Security Log File - February 2002

Effective February 28, 2002, an upgrade to network security will occur. The QVTTerm FTP client will no longer work as it uses random port connections for data transfer (see the February publication of Signals). All current users of QVT FTP should switch over to WS_FTP LE, a user friendly alternative that is compatible with the new configuration. For a step-by-step walk-through installation of WS FTP LE, please visit http://www.unh.edu/tech-services/wsftpinst.html. FTP clients such as Dream Weaver, Fetch, and Front Page already are compatible. The Telnet component of QVTTerm is not impacted. Please call the Help Desk Call and Dispatch Center at 2-4242 if you have any questions or concerns.

MS Windows XP, IE6.0, SQL Server 2000: Microsoft has released information and a patch (MS02-008) for recently reported problems with XMLHTTP. More information can be found at www.microsoft.com/technet/security/bulletin/MS02-008.asp

MS Internet Explorer 5.01, 5.5, 6.0: Microsoft has released information and a patch (MS02-009) for recently reported problems with incorrect VBScript handling. More information can be found at www.microsoft.com/technet/security/bulletin/MS02-009.asp

Microsoft has announced vulnerabilities related to their implementation of SNMP (Bulletin MS02-006.) Further information and a patch can be found at http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/MS02-006.asp.

SQL: Microsoft has released information and a patch (MS02-007) for recently reported problems with SQL. More information can be found at http://www.microsoft.com/technet/security/bulletin/MS02-007.asp.