eEye Digital Security

Just wanted to bring to everyone's attention that a zer0day in MS FTP Server has emerged today.   If you update Blink, you should receive audits that will detect if your system is susceptible to this vulnerability.  For those using FTP, now would be a good time to thoroughly look over your MS FTP Server for anything suspicous as ...

[quote user="sparikh"] I am looking for an updated copy of the Retina ID's to DoD Checklists map. Earlier I had downloaded the spreadsheet from DISA website. [/quote]   Only certain versions of Retina will show the checklist mapping.   Please contact the support team or a sales person for details.

[quote user="kkauffsmx"] [quote user="bpatten"] Hi ZShaban, That vulnerability audit is looking at %systemroot%\system32\wmp.dll file version. If you go to Start > Run > %systemroot%\system32\ and search for wmp.dll, right click, properties, file version tab, you'll see that its less than what the patch indicates ...

[quote user="gekko357"] One of our guys found a way to make the High go away if you're interested [/quote]   No need for a "workaround" or a way to make it go away. This audit was removed with the release of MS09-028 and replaced with a patch ...

[quote user="vkundakci"]   By the way the header for the first audit was: Mozilla Multiple Vulnerabilities (20090421) - Windows - Thunderbird and the second one was: Mozilla Multiple Vulnerabilities (20090611) - Windows - Thunderbird   Sorry, I should have included them...  By the way, I do not have Seamonkey. I have ...

 Yes, It will be looked into and updated if necessary.

 The tested value is typically a regular expression of all possible vulnerable versions of a package.  After obtaining the list of packages on the system, Retina will check the installed packages and test it against the "tested value"--if a match is found, the package is considered vulnerable.

[quote user="gekko357"] I pulled my hair out today trying to get rid of that new Directshow high, and I thought audit stig 2090 was going to make my day simple haaaa... are there any email lists for unfixable retina items like this so we don't chase our tail?  thanks [/quote] As bpatten said, zero day vulnerabilities will ...

[quote user="vkundakci"] [quote user="bpatten"] It appears that the audit is looking at the file version: %ProgramFiles%\Mozilla Thunderbird\thunderbird.exe Can you make sure thunderbird is above 2.0.0.22? Thanks.   [/quote]   C:\Program Files\Mozilla Thunderbird\thunderbird.exe properties product version ...

[quote user="jkembry"] New to the forum. I am having different issues when this particular vulnerability is remediate.  I have a number of machines (Windows XP Professional, SP3) where functionality has been severly degraded.  They take forever to boot up, the Windows Installer Service ceases to function, there is major ...