Security

Novell releases a slew of support packs

Novell dominates this week's Exterminator, with 11 releases, almost all of them Support Packs. Trend Micro has the latest on the SirCam worm, and Microsoft has released a patch for its Services for UNIX product.


Exterminator brings you weekly updates on bug fixes, virus recovery, service release announcements, and security notices for Windows, Novell, Linux, and other systems.

Microsoft Security Bulletin (MS01-039)
Regarding: Microsoft Services for UNIX 2.0
Date Posted: July 24, 2001
Patch URL: Multiple patches available. Follow the link below for more information.
Information URL: Click here for more information.

Both the Network File System and Telnet protocols included in Services for UNIX 2.0 have memory leaks. If an attacker made repeated requests triggering these leaks, a denial of service situation could result.

Novell issues
Regarding: NetWare 5.1, Novell Small Business Suite 5.1
Date Posted: July 20, 2001
Patch URL: Click here to download the patch.
Information URL: Click here for more information.

This is a new release of the Java Virtual Machine for NetWare.

Regarding: GroupWise
Date Posted: July 20, 2001
Patch URL: Click here to download the patch.
Information URL: Click here for more information.

The GroupWise 5.5 Enhancement Pack Support Pack 3 is now available. You can find the multilingual version by clicking here.

Regarding: NetWare NFS Services 3.0, UNIX Connectivity
Date Posted: July 20, 2001
Patch URL: Click here to download the patch.
Information URL: Click here for more information.

This release is Support Pack 2 for NFS Services 3.0.

Regarding: Third-party products
Date Posted: July 20, 2001
Patch URL: Click here to download the patch.
Information URL: Click here for more information.

WebSphere Application Server Standard Edition Version 3 Release 5 is now available.

Regarding: ZENworks for Desktops, ZENworks for Desktops 3
Date Posted: July 20, 2001
Patch URL: Click here to download the patch.
Information URL: Click here for more information.

This is a fix for a strange little bug: Caps Lock and the 0 key on the keypad don’t work if you’re using the remote management feature.

Regarding: NetWare 5.1, Novell Small Business Suite 5.1, OnDemand, OnDemand 1.0, OnDemand 1.5, ZENworks 2
Date Posted: July 20, 2001
Patch URL: Click here to download the patch.
Information URL: Click here for more information.

This release fixes three different problems with the scanner files on ZfD 2 server.

Regarding: ZENworks for Desktops, ZENworks for Desktops 3
Date Posted: July 20, 2001
Patch URL: Click here to download the patch.
Information URL: Click here for more information.

Novell has released updated Novell Application Launcher files for ZfD 3.

Regarding: NetWare 5, NetWare 5.1, NetWare Cluster Services for NW5, Novell Small Business Suite 5.1
Date Posted: July 21, 2001
Patch URL: Click here to download the patch.
Information URL: Click here for more information.

This release is Support Pack 2 for NetWare Cluster Services 1.01. It contains updates only for components in the Cluster Services product.

Regarding: NetWare 5.1, Novell Small Business Suite 5.1
Date Posted: July 23, 2001
Patch URL: Click here to download the patch.
Information URL: Click here for more information.

Another fix for a strange bug, this release, filesys.nlm for NetWare 5.1 Support Pack 3, corrects a glitch that occurs when trying to change the case of a long filename.

Regarding: DirXML 1.0, NDS eDirectory, NetWare 5.1, Novell Small Business Suite 5.1, iChain, iChain 1.5
Date Posted: July 24, 2001
Patch URL: Click here to download the patch.
Information URL: Click here for more information.

If you’ve installed NetWare 5.10 Support Pack 1, 2a, or 3 on a server with DirXML, then your SSL security doesn’t work correctly any more. This patch addresses that issue.

Regarding: NetWare 5.1, Novell Small Business Suite 5.1
Date Posted: July 24, 2001
Patch URL: Click here to download the patch.
Information URL: Click here for more information.

Support Pack 3 for NetWare 5.1 offers fixes that have been tested together, so Novell recommends that you install the entire support pack, not individual files. And if you have DirXML installed on your server, be sure to look at the previous patch.

Virus updates from Trend Micro
Virus/Worm: TROJ_SIRCAM.A
Posted: July 24, 2001
Risk: High
Information URL: Click here for more information on this virus.

Stay current on virus information
Have you been keeping up with the latest virus information and patches from Microsoft and Novell? If not, visit the Exterminator archive for past columns with information on bugs and patches you may have missed.

 

Exterminator brings you weekly updates on bug fixes, virus recovery, service release announcements, and security notices for Windows, Novell, Linux, and other systems.

Microsoft Security Bulletin (MS01-039)
Regarding: Microsoft Services for UNIX 2.0
Date Posted: July 24, 2001
Patch URL: Multiple patches available. Follow the link below for more information.
Information URL: Click here for more information.

Both the Network File System and Telnet protocols included in Services for UNIX 2.0 have memory leaks. If an attacker made repeated requests triggering these leaks, a denial of service situation could result.

Novell issues
Regarding: NetWare 5.1, Novell Small Business Suite 5.1
Date Posted: July 20, 2001
Patch URL: Click here to download the patch.
Information URL: Click here for more information.

This is a new release of the Java Virtual Machine for NetWare.

Regarding: GroupWise
Date Posted: July 20, 2001
Patch URL: Click here to download the patch.
Information URL: Click here for more information.

The GroupWise 5.5 Enhancement Pack Support Pack 3 is now available. You can find the multilingual version by clicking here.

Regarding: NetWare NFS Services 3.0, UNIX Connectivity
Date Posted: July 20, 2001
Patch URL: Click here to download the patch.
Information URL: Click here for more information.

This release is Support Pack 2 for NFS Services 3.0.

Regarding: Third-party products
Date Posted: July 20, 2001
Patch URL: Click here to download the patch.
Information URL: Click here for more information.

WebSphere Application Server Standard Edition Version 3 Release 5 is now available.

Regarding: ZENworks for Desktops, ZENworks for Desktops 3
Date Posted: July 20, 2001
Patch URL: Click here to download the patch.
Information URL: Click here for more information.

This is a fix for a strange little bug: Caps Lock and the 0 key on the keypad don’t work if you’re using the remote management feature.

Regarding: NetWare 5.1, Novell Small Business Suite 5.1, OnDemand, OnDemand 1.0, OnDemand 1.5, ZENworks 2
Date Posted: July 20, 2001
Patch URL: Click here to download the patch.
Information URL: Click here for more information.

This release fixes three different problems with the scanner files on ZfD 2 server.

Regarding: ZENworks for Desktops, ZENworks for Desktops 3
Date Posted: July 20, 2001
Patch URL: Click here to download the patch.
Information URL: Click here for more information.

Novell has released updated Novell Application Launcher files for ZfD 3.

Regarding: NetWare 5, NetWare 5.1, NetWare Cluster Services for NW5, Novell Small Business Suite 5.1
Date Posted: July 21, 2001
Patch URL: Click here to download the patch.
Information URL: Click here for more information.

This release is Support Pack 2 for NetWare Cluster Services 1.01. It contains updates only for components in the Cluster Services product.

Regarding: NetWare 5.1, Novell Small Business Suite 5.1
Date Posted: July 23, 2001
Patch URL: Click here to download the patch.
Information URL: Click here for more information.

Another fix for a strange bug, this release, filesys.nlm for NetWare 5.1 Support Pack 3, corrects a glitch that occurs when trying to change the case of a long filename.

Regarding: DirXML 1.0, NDS eDirectory, NetWare 5.1, Novell Small Business Suite 5.1, iChain, iChain 1.5
Date Posted: July 24, 2001
Patch URL: Click here to download the patch.
Information URL: Click here for more information.

If you’ve installed NetWare 5.10 Support Pack 1, 2a, or 3 on a server with DirXML, then your SSL security doesn’t work correctly any more. This patch addresses that issue.

Regarding: NetWare 5.1, Novell Small Business Suite 5.1
Date Posted: July 24, 2001
Patch URL: Click here to download the patch.
Information URL: Click here for more information.

Support Pack 3 for NetWare 5.1 offers fixes that have been tested together, so Novell recommends that you install the entire support pack, not individual files. And if you have DirXML installed on your server, be sure to look at the previous patch.

Virus updates from Trend Micro
Virus/Worm: TROJ_SIRCAM.A
Posted: July 24, 2001
Risk: High
Information URL: Click here for more information on this virus.

Stay current on virus information
Have you been keeping up with the latest virus information and patches from Microsoft and Novell? If not, visit the Exterminator archive for past columns with information on bugs and patches you may have missed.

 

Editor's Picks