September 23, 2009 - Current Activity

Montgomery County Animal Shelter Search Engine Poisoning Campaign

US-CERT is aware of public reports regarding a search engine result poisoning campaign affecting search results for the Montgomery County Animal Shelter. Users seeking details on rumors about the closure of a "Montgomery County Animal Shelter" may be led to click on illegitimate search results which attempt to download malicious code. The rumors are being spread via e-mail, forums, and social networking sites, usually taking the form of a plea for readers to contact the shelter and adopt animals prior to the shelter's closing.

US-CERT is monitoring the situation and will provide updates as they become available.

Apple Releases iTunes 9.0.1

Apple has released iTunes 9.0.1 to address a vulnerability that may allow an attacker to execute arbitrary code or cause a denial-of-service condition.

US-CERT encourages users to review Apple article HT3884 and apply any necessary updates to help mitigate the risks.

Microsoft Releases Fix It for SMB Vulnerability

Microsoft has released Microsoft Knowledge Base Article 975497 to address a previously reported vulnerability in Microsoft Sever Message Block (SMB). This vulnerability may allow an attacker to execute arbitrary code or cause a denial-of-service condition.

US-CERT encourages users and administrators to review Microsoft Knowledge Base Article 975497 and Microsoft Security Advisory 975497 and apply the Fix it tool or workarounds. Microsoft Knowledge Base Article 975497 addresses the vulnerability that was previously reported in the "Microsoft Releases Security Advisory 975497" Current Activity entry.

Adobe Releases Security Bulletin for RoboHelp Server 8

Adobe has released security bulletin APSB09-14 to address a vulnerability in RoboHelp Sever 8. This vulnerability may allow a remote attacker to execute arbitrary code.

US-CERT encourages users and administrators to review Adobe security bulletin APSB09-14 and apply any necessary updates.

Fraudulent 9/11 Web Sites

US-CERT is aware of public reports indicating that attackers are using legitimate web pages to run malicious code on victims' machines.

Reports, including a posting by Sophos, indicate that these messages

• Include keywords and names related to the 9/11/2001 terrorist attack
• Prompt users with a fake virus scan that attempts to make users believe they have a security issue. The users are then asked to download fake security software that is actually malicious code.

• Install anti-virus software, and keep its virus signature file up to date
• Refer to the Avoiding Social Engineering and Phishing Attacks document for more information on social engineering attacks
  

Apple Releases Security Update 2009-005 and Mac OS X v10.6.1

Apple has released Security Update 2009-005 and Mac OS X v10.6.1 to address multiple vulnerabilities in a number of applications. These vulnerabilities may allow an attacker to execute arbitrary code, cause a denial-of-service condition, obtain elevated privileges, or access local files.

US-CERT encourages users and administrators to review Apple articles HT3865 and HT3864 and apply any necessary updates to help mitigate the risks. Apple article HT3864 addresses the vulnerability previously reported in the "Adobe Flash Vulnerability Affecting Apple Snow Leopard" Current Activity entry.

Apple Releases Security Updates

Apple has released the following security updates:

• OS 3.1 for iPhone
• OS 3.1.1 for iPod touch
• Quicktime 7.6.4

Mozilla Releases Security Advisory

Mozilla has released a security advisory to address multiple vulnerabilities. These vulnerabilities may allow an attacker to execute arbitrary code, mislead users by spoofing a URL, or cause a denial of service.

US-CERT encourages users to review Mozilla Foundation Security Advisories 2009-47, 2009-48, 2009-49, 2009-50, and 2009-51 and apply any necessary updates or workarounds to help mitigate the risks.

US-CERT will provide more information as it becomes available.

Microsoft Releases Security Advisory 975497

Microsoft has released security advisory 975497 to address reports of a vulnerability in Microsoft Server Message Block. The vulnerability may allow an attacker to execute arbitrary code or cause a denial-of-service condition.

US-CERT encourages users and administrators to review Microsoft Security Advisory 975497 and implement the suggested workarounds listed in the advisory to help mitigate the risks.

US-CERT will provide additional information as it becomes available.

Cisco Releases Security Advisory for a Vulnerability in Multiple Cisco Products

Cisco has released a Security Advisory to address a vulnerability in multiple products. This vulnerability may allow a remote attacker to cause a denial-of-service condition.  The security advisory indicates that the following Cisco products are affected by this vulnerability:

• Cisco IOS Software
• Cisco IOS-XE Software
• Cisco CatOS Software
• Cisco Adaptive Security Appliance and Cisco PIX
• Cisco NX-OS Software