Tag Archives: vulnerability

HPE, iLO, ProLiant

How to secure your Dell iDRAC or HPE iLO

27/01/2023 Stuart Davey Leave a comment

HPE iLO

iLO 4

Latest firmware = 2.82

If you are running iLO4 firmware 2.44 or later then the Enforce AES/3DES Encryption setting only allows TLS 1.2
If you are running iLO4 firmware 2.50 or later then RC4 was removed from the default cipher list
If you are running iLO4 firmware 2.50 or later then CBC Mode ciphers are disabled in FIPS/AES Modes
If you are running iLO4 firmware 2.50 or later then 3DES and SHA-1 are disabled in FIPS mode
If you are running iLO4 firmware 2.50 or later then the default SSL certificate signing was changed to SHA-256
If you are running iLO4 firmware 2.81 or later then the weak TLS 1.2 ciphers listed below are disabled in Enforce AES/3DES Encryption mode

256-bit AES with RSA, ECDH, and a SHA384 MAC (ECDHE-RSA-AES256-SHA384)
256-bit AES with RSA, DH, and a SHA256 MAC (DHE-RSA-AES256-SHA256)
128-bit AES with RSA, ECDH, and a SHA256 MAC (ECDHE-RSA-AES128-SHA256)
128-bit AES with RSA, DH, and a SHA256 MAC (DHE-RSA-AES128-SHA256)

iLO5

Latest firmware = 2.95

If you are running iLO5 firmware 2.72 or later then a new option was introduced to disable TLS 1.0 and TLS 1.1
If you are running iLO5 firmware 2.72 or later then the weak TLS 1.2 ciphers listed below are disabled when in High Security State

256-bit AES with RSA, ECDH, and a SHA384 MAC (ECDHE-RSA-AES256-SHA384)
256-bit AES with RSA, DH, and a SHA256 MAC (DHE-RSA-AES256-SHA256)
128-bit AES with RSA, ECDH, and a SHA256 MAC (ECDHE-RSA-AES128-SHA256)
128-bit AES with RSA, DH, and a SHA256 MAC (DHE-RSA-AES128-SHA256

iLO6

Latest firmware = 1.50

11.6.1, 11.6.1, 11.6.1, 11.6.1, 11.6.1, 11.6.1, 11.6.1, 11.6.1, 11.6.1, 11.6.1, 11.6.1, 11.6.1, 11.6.1, 11.6.1, 11.6.1, 11.6.1, 11.6.1, 11.6.1, 21, 22, 23, 25, 26, 33, 330, 505, 510, 515, 520, 525, 530, 535, 545, 810, 820, 830, System Manager, Watchguard, WSM, XTM

Watchguard XTM 1050, XTM 2050, XTM 2 Series, XTM 3 Series, XTM 5 Series, XTM 8 Series – Fireware XTM OS 11.6.1 – Build # 346666

09/08/2012 Stuart Davey Leave a comment

Watchguard XTM 1050, XTM 2050, XTM 2 Series, XTM 3 Series, XTM 5 Series, XTM 8 Series – Fireware XTM OS 11.6.1 – Build # 346666

11.6.1 – Build # 346666 Provides some new features and resolves the following issues:

• This release introduces support for the new high-performance XTM 5 Series models 515, 525, 535, and 545

• Provides an update to our localized user interfaces and documentation

• An XTM device configured in bridge mode can now pass VLAN traffic between 802.1Q switches or bridges

• FireCluster support for XTM 25, 26, and 33 wired models

• Several issues have been resolved in this release that caused XTM devices to crash when configured to use Application Control or IPS [66937, 65426, 65636, 67312, 66135, 67159, 67399, 67310]

• An issue was resolved that caused some XTM device processes to crash when running Mu Dynamics default published vulnerability test [66490]

• An issue was resolved that caused a kernel crash and device reboot [67329]

• The XTM 2 Series device can now handle a large file transfer without interface instability [67367]

• A problem that caused incorrect data to display on the XTM 5 Series LCD screen has been resolved [67197]

• Policy Manager now displays the correct VLAN limits for XTM 5 Series models 505, 510, 520, and 530 with a standard Fireware XTM feature key (not Pro) [67780]

• You can now successfully configure and apply Traffic Management actions for XTM 2 and 3 Series devices from the Web UI [67221, 66645]

• Firebox X Edge e-Series devices can now be successfully managed with templates [67658]

• The notification message sent when a local Log or Report database is down now correctly shows the host IP address instead of “???” [41731]

• The Log Server can now handle backup files greater than 2GB in size without generating an error message: “Error (8199), Exception during backup of oldest log data: File is not a zip file” exception” [66811]

• The DHCP lease activity report now works correctly [66062]

• Log Collector now handles XTM device log data that spans multiple SSL/TLS records without crashing [66347]

• A problem has been resolved that caused poor performance on XTM 2 Series models 25 and 26 because of an incorrect memory allocation for security subscription signatures [67240]

• A deny message is now correctly sent to the web browser in most cases when Application Control blocks content in the Web/Web 2.0 category [66201]

• The WebBlocker automatic database update time is no longer off by one hour when daylight savings time is in effect on the host server’s timezone [67551]

• If you use PPPoE or DHCP for an external interface on an XTM device configured to use multi-WAN, the XTM device no longer loses the default routes for external interfaces after the external interface reconnects [67424, 67520]

• A problem has been resolved that caused a static route to fail after an external interface configured to use PPPoE is disconnected, then reconnected [67520]

• Tagged VLAN traffic is now correctly recognized when an XTM device is configured in Bridge mode [64355]

• The CLl command “restore factory default all” now successfully restores a device to its factory default settings [66240]

• An issue has been resolved that caused Policy Manager to incorrectly display an interface IP address as 0.0.0.0/24 when you viewed a FireCluster configuration for a cluster in drop-in mode [63551]

• The Mobile VPN with SSL process no longer crashes during a FireCluster failover [66118]

You can download 11.6.1 – Build # 346666 from the Watchguard website

13.0, 13.0.1, Firefox, Mozilla

Mozilla Release Firefox 13.0.1 Browser Update

19/06/2012 Stuart Davey

Firefox 13.0.1 introduces the following new features, security updates and fixes

FIXED – Windows Messenger did not load in Hotmail, and the Hotmail inbox did not auto-update (764546, fixed in 13.0.1)
FIXED – Hebrew text sometimes rendered incorrectly (756850, fixed in 13.0.1)
FIXED – Flash 11.3 sometimes caused a crash on quit (747683, fixed in 13.0.1)
NEW – When opening a new tab, users are now presented with their most visited pages
NEW – The default home page now has quicker access to bookmarks, history, settings, and more
CHANGED – SPDY protocol now enabled by default for faster browsing on supported sites
CHANGED – Restored background tabs are not loaded by default for faster startup
CHANGED – Smooth scrolling is now enabled by default
DEVELOPER – 72 total improvements to Page Inspector, HTML panel, Style Inspector, Scratchpad and Style Editor
DEVELOPER – The column-fill CSS property has been implemented
DEVELOPER – Experimental support for ECMAScript 6 Map and Set objects has been implemented
DEVELOPER – Support for the CSS3 background-position property extended syntax has been added
DEVELOPER – The :invalidpseudo-class can now be applied to the element
DEVELOPER – The CSS turn <angle> unit is now supported
SECURITY FIX – MFSA 2012-40 Buffer overflow and use-after-free issues found using Address Sanitizer
SECURITY FIX – MFSA 2012-39 NSS parsing errors with zero length items
SECURITY FIX – MFSA 2012-38 Use-after-free while replacing/inserting a node in a document
SECURITY FIX – MFSA 2012-37 Information disclosure though Windows file shares and shortcut files
SECURITY FIX – MFSA 2012-36 Content Security Policy inline-script bypass
SECURITY FIX – MFSA 2012-35 Privilege escalation through Mozilla Updater and Windows Updater Service
SECURITY FIX – MFSA 2012-34 Miscellaneous memory safety hazards

Microsoft, SBS 2011, Service Pack 1, Service Pack 1, Service Pack 1, Small Business Server 2011, Windows, Windows Server 2008 R2

Dns.exe – Pre Service Pack 2 Revision History for Windows Server 2008 R2 SP1 and Windows Small Business Server 2011 (SBS 2011)

24/03/2012 Stuart Davey Leave a comment

Dns.exe – Pre Service Pack 2 Revision History for Windows Server 2008 R2 SP1 and Windows Small Business Server 2011 (SBS 2011)

02-Nov-2013 – 6.1.7601.22500 – Dns.exe – x64 – http://support.microsoft.com/kb/2905363 – Windows DNS server incorrectly parses client computer records

08-Aug-2013 – 6.1.7601.22416 – Dns.exe – x64 – http://support.microsoft.com/kb/2875350 – DNS Server service cannot bind to port 53 in Windows Server 2008 R2 SP1

09-May-2013 – 6.1.7601.22320 – Dns.exe – x64 – http://support.microsoft.com/kb/2847677 – DNS service freezes in Windows Server 2008 R2 SP1

01-May-2013 – 6.1.7601.22313 – Dns.exe – x64 – http://support.microsoft.com/kb/2845145 – A memory leak occurs in the DNS server service after you enable recursion on a server that is running Windows Server 2008 R2

06-Feb-2013 – 6.1.7601.22243 – Dns.exe – x64 – http://support.microsoft.com/kb/2809959 – DNS Server service does not start on a computer that is running Windows Server 2008 R2

07-Jan-2013 – 6.1.7601.22211 – Dns.exe – x64 – http://support.microsoft.com/kb/2550719 – “Name Error 3” error message when you send a query to an EDNS-enabled forwarding DNS server, and the query is resolved by using WINS forward lookup in Windows Server 2008 R2

06-Sep-2012 – 6.1.7601.22108 – Dns.exe – x64 – http://support.microsoft.com/kb/2739005 – DNS response packet is marked as invalid after you enable the EDNS probes feature on a DNS server that is running Windows Server 2008 R2

26-Jul-2012 – 6.1.7601.22071 – Dns.exe – x64 – http://support.microsoft.com/kb/2738597 – TTL values are different when you send two queries for the same SOA record in Windows Server 2008 R2

16-Jun-2012 – 6.1.7601.22024 – Dns.exe – x64 – http://support.microsoft.com/kb/2724183 – Parent DNS servers cannot resolve the names of records from a child domain after you configure DNSSEC for an Active Directory-integrated DNS zone in Windows Server 2008 R2

12-May-2012 – 6.1.7601.21993 – Dns.exe – x64 – http://support.microsoft.com/kb/2712740 – TTL values are different when you send two queries for the same SOA record in Windows Server 2008 R2

27-Dec-2011 – 6.1.7601.21885 – Dns.exe – x64 – http://support.microsoft.com/kb/2647170 – MS12-017: Vulnerability in DNS Server could allow denial of service: March 13, 2012

17-Dec-2011 – 6.1.7601.21879 – Dns.exe – x64 – http://support.microsoft.com/kb/2655960 – DNS server stops responding to DNS queries from client computers in in Windows Server 2003, in Windows Server 2008 or in Windows Server 2008 R2

28-Nov-2011 – 6.1.7601.21867 – Dns.exe – x64 – http://support.microsoft.com/kb/2648326 – “Server Failure” error message and DNS name resolution of external websites fails on a DNS server that is running Windows Server 2008 R2

30-Sep-2011 – 6.1.7601.21829 – Dns.exe – x64 – http://support.microsoft.com/kb/2586946 – You cannot update the name server records for a domain that has a “.no” top-level country code to use Windows Server 2008 R2-based DNS name servers

09-Sep-2011 – 6.1.7601.21814 – Dns.exe – x64 – http://support.microsoft.com/kb/2616861 – DNS Server service does not respond to a CNAME query in the GlobalNames zone correctly in Windows Server 2008 R2

08-Sep-2011 – 6.1.7601.21813 – Dns.exe – x64 – http://support.microsoft.com/kb/2616776 – DNS Server service does not use root hints to resolve external names in Windows Server 2008 R2

21-Jun-2011 – 6.1.7601.21754 – Dns.exe – x64 – http://support.microsoft.com/kb/2562485 – MS11-058: Vulnerabilities in DNS Server could allow remote code execution: August 9, 2011

20-May-2011 – 6.1.7601.21731 – Dns.exe – x64 – http://support.microsoft.com/kb/2408181 – AAAA record of a Windows Server 2008 or of a Windows Server 2008 R2 domain controller is deleted automatically if the domain controller uses an Active Directory–integrated zone and has a Microsoft 6to4 adapter

19-May-2011 – 6.1.7601.21730 – Dns.exe – x64 – http://support.microsoft.com/kb/2548145 – The size of the Active Directory increases rapidly on a Windows Server 2003-based or Windows Server 2008 R2-based domain controller that hosts the DNS Server role

14-May-2011 – 6.1.7601.21728 – Dns.exe – x64 – http://support.microsoft.com/kb/2549656 – DNS Server service randomly cannot resolve external names and returns a “Server Failure” error if IPv6 is disabled in Windows Server 2008 R2

11-May-2011 – 6.1.7601.21725 – Dns.exe – x64 – http://support.microsoft.com/kb/2550719 – “Name Error 3” error message when you send a query to an EDNS-enabled forwarding DNS server, and the query is resolved by using WINS forward lookup in Windows Server 2008 R2

23-Mar-2011 – 6.1.7601.21690 – Dns.exe – x64 – http://support.microsoft.com/kb/983534 – Performance of the DNS Server service keeps decreasing under a heavy load situation in Windows Server 2008 R2

22-Mar-2011 – 6.1.7601.21689 – Dns.exe – x64 – http://support.microsoft.com/kb/2508835 – DNS Server service does not resolve some external DNS names after it works for a while in Windows Server 2008 R2

13-Jan-2011 – 6.1.7601.21640 – Dns.exe – x64 – http://support.microsoft.com/kb/2495375 – DNS does not respond to a request for a SPF (TXT) DNS record correctly in Windows Server 2008 R2 if the record is larger than 512 bytes

Aid In IT

Tag Archives: vulnerability

Watchguard XTM 1050, XTM 2050, XTM 2 Series, XTM 3 Series, XTM 5 Series, XTM 8 Series – Fireware XTM OS 11.6.1 – Build # 346666

Dns.exe – Pre Service Pack 2 Revision History for Windows Server 2008 R2 SP1 and Windows Small Business Server 2011 (SBS 2011)

IT – Software and Hardware Support Resources