HNS Newsletter Issue 215 - 31.05.2004. http://net-security.org This is a newsletter delivered to you by Help Net Security. It covers weekly roundups of security events that were in the news the past week. ---------------------------------------------------------------- ADVERTISEMENT ---------------------------------------------------------------- Windows Server System is integrated server infrastructure software from Microsoft that is designed to work together and interact seamlessly with other data and applications across your IT environment so you can reduce the costs of ongoing operations, deliver highly reliable and secure IT infrastructure, and drive valuable new capabilities for the future growth of your business. For more information visit http://ad.sk.doubleclick.net/clk;8019804;9084238;p ---------------------------------------------------------------- Table of contents: 1) Security news 2) Vulnerabilities 3) Advisories 4) Articles 5) Software 6) Webcasts 7) Conferences 8) Security World 9) Virus News [ Security news ] ---------------------------------------------------------------- SECURE EMAIL SPECS COULD MERGE After submitting its Caller ID email authentication specification to a standards body, Microsoft is discussing merging its spec with another, called sender policy framework, or SPF. http://www.net-security.org/news.php?id=5267 DHS PRIVACY DIRECTOR: WE'RE PAYING ATTENTION Individual rights will be upheld despite the war on terrorism. http://www.net-security.org/news.php?id=5268 STARTING UP NETWORK SERVICES FROM XINETD xinetd is started on bootup, and listens on ports designated in /etc/xinetd.conf for incoming network connections. When a new connection is made, xinetd starts up the corresponding network service. http://www.net-security.org/news.php?id=5269 REMOTE BACKUP USING SSH, TAR AND CRON Are you looking for a solution to backup your data to a remote location? http://www.net-security.org/news.php?id=5270 WHY WINDOWS IS A SECURITY NIGHTMARE Security in all mainstream operating systems is non-existent; however, things are especially bad for Windows. http://www.net-security.org/news.php?id=5271 SECURE CODING ATTRACTS INTEREST, INVESTMENT Security firm @stake helps developers search computer code for errors, security holes. http://www.net-security.org/news.php?id=5275 SNORT UP FOR REVAMP, SAYS CREATOR The creator of Snort, the open-source network-based Intrusion Detection System (IDS), says the software is up for an overhaul. http://www.net-security.org/news.php?id=5276 WHAT'S IN A NAME- IDENTITY THEFT One of the most precious things you own is your good name. http://www.net-security.org/news.php?id=5277 THE BIGGEST SPAMMER ON THE NET? COMCAST? Comcast's high-speed Internet subscribers have long been rumored to be an unusually persistent source of junk e-mail. http://www.net-security.org/news.php?id=5278 GOOD METHODS FOSTER SECURITY Software engineering expert Martyn Thomas explains how IT disciplines and management practices can help to minimise risk. http://www.net-security.org/news.php?id=5279 MICROSOFT MAKES SECURITY PUSH Microsoft Corp. said Monday it will begin selling network security software pre-installed on computers, taking aim at a market dominated by appliance security vendors. http://www.net-security.org/news.php?id=5280 SPAM NOW TWO THIRDS OF ALL E-MAIL There is no sign of relief for companies already overwhelmed by the sheer volume of unsolicited and unwanted e-mail messages clogging their mail systems. http://www.net-security.org/news.php?id=5281 MICROSOFT TO SHOW OFF ID FEDERATION Microsoft will display on Tuesday software that lets customers sign in to a Web site and then take their identity with them as they browse the Web to other federated sites, a representative said. http://www.net-security.org/news.php?id=5282 CA PREPS WIRELESS SITE MANAGEMENT SOFTWARE Computer Associates International Inc. previewed Monday at its user show in Las Vegas a new tool for managing wireless networks that early users say provides critical monitoring and security functionality. http://www.net-security.org/news.php?id=5283 PRACTICE SAFE RESETS: SECURE YOUR PASSWORD SOLUTION Organisations are discovering an easy way to reduce the workload of IT and help desk administrators - password self-service. http://www.net-security.org/news.php?id=5284 HP TO SELL MICROSOFT FIREWALL APPS Microsoft has said that hardware makers will sell its forthcoming Internet Security and Acceleration (ISA) Server 2004 software preinstalled on hardware appliances. http://www.net-security.org/news.php?id=5285 LAWMAKER TONES DOWN ANTI-GMAIL BILL A California lawmaker has revised a proposal to block Google's new e-mail service on privacy grounds, removing key provisions that would have have made it difficult or impossible for the Web search giant to operate Gmail in the state. http://www.net-security.org/news.php?id=5287 WEIGHING PROFITS AGAINST PERIL Denying XP pirates the SP2 upgrade would hurt the Internet to protect Microsoft's bottom line. http://www.net-security.org/news.php?id=5288 THE RISING COST OF PROTECTING YOUR IDENTITY With identity theft rampant, we need to be cautious with our personal information. But consumer advocates say there's something else we ought to be vigilant about: expensive services for identity theft protection. http://www.net-security.org/news.php?id=5289 LINUX AND WINDOWS SECURITY COMPARED In this study, we compare Microsoft Windows and Linux security across these seven categories. http://www.net-security.org/news.php?id=5290 GUI ADMINISTRATION WITH KSYSGUARD This app has absolutely nothing to do with guarding anything. KSysguard lets you manage processes and monitor resources on local or remote systems. According to the documentation, it can be built on Solaris, BSD, and Linux. http://www.net-security.org/news.php?id=5291 MICROSOFT TIGHTENS DATABASE SECURITY Microsoft is making its newest database software tougher to crack. http://www.net-security.org/news.php?id=5292 BUFFALO ADDS NEW SECURITY SCHEME TO 802.11G Buffalo Technology has announced a new lineup of 802.11g wireless products featuring their AirStation One-Touch Secure System security solution. http://www.net-security.org/news.php?id=5293 SECURITY BOOST FOR SQL SERVER Microsoft is to add data encryption to its SQL Server database as well as seek US federal government security certification for the platform at its TechEd conference in San Diego, California. http://www.net-security.org/news.php?id=5294 NOKIA UPDATES SECURITY APPLIANCE OS Nokia has unveiled the latest version of its IPSO server operating system, claiming that version 3.8 of the security-hardened platform will deliver significant performance improvements. http://www.net-security.org/news.php?id=5295 WILL CODE-CHECK TOOLS MAKE FOR WORM-PROOF SOFTWARE? When Microsoft needed help in taming the large number of flaws, it looked to technology known as "static source-code checkers" and a company called Intrinsa. http://www.net-security.org/news.php?id=5296 INVESTIGATING COMPUTER CRIMES One of the most important conditions to improve activity of operational structures is to strengthen informational relations between police divisions. http://www.net-security.org/news.php?id=5297 RUSSIA - A HAPPY HAVEN FOR HACKERS For all its disadvantages, the former Soviet Union had one hugely overlooked advantage: it kept hackers, crackers and virus writers confined inside the country by restricting their access to the internet. http://www.net-security.org/news.php?id=5298 MICROSOFT SECURITY SPEND GREATER THAN THE STAR WARS MISSILE SYSTEM Microsoft has spent more on securing its software than was spent on the Star Wars missile project, the company's head of security has told conference guests. http://www.net-security.org/news.php?id=5299 RSA SECURITY TOUTS SUCCESS WITH WEB SERVICES FEDERATION RSA Security said it has successfully tested complete interoperability of the WS-Federation specification. Several vendors including Microsoft and IBM participated in the test, the firm said. http://www.net-security.org/news.php?id=5300 MICROSOFT TO MERGE CALLER ID FOR EMAIL WITH SPF ANTI-SPAM TECHNOLOGY On Tuesday, Microsoft revealed that it will merge its Caller ID for Email technology with a competing scheme for email authentication, dubbed Sender Policy Framework. http://www.net-security.org/news.php?id=5301 DELOITTE SURVEY SHOWS RISE IN ATTACKS BUT FLAT SECURITY BUDGETS A survey of top financial services firms by Deloitte showed that a majority of organizations have suffered external attacks within the past year but many don't expect their security budgets to grow. http://www.net-security.org/news.php?id=5302 YAHOO ADDS ANTISPYWARE SERVICE TO TOOLBAR Yahoo Inc. began testing a new antispyware feature on its toolbar Thursday, allowing users to scan for and delete the small software applications often responsible for displaying pop-up ads etc. http://www.net-security.org/news.php?id=5303 BETTER SECURITY WILL HELP WIRELESS GROWTH The security of wireless hot spots for internet access for IT users on the road was the subject of discussion at the CeBIT America 2004 conference in New York. http://www.net-security.org/news.php?id=5304 WINDOWS WORMS TAX ISPS Computer worms will cost European ISPs an estimated €123m this year, according to a study to traffic management firm Sandvine out today. http://www.net-security.org/news.php?id=5305 FIRST 64-BIT VIRUS IS DISCOVERED BY SYMANTEC Symantec in Canada have discovered the first known virus for the 64 bit version of Microsoft Windows. Called W64.Rugrat.3344, the virus is a direct action infector. http://www.net-security.org/news.php?id=5306 SPAMMER SENTENCED TO SEVEN YEARS IN PRISON A man who sent 850 million junk e-mails through accounts he opened with stolen identities was sentenced to up to seven years in prison on Thursday. http://www.net-security.org/news.php?id=5307 CALIFORNIA SENATE APPROVES ANTI-GMAIL BILL The California state Senate on Thursday approved a bill that takes aim at Google's new Gmail service, placing strict limits on e-mail providers seeking to scan customer messages for advertising and other purposes. http://www.net-security.org/news.php?id=5308 AUSSIE POLICE TO GAIN ACCESS TO STORED MESSAGES Australian Attorney General Philip Ruddock has introduced amendments to federal parliament that would ease police access in the country to stored voice mails, e-mails and text messages. http://www.net-security.org/news.php?id=5309 TAIWANESE NABBED FOR CREATING VIRUS USED BY CHINESE HACKERS A Taiwanese computer engineer was arrested for allegedly designing a vorm that was used to attack the island's business and government systems, police said Thursday. http://www.net-security.org/news.php?id=5310 SECURITY SPEND BOOSTS ENTERPRISE ROUTER SALES Global sales of enterprise router devices have begun to pick up, largely driven by healthy spending in the secure router segment. http://www.net-security.org/news.php?id=5311 MMANAGING SECURITY FOR MOBILE USERS (PART TWO) Part two of this article completes the discussion and presents ways of providing additional layers of defense to help protect the valuable, mobile data. http://www.net-security.org/news.php?id=5312 ---------------------------------------------------------------- [ Vulnerabilities ] All vulnerabilities are located here: http://www.net-security.org/archive_vuln.php ---------------------------------------------------------------- WildTangent Web Driver Long FileName Stack Overflow Vulnerability http://www.net-security.org/vuln.php?id=3477 PHP include() Filter Bypass Vulnerability http://www.net-security.org/vuln.php?id=3476 Sun-Java-App-Server PE 8.0 Path Disclosure Vulnerability http://www.net-security.org/vuln.php?id=3475 cPanel mod_phpsuexec Multiple Vulnerabilities http://www.net-security.org/vuln.php?id=3474 Netgear RP114 URL Filter Bypass Vulnerability http://www.net-security.org/vuln.php?id=3473 MiniShare Denial Of Service Vulnerability http://www.net-security.org/vuln.php?id=3472 3Com OfficeConnect Remote 812 ADSL Router Telnet Protocol Denial of Service Vulnerability http://www.net-security.org/vuln.php?id=3471 SSH URI Handler Remote Arbitrary Code Execution Vulnerability http://www.net-security.org/vuln.php?id=3470 Symantec Norton AntiVirus 2004 ActiveX Control Vulnerability http://www.net-security.org/vuln.php?id=3469 e107 Web Portal Referers HTTP Injection Vulnerability http://www.net-security.org/vuln.php?id=3468 Liferay Cross Site Scripting Vulnerability http://www.net-security.org/vuln.php?id=3467 ---------------------------------------------------------------- [ Advisories ] All advisories are located at: http://www.net-security.org/archive_advi.php ---------------------------------------------------------------- Turbolinux Security Announcement - cvs, tcpdump, apache (28/May/2004) http://www.net-security.org/advisory.php?id=3396 US-CERT Technical Cyber Security Alert - CVS Heap Overflow Vulnerability (TA04-147A) http://www.net-security.org/advisory.php?id=3395 OpenPKG Security Advisory - apache (OpenPKG-SA-2004.026) http://www.net-security.org/advisory.php?id=3394 Gentoo Linux Security Advisory - Heimdal: Kerberos 4 buffer overflow in kadmin (GLSA 200405-23) http://www.net-security.org/advisory.php?id=3393 HP Security Bulletin - hp OpenView Select Access remote unauthorized access (SSRT4719) http://www.net-security.org/advisory.php?id=3392 HP Security Bulletin - HP integrated Lights Out (iLO) Denial of Service (DoS) (SSRT4724) http://www.net-security.org/advisory.php?id=3391 HP Security Bulletin - HP-UX Java Runtime Environment (JRE) remote DoS (SSRT4749) http://www.net-security.org/advisory.php?id=3390 Mandrakelinux Security Update Advisory - kolab-server (MDKSA-2004:052) http://www.net-security.org/advisory.php?id=3389 Mandrakelinux Security Update Advisory - mailman (MDKSA-2004:051) http://www.net-security.org/advisory.php?id=3388 SGI Security Advisory - SGI Advanced Linux Environment 3 Security Update #1 (20040506-01-U) http://www.net-security.org/advisory.php?id=3387 Conectiva Linux Security Announcement - kde (CLA-2004:843) http://www.net-security.org/advisory.php?id=3386 SGI Security Advisory - libcpr vulnerability (20040507-01-P) http://www.net-security.org/advisory.php?id=3385 Gentoo Linux Security Advisory - Midnight Commander: Multiple vulnerabilities (GLSA 200405-21) http://www.net-security.org/advisory.php?id=3384 Gentoo Linux Security Advisory - Apache 1.3: Multiple vulnerabilities (GLSA 200405-22) http://www.net-security.org/advisory.php?id=3383 SUSE Security Announcement - kdelibs/kdelibs3 (SuSE-SA:2003:014) http://www.net-security.org/advisory.php?id=3382 FreeBSD Security Advisory - msync buffer cache invalidation implementation issues (FreeBSD-SA-04:11.msync) http://www.net-security.org/advisory.php?id=3381 Gentoo Linux Security Advisory - Insecure Temporary File Creation In MySQL (GLSA 200405-20) http://www.net-security.org/advisory.php?id=3380 Conectiva Linux Security Announcement - (CLA-2004:842) http://www.net-security.org/advisory.php?id=3379 Conectiva Linux Security Announcement - libneon (CLA-2004:841) http://www.net-security.org/advisory.php?id=3378 Gentoo Linux Security Advisory - Multiple XSS Vulnerabilities in SquirrelMail (GLSA 200405-16:02) http://www.net-security.org/advisory.php?id=3377 SOT Linux Security Advisory - Updated apache, mod_perl package for SOT Linux 2003 (SLSA-2004:19) http://www.net-security.org/advisory.php?id=3376 Gentoo Linux Security Advisory - Opera telnet URI handler file creation/truncation vulnerability http://www.net-security.org/advisory.php?id=3375 Gentoo Linux Security Advisory - Buffer Overflow in Firebird (GLSA 200405-18) http://www.net-security.org/advisory.php?id=3374 Debian Security Advisory - New xpcd packages fix buffer overflow (DSA 508-1) http://www.net-security.org/advisory.php?id=3373 Mandrakelinux Security Update Advisory - kernel (MDKSA-2004:050) http://www.net-security.org/advisory.php?id=3372 Apple Security Update 2004-05-24 - (APPLE-SA-2004-05-21) http://www.net-security.org/advisory.php?id=3371 ---------------------------------------------------------------- [ Articles ] All articles are located at: http://www.net-security.org/articles_main.php Articles can be contributed to articles@net-security.org ---------------------------------------------------------------- KEY CONSIDERATIONS FOR OUTSOURCING SECURITY As last summer’s virus attacks vividly demonstrated, companies of every size are finding themselves hard pressed to maintain around-the-clock network security. This article will look at certain key issues for determining when outsourcing security is the best approach to take. http://www.net-security.org/article.php?id=693 AUTOMATED PENETRATION TESTING WITH CORE IMPACT 4.0 Core Security Technologies today announced a major update to CORE IMPACT, their flagship penetration testing product. http://www.net-security.org/article.php?id=692 SECURITY IN AN ERP WORLD Security in the e-business, integrated enterprise resource planning (ERP) world requires a new way of thinking about security - not just about the bits and bytes of network traffic, but about business transactions that inflict financial losses from systems-based fraud, abuse and errors. http://www.net-security.org/article.php?id=691 ---------------------------------------------------------------- [ Software ] Windows software is located at: http://net-security.org/software_main.php?cat=1 Linux software is located at: http://net-security.org/software_main.php?cat=2 Pocket PC software is located at: http://net-security.org/software_main.php?cat=3 ---------------------------------------------------------------- FLOPPYFW 2.0.9 floppyfw is a router with the advanced firewall-capabilities in Linux that fits on one single floppy disc. http://www.net-security.org/software.php?id=211 MARADNS 1.0.22 MaraDNS is a DNS server that strives to be secure and fully open-sourced. http://www.net-security.org/software.php?id=84 NMAP PARSER XML 0.77 An nmap parser for xml scan data using PERL. http://www.net-security.org/software.php?id=532 NOSPAMPROXY 2.9.59 NoSPAMProxy blocks spam before it reaches the SMTP server. http://www.net-security.org/software.php?id=539 ROOTKIT HUNTER 1.0.9 Rootkit scanner is scanning tool to ensure you for about 99.9% you're clean of nasty tools. http://www.net-security.org/software.php?id=531 SAMHAIN 1.8.8 Samhain is an open source file integrity and host-based intrusion detection system. http://www.net-security.org/software.php?id=125 SHOREWALL 2.0.2d Shorewall is an iptables based firewall that can be used on a dedicated firewall system, a multi-function masquerade gateway/server or on a standalone Linux system. http://www.net-security.org/software.php?id=40 TINYCA 0.6.1 TinyCA is a simple graphical user interface to manage a small CA (Certification Authority). http://www.net-security.org/software.php?id=308 WIFISCANNER 0.9.4 WifiScanner is an analyzer and detector of 802.11b stations and access points. http://www.net-security.org/software.php?id=381 ---------------------------------------------------------------- [ Webcasts ] All webcasts are located at: http://net-security.org/webcasts.php ---------------------------------------------------------------- Sophos Anti-Virus: Stopping viruses in the educational environment Organized by Sophos on 2 June 2004, 10:00 AM http://www.net-security.org/webcast.php?id=283 A Field Guide to Spam / Introduction to PureMessage (Australasia) Organized by Sophos on 2 June 2004, 4:30 PM http://www.net-security.org/webcast.php?id=284 Virtual Patch - The Next Generation of Managed Protection Services Organized by ISS on 8 June 2004, 11:00 AM http://www.net-security.org/webcast.php?id=274 All anti-virus software is not created equal Organized by Sophos on 16 June 2004, 10:00 AM http://www.net-security.org/webcast.php?id=285 Building Security into Your Software Development Lifecycle Organized by Foundstone on 16 June 2004, 4:00 PM http://www.net-security.org/webcast.php?id=292 Tips & Tricks for Secure Access to Cisco Routers Organized by Global Knowledge on 25 June 2004, 4:00 PM http://www.net-security.org/webcast.php?id=293 All anti-virus software is not created equal Organized by Sophos on 30 June 2004, 10:00 AM http://www.net-security.org/webcast.php?id=286 Developing a Software Security Metrics Program Organized by Foundstone on 14 July 2004, 4:00 PM http://www.net-security.org/webcast.php?id=294 ---------------------------------------------------------------- [ Conferences ] All conferences are located at: http://net-security.org/conferences.php ---------------------------------------------------------------- RSA Conference 2004 Japan Organized by RSA Conference 2004 Japan Executive Comittee - 31 May-1 June 2004 http://www.net-security.org/conference.php?id=82 Infosecurity Canada Conference & Exhibition 2004 Organized by Reed Exhibitions - 1 June-3 June 2004 http://www.net-security.org/conference.php?id=86 BCS Birmingham IT Security Conference 2004 Organized by British Computer Society - 8 June-8 June 2004 http://www.net-security.org/conference.php?id=81 16th Annual FIRST Conference Organized by FIRST - 13 June-18 June 2004 http://www.net-security.org/conference.php?id=22 NetSec 2004 Organized by Computer Security Institute - 14 June-16 June 2004 http://www.net-security.org/conference.php?id=20 2004 USENIX Annual Technical Conference Organized by USENIX Association - 27 June-2 July 2004 http://www.net-security.org/conference.php?id=66 Security Leadership Council 2004 Organized by IP Events, Inc. - 29 June-30 June 2004 http://www.net-security.org/conference.php?id=92 DIMVA 2004 Organized by German Informatics Society - 6 July-7 July 2004 http://www.net-security.org/conference.php?id=47 RUXCON 2004 Organized by Australian computer security community - 10 July-11 July 2004 http://www.net-security.org/conference.php?id=88 Open Source Convention 2004 Organized by O'Reilly - 26 July-30 July 2004 http://www.net-security.org/conference.php?id=89 13th USENIX Security Symposium Organized by USENIX Association - 9 August-13 August 2004 http://www.net-security.org/conference.php?id=67 The 14th Virus Bulletin International Conference (VB2004) Organized by Virus Bulletin - 29 September-1 October 2004 http://www.net-security.org/conference.php?id=83 RSA Conference Europe 2004 Organized by RSA Security - 3 November-5 November 2004 http://www.net-security.org/conference.php?id=90 IBM SecureWorld Conference EMEA 2004 Organized by IBM - 23 November-26 November 2004 http://www.net-security.org/conference.php?id=91 ---------------------------------------------------------------- [ Security World ] All press releases are located at: http://www.net-security.org/press_main.php Send your press releases to press@net-security.org ---------------------------------------------------------------- Two-Day Online "Security Leadership Council" Commences http://www.net-security.org/press.php?id=2180 Utah Transit Authority Selects TippingPoint’s UnityOne Intrusion Prevention Systems to Protect Its Network and Block Spyware http://www.net-security.org/press.php?id=2179 Pointsec Launches Latest Security Solution For Sony Ericsson Smartphones http://www.net-security.org/press.php?id=2178 CipherTrust to Support Merged SPF and Caller ID Sender Authentication Protocol http://www.net-security.org/press.php?id=2177 PGP Universal Reaches 50th Customer and 50,000 Internal User License Milestones In First 6 Months http://www.net-security.org/press.php?id=2176 Secoda Risk Management: For Information Security, Playing By The Rules Just Got Easier http://www.net-security.org/press.php?id=2175 Sophos Protects Microsoft Networks From Viruses and Spam http://www.net-security.org/press.php?id=2172 Interxion Warns Companies Of Potential Data Loss in Migration Process, As Support For Windows NT Comes To an End http://www.net-security.org/press.php?id=2171 Mirapoint Re-Defines Email Security With Mailhurdle Technology http://www.net-security.org/press.php?id=2170 GFI Network Server Monitor Now Allows Server Monitoring From Anywhere In The World http://www.net-security.org/press.php?id=2169 New Sybari Enterprise Manager, Advanced Spam Manager, and Antigen 8.0 For Exchange and SMTP Gateways Further Secures and Optimizes E-Mail Communications http://www.net-security.org/press.php?id=2168 I-S-Cubed Delivers World's First Open, Multi-vendor Secure Key Management System for ATMs http://www.net-security.org/press.php?id=2167 Blue Coat Closes Back Door For Porn Opened By Google And Yahoo! Image Search http://www.net-security.org/press.php?id=2166 Sygate Redefines Endpoint Security; Innovates Industry's First Enterprise Security Solution For Continuous Compliance and Protection http://www.net-security.org/press.php?id=2165 Sygate Introduces First Comprehensive Product Set For Eliminating Rogue And Compromised Devices From IP Networks http://www.net-security.org/press.php?id=2164 TippingPoint Enables End-to-End Enterprise Protection with Availability of UnityOne-50 for Remote Branch Office Security http://www.net-security.org/press.php?id=2163 TippingPoint Launches Major European Expansion as Surveys Warn of IT Security Vulnerability http://www.net-security.org/press.php?id=2162 TippingPoint Launches Intrusion Prevention and Bandwidth Management Solution for Service Providers to Deliver Fast, Secure Internet Connectivity http://www.net-security.org/press.php?id=2161 Corsaire Establish Vulnerability Coordination Relationship with UK NISCC Response Team http://www.net-security.org/press.php?id=2160 Smart Computing Selects Network Associates' McAfee VirusScan 8.0 as the 'Smart Choice' for PC Users http://www.net-security.org/press.php?id=2159 Kaspersky Labs: the First Russian Software Developer Qualify For the Intel Centrino Identifier For Mobile PCs http://www.net-security.org/press.php?id=2158 ---------------------------------------------------------------- [ Virus News ] All virus news are located at: http://www.net-security.org/viruses.php ---------------------------------------------------------------- Weekly Report on Viruses and Intrusions - Bobax.D and Korgo A/B Variants http://www.net-security.org/virus_news.php?id=413 Suspected Author Of Randex Worm Charged in Canada http://www.net-security.org/virus_news.php?id=412 ---------------------------------------------------------------- Questions, contributions, comments or ideas go to: Help Net Security staff staff@net-security.org http://net-security.org ---------------------- Unsubscribe from this weekly digest on: http://www.net-security.org/subscribe.php The archive of the newsletter in TXT and PDF format is available http://www.net-security.org/newsletter_archive.php ---------------------------------------------------------------- ADVERTISEMENT ---------------------------------------------------------------- Windows Server System is integrated server infrastructure software from Microsoft that is designed to work together and interact seamlessly with other data and applications across your IT environment so you can reduce the costs of ongoing operations, deliver highly reliable and secure IT infrastructure, and drive valuable new capabilities for the future growth of your business. For more information visit http://ad.sk.doubleclick.net/clk;8019804;9084238;p ----------------------------------------------------------------