US-CERT Technical Cyber Security Alert TA09-013A -- Microsoft Updates for Multiple SMB Protocol Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

National Cyber Alert System

Technical Cyber Security Alert TA09-013A

Microsoft Updates for Multiple SMB Protocol Vulnerabilities

Original release date: January 13, 2009
Last revised: --
Source: US-CERT

Systems Affected

* Microsoft Windows 2000, XP, and Vista
* Microsoft Windows Server 2000, 2003, and 2008

Overview

Microsoft has released updates that address vulnerabilities in
Microsoft Windows and Windows Server.

I. Description

In their bulletin for January 2009, Microsoft released updates to
address vulnerabilities in the Server Message Block (SMB) Protocol
that affects all supported versions Microsoft Windows.

II. Impact

A remote, unauthenticated attacker could gain elevated privileges,
execute arbitrary code, or cause a denial of service.

III. Solution

Microsoft has provided updates for this vulnerability in the
Microsoft Security Bulletin Summary for January 2009. The security
bulletin describes any known issues related to the
updates. Administrators are encouraged to note these issues and
test for any potentially adverse effects. Administrators should
also consider using an automated update distribution system such as
Windows Server Update Services (WSUS).

IV. References

* Microsoft Security Bulletin Summary for January 2009 -
<http://www.microsoft.com/technet/security/bulletin/ms09-jan.mspx>

* Microsoft Windows Server Update Services -
<http://technet.microsoft.com/en-us/wsus/default.aspx>

____________________________________________________________________

The most recent version of this document can be found at:

<http://www.us-cert.gov/cas/techalerts/TA09-013A.html>
____________________________________________________________________

Feedback can be directed to US-CERT Technical Staff. Please send
email to <cert@cert.org> with "TA09-013A Feedback VU#914388" in the
subject.
____________________________________________________________________

For instructions on subscribing to or unsubscribing from this
mailing list, visit <http://www.us-cert.gov/cas/signup.html>.
____________________________________________________________________

Produced 2009 by US-CERT, a government organization.

<http://www.us-cert.gov/legal.html>
____________________________________________________________________

Revision History

January 13, 2009: Initial release

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (GNU/Linux)

iQEVAwUBSW0bDnIHljM+H4irAQLx0Af/b03sL+OgksDzO95k6jApkaMunERyHGu+
e4W4KRZ8e6felHu8bqRlXfiPbJgCXn9JkUPfc+GwhBS0q5QXmLmygLZiSP2KyQFW
u2Px2X60OyDveK3Qhl9vd09tmcw1iQYkoq+II7PcmErDwMww8ya/0d+KCBTiB73j
8kf5Odb3aD10iOqwCjJO8N8mq2T1vjb332qnhHLAZFaWArgyE1E8Dukmz6gVT84l
mSkQYObCoPIdaUsQgNrOh7pz2TjnI0PCzZoBHmV1ItF8W9vXmTQ1tCPDGHnSCe9q
TdjD+UlnowZ4Q8Vnh/XPrUU6IG6CH0lyN2GMBLsgEfnY4DrSmrvLeA==
=lISj
-----END PGP SIGNATURE-----

CANCEL AMBER ALERT - CHILD LOCATED

* CANCEL AMBER ALERT - CHILD LOCATED *	Actual/Immediate/Severe/Observed
STATEWIDE
Alert sent at 11:12 PST on 2009-01-13

Language: en-US
Event: Safety: EDIS FLASH
Levels: Immediate - Severe - Observed
Code: SAME = CEM
Expires: 15:12 PST on 2009-01-13
Headline: *** CANCEL AMBER ALERT - CHILD LOCATED ***
Description: *** CANCEL AMBER ALERT - CHILD LOCATED *** *** CANCEL AMBER ALERT - CHILD LOCATED *** *****SUSPECT IS STILL OUTSTANDING***** ON JANUARY 13, 2009, AT 08:38 AM, KAYLA MONTEZ WAS ABDUCTED FROM SAN JOSE, SANTA CLARA COUNTY, CALIFORNIA. KAYLA MONTEZ IS AN 8 YEAR OLD, HISPANIC, FEMALE, 4 FEET TALL, 45 POUND, JUVENILE WITH BROWN HAIR, LAST SEEN WEARING A WHITE JACKET, LIGHT BLUE T-SHIRT AND BLUE JEANS. SUSPECT IS MARK PORTER, A 24 YEAR OLD, HISPANIC, MALE, 5 FEET 7 INCHES TALL, WEIGHING 180 POUNDS, WITH BROWN HAIR. THE SUSPECT WAS LAST SEEN DRIVING A BLACK CHEVROLET , WITH A CA LICENSE PLATE OF 3VLS142. IF SEEN CONTACT LIEUTENANT TEPOORTEN AT (408) 277-5339. CHP ENTAC/JEL
Target Area: STATEWIDE
-----------------------------

CALIFORNIA EMERGENCY MANAGEMENT AGENCY SAN DIEGO CALIFORNIA -	Actual/Immediate/Severe/Observed
No area description provided by: KSGX@nwws.oes.ca.gov
Alert sent at 10:51 PST on 2009-01-13

Event: Security: CALIFORNIA EMERGENCY MANAGEMENT AGENCY SAN DIEGO CALIFORNIA
Levels: Immediate - Severe - Observed
Expires: 14:51 PST on 2009-01-13
From:
Headline: CALIFORNIA EMERGENCY MANAGEMENT AGENCY SAN DIEGO CALIFORNIA -
Description: THE CALIFORNIA HIGHWAY PATROL HAS ISSUED A... * CHILD ABDUCTION EMERGENCY FOR SOUTHWEST CALIFORNIA. * A CHILD ABDUCTION OCCURRED ON...OCTOBER 15 AT 7 AM...IN LAS VEGAS...NEVADA. * THE CHILD.S NAME IS KAYLA MONTEZ...A 8-YEAR OLD HISPANIC FEMALE...4FEET TALL...45 POUNDS...WITH BROWN HAIR. LAST SEEN WEARING A WHITE JACKET WITH A LIGHT BLUE T-SHIRT AND BLUE JEANS. SUSPECT IS MARK PORTER A 24 YEAR OLD HISPANIC MALE 5 FEET 7 INCHES TALL...WEIGHING 180 POUNDS...WITH BROWN HAIR. LAST SEEN DRIVING A BLACK CHEVROLET WITH A CA LICENSE PLATE 3VLS142. IF SEEN CONTACT LIEUTENANT TEPOORTEN AT 4 0 8 2 7 7 8 9 9 5.
Instructions: * TO REPORT POSSIBLE SIGHTINGS...CALL 9 1 1.
Target Area: No area description provided by: KSGX@nwws.oes.ca.gov
-----------------------------

ON JANUARY 13, 2009, AT 08:38 AM, KAYLA MONTEZ WAS ABDUCTED FROM SAN JOSE, SANTA CLARA COUNTY	Actual/Immediate/Severe/Observed
STATEWIDE
Alert sent at 10:08 PST on 2009-01-13

Language: en-US
Event: Safety: EDIS FLASH
Levels: Immediate - Severe - Observed
Code: SAME = CEM
Expires: 14:08 PST on 2009-01-13
Headline: ON JANUARY 13, 2009, AT 08:38 AM, KAYLA MONTEZ WAS ABDUCTED FROM SAN JOSE, SANTA CLARA COUNTY
Description: ON JANUARY 13, 2009, AT 08:38 AM, KAYLA MONTEZ WAS ABDUCTED FROM SAN JOSE, SANTA CLARA COUNTY, CALIFORNIA. KAYLA MONTEZ IS A 8 YEAR OLD, HISPANIC, FEMALE, 4 FEET TALL, 45 POUND, JUVENILE WITH BROWN HAIR, LAST SEEN WEARING WHITE JACKET, LIGHT BLUE T-SHIRT AND BLUE JEANS. SUSPECT IS MARK PORTER, A 24 YEAR OLD, HISPANIC, MALE, 5 FEET 7 INCHES TALL, WEIGHING 180 POUNDS, WITH BROWN HAIR. THE SUSPECT WAS LAST SEEN DRIVING A BLACK CHEVROLET, WITH A CA LICENSE PLATE OF 3VLS142. IF SEEN CONTACT LIEUTENANT TEPOORTEN AT (408) 277-8995. CHP ENTAC/JEL
Target Area: STATEWIDE
-----------------------------

ON JANUARY 13, 2009, AT 08:38 AM, KAYLA MONTEZ WAS ABDUCTED FROM SAN JOSE, SANTA CLARA COUNTY	Actual/Immediate/Severe/Observed
STATEWIDE
Alert sent at 10:08 PST on 2009-01-13

California Fire News - Updates in your mail box

Link to California Fire News - Structure, Wildland, EMS

News: Chico Fire Department cut's five firefighters

Posted: 12 Jan 2009 09:42 PM CST

5 Chico Firefighters Laid Off
Sixth Vacant Position Cut

CHICO, Calif. -- Chico has notified five firefighters they will be laid off because of budget cuts.

The remaining firefighters get a 4 percent raise this year under their existing contract.

The move came after the city and 66-member fire union were unable to agree on pay and benefit concessions.

The city is also cutting a sixth vacant position, for a combined 9 percent cut in the number of firefighters.

More Info: hkcra.com - Link

Placer County - Multi Unit Structure fire - Four-alarms

Posted: 12 Jan 2009 02:54 PM CST

4-Alarm Fire Ignites At Lincoln Construction Site

Firefighters Concerned About Fire Started In Middle Of Night

LINCOLN, Calif. - A four-alarm fire ignited at a multifamily housing unit under construction in Lincoln overnight.

As many as six fire departments responded to the D.R. Horton development at Joiner Parkway near Las Palomas Loop just before midnight Saturday, including Cal Fire, Roseville, Rocklin and other Placer County agencies.

No injuries were reported, but firefighters said they have concerns that the fire started in the middle of the night in an empty construction area.

"It's not that it's suspicious, but what we have to ... start that investigative process and start ruling out the potential causes of what started that fire," Lincoln fire spokesman David Whitt said.

Firefighters said the smoke from the fire caused damage to a nearby house. Lincoln Fire Department investigators are investigating a cause.

Source: theKCRAchannel.com - Link

FEMA: National Situation Update

Posted: 12 Jan 2009 01:33 PM CST

National Situation Update: Monday, January 12, 2009
Homeland Security Threat Level: YELLOW (ELEVATED).

Significant National Weather

West:
Some rain and mountain snow showers are forecast from western Washington and northwest Oregon southeastward into Colorado today. No heavy precipitation is expected. Flood Warnings have been issued in Washington for the Cedar River near Landsburg (affecting King County) and the Chehalis River at Porter (affecting Grays Harbor County). Santa Ana winds are forecast for Southern California through Tuesday. A Red Flag Warning remains in effect for portions of Los Angeles and Ventura counties until 10:00 p.m. PST today due to gusty northeast winds and low humidity. A High Wind Warning has been issued for the Los Angeles and Ventura county mountains and remains in effect until 4:00 a.m. PST Tuesday for northeast winds 25 to 40 mph with gusts to around 60 mph.
Midwest:
An Alberta Clipper is forecast to move into the northern Plains today. Strong winds gusting to 60 mph, and moderate snow up to six inches are expected. Wind chills could reach dangerous levels (to 30 below zero) and the clipper, bearing snow and icy winds, will continue to move southeastward through the Upper Midwest today. Blizzard Warnings are posted for most of North Dakota, northern South Dakota and extreme western Minnesota. Blizzard watches extend southeastward into Iowa; Winter Weather Advisories are in effect for the same areas. Wind Advisories are in effect for portions of South Dakota, Nebraska, Kansas and Iowa for winds gusting to 50 mph. Flood Warnings continue for several points along the Illinois River.
South:
The South will be dry today except for possible showers in central Florida and northeast Oklahoma.
Red Flag Warnings remain in effect until 6:00 p.m. EST today for the eastern and western Florida Panhandle and most of the Florida Big Bend due to expected long durations of relative humidity below 35 percent. Flood Warnings continue for rivers in Mississippi, South Carolina and Alabama.
Northeast:
Weather in the Northeast will be fairly calm with a few snow showers from the mountains of West Virginia through western Pennsylvania into Upstate New York and northern New England. A Winter Weather Advisory has been issued for a small portion of south-central Pennsylvania for snow accumulation up to 3 inches through 10:00 a.m. EST today. (NOAA, NWS, Various Media Sources)

Pacific Northwest Flooding:

As of 12:00 a.m. EST, the NWS and Northwest River Forecast Center reported three river gauges that are above Flood Stage in Washington State; one river gauge is at Moderate Flood stage, and two gauges are at Minor Flood stage. All rivers have crested and are falling and should fall below flood stage within the next day or two. (NWS)

FEMA RRCC Actions:

Region X RRCC activated at Level II (24/7) due to widespread flooding, excessive runoff from heavy rainfall and melting snow in the State of Washington
ESF's 3, 6, and 12 still activated, all other ESFs demobilized
FEMA LNO demobilized
DCO/DCE, US Coast Guard and US Geological Survey activated in support of Region X RRCC
Preliminary Damage Assessment Teams from FEMA, WA State Emergency Management Division and affected counties assembling to assess damage, scheduled to begin January 13
WA State EOC remains at Full Activation (24/7)
Washington State Proclamation from December 24 was amended to include counties with ongoing January flooding occurring in eastern and western Washington; a total of twenty-three counties and fourteen cities declared emergencies related to flooding and seven counties declared emergencies for snow
No fatalities or injuries have been reported
Five shelters were occupied overnight with a total population of 69 (down from 97) (NSS Report as of Midnight, January 11, 2009)
Most boil water advisories have been lifted
Two Mobile Disaster Recovery Centers (MDRCs) requested by the State are expected to arrive Wednesday, January 15
All Amtrak routes are operational as of Sunday, January 11, 2009
The US Army Corps of Engineers (USACE) flood fight teams continue to demobilize from the Olympic Peninsula. Currently USACE has 57 people in 5 river basin areas
WA National Guard has concluded Winter Storm response missions. Two continuing missions to support flood response will conclude today
I-90 and I-5 are open to all vehicles with some lane and exit restrictions. Portions of US-12 (White Pass) are closed
No unmet needs

Fire Management Assistance Grant

No activity. (FEMA HQ)

Tropical Weather Outlook

Western Pacific:
There are no current tropical cyclone warnings. (NOAA, HPC, National Hurricane Center, Central Pacific Hurricane Center and the Joint Typhoon Warning Center)

Earthquake Activity

No new activity (FEMA HQ)

Preliminary Damage Assessments

No new activity (FEMA HQ)

Disaster Declaration Activity

No new activity (FEMA HQ)

Last Modified: Monday, 12-Jan-2009 08:15:14 EST

LAFD: Woman Struck By Amtrak Train Dies in Chatsworth

Posted: 12 Jan 2009 10:17 AM CST

Woman Struck By Amtrak Train Dies in Chatsworth

On Sunday, January 11, 2009 at 3:54 PM, 5 Companies of Los Angeles Firefighters, 5 LAFD Rescue Ambulances, 1 Heavy Rescue, 1 Urban Search and Rescue Unit, 2 EMS Battalion Captains, 2 Battalion Chief Officer Command Teams, 1 Division Chief Officer Command Team, L.A. County Sheriffs, LAPD and a Metrolink Supervisor, under the direction of Battalion Chief Richard Elder, responded to a Physical Rescue Assignment at 22360 W. Devonshire St. in the Chatsworth area.

Firefighters responded to reports of a person struck by a train in the Chatsworth area. On arrival Firefighters found a passenger train stopped inside Tunnel 27. A request was made for all train traffic to cease for the duration of the incident. Fire companies were directed to each end of the tunnel, for the investigation. The responders were approximately 1/2 mile inside the tunnel when they came upon the injured female. The patient, 32 years old, was in was very critical condition as Paramedics tried to assess her. The injured female succumbed to her injuries and was pronounced at the scene.

The train had approximately 400 passengers on board, but none complained of injuries. The Crisis Response Team was requested by the Incident Commander. Companies remained on scene to assist with the body recovery.

(photos) (photos) (video)

Source: LAFD Blog - Link
Submitted by d'Lisa Davies
Los Angeles Fire Department