TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to [EMAIL PROTECTED] Contact [EMAIL PROTECTED] for help with any problems! ---------------------------------------------------------------------------- Not sure if theis auto makes it to the list so just in case ........ > -----Original Message----- > From: Overcash, Kevin (ISSAtlanta) > Sent: Monday, January 31, 2000 3:46 PM > To: > Subject: XPU 3.3 released > > XPU 3.3 was released on the ISS web site on January 26th. This XPU > delivers 10 new vulnerability checks, including 6 new Web Scan checks. > Two of the checks are included in a new catagory of vulnerabilities called > Instant Messaging. This release also contains a check for the amd RPC > service buffer overflow which was previously a flexcheck. This > vulnerability is commonly exploited to compromise a host and install a > trojan, backdoor, or distributed DoS attack daemon such as trin00 or > Tribal Flood Network. > > The 10 new vulnerability checks released in this XPU are: > > Risk VulnID Check Name Category > === ====== ======================= ======== > High 3171 AmdBo > RPC > High 3682 FrontpageExtBadPermissions Web Scan > High 3256 NetscapeAcceptBo Web > Scan > Medium 2271 OmniDos > CGI-Bin > Low 3272 YahooMessengerDos Instant > Messaging > Low 3238 IcqServerRunning > Instant Messaging > Low 3390 FrontpagePwdAdministrators Web Scan > Low 3393 FrontpagePwdAuthors Web Scan > Low 3391 FrontpagePwdService Web Scan > Low 3392 FrontpagePwdUsers Web Scan > > There were also two bugs fixed in this release. The QpopperPassOverflow > check has been corrected to only flag versions below 2.5 as vulnerable. > The NetscapeGetBo check has been enhanced to properly identify vulnerable > Web Servers. > > This XPU can be downloaded manually from > https://www.iss.net/update/InternetScanner/XPressUpdate3_3.xpu
