Software

Lock IT Down: Quick fixes for Outlook 2000's View Control vulnerabilities

Workaround for the Outlook View Control functionality issue


Exterminator brings you weekly updates on bug fixes, virus recovery, service release announcements, and security notices for Windows, Novell, Linux, and other systems.

Microsoft Security Bulletin (MS01-038)
Regarding: Outlook
Date Posted: June 12, 2001
Patch URL: No patch currently available
Information URL: Click here for more information.

Microsoft Outlook’s View Control allows users to view Outlook folders as Web pages. Although this ActiveX control should permit only passive operations, a function is exposed that could allow an attacker to invade a user’s Outlook information. Until a patch is available, Microsoft recommends disabling ActiveX controls.

Novell issues
Regarding: Account Mgt 2.1 for Windows 2000
Date Posted: July 16, 2001
Patch URL: Click here to download the patch.
Information URL: Click here for more information.

This patch fixes a password synchronization problem, which occurs after setting periodic password changes.

Regarding: NDS—Authentication Services (BDA), Third-party products
Date Posted: July 17, 2001
Patch URL: Click here to download the patch.
Information URL: Click here for more information.

This release is Support Pack 1 for NDS Authentication Services, v. 3.0.

Virus updates from Trend Micro
Virus/Worm: VBS_CATFISH.A
Posted: July 13, 2001
Risk: Low
Information URL: Click here for more information on this virus.

Virus/Worm: X97M_SLACKER.A
Posted: July 16, 2001
Risk: Low
Information URL: Click here for more information on this virus.

Virus/Worm: X97M_LAROUX.MV
Posted: July 17, 2001
Risk: Low
Information URL: Click here for more information on this virus.

Stay current on virus information
Are you keeping up with the latest virus information from Microsoft and Novell? If not, visit the Exterminator archive for past columns with information on bugs and patches you may have missed.

 

Exterminator brings you weekly updates on bug fixes, virus recovery, service release announcements, and security notices for Windows, Novell, Linux, and other systems.

Microsoft Security Bulletin (MS01-038)
Regarding: Outlook
Date Posted: June 12, 2001
Patch URL: No patch currently available
Information URL: Click here for more information.

Microsoft Outlook’s View Control allows users to view Outlook folders as Web pages. Although this ActiveX control should permit only passive operations, a function is exposed that could allow an attacker to invade a user’s Outlook information. Until a patch is available, Microsoft recommends disabling ActiveX controls.

Novell issues
Regarding: Account Mgt 2.1 for Windows 2000
Date Posted: July 16, 2001
Patch URL: Click here to download the patch.
Information URL: Click here for more information.

This patch fixes a password synchronization problem, which occurs after setting periodic password changes.

Regarding: NDS—Authentication Services (BDA), Third-party products
Date Posted: July 17, 2001
Patch URL: Click here to download the patch.
Information URL: Click here for more information.

This release is Support Pack 1 for NDS Authentication Services, v. 3.0.

Virus updates from Trend Micro
Virus/Worm: VBS_CATFISH.A
Posted: July 13, 2001
Risk: Low
Information URL: Click here for more information on this virus.

Virus/Worm: X97M_SLACKER.A
Posted: July 16, 2001
Risk: Low
Information URL: Click here for more information on this virus.

Virus/Worm: X97M_LAROUX.MV
Posted: July 17, 2001
Risk: Low
Information URL: Click here for more information on this virus.

Stay current on virus information
Are you keeping up with the latest virus information from Microsoft and Novell? If not, visit the Exterminator archive for past columns with information on bugs and patches you may have missed.

 

Editor's Picks

Free Newsletters, In your Inbox