Network Security Roundup for July 17, 2003

CNN: Microsoft (Nasdaq: MSFT) Admits Another Critical Flaw
17-Jul-03 08:07 ET

Story Highlights:
"Microsoft acknowledged a critical vulnerability Wednesday in nearly all versions of its flagship Windows operating system software, the first such design flaw to affect its latest Windows Server 2003 software."

Full Story on CNN

Story Highlights:
"Antivirus vendors are warning of the mass mailing of a new Trojan program 'Webber' (aka 'Heloc' and 'Berbew') which is capable of turning infected PCs into pr0n or spam propagating zombies. Webber is the latest in a series of malicious programs that turn innocent computers into spam machines."

Full Story on The Register

Story Highlights:
"Antivirus company TruSecure Corp. warned users about a new e-mail worm that is beginning to spread on the Internet and over the Kazaa peer-to-peer network. The new worm dubbed 'Gruel' is a mass-mailing worm that masquerades as a Windows software patch from Microsoft Corp. and as a virus removal tool from Symantec (Nasdaq: SYMC) Corp."

Full Story on ComputerWorld

Story Highlights:
"Cisco warned last night of a potentially devastating flaw affecting a wide range of routers and switches. The DoS vulnerability rises from a bug in Cisco's core IOS software and could cause vulnerable devices to stop processing inbound packets on receipt of maliciously constructed IPv4 packets."

Full Story on The Register

Story Highlights:
"Could having telecommuters put your office systems at risk? It's not so farfetched a question. In October 2000, a hacker attacked Microsoft using an employee's home computer as a springboard to computers at its Redmond, Wash., headquarters, where the attacker found access to secret software code."

Full Story on Forbes