com from the subscribed address. The contents of the subject or message body do not matter. You will receive a confirmation request message to which you will have to answer. Alternatively you can also visit http://www.securityfocus.com/newsletters and unsubscribe via the website.

If your email address has changed email listadmin@securityfocus.com and ask to be manually removed.

V. SPONSOR INFORMATION
------------------------
This issue is sponsored by Sphinx-Soft

VistaFirewallControl - controls Vista 32/64-bit applications outbound/inbound activity by a single click.
Based on Vista security core; provides unbeatable stability and filtering quality of Microsoft; Synchronizes external uPnP hardware with applications network permissions;
Download here http://sphinx-soft.com/Vista/order.html?SF

OpenSSL Vulnerabilities and the Ripple Effect

WIN_SECURITY UPDATE_
A Penton Media Property
May 21, 2008

If you want to view this on the web go to:
http://ct.email.windowsitpro.com/rd/cts?d=33-8009-803-202-62923-794420-0-0-0-1-2-207

----------------------------------------
ADVERTISEMENT
Oracle Corporation

Oracle Database 11g Application Development

Oracle Database 11g has the same features and functionality on Windows
as on Linux and UNIX. However, significant work has been done to take
advantage of Windows-specific operating system features to improve
scalability.This paper will also discuss the support of a cluster file
system, 64-bit file I/O, and raw files increasing performance and
manageability.
http://ct.email.windowsitpro.com/rd/cts?d=33-8009-803-202-62923-794421-0-0-0-1-2-207
----------------------------------------

IN FOCUS

--OpenSSL Vulnerabilities and the Ripple Effect
by Mark Joseph Edwards, News Editor
Most of you probably agree that open source is a great concept. Nearly
anybody can take such code, modify it, and use it as they see fit. In
many cases people even offer their changes back into the core code base
from which the code was taken, which means everyone who downloads the
code base will have the benefit of other people's changes. At the same
time, that type of openness is a double-edged sword that can be quite
dangerous.

A good case in point is the OpenSSL code used by the developers of the
Debian OS. Back in mid-2006 someone made changes to the random number
generator code in OpenSSL and then uploaded the changes into the
unstable version of Debian that was in development at the time. That
development code eventually became Debian Etch, which is the current
stable release version of the OS.

The changes made to OpenSSL weakened its cryptographic strength and no
one detected this problem until last week. So for about the past two
years OpenSSL and other tools that rely on it have been vulnerable due
to weak cryptographic keys. According to Debian's related security
advisory, "Luciano Bello discovered that the random number generator in
Debian's [OpenSSL] package is predictable. This is caused by an
incorrect Debian-specific change to the [OpenSSL] package
(CVE-2008-0166). As a result, cryptographic key material may be
guessable."

Since the change was made to Debian-related code, any OS that is now
based on Debian is probably affected by the vulnerability. The last time
I checked there were well over a dozen Debian-based OSs, including the
widely used Ubuntu, Knoppix, and Xandros platforms.

Complicating the matter further is the fact that there is another ripple
effect to consider -- it's not just Debian-based systems that might be
affected by the vulnerability. If SSL keys were generated on a
vulnerable system and those keys were then imported into some other OS,
then those systems are affected too. And that's not all. Other
encryption keys might be affected, including keys used for Secure Shell
(SSH), Secure Sockets Layer/Transport Layer Security (SSL/TLS), OpenVPN,
DNS Security Extensions (DNSSEC), and X.509 certificates.

That just about covers every mainstream encryption-related tool in use
today! So the problem is not trivial and should not be taken lightly. As
you might suspect, brute-force cracking attacks are now underway against
SSH services (typically running on port 22 unless you moved SSH to some
other port)--and based on the information I've seen, those attacks are
on the rise (see the URL below). The current attacks typically involve
dictionary-related username and password guessing.

isc.sans.org/portreport.html?sort=records
(http://ct.email.windowsitpro.com/rd/cts?d=33-8009-803-202-62923-794422-0-0-0-1-2-207)

The solution is to upgrade your OpenSSL packages as well as any other
packages based on OpenSSL, and then regenerate any weak keys. And, if
you're a user of Debian or Ubuntu and you use 'apt' to perform updates
then you'll find that the package installer will handle regenerating
keys for you. Even so, double check your keys after upgrading. Be sure
to check into the ssl-vulnkey tool that comes with the new 'ssh-server'
package if you use SSH and perform an upgrade. It'll help you identify
vulnerable SSH keys. There's also a Perl script available that can help
you detect weak keys (see the first URL below). At the second URL below
you'll find a method of automatically blocking hosts that attempt
dictionary attacks on your SSH services. The latter method uses the
DenyHosts tool at the third URL below.

lists.debian.org/debian-security-announce/2008/msg00152.html
(http://ct.email.windowsitpro.com/rd/cts?d=33-8009-803-202-62923-794423-0-0-0-1-2-207)

www.howtoforge.com/preventing_ssh_dictionary_attacks_with_denyhosts
(http://ct.email.windowsitpro.com/rd/cts?d=33-8009-803-202-62923-794424-0-0-0-1-2-207)

denyhosts.sourceforge.net (http://ct.email.windowsitpro.com/rd/cts?d=33-8009-803-202-62923-794425-0-0-0-1-2-207)

This particular vulnerability points out how one small code change can
have a far-reaching ripple effect. In most cases changes are for the
better. However, in this particular instance that's not the case.
Obviously those who intend to take part in open-source code development
need to be extra careful, especially when working with security-related
code that is a core part of many other tools.

----------------------------------------
ADVERTISEMENT
Symantec

Messaging Management

Fundamentals eBook - Best Practices & Service Comparison
Email and messaging infrastructures are the backbone of today's business
operations, they are so essential that if they go down, an
organization's business stops. With this level of importance put on
these systems, protecting your email and messaging infrastructures is
the primary goal of email and messaging management solutions. Email and
management solutions can mitigate the risks related to information loss,
leakage, or unauthorized data access. Read this eBook to learn about the
best practices of designing an email and messaging management
infrastructure in Exchange-centric environments.

http://ct.email.windowsitpro.com/rd/cts?d=33-8009-803-202-62923-794426-0-0-0-1-2-207
----------------------------------------

SECURITY NEWS AND FEATURES

--Web Apps Are the Source of Most Vulnerabilities
A new report reveals that Web applications are the most common source of
vulnerabilities. While this shouldn't come as much of a surprise given
the importance of the Web, it should serve as an alarm for Web
developers.
To view the full article go to:
http://ct.email.windowsitpro.com/rd/cts?d=33-8009-803-202-62923-794427-0-0-0-1-2-207

--U.S. And Canada Put a Damper on Hardware Pirates
Since 2005, U.S. and Canadian law enforcement agencies have sent 10
hardware pirates to jail and seized tens of thousands of counterfeit
Cisco network routers, switches, interface cards, and other modules
posing as legitimate Cisco Systems equipment.
To view the full article go to:
http://ct.email.windowsitpro.com/rd/cts?d=33-8009-803-202-62923-794428-0-0-0-1-2-207

--Hewlett-Packard to Buy EDS
According to the Wall Street Journal, Hewlett-Packard was close to
finalizing a deal to purchase EDS. The acquisition has been confirmed
and it could mean tougher competition for IBM.
To view the full article go to:
http://ct.email.windowsitpro.com/rd/cts?d=33-8009-803-202-62923-794429-0-0-0-1-2-207

--Recent Security Vulnerabilities
If you subscribe to this newsletter, you also receive Security Alerts,
which inform you about recently discovered security vulnerabilities. You
can also find information about these discoveries at

www.windowsitpro.com/departments/departmentid/752/752.html
(http://ct.email.windowsitpro.com/rd/cts?d=33-8009-803-202-62923-794430-0-0-0-1-2-207)

GIVE AND TAKE

--SECURITY MATTERS BLOG: Heads Up: Zero Day in IE 7 and 8
by Mark Joseph Edwards
Details of a zero-day vulnerability in Internet Explorer 7 and 8 have
been posted to the Web. The particular exploit takes advantage of a
problem with the security centered around printing links in a given Web
page. Learn more in this blog entry.

windowsitpro.com/blog/index.cfm?action=BlogIndex&DepartmentID=949
(http://ct.email.windowsitpro.com/rd/cts?d=33-8009-803-202-62923-794431-0-0-0-1-2-207)

--FAQ: Cold Boot Encryption Attacks and BitLocker
by John Savill
Q. What is the BitLocker exposure via cold boot attack?

Find the answer at

windowsitpro.com/article/articleid/99144
(http://ct.email.windowsitpro.com/rd/cts?d=33-8009-803-202-62923-794432-0-0-0-1-2-207)

--FROM THE FORUM: Webmail security risks?
We're reviewing our IT policies and specifically talking about user
access to non-business Webmail (employees at work checking HotMail,
Yahoo, GMail, etc.). The general question is what business risks does
this create? I can immediately think of

1) a method of maliciously or accidentally sending company information
out either as email or sometimes as direct network storage (I think
GMail has something called a G-Drive?),

2) opportunity of malicious software getting in,

3) possible business communication that is stored outside our normal
systems that may not be subject to records retention policies, and

4) on the same legal line of thought, communication that may be treated
as informal, but could still be business related and discoverable in a
legal case.

Can anyone offer any other potential risks? I'm brainstorming so I
welcome any thoughts even if they are very remote possibilities or
something similar to what I've already mentioned.

Also, I know there are tools that can address some of these risks, but
right now, I'm only interested in identifying the risks.

Lend a hand at the URL below:

forums.windowsitpro.com/web/forum/messageview.aspx?catid=42&threadid=90196&enterthread=y
(http://ct.email.windowsitpro.com/rd/cts?d=33-8009-803-202-62923-794433-0-0-0-1-2-207)

--Vote in the 2008 Windows IT Pro Community Choice Awards!
Final voting for the Windows IT Pro Community Choice Awards is now open!
Voting in this awards program is open to all Windows IT Pro Web site
visitors, but vendors whose products are nominated are prohibited from
voting. Enter the voting tool at:

www.surveymonkey.com/s.aspx?sm=_2fz97tv4rU5iY2IsYDbyCRg_3d_3d
(http://ct.email.windowsitpro.com/rd/cts?d=33-8009-803-202-62923-794434-0-0-0-1-2-207)

Voting closes May 23 at 11:45 p.m. Mountain Time.

--SHARE YOUR SECURITY TIPS AND GET $100
Share your security-related tips, comments, or problems and solutions in
Security Pro VIP's Reader to Reader column. Email your contributions to
r2r@securityprovip.com (mailto:r2r@securityprovip.com). If we print your
submission, you'll get $100. We edit submissions for style, grammar, and
length.

PRODUCTS

--Comodo Offers Free PC Cleaning in Response to Increased Viruses and
Trojan Attacks
by Lavon Peters, Security Editor
The recent increase in the number of viruses and Trojan attacks has led
Comodo, a leading security company, to offer unprecedented free PC
cleaning. According to the company, this offer is "no catches" and "no
kidding"--unlike other companies' offers of free automated user-managed
tools, Comodo is providing trained security experts to remotely rid
machines of malware. Melih Abdulhayoglu, Comodo's CEO and chief security
architect, says that "by offering a free malware cleaning service, [the
company] aim[s] to create a community of confident consumers with clean
PCs." For more information, or to take advantage of this offer, contact
Comodo at 201-963-9471 or visit
www.personalfirewall.comodo.com/avsmart/malware-removal.html
(http://ct.email.windowsitpro.com/rd/cts?d=33-8009-803-202-62923-794435-0-0-0-1-2-207.

RESOURCES AND EVENTS

Gain Enhanced Insight Into and Control Over Your IT Systems

Microsoft System Center Configuration Manager 2007 shipped recently.
System Center Configuration Manager 2007 is the solution to
comprehensively assess, deploy, and update your servers, clients, and
devices - across physical, virtual, distributed, and mobile
environments. View this Web seminar for the latest and greatest features
and product enhancements in the Systems Center Configuration Manager SP1
and R2.

windowsitpro.com/Downloads/Index.cfm?fuseaction=ShowDownload&uuid=af2d59de-1461-478a-827f-0b6963d64478&code=051408er
(http://ct.email.windowsitpro.com/rd/cts?d=33-8009-803-202-62923-794436-0-0-0-1-2-207)

So You Think You're Compliant...

According to Gartner, 30 percent of enterprises will experience at least
one audit per year. There's no way for you to be entirely sure that your
organization is in compliance with software regulations. Join this Web
seminar to learn all about a new solution that can help you avoid
audits, control licenses, maximize key user productivity, and more.

www.windowsitpro.com/go/seminars/macrovision/softwareregulations/?partnerref=51408e&r
(http://ct.email.windowsitpro.com/rd/cts?d=33-8009-803-202-62923-794437-0-0-0-1-2-207)

BI Newsletter

Want to keep abreast of the latest SQL Server business intelligence (BI)
news, views, tips, and techniques? Subscribe to Essential BI UPDATE, a
new twice-monthly BI email newsletter from SQL Server Magazine. You'll
get how-to information, industry trends, commentary by experts, valuable
insight into BI Reporting Services, and more. Subscribe today--it's
free!

www.sqlmag.com/email (http://ct.email.windowsitpro.com/rd/cts?d=33-8009-803-202-62923-794438-0-0-0-1-2-207)

FEATURED WHITE PAPER

Guide to Log Management: Comparing On-Premise and On-Demand Solutions

In the past five years both governmental and industry specific
regulations have included log management as a required control within an
infrastructure. This white paper examines and compares two methods to
log management. Choosing a solution for something as complex and
critical as log management is difficult and requires careful
consideration. Read this paper today!

www.windowsitpro.com/Whitepapers/Index.cfm?fuseaction=ShowWP&WPID=96231bb9-0985-4d4b-96c9-b6f357a89e09&code=051408er
(http://ct.email.windowsitpro.com/rd/cts?d=33-8009-803-202-62923-794439-0-0-0-1-2-207)

ANNOUNCEMENTS

Rev Up Your IT Know-How with Our Recharged Magazine!

The improved Windows IT Pro is packed with trusted content and enhanced
with a fresh new look! Subscribe today to

--Stay ahead of industry trends with comprehensive coverage of topics
such as
Vista and virtualization

--Solve tough technical problems with advice from veteran IT experts
such as Guido Grillenmeier and Mark Minasi

--Find real-world solutions easily with fast facts and quick tips

store.pentontech.com/index.cfm?s=1&promocode=EU2085R1&
(http://ct.email.windowsitpro.com/rd/cts?d=33-8009-803-202-62923-794440-0-0-0-1-2-207)

Windows IT Pro Master CD: Take the Experts with You!

Find the solutions you need within the thousands of searchable articles,
helpful bonus content, and loads of expert advice on the Windows IT Pro
Master CD. A Master CD subscription buys you portable access to the
entire Windows IT Pro article database plus exclusive access to all the
new articles we publish only on WindowsITPro.com every day. It's like
having a team of consultants in your pocket! Get real-world solutions
fast--order the Windows IT Pro Master CD today.

store.pentontech.com/index.cfm?s=1&promocode=EU2284WC&
(http://ct.email.windowsitpro.com/rd/cts?d=33-8009-803-202-62923-794441-0-0-0-1-2-207)

CONTACT US
Security UDPATE is brought to you by the Windows IT Pro Web site's
Security page (first URL below) and Security Pro VIP (second URL
below).

http://ct.email.windowsitpro.com/rd/cts?d=33-8009-803-202-62923-794442-0-0-0-1-2-207

http://ct.email.windowsitpro.com/rd/cts?d=33-8009-803-202-62923-794443-0-0-0-1-2-207

You are subscribed to this newsletter as boy.blogger@gmail.com

Manage your Security UPDATE subscription at
http://ct.email.windowsitpro.com/rd/cts?d=33-8009-803-202-62923-794444-0-0-0-1-2-207.

To unsubscribe:
http://ct.email.windowsitpro.com/rd/cts?d=33-8009-803-202-62923-794445-0-0-0-1-2-207&list_id=803&email=boy.blogger@gmail.com&message_id=8009

Be sure to add Security_UPDATE@email.windowsitpro.com
to your spam filter's list of allowed senders.

To contact us:
About Security UPDATE content -- mailto:letters@windowsitpro.com
About technical questions -- http://ct.email.windowsitpro.com/rd/cts?d=33-8009-803-202-62923-794446-0-0-0-1-2-207

About your product news -- mailto:products@windowsitpro.com
About your subscription -- mailto:windowsitproupdate@windowsitpro.com
About sponsoring Security UPDATE -- mailto:salesopps@windowsitpro.com

View the Windows IT Pro privacy policy at

http://ct.email.windowsitpro.com/rd/cts?d=33-8009-803-202-62923-794447-0-0-0-1-2-207

Windows IT Pro, a division of Penton Media, Inc.
221 East 29th Street, Loveland, CO 80538
Attention: Customer Service Department

Copyright 2008, Penton Media, Inc. All rights reserved.