US-CERT Technical Cyber Security Alert TA07-317A -- Microsoft Updates for Multiple Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

National Cyber Alert System

Technical Cyber Security Alert TA07-317A

Microsoft Updates for Multiple Vulnerabilities

Original release date: November 13, 2007
Last revised: --
Source: US-CERT

Systems Affected

* Microsoft Windows
* Microsoft Windows DNS Server

Overview

Microsoft has released updates that address critical vulnerabilities
in Microsoft Windows and Microsoft Windows DNS Server. Exploitation of
these vulnerabilities could allow a remote, unauthenticated attacker
to execute arbitrary commands or to cause a Windows DNS server to
provide incorrect DNS responses.

I. Description

Microsoft has released updates to address vulnerabilities that affect
Microsoft Windows and Microsoft Windows DNS Server as part of the
Microsoft Security Bulletin Summary for November 2007. The most severe
vulnerabilities could allow a remote, unauthenticated attacker to
execute arbitrary commands or cause a Windows DNS server to provide
incorrect DNS responses.

Further information about the vulnerabilities addressed by these
updates is available in the Vulnerability Notes Database.

II. Impact

A remote, unauthenticated attacker could execute arbitrary commands on
a vulnerable system. An attacker may also be able to cause a Windows
DNS server to provide incorrect responses to DNS queries.

III. Solution

Apply updates from Microsoft

Microsoft has provided updates for these vulnerabilities in the
November 2007 security bulletins. The security bulletins describe any
known issues related to the updates. Administrators are encouraged to
note any known issues that are described in the bulletins and test for
any potentially adverse effects.

System administrators should consider using an automated patch
distribution system such as Windows Server Update Services (WSUS).

IV. References

* US-CERT Vulnerability Notes for Microsoft November 2007 updates -
<http://www.kb.cert.org/vuls/byid?searchview&query=ms07-nov>

* Microsoft Security Bulletin Summary for November 2007 -
<http://www.microsoft.com/technet/security/bulletin/ms07-nov.mspx>

* Microsoft Update - <https://update.microsoft.com/microsoftupdate/>

* Windows Server Update Services -
<http://www.microsoft.com/windowsserversystem/updateservices/default.mspx>

* Securing Your Web Browser -
<http://www.cert.org/tech_tips/securing_browser/>

____________________________________________________________________

The most recent version of this document can be found at:

<http://www.us-cert.gov/cas/techalerts/TA07-317A.html>
____________________________________________________________________

Feedback can be directed to US-CERT Technical Staff. Please send
email to <cert@cert.org> with "TA07-317A Feedback VU#484649" in the
subject.
____________________________________________________________________

For instructions on subscribing to or unsubscribing from this
mailing list, visit <http://www.us-cert.gov/cas/signup.html>.
____________________________________________________________________

Produced 2007 by US-CERT, a government organization.

Terms of use:

<http://www.us-cert.gov/legal.html>
____________________________________________________________________

Revision History

November 13, 2007: Initial release

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)

iQEVAwUBRzn+L/RFkHkM87XOAQIP7wgAmXsO3NefxyFn/eFlaLvWeGpVNLUQKdso
VuU2/ktEtMNKQeFgsoZnFMHuKWp2hIMXZPCrelegVHszYHwSmE92QsHvumxVg863
iP3e4wXoL5uYpoYXJuZRl8Ee65GdRlsZBp2HS5bqDm2yWAdKLyEfyVArkmvjJFkM
LydRRMVYnyl4aLBGDh/xzowu6jtKmdMRtFQYDac6A/lNdJpAm6lo8OKPG2mY80vh
8acL6ObfFT45UpYkxCFaCvRMn4/Ts24j3cpnQxmNE9/veENVJxumT6sUH56rrkw/
vLZIK1QMWGPXOXOg9rc7UktWqc9iYFsHmTVC8kwB8ksfk26drpmu1w==
=24yY
-----END PGP SIGNATURE-----

California Fire News

News: Patterson Fire Department — New 3,000-gallon water tender Posted: 12 Nov 2007 03:32 PM CST Patterson's growing fire department got its most recent addition two weeks ago — a 3,000-gallon water tender. Source - Written by: John Saiz / Patterson Irrigator Elias Funez / Patterson Irrigator Patterson Fire Department — New 3,000-gallon water tender. The modified 2007 International will serve as a portable water source for firefighters who need to hose down flames that are not close to a water system. The $230,000 vehicle is getting the last of its equipment installed this week. After that, it will be ready to roll. Though the new tender is easier to maneuver, the older tender beats it in water capacity. "We're losing about 1,200 gallons," said Division Chief Jeff Gregory of the Patterson Fire Department. "But we'll be able to get there a lot quicker." Water tenders typically carry large amounts of water to fires in rural areas, Gregory explained. Given the vast amount of agricultural land surrounding Patterson, the new tender is likely to see a lot of action. Gregory estimates the older tender will still be sent out at least once a week, too. The new vehicle is more versatile and easier to handle and requires less maintenance than the old one, Gregory said. It also can be driven by anyone with a special class-B driver's license, which certifies firefighters to drive equipment such as fire trucks. The old truck required a class-A license. "Some of the guys can drive the (older tender) like a little Volkswagen," Gregory said. "Other guys aren't that good." He remembered one incident when the old tender needed to be backed up about 300 yards. He decided to wait until the road was a little clearer, but a firefighter from Turlock volunteered to move it right away. He got behind the wheel and backed the truck up in a zigzag. "'Man, I should have waited,'" Gregory recalled the firefighter saying. Maneuverability aside, many who used the old tender appreciate its large water capacity. Gregory recalled other firefighters commenting that they were always happy to see the old yellow tender arrive on scene, because it meant there would be enough water. With the Patterson station welcoming the new tender, the older one will move to the Diablo Grande Fire Station. The West Stanislaus Fire Protection District got the old tender in the early '70s, said Dick Gaiser, who's been with the district since 1978. The trailer portion of it is a large aluminum container that at one time was used to haul vegetable oil. Volunteers managed to raise the money to buy that vehicle. Volunteers also helped raise money for the new tender — about $30,000 — with the district covering the remainder. The tender is just the most recent addition to Patterson-area fire protection. The paid firefighters have seen their ranks swell the past two years, and much of the department will move once Station Two in west Patterson's Keystone Pacific Business Park is finished in the next few weeks. Posted by Bob Blogger at 1:21 PM 0 comments Links to this post

CA-RRU-Water Tender Accident - BLUE SHEET Posted: 12 Nov 2007 02:20 PM CST BLUE SHEET PRELIMINARY SUMMARY 24 HOUR REPORT Vehicle Accident Riverside County Water Tender 39 07-CA-RRU-093086 October 24, 2007 This Preliminary Summary Report is intended as an aid in accident prevention, and to provide factual information from the first 24 hours of the accident review. To that end it is published and distributed within a short time frame. Information contained within may be subject to revision as further investigation is conducted, and other reports and documents are received. Synopsis The following information is a preliminary summary of a traffic accident in which two firefighters sustained minor injuries and a civilian received moderate injuries. Narrative On October 24, 2007, at approximately 1354 hours, Water Tender 39 was traveling westbound on Avenue 50 in the community of Coachella operated by a Fire Apparatus Engineer and with a Fire Captain as the passenger. A newer model full size Dodge pick up truck traveling eastbound on Avenue 50 drifted over the double yellow line and impacted head on with the Water Tender despite aggressive emergency evasive actions by the Water Tender operator. Immediately after the collision, both occupants of the Water Tender unbuckled their seatbelts and exited their vehicle to attend to the medical need of the pick up driver and initiate a response for a traffic collision through the Perris ECC. The driver of the pick up was transported by ground ambulance to a local Trauma Center for further medical treatment. Both of the Department employees were also transported by ground ambulance to a local hospital for evaluation, treated and released. Recommendations for Immediate Corrective Actions .. Always wear your seat belts per department policy .. Maintain situational awareness at all times while driving .. Be alert and prepared for the unexpected -------------------------------------- Messages with the blue sheet: Please give the attached Blue Sheet referencing the Riverside County WT39 accident wide distribution for the purposes of discussion and Tailgate Safety session. ---------------------------- See attached Blue Sheet. Driving continues to be one of our most hazardous activities. Please have your firefighters discuss this accident in 6 minutes for safety and tailgate sessions. ---------------------------- Defensive driving pays off. SOURCE: Water Trucks and Water Tenders: CA-RRU-Water Tender Accident - BLUE SHEET

CA-YNP- Jack Fire - 300+ acres and is 0% controlled Posted: 12 Nov 2007 02:05 PM CST Jack Fire (CA-YNP-4850) Start Date: 10/29/07 from lightning Location: Yosemite National Park Current Size: 300+ acres and is 0% controlled. Fire is being mapped with Helo/GPS and updated acreage should be available tomorrow. Fuels: The south half of the fire is in oak woodland, manzanita, and bear clover. The north half of the fire is in heavy ponderosa pine/mixed conifer. The fire activity is light due to intermittent showers. Comms: Air to Air - 130.200 Command - YNP Fire Outlook: 2 miles of contingency line completed, With most activity on the north east flank of fire This is being managed as a Type 3 Incident right now. Fire originally was placed under wildland fire use management for resource benefits and public safety. On Nov. 8, the fire spread outside the fire use management zone causing a change in strategy. At this point, management actions were taken to stop the fire from spreading further south toward Wawona. Crews are constructing line just outside Wawona north to the fire's south and east sides. A significant turn in the weather is expected Sunday, bringing measurable precipitation to the fire area. Fire managers continue to assess fire activity and growth potential to determine future management actions. Selected WFSA alternative is to go direct on the fire south of Turner Ridge, however, steep terrain and rollout may require a larger burnout around the north end Wawona, which would increase the size and complexity of the incident considerably. Resources: Crews: Crane Valley RHC Horseshoe IHC Vista Grande IHC Engines: Northern Region Type 4 Strike Team (Montana/Idaho) (these are the ICS Type 4 Large Engines not the Firescope Type 4 light engines) MT -IPF - E4641 MT -IPF - E4241 MT -IPF - E4841 ID -PDS - E4041 MT -IPF - E4141 California S/T 4601C CA -TNF - E31 CA -ENF - E13 CA -ENF - E63 CA -ENF - E53 CA -TMU - E41 Aircraft: Cal-Fire Tanker 76 Cal-Fire Tanker 78 Helicopter 28HJ (Yosemite Park) Helicopter C-FHQK Cal-Fire AA430 Helitanker 725 from Helicopter Transport Services Lead 57

Yosemite Fire Information – Update # 9 Posted: 12 Nov 2007 10:12 AM CST November 12, 2007 Minimal activity was observed on the Jack and Devil fires Sunday as a moist storm brought intermittent rain to the fire area in Yosemite National Park. These fires started by lightning October 29, 2007 along with several others that were contained and controlled. The Devil and two other fires, Cotton and Johnson, located in the wilderness are being managed under a wildland fire use management response, while alternative management actions are being taken on the Jack Fire to prohibit its spread toward Wawona. Fire managers are prepared for another drying trend this week and expect fire activity to increase on the 300 acre Jack Fire and the 160 acre Devil Wildland Fire Use event. The precipitation this weekend dampened fire activity, but did not put the fires out. The larger fires will continue to burn until significant precipitation is received. Generally, one to two inches of precipitation is necessary before fire managers may call the fires out. Until that time, fire managers continue to assess fire activity and projected movement to determine future management actions and staffing needs. Jack Fire – The Jack Fire originally began in the wilderness as a wildland fire use event until it spread outside the fire use management zone on Nov. 8. Actions are being taken on the south half of the fire while the north half remains in the wilderness and will be allowed to grow. There are 106 personnel and three helicopters dedicated to the Jack Fire. The fire is positioned in steep terrain north of Wawona on Turner Ridge. Sunday, operations were suspended due to safety considerations from the moisture received. Monday, if conditions allow, crews will work on the northeast side of the fire constructing line and scouting possible holding opportunities. Helicopters will drop water on hot spots if necessary. Devil Fire – The Devil Fire (about 160 acres) is located east of the Tamarack Trail, between Tamarack Flat Campground and the Tamarack Trail footbridge crossing at Cascade Creek. Fourteen personnel are assigned to the fire, monitoring fire spread, taking weather and smoke observations and scouting areas where holding actions could be taken if necessary. The fire will be allowed to function as a natural part of the ecosystem as it moves across the landscape. Cotton Fire – The Cotton is one quarter acre and has not shown any growth in several days. It is approximately 3.5 miles east of the Hetch Hetchy Ranger Station, near Cottonwood Meadow. Johnson – The fire is in Madera County, 4 miles northeast of Wawona, near Crescent Lake. It is 0.1 acre and consists of a single snag burning with low growth potential. Closures: Three trails have been closed for public safety. On the Jack Fire, the trail from the Wawona Ranger Office to the junction with the Alder Creek Trail and the Mosquito Creek Junction approximately 5 miles north to Alder Creek Falls. On the Devil Fire, the trail between Tamarack Flat Campground and the top of El Capitan on the Valley Rim Trail is closed. Air quality: Generally, air quality has been in the good to moderate category. For more information visit the Interagency Real Time Smoke Monitoring website, http://www.satguard.com/usfs/fleet.aspx. Please call Fire Information at 209-375-9572, for photos and maps visit http://www.inciweb.org or the park website, http://www.nps.gov/yose/fire.

Massive Brush Fire in Lincoln County - Not! Posted: 12 Nov 2007 09:48 AM CST Editor: After a reporting on California wildland fires I find the vegetation fires back east amusing when they describe them as massive, huge, Firestorms, etc and they are always just an acre or two the following from todays WBTV website describes a tree stump dump fire as MASSIVE... Massive Brush Fire in Lincoln County A fire burned several acres of land in Lincoln County Thursday evening and it will be days before it burns completely out. The fire was at a debris site where stumps are dumped off N.C. Highway 16 between Mundy Road and Lexford Lane. The fire was first reported just after 3 p.m. Fire crews from six departments responded to the fire. Firefighters will remain on the scene until Friday morning to make sure the fire doesn't get out of control. No one was injured as a result of the fire and no evacuations have been issued. Authorities tell WBTV it will take several days and possibly a week before the fire burns out. WBTV's Tom Roussey was on the scene Thursday night and spoke with fire officials about difficulty in fighting this type of blaze

You are subscribed to email updates from California Fire News - Structure, Wildland, EMS To stop receiving these emails, you may unsubscribe now.	Email Delivery powered by FeedBurner
Inbox too full? Subscribe to the feed version of California Fire News - Structure, Wildland, EMS in a feed reader.
If you prefer to unsubscribe via postal mail, write to: California Fire News - Structure, Wildland, EMS, c/o FeedBurner, 20 W Kinzie, 9th Floor, Chicago IL USA 60610