Bardissi Enterprises Blog

Severity: High

17 November, 2008

Summary:

• This vulnerability affects: Firebox X Edge 10.2.3 (and earlier versions)
• How an attacker exploits it: By entering a specially crafted username into the authentication page, or by manually visiting a specific URL
• Impact: A remote attacker can authenticate to your Edge without valid login credentials, in some cases gaining VPN access to your network
• What to do: Install 10.2.4 immediately

Exposure:

In order for you to verify that your users really are who they claim to be, the Firebox X Edge supports various types of user authentication. With user authentication configured, you can create URL filtering or VPN policies that permit or deny data traffic based on who someone is, rather than based on the IP address they come from. You also utilize user authentication when setting up mobile VPN access to your network. The Edge provides a secure HTTPS web page that allows your users to authenticate to your Edge.

Hatfield Chamber Hosts Program on Windows 7

The Hatfield Chamber of Commerce will hold a noon luncheon meeting on Monday, March 22, in the Hatfield Township Community Room. The program that day will be “Windows 7 – What It Can Do For You.” Here’s your chance to get up close and personal with the latest productivity enhancements, as well as safety and security improvements that Microsoft Windows 7 provides. Come find out how Windows 7 helps your business work the way you want. Doing the tasks you do everyday are easier and faster with Windows 7. You can share files and devices easily, find the information you need, stay productive anywhere and protect your data so you can spend more time helping your business grow.

“Windows 7 – What It Can Do For You.” Here’s your chance to get up close and personal with the latest productivity enhancements, as well as safety and security improvements that Microsoft Windows 7 provides. Come find out how Windows 7 helps your business work the way you want. Doing the tasks you do everyday are easier and faster with Windows 7. You can share files and devices easily, find the information you need, stay productive anywhere and protect your data so you can spend more time helping your business grow.

• See a live demo of Windows 7
• Try Windows 7 out for yourself at live demo stations
• Ask Microsoft Partners questions about upgrading your system
• Get a chance to win great prizes

As an attendee of the event and you may be eligible to receive a $150 Technology Deployment Services Voucher to be used towards technology deployment services from a Microsoft partner of your choice to assist you with the installation of Windows 7 when used in conjunction with a purchase of Windows 7 through a Microsoft Volume License Agreement. This program will be presented by Microsoft Community Connections Partner, Bardissi Enterprises of Hatfield. Don’t miss this fun and exciting event.

Type: Education – Workshop
Date: Thursday, April 8, 2010
Time: 2:00pm – 4:00pm
Location: Gywneed-Mercy College Business Fair
Street: 1325 Sumneytown Pike

October’s Critical IE Cumulative Update Corrects Four Code Execution Flaws
SEVERITY: HIGH
13 October, 2009

SUMMARY:

• This vulnerability affects: Internet Explorer 8 and earlier versions, running on all current version of Windows
• How an attacker exploits it: By enticing one of your users to visit a web page or link containing malicious code
• Impact: In the worst case, the attacker can execute code on your user’s computer, gaining complete control of it
• What to do: Deploy the appropriate Internet Explorer patches immediately

EXPOSURE:
In a security bulletin released today as part of its monthly patch update, Microsoft describes four new vulnerabilities in Internet Explorer (IE) 8.0 and earlier versions, running on all current versions of Windows (including Windows 7 and Windows Server 2008).

Six of Eleven Windows Vulnerabilities Rated Critical
BULLETINS AFFECT SMB2, WINDOWS MEDIA PLAYER, IIS FTP, AND MORE
SEVERITY: HIGH
13 October, 2009
SUMMARY:

• These vulnerabilities affect: All current versions of Windows and components that ship with it – also the .NET Framework and Silverlight
• How an attacker exploits them: Multiple vectors of attack, including sending specially crafted packets or enticing your users to view malicious media
• Impact: Various results; in the worst case, an attacker can gain complete control of your Windows computer
• What to do: Install the appropriate Microsoft patches immediately, or use Windows’ automatic update features to download these patches automatically

EXPOSURE:
Today, Microsoft released eleven security bulletins describing 27 vulnerabilities that affect Windows and components that ship with it. Each vulnerability affects different versions of Windows to varying degrees. Some of the flaws also affect other Microsoft products, such as Silverlight, SQL Server, Office, and Microsoft’s Developer Tools. A remote attacker could exploit the worst of these flaws to gain complete control of your Windows PC. The summary below lists the vulnerabilities, in order from highest to lowest severity.