Today's Security Fix
by Cara Garretson
RSS

Recent blog posts

Scam targets Twitter users who want to buy followers

Apparently, there are people out there who want Twitter followers so badly they’re willing to pay for it. In fact, there must be quite a …
Be careful of Google search results for iPhone SMS
Reddit hit by XSS worm

Social news site Reddit has fallen victim to a cross-site scripting (XSS) worm that spread via comments.
Cisco patches DoS vulnerability in UC Manager

Cisco on Wednesday released an update to patch a vulnerability found in the SIP service of its Unified Communications Manager.
FAKEAV now spreading through search engine sponsored links

Hackers whose goal it is to spread FAKEAV malware are finding new and different ways to help it infect as many Web users as possible.
Zeus Trojan gets real-time chat enhancement

What’s the best-selling Trojan kit on the black market today? Zeus. But just because it’s the best selling doesn’t mean it’s the …
Microsoft to examine security issues of cloud computing

Members of Microsoft’s European team are presenting a paper at a security conference this week in Geneva that delves into the security …
Adobe patches RoboHelp Server 8

Last Friday Adobe released a security update to patch a critical vulnerability it is RoboHelp Server 8 software for Windows.
Koobface adds new twist for IE users

Koobface, the social-networking worm that’s becoming almost as popular as Facebook itself, has added a new feature for Internet Explorer …
Security patching beyond the OS

Earlier this week, a report from the SANS Institute outlined the importance of patching not just operating systems, but all client-side …

Sun responds to critical flaw in XML libraries

By Cara Garretson Add a new comment

August 06, 2009, 12:20 PM — Sun on Wednesday posted an alert regarding a security vulnerability in its XML libraries, which was first brought to light by security vendor Codenomicon. Sun has also made available an update to fix the glitch.

The vulnerability, which was also found in XML libraries from Apache Software Foundation and Python Software Foundation, could result in Denial-of-Service (DoS) attacks if a user opens a certain XML file, or if malicious requests are submitted to Web services in charge of XML content, says Codenomicon. This can render an application unresponsive that is running on Sun’s Java Realtime Environment (JRE) built on top of the XML libraries.

The Sun advisory says there is no workaround for the vulnerability, but has issued a fix in its Java SE and Java SE for Business releases for Windows, Solaris, and Linux.

Sun offered thanks to Codenomicon and CERT-FI, the Finnish arm of the Computer Emergency Response Team, for discovering the vulnerability and bringing it to the vendor’s attention. Codenomicon found the vulnerability using its fuzzing techniques that are explained here.

Do you tweet? Follow me on Twitter here.

Cara Garretson is a business and technology journalist based in Washington, D.C.

View Profile

View the discussion thread.

iPhone 5 growing up, but not out, this fall

10 comments
Java creator unhappy with Oracle trial outcome

5 comments
Easy fixes using perl

2 comments
Does this mean someday we'll be able to store digital porn in our DNA?

2 comments
MIT scientists solve the Ketchup Bottle Dilemma

2 comments

Older
|
Newer

ITworld LIVE

The White Paper What Developers Want: The End of Application Redeploys was viewed
The White Paper Protecting Users From Firesheep and other Sidejacking Attacks with SSL was viewed
The White Paper TechRepublic: Cloud Computing - Potential Value for Your Company? was viewed
The White Paper Digital Transformation: Creating New Business Models Where Digital Meets Physical was viewed
The White Paper Using HP's Converged Storage to Develop/Enhance Business Resiliency in VMware Environments was viewed
The White Paper Top 10 Myths About Virtualizing Business-Critical Applications was viewed
The Webcast Making Information Matter was viewed
GreenMachine has just joined ITworld
Larry Cafiero has just joined ITworld
The White Paper 6 Things Your CIO Needs to Know About Requirements was viewed
The White Paper Windows Storage Server 2008 R2 Architecture and Deployment Guide was viewed
The White Paper The Hidden Truth About Virtualizing Business-Critical Applications was viewed
The White Paper Benefits of Application Rationalization: Reduce Costs and Improve Service with a Systematic Approach was viewed
The White Paper Gartner Research Report - "What MFT Is, and How It Applies to You" was viewed
The White Paper A strategic approach to performance management brings better economics and happier users was viewed
C. Emmett has just joined ITworld
The White Paper Cost-effective Disk-based Backup was viewed
The White Paper Why Corporations Need to Automate IT Systems Management was viewed
The White Paper Sustainable Compliance for the Payment Card Industry Data Security Standard was viewed
The Webcast Network Monitoring and Troubleshooting for Dummies was viewed
The White Paper Forrester: Economic Impact of Switching to Google Apps was viewed
The White Paper HP CloudSystem Matrix: Building a Private Cloud was viewed
The White Paper Information Governance: Turning Data Into Business was viewed
jimlynch shared Drop files on Dock icons to open apps on StumbleUpon
The White Paper Get a Robust, Flexible Foundation for Enterprise Cloud Deployments was viewed
The White Paper Optimize SharePoint Storage with BLOB Externalization was viewed
The White Paper Box Private Vendor Watchlist Profile: Cloud-Based Content Collaboration Services Enabling Enterprises to Move Toward Next-Generation Collaboration was viewed
The White Paper HP 3PAR Storage Systems Designed for Mission Critical High Availability was viewed
The Webcast Teaching Legacy Application Elephants How to Dance was viewed
The White Paper Analyst WP: ESG-Proven value with the Oracle Database Appliance was viewed

SecurityWhite Papers & Webcasts

Webcast On Demand

Seven Deadly Sins of Cloud Security (Video)

As cloud computing gains popularity, too few people are aware of the security threats that are emerging. In this short video, experts from HP discuss the latest cloud security threats and explain measures to help overcome them. Hear about the seven deadly sins of cloud security and learn how to avoid becoming a victim of poor security in your cloud environment.Intel and the Intel logo are trademarks of Intel Corporation in the U.S. and/or other countries.

White Paper

Establishing a Strategy for Database Security is No Longer Optional

The options for securing increasingly valuable databases are very broad and deep, and can be confusing. This research provides an overview of three categories of controls that should be implemented to ensure that enterprise data is protected in the most efficient and effective manner.

White Paper