Exterminator puts the squeeze on bugs!

Ed Engelking brings to you his insight on bug fixes, virus recovery, service release announcements, and security notices for Windows, Novell, and other systems.

Microsoft bug issues
Regarding: Microsoft Office 2000 SR-1

Date posted: March 28, 2000

Information URL:Click here for more information from MSNBC

Since the release of Microsoft’s Office 2000 Service Release 1 patch on March 21, many users have reported experiencing several major and minor problems associated with it. For more information on the SR-1 patch from Microsoft, visit the Microsoft Office Resource Kit Journal. Microsoft has not acknowledged the new bugs reported by MSNBC at this time.

Novell issues
Regarding: Novell NetWare Cluster Services

Date posted: March 23, 2000

Patch URL:Click here for the patch

Novell has recently released a patch for its NetWare Cluster Services. The patch fixes a problem where the cluster node that won a tiebreaker in a two-node split-brain condition would remain the cluster master node. The master node would then shut down the entire cluster for client access if it lost its Ethernet connection. For more information on this patch, visit the Novell web site.

UNIX issues
Regarding: FreeBSD 3.x (does not affect 4.0)

Date posted: March 27, 2000

Information URL:Click here for more information

Update URL:Click here for the port update

SecurityFocus.com has reported a vulnerability in the Orville-write package, distributed as part of the FreeBSD port system. The problem stems from the /usr/local/bin/huh binary being incorrectly installed with setuid root. This, combined with a buffer overrun, can allow users to obtain root privileges.

Virus alert
Regarding: VBS/Irok.Trojan worm

Date posted: March 24, 2000

Information URL:Click here for more information

OS affected: Windows 98 (and 95 with WSH installed)

Computer Associates announced last Friday the discovery of a new worm called VBS/Irok.Trojan, which uses Microsoft Outlook to spread rapidly and actively attacks installed AntiVirus products.

The e-mail arrives with the subject line, “I thought you might like to see this.” The body of the e-mail reads, “I thought you might like this. I got it from paramount pictures website. It’s a startrek screen saver.”

For more information on this virus, click the information URL listed above.

Virus hoax alert
Regarding: An Internet flower for you

Date posted: March 29, 2000

Information URL:Click here for more information

OS affected: None

Sophos Anti-Virus company recently released a statement regarding the “virus” dubbed “An Internet Flower For You.” According to Sophos, this virus is a hoax. If you receive any e-mail regarding this virus, it is advised that you ignore the e-mail. Forwarding the message simply wastes time and bandwidth.

Trojan alert
Regarding: TROJ_THE_THING.A

Date Posted: March 27, 2000

Information URL:Click here for more information

OS affected: Windows 9x

Trend Micro recently reported a new Trojan called TROJ_THE_THING.A. This Trojan is a hacker tool that can be used to access an unsuspecting system. The controls available are mostly for file manipulation, such as delete file, execute file, copy file, and open file. For more information on the Trojan and how to delete it from your system, visit the information URL listed above.

Ed Engelking is co-owner of UCANweb.com. He’s also a regular TechRepublic contributor.

The only good bug is a patched bug!

Have you found a new bug or discovered a nifty little software patch? We’re interested in what you know! Post your findings below or feel free to send us a note.