Headlines - Just News headlines all the time: Dec 11, 2007

Tuesday, December 11, 2007

US-CERT Technical Cyber Security Alert TA07-345A -- Microsoft Updates for Multiple Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

National Cyber Alert System

Technical Cyber Security Alert TA07-345A

Microsoft Updates for Multiple Vulnerabilities

Original release date: December 11, 2007
Last revised: --
Source: US-CERT

Systems Affected

* Microsoft Windows
* Microsoft Internet Explorer

Overview

Microsoft has released updates that address critical vulnerabilities
in Microsoft Windows and Internet Explorer. Exploitation of these
vulnerabilities could allow a remote, unauthenticated attacker to
execute arbitrary commands.

I. Description

Microsoft has released updates to address vulnerabilities that affect
Microsoft Windows and Internet Explorer as part of the Microsoft
Security Bulletin Summary for December 2007. The most severe
vulnerabilities could allow a remote, unauthenticated attacker to
execute arbitrary commands. For more information, see the US-CERT
Vulnerability Notes Database.

II. Impact

A remote, unauthenticated attacker could execute arbitrary commands on
a vulnerable system.

III. Solution

Apply updates from Microsoft

Microsoft has provided updates for these vulnerabilities in the
December 2007 security bulletins. The security bulletins describe any
known issues related to the updates. Administrators are encouraged to
note these issues and test for any potentially adverse effects.
Administrators should consider using an automated update distribution
system such as Windows Server Update Services (WSUS).

IV. References

* US-CERT Vulnerability Notes for Microsoft December 2007 updates -
<http://www.kb.cert.org/vuls/byid?searchview&query=ms07-dec>

* Microsoft Security Bulletin Summary for December 2007 -
<http://www.microsoft.com/technet/security/bulletin/ms07-dec.mspx>

* Microsoft Update - <https://www.update.microsoft.com/microsoftupdate/>

* Windows Server Update Services -
<http://www.microsoft.com/windowsserversystem/updateservices/default.mspx>

* Securing Your Web Browser - <http://www.us-cert.gov/reading_room/securing_browser/>

_________________________________________________________________

The most recent version of this document can be found at:

<http://www.us-cert.gov/cas/techalerts/TA07-345A.html>
_________________________________________________________________

Feedback can be directed to US-CERT Technical Staff. Please send
email to <cert@cert.org> with "TA07-345A Feedback VU#437393" in the
subject.
_________________________________________________________________

For instructions on subscribing to or unsubscribing from this
mailing list, visit <http://www.us-cert.gov/cas/signup.html>.
_________________________________________________________________

Produced 2007 by US-CERT, a government organization.

<http://www.us-cert.gov/legal.html>
______________________________________________________________

Revision History

December 11, 2007: Initial release

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)

iQEVAwUBR18Qd/RFkHkM87XOAQKmPggAizWEwWaIVeYlbdXw6zGMS/zhqNuynvo5
D5gHuhs0UL+V96A8Aa/2c5oLaLDnR6Udk3yC8dSN1tLhwavwlQfXW33kAWWHOHpA
xLzI/szcP/XRS6UgQeWC1caH6SAjdT6wbTBLh4QSa6jODGPpHFyRLbQV2x23XKC7
4ehLACrh+NRpGKSJRffZEkUHDSoFSmSpgQHpOIHHS+mHzJcqtAm8C/v7Y0i5qeRU
uWSqUBLYIhpcOaYGOjbVBOyemRGAUzrNZYbfYhHyP7mF5rYu2jMDF7LwaTwvnKG8
3Ljv6ChkQ+7OzbyFDIDmX1B2ZC/gRUphdZrPkAGqPTChAAv/JbmxkQ==
=lx4/
-----END PGP SIGNATURE-----

California Fire News

Winter staffing in Calaveras and Tuolumne counties

Posted: 11 Dec 2007 03:16 AM CST

SAN ANDREAS -- Fire season has finally ended in Calaveras and Tuolumne counties, as well as the eastern edges of San Joaquin and Stanislaus counties, Cal Fire announced Monday.

It is the latest end to a fire season here since 1986 officials said that they officially closed the season Saturday, which ties the Dec. 8, 1986, closing. Only once in the past 60 years has the official fire season lasted longer. That was in 1958, when it did not end until New Year's Eve.

The Tuolumne-Calaveras unit of Cal Fire responded to 303 vegetation fires during the 2007 season. Those fires burned 1,874 acres, causing an estimated $1.8 million in damage. The agency also responded to 344 other fires, including structures and motor vehicles, that caused more than $5 million in damage

Unmanned copter crashes, starts fire

Posted: 11 Dec 2007 03:03 AM CST

Boeing is testing A160 Hummingbird helicopter at SCLA for Defense Department

HILLARY BORRUD Staff Writer

December 10, 2007 - 3:02PM

VICTORVILLE — An unmanned helicopter known as the A160 Hummingbird crashed north of Southern California Logistics Airport Monday afternoon, where Frontier Systems Inc. and Boeing have been testing the aircraft since 2002.

This is the first time the Hummingbird, a 35-foot-long helicopter with a 36-foot rotor, has crashed, said Boeing Advanced Systems spokesman Robert Villanueva.

No one was injured, and Boeing employees at Southern California Logistics Airport, or SCLA, are investigating the cause of the crash.

"We apparently lost one of our test vehicles early this afternoon," Villanueva said. "The good news is, it's an unmanned vehicle" so there were no deaths.

Boeing is developing the A160 "Unmanned Air System" under a contract with the Defense Advanced Research Projects Agency or DARPA, the central research and design organization of the U.S. Department of Defense, Villanueva said. The A160 was not carrying weapons when it crashed.

Victorville firefighters stationed at SCLA responded to the crash at Colusa Road and Helendale Road after it was reported at 2:08 p.m. Monday, said Battalion Chief Warren Peterson of the Victorville Fire Department.

A San Bernardino County Fire Department engine from Adelanto was also called in to assist.

The fire had mostly burned out by the time firefighters arrived, and it covered an area about 30 feet in diameter of desert brush. One injury in the crash was a Joshua tree that seemed to have caught on fire after the Hummingbird hit it.

Pieces of the Hummingbird were scattered widely around the crash site, and much of the craft appeared to have been consumed by the fire.

The A160 is built in Irvine and its missions will include intelligence, surveillance and reconnaissance attack, according to background material supplied by Boeing.

It can fly at speeds of up to 140 knots at up to 30,000 feet, about 10,000 feet higher than conventional helicopters currently fly, according to Boeing.

This posting includes an audio/video/photo media file: Download Now

Oakland Fire hiring fiasco part 2 - Oakland Fire chief picks his own son?

Posted: 10 Dec 2007 01:20 PM CST

Oakland Fire chief hand picks his own son in the hiring process?

OAKLAND, Calif. (CFN)-- Earlier this week, the Oakland Fire Department passed out more than 8,000 applications. Only the first 1,000 would be accepted that was only the start of this ill conceived hiring process.

Some people began lining up three days ahead of time just to turn in applications for the 23 available positions.

Hundreds of people spent a cold Friday night near Oakland's City Hall forming a organized line, hoping to become firefighters.

Then the Oakland fire department perverted the process by hand selecting specific people out of the line resulting in a near riot! And of those few selected during the process...

The Oakland Fire Chief Daniel D. Farrell's son!

Applicants claimed that some minority applicants, specifically African-American and women, were hand picked over others which sems to be shown in the news videos, There also have been rumors that relatives of high-ranking City Hall officials or people with connections to the fire department were singled out to submit applications.

"That's not true," said Farrell, adding that people who were chosen were in the "right place at the right time."

"With the crowd pushing forward, we tried to get some people from the right side of the crowd, some from the left side of the crowd and some from the middle of the crowd. There were no defined lines," he said.

Farrell admitted that one of his two sons in the lines was picked, while the other was not.

"I didn't personally pick him. He was picked by someone else," he said.

Many of those who came to turn in their applications were turned away, while most others were hand picked out of the line, causing unrest with the obvious favoritism displayed towards certain candidates.

It was suspected that factors such as hiring goals leading to race and sex selection, and favoritism might have come into play.

"It seems like there were people who knew firefighters and they were more likely to be picked than someone who didn't know someone out there," applicant Eddie Grant said.

Others, the lucky special few, said they were content with the selection process.

"I feel like that unfair, but I got picked so I got to be honest, I'm happy about it. And I don't care anymore, cause I got picked," applicant Mohammed Ahmed said.

Oakland officials denied foul play, but said they feel the process didn't go smoothly as planned.

In an interview with NBC11, Oakland human resources official Jacquelyn Edwards said: "Our goal was to attempt to find some kind of way to mitigate between -- and this is kind of a life issue -- between the people that follow instructions, that do what they're asked to do�� and the people that make it up." ( Official Physco Babble?)

Video proof: The hand selection of specific applicant's can be clearly seen in the various news videos including the Chief Daniel D. Farrell pointing out who got in, Including his own son! and 13 more city employee relatives...Video-1, Video-2, Photo- 3

Edwards said she did not think there was any favoritism in the process.

Would-be Oakland firefighters will continue the controversial process in January
In response to the critics, the city is offering a second chance to those that were turned away at the Oakland Fire Department's Training Center on Jan. 12 at 8:30 a.m.

Officials said the 1,000 people selected took written tests Saturday.