bugtraq - RE: Microsoft Windows Security Bulletin Summary October

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <8B32EDC90D8F4E4AB40918883281874D0BADC9@pivxwin2k1.secnet.pivx.com>
Date: Wed, 15 Oct 2003 16:00:15 -0700
From: "Thor Larholm" <thor@...x.com>
To: "Giovanni Campagnoli" <bioia@...oo.com>,
	<bugtraq@...urityfocus.com>
Subject: RE: Microsoft Windows Security Bulletin Summary October


Add to that MS03-046 and MS03-047.

Critical:
Vulnerability in Exchange Server Could Allow Arbitrary Code Execution (829436) http://www.microsoft.com/technet/security/bulletin/MS03-046.asp

Moderate:
Vulnerability in Exchange Server 5.5 Outlook Web Access Could Allow Cross-Site Scripting Attack (828489) http://www.microsoft.com/technet/security/bulletin/MS03-047.asp




Regards
Thor Larholm
PivX Solutions, LLC - Senior Security Researcher
http://pivx.com/larholm/ - PivX Security Mailing List

-----Original Message-----
From: Giovanni Campagnoli [mailto:bioia@...oo.com] 
Sent: Wednesday, October 15, 2003 12:10 PM
To: bugtraq@...urityfocus.com
Subject: Microsoft Windows Security Bulletin Summary October


The new Security Bulletin is available at :

http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/winoct03.asp

In this last security bulletin Microsoft has patched 4
remote buffer overflow.

Microsoft Security Bulletin MS03-041 - Vulnerability
in Authenticode Verification Could Allow Remote Code
Execution (823182)	
Microsoft Security Bulletin MS03-042 - Buffer Overflow
in the Windows Troubleshooter ActiveX Control Could
Allow Code Execution (826232)
Microsoft Security Bulletin MS03-043 - Buffer Overrun
in Messenger Service Could Allow Code Execution
(828035)
Microsoft Security Bulletin MS03-044 - Buffer Overrun
in Windows Help and Support Center Could Lead to
System Compromise (825119)


Giovanni Campagnoli


=====
---------------------------------------------------------------------------------
L'intelligenza sulla terra è costante, la popolazione sempre in aumento
---------------------------------------------------------------------------------

__________________________________
Do you Yahoo!?
The New Yahoo! Shopping - with improved product search http://shopping.yahoo.com