|
| Register for our Free Newsletters |
|
 |
|
|
|
|
|
|
|
|
| Other Carouselweb publications |
|
|
|
|
|
|
|
|
|
|
| |
|
|
|
|
|
11 MS patches contain critical vulnerability protection
|
|
Lumension Security
: 16 October, 2008 (Technical Article) |
|
|
Flaws in Excel 2000, IE6 and Windows patched with critical updates released on patch Tuesday by Microsoft |
|
Andrew Clarke, senior vice president, International, Lumension Security comments on the release of eleven patches during October by Microsoft.
"Microsoft is launching its Exploitability Index on a comprehensive Patch Tuesday - with eleven updates affecting Windows, Excel, and Internet Explorer. The four critical updates deal with remote code vulnerabilities on Windows and Excel 2000, Internet Explorer 6 and Microsoft Host Integration Server. These vulnerabilities could potentially allow unrestricted access to sensitive databases and need to be treated very seriously.
'The Windows Active Directory and Excel Bulletins are critical for organisations running Windows 2000 and Office 2000. Windows Active Directory and Excel 2000 are extremely common implementations and companies need to pay special attention as many users are still using their Active Directory and Office on Windows 2000. Moreover, the Office issues also impact MAC users that have Office for the Mac 2004 and 2008.'
'Organisations will also need to pay special attention to the Windows Internet Explorer V6 Bulletin because it is still widely deployed within organisations. The IE issue impacts multiple versions across multiple platforms which could spell trouble for IT administrators. It is not as simple as patching IE for XP or Vista as it impacts 2000, XP, Vista as well as Microsoft Windows Server 2003 and 2008. Lastly, the Windows Host Integration Server is a gateway application between Microsoft networks to IBM mainframe and AS400 environments so anyone using HIS environments will need to prioritise this patch accordingly."
"The broad target range of this month's vulnerabilities emphasises the need for IT departments to adopt multi-platform patch and vulnerability management solutions."
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
