July 8, 2008
Microsoft released the July Security Update on July 8, 2008. Four bulletins were released that address nine individual vulnerabilities. Microsoft rated each advisory as Important. Two vulnerabilities in DNS services could allow attackers to conduct spoofing or DNS cache poisoning attacks, while two vulnerabilities in the Microsoft Exchange Outlook Web Access component could allow an attacker to conduct cross-site scripting attacks. Four vulnerabilities in Microsoft SQL Server could allow attackers to execute arbitrary code on affected systems, which could result in an escalation of privileges. In some site configurations, attackers could leverage externally accessible applications that accept user input to exploit these vulnerabilities without requiring authentication. The final vulnerability could allow an attacker to execute arbitrary code with user privileges on Windows Vista platforms.
Cisco Security Intelligence Engineering Content
Cisco Applied Mitigation Bulletins provide identification and mitigation techniques that administrators can deploy on Cisco network devices. When applicable, Cisco IOS access control lists, Cisco Intrusion Prevention System (IPS) signatures, Cisco Security Monitoring, Analysis, and Response System Incidents, Cisco IOS NetFlow, and firewall inspection are among the techniques discussed in the bulletins.
Cisco Applied Mitigation Bulletin: Microsoft Security Bulletin for July 2008
Security Intelligence Best Practices help organizations secure business applications and processes by identifying, preventing, and adapting to threats. The following white paper will provide operators and administrators with knowledge about the Domain Name System (DNS) and its role and operations, along with implementation flaws in the protocol and best practices, network protections, and attack identification techniques that can be used to secure it.
DNS Best Practices, Network Protections, and Attack Identification (MS08-040: CVE-2008-0086, CVE-2008-0106)
Cisco Contact Center Enterprise and Hosted Products Impact Assessment
Cisco Security IntelliShield Alert Manager and Cisco IPS
The following table identifies Cisco Security IntelliShield Alert Manager alerts and Cisco IPS signatures associated with this Microsoft update:
Return to Cisco Security Center
