Tag Archives: admin

admin

news

M$ fixes bugs in Exchange Server 2010 SP3 RU8

Exchange Server 2010 SP3 Update Rollup 8 turned out to be problematic when working with Outlook.

It fixed one thing that was important to me:

3004235: Exchange Server meetings in Russian time zones as well as names of time zones are incorrect after October 26, 2014.

Two products from the same vendor and they have trouble talking to each other… not for the first time…

On TechNet we can find this note:

Update 12/12/2014: Exchange Server 2010 SP3 Update Rollup 8 has been re-released to the Microsoft download center resolving a regression discovered in the initial release. The update RU8 package corrects the issue which impacted users connecting to Exchange from Outlook. The issue was insulated to the MAPI RPC layer and was able to be isolated to quickly deliver the updated RU8 package. The updated RU8 package is version number 14.03.0224.002 if you need to confirm you have the updated package. The updates for Exchange Server 2013 and 2007 were not impacted by this regression and have not been updated.

So supposedly it should be fine now… I will wait anyway…

A few links for those who want to read more:

http://www.zdnet.com/article/microsoft-pulls-exchange-2010-update/
http://www.theregister.co.uk/2014/12/10/exchange_2010_update_recall/
https://support.microsoft.com/kb/2986475
http://blogs.technet.com/b/jribeiro/archive/2014/12/10/update-rollup-8-for-exchange-2010-sp3-has-been-released-kb2986475.aspx

news

New bugs and patches from MS…

Microsoft Windows OLE Automation Array Remote Code Execution Vulnerability.

Description: https://www.us-cert.gov/ncas/alerts/TA14-318B

Exploit for it: http://packetstorm.igor.onlinedirect.bg/1411-exploits/ms14_064_packager_run_as_admin.rb.txt

And another bug that allows gaining domain administrator privileges:

http://blogs.technet.com/b/srd/archive/2014/11/18/additional-information-about-cve-2014-6324.aspx

There was also a mishap: MS14-066 causes problems with SQL and IIS. That is what happens when instead of focusing on patching, you add new algorithms…

http://www.infoworld.com/article/2849292/operating-systems/more-patch-problems-reported-with-the-ms14-066-kb-2992611-winshock-mess.html

news

ursynalia.pl – or the secrets of WordPress

A long, long time ago, together with an awesome team of people, I happened to co-organize Ursynalia. Maybe “co-organize” is too big a word, because it was mostly their work… greetings to Kasia, Stefan, and many others.

Sometimes I check their website, impatiently waiting for news about what will happen this year…

And here is a curiosity… Am I really supposed to wait 35 days?! Still, at least it is not a site made in Paint ;-P

Let us see what the page source hides…

Hmm… WordPress 3.8.3 looks a bit old. The current version is already 3.9. But maybe that is a decoy.

Since it is WordPress with a changed front page, let us search further; maybe we can find out who will perform. In another fragment of the code, information is visible that the page has ID = 17.

Let us check:

http://ursynalia.pl/?p=17

It works! For the curious, I recommend changing the ID to others…

http://ursynalia.pl/hello-world/

…but that one could already have been removed ;-P

Let us see whether there are any other posts or subpages not visible from the home page. Check the RSS feed:

http://ursynalia.pl/feed/

This way we learn about… (I will not write it here; you have to click the link yourself)

http://ursynalia.pl/ursynalia-2014-mastodon-i-jelonek-pierwszymi-artystami/

All right, that is enough (legal) playing with the Ursynalia 2014 website.

From a more professional point of view, I will only suggest that an account named “Admin” is worth deleting right away.

Update: Norton Safe Web found “computer threats” on the site: “drive-by downloads”. The report is available there. Screenshot below.