This week in Vulnerabilities

Courtesy of Security Threat Watch, comes this quick overview of last week's most important vulnerabilities and patches.

Many critical vulnerabilities have been found in Oracle and IBM DB2 databaseservers. The vulnerabilities allow the remote compromise of thedatabases and the systems they run on. Shops running either databaseserver product will want to grab the recently released vendor securityupdates. http://archives.neohapsis.com/

archives/cc/2004-q3/0005.html
http://archives.neohapsis.com/
archives/vulnwatch/2004-q3/0038.html
http://archives.neohapsis.com/
archives/vulnwatch/2004-q3/0041.html

Kerberos shops using the MIT flavor of Kerberos also will want to lookfor security updates from their particular platform/vendor because ofsome remotely exploitable vulnerabilities that could allow an attackerto take over the KDC.

http://archives.neohapsis.com/
archives/cc/2004-q3/0006.html
http://archives.neohapsis.com/
archives/cisco/2004-q3/0005.html
http://archives.neohapsis.com/
archives/bugtraq/2004-08/0418.html
http://archives.neohapsis.com/
archives/bugtraq/2004-09/0038.html