Click here to receive your FREE subscription to Campus Technology
News
New Bluetooth Patch Fixes XP Security Hole
6/24/2008
|
|
Microsoft on Thursday announced that it was reissuing a "critical" patch relating to Bluetooth wireless technology that was released last week as part of its June update cycle. The patch addresses how Bluetooth interoperates with Windows components and applications.
Microsoft originally released the patch on June 10, saying that it resolved "a privately reported vulnerability in the Bluetooth stack in Windows." The vulnerability could allow a hacker carte blanche over an enterprise system, with edit, delete, change and write capabilities.
The amended critical patch is designed to plug security holes when running various versions of Windows, especially XP Service Packs 2 and 3, according to Christopher Budd, security response communications lead for Microsoft.
"Customers who in particular [are] running Windows XP SP2 or SP3 should download and deploy these new security updates," Budd stated in an e-mail to Redmondmag.com. "Customers running other versions of Windows who have already applied the original security updates do not need to take action."
Budd added that the updated versions of the affected security updates will be made available through the usual distribution channels, which include Windows Update and Windows Server Update Services.
IT security pros, including Tyler Reguly, security engineer with San Francisco-based network security firm nCircle, said that this critical patch is an important one because it doesn't require user participation and is a vector many hackers find increasingly easy to use.
"Microsoft definitely wants to get it right," Reguly said. "I find this interesting simply because we're seeing a vulnerability in a wireless protocol that is quite popular. People travelling with laptops are probably the most likely to have Bluetooth enabled. It's important to keep in mind the limited range of Bluetooth, which is what, in my opinion, somewhat limits the severity of the vulnerability."
For its part Microsoft is still investigating what may have gone wrong with a few downloads of this particular patch over the past two weeks.
Recommended Reading
- Tufts Grants Rights for Mileage-Increasing Transportation Technology to Electric Truck
Tufts University has optioned rights to a technology that can recharge the batteries of any hybrid electric and electric-powered vehicle while it is driven. The Tufts-developed technology could increase by 20 percent to 70 percent the miles per gallon or total driving range performance of vehicles like the Honda Civic, Ford Escape, and Toyota Prius hybrids and the Tesla Motors and Phoenix Motorcars electric vehicles.
- U Florida and Cyntellect Collaborate to Unlock Mysteries of Cancer Stem Cells
The University of Florida has entered into a research agreement with life sciences company Cyntellect. The university's Interdisciplinary Center for Biotechnology Research will work with the company to focus on a variety of research areas including the purification and analysis of cancer stem cells (CSCs), rare cells believed to be directly involved in propagating cancers.
- George Mason U Receives Grant To Deploy Intergraph Apps for Intelligence Curriculum
George Mason University (GMU) in Fairfax, VA has been awarded a grant from Intergraph to enable students enrolled in GMU's Geospatial Intelligence Graduate Certificate program to use the company's geospatial production and exploitation software as part of their core curriculum.
- Institute for Cyber Security at U Texas, San Antonio Opens Incubator
The University of Texas at San Antonio (UTSA) Institute for Cyber Security (ICS) has launched a new Internet security incubator. The incubator was developed to commercialize promising technologies that address major cyber security and privacy issues. The first companies to enter the incubator are Denim Labs and SafeMashups.
- ISO/IEC Publishes Office Open XML Standard
ISO/IEC has published the Office Open XML (OOXML) file format standard, formally known as ISO/IEC 29500:2008. It describes file formats originally designed by Microsoft for its Office 2007 productivity suite, which are used in presentation, spreadsheet and word processing applications.
- Dynamics NAV 2009 ERP Coming Next Month
Microsoft exec Kirill Tatarinov Wednesday described some new features to expect in the forthcoming Microsoft Dynamics NAV 2009 enterprise resource planning solution. He gave the keynote address at Microsoft's Convergence 2008 event in Copenhagen, Denmark.
