No wonder so many people are subscribing to this newsletter. It's got to be rough protecting IT and e-commerce systems from the likes of Gray and the many other marauding crackers of the world. Now on with the latest patches and alerts. For the second week in a row, Trend Micro makes our newsletter with a patch for the hole in its OfficeScan Corporate Edition product. The hole allows intruders inside the firewall to execute OfficeScan CGI's on the server without authentication.
Administrators use CGIs to manage OfficeScan antivirus software running on networked workstations.
The recommended action is to remove the example from your machine. Beta Version 3.1 also fixes the problem. Tomcat is used in conjunction with the Apache Web server to deliver Java Server Pages and servlets. Microsoft has released a tool designed to make it easier to secure a Web server running IIS 5.0. The tool uses an interview methodology to determine how the server will be used and sets the appropriate security policy.