Security

Take notice of Win2K SMTP flaw and host of Novell patches

An SMTP flaw in Windows 2000 Server and Professional allows unauthorized users access to accounts. That problem tops the list of fixes, patches, and virus alerts in this week's installment of Exterminator.


Exterminator brings you weekly updates on bug fixes, virus recovery, service release announcements, and security notices for Windows, Novell, Linux, and other systems.

Microsoft Security Bulletin (MS01-037)
Regarding: Authentication Error in SMTP Service Could Allow Mail Relaying
Date Posted: July 5, 2001
Patch URL:Microsoft Windows 2000.
Information URL:Click here for more information.

The SMTP service that installs by default in Microsoft Windows 2000 Server, and which can optionally be installed in Windows 2000 Professional, contains an authentication flaw that could allow an unauthorized user to authenticate with the server using incorrect credentials. An attacker can then gain user-level permissions on the service.

Novell issues
Regarding: NW5.1 Enterprise WebServer
Date Posted: July 9, 2001
Patch URL:Click here to download the patch.
Information URL:Click here for more information.

This patch fixes a problem with uploading files to WebDAV.

Regarding: WebAccess HTML Export Viewers Version 7 for NetWare
Date Posted: July 10, 2001
Patch URL:Click here to download the patch.
Information URL:Click here for more information.

Novell has released this patch to fix numerous ABEND issues with HTML export processes.

Regarding: NetWare 5, NetWare 5.1, Novell Small Business Suite 5.1
Date Posted: July 10, 2001
Patch URL:Click here to download the patch.
Information URL:Click here for more information.

This patch allows users of NetWare 5 or later to upgrade cryptographic functions in domestic versions.

Regarding: NetWare 5, NetWare 5.1, Novell Small Business Suite 5.1
Date Posted: July 10, 2001
Patch URL:Click here to download the patch.
Information URL:Click here for more information.

This patch allows NetWare 5 or later users to upgrade cryptographic functions in international versions.

Regarding: Novell Client 4.8 for Windows NT/2000, Novell Clients
Date Posted: July 10, 2001
Patch URL:Click here to download the patch.
Information URL:Click here for more information.

This patch for corrects a problem with Member Servers appearing in the password change list when no account exists on the Member Servers.

Virus updates from Trend Micro
Virus/Worm: JS_ZOPA.A
Posted: July 5, 2001
Risk: Low
Information URL:Click here for more information on this virus.

Virus/Worm: TROJ_IRC_NETOL.A
Posted: July 6, 2001
Risk: Low
Information URL:Click here for more information on this virus.

Virus/Worm: W97M_MARKER.FQ2
Posted: July 9, 2001
Risk: Low
Information URL:Click here for more information on this virus.

Virus/Worm: TROJ_CAFEIN111.A
Posted: July 10, 2001
Risk: Low
Information URL:Click here for more information on this virus.

Virus/Worm: PE_MARI.A
Posted: July 11, 2001
Risk: Low
Information URL:Click here for more information on this virus.

Stay current on virus information
Are you keeping up with the latest virus information from Microsoft and Novell? If not, visit the Exterminator archive for past columns with information on bugs and patches you may have missed.

 

Exterminator brings you weekly updates on bug fixes, virus recovery, service release announcements, and security notices for Windows, Novell, Linux, and other systems.

Microsoft Security Bulletin (MS01-037)
Regarding: Authentication Error in SMTP Service Could Allow Mail Relaying
Date Posted: July 5, 2001
Patch URL:Microsoft Windows 2000.
Information URL:Click here for more information.

The SMTP service that installs by default in Microsoft Windows 2000 Server, and which can optionally be installed in Windows 2000 Professional, contains an authentication flaw that could allow an unauthorized user to authenticate with the server using incorrect credentials. An attacker can then gain user-level permissions on the service.

Novell issues
Regarding: NW5.1 Enterprise WebServer
Date Posted: July 9, 2001
Patch URL:Click here to download the patch.
Information URL:Click here for more information.

This patch fixes a problem with uploading files to WebDAV.

Regarding: WebAccess HTML Export Viewers Version 7 for NetWare
Date Posted: July 10, 2001
Patch URL:Click here to download the patch.
Information URL:Click here for more information.

Novell has released this patch to fix numerous ABEND issues with HTML export processes.

Regarding: NetWare 5, NetWare 5.1, Novell Small Business Suite 5.1
Date Posted: July 10, 2001
Patch URL:Click here to download the patch.
Information URL:Click here for more information.

This patch allows users of NetWare 5 or later to upgrade cryptographic functions in domestic versions.

Regarding: NetWare 5, NetWare 5.1, Novell Small Business Suite 5.1
Date Posted: July 10, 2001
Patch URL:Click here to download the patch.
Information URL:Click here for more information.

This patch allows NetWare 5 or later users to upgrade cryptographic functions in international versions.

Regarding: Novell Client 4.8 for Windows NT/2000, Novell Clients
Date Posted: July 10, 2001
Patch URL:Click here to download the patch.
Information URL:Click here for more information.

This patch for corrects a problem with Member Servers appearing in the password change list when no account exists on the Member Servers.

Virus updates from Trend Micro
Virus/Worm: JS_ZOPA.A
Posted: July 5, 2001
Risk: Low
Information URL:Click here for more information on this virus.

Virus/Worm: TROJ_IRC_NETOL.A
Posted: July 6, 2001
Risk: Low
Information URL:Click here for more information on this virus.

Virus/Worm: W97M_MARKER.FQ2
Posted: July 9, 2001
Risk: Low
Information URL:Click here for more information on this virus.

Virus/Worm: TROJ_CAFEIN111.A
Posted: July 10, 2001
Risk: Low
Information URL:Click here for more information on this virus.

Virus/Worm: PE_MARI.A
Posted: July 11, 2001
Risk: Low
Information URL:Click here for more information on this virus.

Stay current on virus information
Are you keeping up with the latest virus information from Microsoft and Novell? If not, visit the Exterminator archive for past columns with information on bugs and patches you may have missed.

 

Editor's Picks

Free Newsletters, In your Inbox