DarkFiber Consulting – IT Managed Services

Microsoft Windows Help and Support Center Vulnerability

June 23rd, 2010 . by DarkFiber Consulting

DarkFiber Consulting is aware of a vulnerability affecting the Mircosoft Windows Help and Support Center. This vulnerability is due to improper sanitization of hcp:// URIs. Exploitation of this vulnerability may allow a remote, unauthenticated attacker to execute arbitrary commands.

DarkFiber Consulting encourages users and administrators to review Vulnerability Note VU#578319 and implement the workarounds to help mitigate the risks and reduce attack vectors.

DarkFiber Consulting will provide additional information as it becomes available.

Oracle Releases Security Alert for WebLogic Server Vulnerability

March 1st, 2010 . by DarkFiber Consulting

Oracle has released a security alert to address a vulnerability in Oracle WebLogic Server. Exploitation of this vulnerability may allow a remote, unauthenticated attacker to execute arbitrary commands on an affected system.

DarkFiber Consulting encourages users and administrators to review the Oracle security alert and apply any necessary updates to help mitigate the risks.