welcome network world fusion focus jason meserve security bug patch alert today focus bug alert welcome 03 06 00 dear wincenty kaminski today focus bug alert welcome jason meserve welcome security bug patch alert newsletter given recent spate high profile denial service hack attacks large number people signed newsletter first edition even published clear security major concern community technology looked upon profit rather cost center departments face pressure keep critical systems running well secure chief information officer network manager wants tell ceo e commerce site broken customer credit card data copied stories like tend stick potential customer mind expensive super bowl ad hard enough keep latest new technologies never mind latest security patch operating system e commerce application help week publish list patches alerts major vendors security organizations links source also provide hopefully useful resources security conscious manager comments suggestions always welcome send mail jmeserve nww com latest patches alerts security glitch hits foundry switches week network world security problem cropped foundry networks serveriron switches make devices susceptible denial service attacks read story download patch http www foundrynet com bugtraq html new version apache web server released apache server project released version 1 3 12 popular apache web server week new release fixes apache calls cross site scripting problem could allow malicious html tags inserted client side scripts download new version http www apache org dist problem linux htdig package freebsd debian reporting problem htdig package runs respective platforms problem htsearch could allow user read file local machine accessible user id script running cases nobody information debian http www debian org security download patch freebsd http www freebsd org ports nmh linux package patched versions nmh prior 1 0 3 vulnerability could allow malicious users modify mime headers mail message may cause nmh mshow command execute arbitrary commands patch available zombie zapper 1 1 available zombie zapper 1 1 helps shut troj _ trinoo denial service client windows nt unix machines information problem mysql password authentication according makers freebsd vulnerability mysql database server prior version 3 22 32 could allow anyone connect database access without password information contact jason meserve jason meserve staff writer network world covering search engines portals videoconferencing ip multicast document management also oversees security alerts page fusion http www 2 nwfusion com security bulletins html jason reached mailto jmeserve nww com subscription services subscribe unsubscribe network world e mail newsletters go change email address go subscription questions contact customer service replying message questions comments editorial comments write jeff caruso newsletter editor mailto jcaruso nww com advertising information write jamie kalbach account executive mailto jkalbach nww com network world fusion part idg net idg online network starts http www idg com copyright network world inc 2000