A patch is small program that updates another program, usually to fix a specific issue. Patches are also often called fixes.
0
votes
1answer
88 views
Windows 7 File Patching, Custom Visual Styles
In order to apply custom "visual styles" or themes in Windows 7, you must patch a few system files including Explorer.
I can see from the start how this could be a potential security problem, but how ...
1
vote
1answer
180 views
Padding oracle - Vulnerable Version of ASP.NET
I would like to install the vulnerable version of ASP.NET for testing purposes. I've thought about it and I guess the best way would be to delete/disable some security updates to make that possible. ...
0
votes
1answer
135 views
How to analyze server crash dump after recent patch update? [closed]
I want to know, if there a way I can identify on windows systems an event / log generated due to patches incorrectly installed / or corrupted in the process. Is there a way I can process or look ...
0
votes
0answers
107 views
Examples of vulnerabilities being changed in only one (of many) places [closed]
I'm looking into source code analysis and was wondering if folks know of examples, in open source projects, of vulnerabilities where there were multiple "very similar" vulnerabilities in the same ...
4
votes
1answer
111 views
Security announcement mailing list for Java
I didn't find a security announcement mailing list for Java (from Oracle). How to get notified about new Java patches? I am not interested in other Oracle products.
For example Apple provides such a ...
0
votes
3answers
254 views
What reputable site should I download Putty from?
I recently did a Bing search for Putty and can only guess at which distribution is "trusted", contains no malware, or sleuthing code.
If you needed to download Putty for a high security Windows ...
1
vote
1answer
73 views
Zero day vulnerability appropriate corrective action
Is it appropriate for a software developer to provide zero day vulnerability corrections as at-user-discretion installers to apply patches or is it preferred to force it in cyclic updates?
The reason ...
5
votes
1answer
89 views
Does every security patch get back ported to every .NET framework? Are there exceptions to the rule?
I can imagine a scenario where Microsoft will create a security patch for some versions of .NET and not others. This might occur in occasions it's too expensive to regression test and back port all ...
0
votes
2answers
498 views
List of unpatchable exploits in MS Exchange 2003 [duplicate]
Possible Duplicate:
Where can I find a list of un-patched CVEs for a specific piece of software?
MS Exchange 2003 is no longer supported by Microsoft since April 2009.
However the ...
12
votes
3answers
259 views
Android security without updates
I have an android phone which, like many others, has quickly become unsupported and is not receiving any updates. At the same time there are publicly available exploits for privilege-escalation ...
1
vote
1answer
275 views
Is there any way to use Nuget securely?
Visual Studio now includes a Package Manager that downloads and updates software packages from the internet. The common name for this is "Nuget"
The problem I have is that anyone can pretend to be ...
56
votes
15answers
3k views
How to write an email regarding IT Security that will be read, and not ignored by the end user?
I've observed that several of our users are ignoring messages sent from IT Security managers, and also the system generated "You just sent a virus" notifications.
The problem seems to be among people ...
4
votes
3answers
289 views
How can IT audit for installation of IIS Express?
IIS Express is a developer tool for Windows XP and higher which provides the full feature set of IIS, but without needing administrator rights.
I've seen discussion by some developers who are ...
5
votes
2answers
207 views
Patching Mechanism and security holes
Let me clarify two methods of patching softwares and then I will go straight to the question:
I am using both MAC OS X and Windows and different mechanisms of these two famous operating systems in ...
5
votes
1answer
3k views
Download Windows 7 security updates and patch offline
I am planning to do a clean Windows 7 OS installation.
Is it possible (and/or recommendable) to download all the Windows 7 Security Updates from Microsoft in advance and patch my fresh Windows 7 ...
5
votes
3answers
276 views
Are Windows security updates audited?
An IT guy said that in his company, the Windows updates (small security updates that are downloaded automatically by the Windows autoupdate) are checked by the auditor. ie: the auditor checks if every ...
