Phong Dam Technical Blog

Severity: High

14 October, 2008

Summary:

• These vulnerabilities affect: Most current versions of Microsoft Office for Windows and Mac (also affects Excel Viewer, Office Compatibility Packs, and SharePoint)
• How an attacker exploits them: Multiple vectors of attack, including enticing your users into opening maliciously crafted Office documents
• Impact: Various results; in the worst case, an attacker can execute code, potentially gaining complete control of your computer
• What to do: Install the appropriate Office patches immediately

Continue reading "Malicious Excel Docs Pose Risk To Office Users"

Severity: High

14 October, 2008

Summary:

• This vulnerability affects: Internet Explorer 7 and earlier versions
• How an attacker exploits it: By enticing one of your users to visit a malicious Web page or link
• Impact: In the worst case, the attacker can execute code on your user's computer, gaining complete control of it
• What to do: Deploy the appropriate Internet Explorer patches immediately

Continue reading "Cumulative IE Patch Corrects Six Critical Vulns"

Severity: High

14 October, 2008

Summary:

• These vulnerabilities affect: All current versions of Windows
• How an attacker exploits them: Multiple vectors of attack, including sending specially crafted network traffic
• Impact: Various results; in the worst case, attacker can gain complete control of your Windows computer
• What to do: Install the appropriate Microsoft patches immediately

Exposure:

Today, Microsoft released seven security bulletins describing vulnerabilities that affect Windows and components that ship with it. Each vulnerability affects different versions of Windows to a different extent. However, a remote attacker could exploit the worst of these flaws to gain complete control of your Windows PCs. The summary below lists the vulnerabilities, in order from highest to lowest severity.

Continue reading "Seven Windows Vulns, Including Critical AD Flaw"

Severity: High

Summary:

• These vulnerabilities affect: Microsoft Access 2000, 2002, and 2003
• How an attacker exploits them: By enticing one of your users to a malicious web site
• Impact: An attacker can execute code, potentially gaining complete control of your user's computer
• What to do: Implement workarounds described in the "Solution Path" section below

Continue reading "Attackers Leverage Zero Day Microsoft Access Vulnerability"

We have Window 2003 x64 and hosting a single Exchange 2007 SP1 server. Every time i try to upload (transfer to any network drive in LAN) a large amount of data (more than 500MB), the server automatically "idle" the network connection. I use the work "idle" here because the network connection is still enable however, there is no send & receive of data. The network connection icon indicate that it try to send the data however, there is no in bound. Once it happen, i have to disable the network connection and reinstall it. It also stop all my transfer processes. Continue reading "Network Connection Idle"

"Send on Behalf Of" allows one user to be able to send emails on behalf of another. The message will show the recipient who the message was sent on behalf of and who actually sent the message.

There are two ways of granting "Send on Behalf Of":

• via OutLook
  allowing a user to grant others to send on their behalf
• via Exchange Management Console (Exchange 2007) or AD (Exchange 2003)
  which can be performed by system managers only

Continue reading "Send On Behalf Of permission - Exchange & Outlook"

When i uninstall one of our vendor software, window give me an error message said that: Unhandeld Exception - error number 0x80040706 - Object reference not set. The problem cause by one of our InstallShield Engine got corrupted.

Continue reading "error number 0x80040706 - install, uninstall software"

Out off disc space is a serious problem when you are running Exchange server. It can because by the increase of database size or mostly the increase of transaction log files. In exchange 2003 you don't have much option to prevent that. One of the option is create a dummies file with the size of the file is 2 -> 4GB so that when your exchange run out of disc space, you can delete the file and make your exchange server life for the time that you investigate the case. Continue reading "Exchange 2007 - Back Pressure setting of hard drive"

Some time down the line, my customer computers got a strange message saying that his computer was infected by spam.

Continue reading "Spylocked - Spycrushed Fake Security Alert"

I have been waiting for this verson for a long time. My HP dv9700t doesn't work with any of the old Ubuntu version just because of the bluetooth problem (System can't recognize my blue tooth devices). Continue reading "Ubuntu 8.04 Rocks"