main

Its a 10-Way P4 Heatsink Roundup!

Mr magoo   on 15 June 2002 - 20:21 · no comments & 10 views

Advertisement (Why?)
It's gotta be said.. after ENGLAND beat DENMARK by 3 goals in a fantastic match earlier today what better way to round up a good saturday than with a cooler round-up to cool down. Here are 10. Tried and tested by Tweakers Australia for your reading pleasure.

10-Way P4 Heatsink Roundup
Tweakers Australia has just updated their Pentium 4 Socket 478 Heatsink Roundup. Currently, the article takes a close look 10 popular coolers and compares features, performance and noise levels. Here's a snip

"If you own a Socket 478 Pentium 4, you may have already noticed that the cooler you got with the CPU is barely audible - even more so if you made the transition from an AMD based system. The main reason behind this is because nearly all P4 coolers work a whole lot better than most of their Socket A counterparts, simply because their bigger, and capable of tackling larger fans that can push more cubic feet of air per minute through a larger array of fins on the heatsink. The surface temperature of the P4 may very well get just as hot as the AMD processors, but the heatsinks efficiency is improved by a larger contact patch on the P4 as opposed to the tiny 10x10mm patch on the XP."

View: 10-Way P4 Heatsink Roundup @ Tweakers Australia


MS02-028
This patch eliminates a newly discovered vulnerability affecting Internet Information Services. Although Microsoft typically delivers cumulative patches for IIS, in this case Microsoft have delivered a patch that eliminates only this new vulnerability, while completing a cumulative patch. When the cumulative patch is customer-ready, Microsoft will update this bulletin with information on its availability. The FAQ provides information on the circumstances surrounding the vulnerability, and why Microsoft believe releasing a singleton patch immediately is in customers' best interests. To ensure that servers are fully protected against past as well as current vulnerabilities, Microsoft strongly recommend installing the previous cumulative patch (discussed in Microsoft Security Bulletin MS02-018) before installing this patch.

Title: Heap Overrun in HTR Chunked Encoding Could Enable Web Server Compromise (Q321599)
Date: 12 June 2002
Software: Internet Information Server
Impact: Run Code of Attacker's Choice
Max Risk: Moderate

View: Microsoft Security Bulletin ID MS02-028 for more information and patch availability

MS02-029
A flaw exists in the RAS phonebook implementation: a phonebook value is not properly checked, and is susceptible to a buffer overrun. The overrun could be exploited for either of two purposes: causing a system failure, or running code on the system with LocalSystem privileges. If an attacker were able to log onto an affected server and modify a phonebook entry using specially malformed data, then made a connection using the modified phonebook entry, the specially malformed data could be run as code by the system.

Title: Unchecked Buffer in Remote Access Service Phonebook Could Lead to Code Execution (Q318138)
Date: 12 June 2002
Software: Windows NT 4.0, NT 4.0 Terminal Server Edition, 2000, XP, Routing and Remote Access Server (RRAS)
Impact: Local Privilege Escalation
Max Risk: Critical

View: Microsoft Security Bulletin ID MS02-029 for more information and patch availability

MS02-030
  • An unchecked buffer vulnerability in an ISAPI extension that could, in the worst case, allow an attacker to run code of their choice on the Microsoft Internet Information Services (IIS) Server.
  • A vulnerability in a function specifying an XML tag that could allow an attacker to run script on the user's computer with higher privilege. For example, a script might be able to be run in the Intranet Zone instead of the Internet Zone.
  • Title: Unchecked Buffer in SQLXML Could Lead to Code Execution (Q321911)
    Date: 12 June 2002
    Software: Microsoft SQLXML
    Impact: Two vulnerabilities, the most serious of which could run code of attacker's choice.
    Max Risk: Moderate

    View: Microsoft Security Bulletin ID MS02-030 for more information and patch availability

    MS02-022 (Revised: 11 June 2002, version 2.0)
    On May 8 2002, Microsoft released the original version of this bulletin. On June 11, 2002 the bulletin was updated to announce that while the fixes issued on May 8 2002 resolved the vulnerability, they did not protect in all cases against the reintroduction of the vulnerable control. As a result, a new set of fixes is being released to ensure that systems are fully protected against the reintroduction of the vulnerable control. A new MSN Chat control, updated patch, updated version of MSN Messenger and an updated version of Exchange Instant Messenger have been made available. Customers who have applied any of the fixes released on May 8, 2002 are encouraged to consider applying the updated fixes.

    Title: Unchecked Buffer in MSN Chat Control Can Lead to Code Execution (Q321661)
    Released: 08 May 2002
    Software: MSN Chat, MSN Messenger, Exchange Instant Messenger
    Impact: Run Code of Attacker's Choice
    Max Risk: Critical
    Bulletin: MS02-022

    View: Microsoft Security Bulletin ID MS02-022 for more information and patch availability

    Post a comment · Send to friend Comments · There are no additional comments

    Commenting has either been disabled on this article or you are not logged in. Click here to login or register, its free!

    Note: Anonymous commenting is disabled in order to keep the quality of responses to a high standard.

    Advertisement (Why?)