Feeds

MS fuels up five critical Windows fixes

Black Tuesday likely to skip relief for IIS zero-day

Beginner's guide to SSL certificates

Microsoft plans to release five critical update bulletins next Tuesday, all critical, in the September edition of its regular Patch Tuesday update cycle.

As usual, not much information on the contents of the planned patches is available. All supported versions of Windows (2000, XP, Vista, Server 2003 and Server 2008) will need updating to defend against various, as yet unspecified, critical security risks.

The list of affected software leaves out mention of Microsoft's IIS Web Server software, which is currently the target of exploits capitalising on a zero-day vulnerability. More specifically, the flaw involves problems in the Microsoft FTP services component bundled with IIS 5.0, IIS 5.1, IIS 6.0 or IIS 7.0. In most cases, the bug creates a means to crash a vulnerable webserver, and only in cases where FTP is enabled. Remote code injection only becomes a risk for shops running IIS 5.0 on Windows 2000.

The lack of mention of IIS in Microsoft's pre-alert implies a set of patches for Microsoft's web server software software will have to wait until at least October.

Alongside the critical patches on its menu, Microsoft also plans to update its Malicious Software Removal Tool, as explained in its pre-release notice here. ®

Beginner's guide to SSL certificates

More from The Register

next story
Knock Knock tool makes a joke of Mac AV
Yes, we know Macs 'don't get viruses', but when they do this code'll spot 'em
Shellshock over SMTP attacks mean you can now ignore your email
'But boss, the Internet Storm Centre says it's dangerous for me to reply to you'
Why weasel words might not work for Whisper
CEO suspends editor but privacy questions remain
Feds seek potential 'second Snowden' gov doc leaker – report
Hang on, Ed wasn't here when we compiled THIS document
DEATH by PowerPoint: Microsoft warns of 0-day attack hidden in slides
Might put out patch in update, might chuck it out sooner
China is ALREADY spying on Apple iCloud users, claims watchdog
Attack harvests users' info at iPhone 6 launch
NOT OK GOOGLE: Android images can conceal code
It's been fixed, but hordes won't have applied the upgrade
prev story

Whitepapers

Cloud and hybrid-cloud data protection for VMware
Learn how quick and easy it is to configure backups and perform restores for VMware environments.
Forging a new future with identity relationship management
Learn about ForgeRock's next generation IRM platform and how it is designed to empower CEOS's and enterprises to engage with consumers.
Reg Reader Research: SaaS based Email and Office Productivity Tools
Read this Reg reader report which provides advice and guidance for SMBs towards the use of SaaS based email and Office productivity tools.
Saudi Petroleum chooses Tegile storage solution
A storage solution that addresses company growth and performance for business-critical applications of caseware archive and search along with other key operational systems.
How to simplify SSL certificate management
Simple steps to take control of SSL certificates across the enterprise, and recommendations centralizing certificate management throughout their lifecycle.