Tag Archives: tools

WSUS and “Cannot save configuration because the server is still processing a previous configuration change”?

For future reference…

If WSUS starts responding with the message: “Cannot save configuration because the server is still processing a previous configuration change”, run this SQL command:

UPDATE tbSingletonData SET ResetStateMachineNeeded = 0

And in the long term, consider this:

https://community.spiceworks.com/scripts/show_download/2998-wsus-automated-maintenance-formerly-adamj-clean-wsus

Remote code execution on DNA sequencers…

…using properly synthesized DNA code as the medium…

A noteworthy paper by researchers from the University of Washington:

The rapid improvement in DNA sequencing has sparked a big data revolution in genomic sciences, which has in turn led to a proliferation of bioinformatics tools. To date, these tools have encountered little adversarial pressure. This paper evaluates the robustness of such tools if (or when) adversarial attacks manifest. We demonstrate, for the first time, the synthesis of DNA which ? when sequenced and processed? gives an attacker arbitrary remote code execution. To study the feasibility of creating and synthesizing a DNA-based exploit, we performed our attack on a modified downstream sequencing utility with a deliberately introduced vulnerability. After sequencing, we observed information leakage in our data due to sample bleeding. While this phenomena is known to the sequencing community, we provide the first discussion of how this leakage channel could be used adversarially to inject data or reveal sensitive information. We then evaluate the general security hygiene of common DNA processing programs, and unfortunately, find concrete evidence of poor security practices used throughout the field. Informed by our experiments and results, we develop a broad framework and guidelines to safeguard security and privacy in DNA synthesis, sequencing, and processing.

Source: http://dnasec.cs.washington.edu/dnasec.pdf

Windows XP – what to do?

I thought I would never write about Windows XP again… and yet… I came across a network where there are still quite a few of them and, surprisingly, they are holding up (perhaps thanks to a dozen or so people who keep them under control).

For those who have not read it, I recommend:

https://www.microsoft.com/en-us/WindowsForBusiness/end-of-xp-support

It is clear that not everyone can run to the store and buy several dozen licenses immediately, so what can be done to survive somehow?

  • Limit the privileges of people using the systems to the absolute minimum.
  • Enable firewalls on the machines for both incoming and outgoing connections.
  • Move the computers to a separate subnet where traffic will be strictly monitored.
  • Install all available updates for the operating system and components.
  • Uninstall unused operating system components and unnecessary software.
  • Limit Internet connectivity to the absolute minimum.
  • Use an alternative, current browser.
  • Limit browser use and clear browser cache after every close.
  • If possible, disconnect the computer from the network.
  • Provide a high level of antivirus protection for removable devices, or consider disabling them.
  • Verify that the backup mechanisms in use allow system recovery and activation without connecting to Microsoft servers.
  • Deploy and configure additional security mechanisms, such as Enhanced Mitigation Experience Toolkit.
  • Use application whitelisting mechanisms.
  • Wherever possible, use domain policies to introduce restrictions.
  • Provide additional training for users of these systems: what to do when a virus is detected, how to handle media of unknown origin, and so on.

OpenVAS and a problem creating accounts

For future reference…

When creating credentials (Configuration -> Credentials), this error may appear:

Internal error: create_lsc_credential_omp:4506 (GSA 6.0.1) An internal error occurred while creating a new credential. It is unclear whether the credential has been created or not. Diagnostics: Failure to receive response from manager daemon.

The solution is to run these commands:

openvasmd --create-credentials-encryption-key
mkdir /var/lib/openvas/gnupg

M$ patches 7/2016

For posterity… M$ released something like this… Critical and Security Updates Security Update for Microsoft .NET Framework 4.5.2 on Windows Vista, Windows 7, Server 2008 (KB3135996) A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article. After you install this update, you may have to restart your system. Security Update for Microsoft .NET Framework 4.5.2 on Windows 7, Vista, Windows Server 2008, Windows Server 2008 R2 for x64 (KB3135996) A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article. After you install this update, you may have to restart your system. Cumulative Security Update for Internet Explorer 11 for Windows 7 for x64-based Systems (KB3170106) A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article. After you install this update, you may have to restart your system. Cumulative Security Update for Internet Explorer 11 for Windows 7 (KB3170106) A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article. After you install this update, you may have to restart your system. Security Update for Windows 7 for x64-based Systems (KB3170455) A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article. After you install this update, you may have to restart your system. Security Update for Windows 7 (KB3170455) A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article. After you install this update, you may have to restart your system. Security Update for Microsoft Excel 2010 (KB3115322) 64-Bit Edition A security vulnerability exists in Microsoft Excel 2010 64-Bit Edition that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability. Security Update for Microsoft Web Applications (KB3115318) farm-deployment A security vulnerability exists in Microsoft Web Applications that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability. Security Update for Microsoft Word 2010 (KB3115317) 64-Bit Edition A security vulnerability exists in Microsoft Word 2010 64-Bit Edition that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability. Security Update for Microsoft PowerPoint 2010 (KB3115118) 64-Bit Edition A security vulnerability exists in Microsoft PowerPoint 2010 64-Bit Edition that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability. Security Update for Microsoft SharePoint Foundation 2010 (KB3114890) A security vulnerability exists in Microsoft SharePoint Foundation 2010 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability. Security Update for Microsoft Office 2010 (KB3115315) 32-Bit Edition A security vulnerability exists in Microsoft Office 2010 32-Bit Edition that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability. Security Update for Microsoft SharePoint Server 2010 (KB3115312) A security vulnerability exists in Microsoft SharePoint Server 2010 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability. Security Update for Microsoft Outlook 2010 (KB3115246) 64-Bit Edition A security vulnerability exists in Microsoft Outlook 2010 64-Bit Edition that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability. Security Update for Microsoft PowerPoint 2010 (KB3115118) 32-Bit Edition A security vulnerability exists in Microsoft PowerPoint 2010 32-Bit Edition that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability. Security Update for Microsoft SharePoint Server 2010 (KB3115312) farm-deployment A security vulnerability exists in Microsoft SharePoint Server 2010 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability. Security Update for Microsoft Outlook 2010 (KB3115246) 32-Bit Edition A security vulnerability exists in Microsoft Outlook 2010 32-Bit Edition that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability. Security Update for Microsoft Word 2010 (KB3115317) 32-Bit Edition A security vulnerability exists in Microsoft Word 2010 32-Bit Edition that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability. Security Update for Microsoft Office 2010 (KB3115315) 64-Bit Edition A security vulnerability exists in Microsoft Office 2010 64-Bit Edition that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability. Security Update for Microsoft SharePoint Foundation 2010 (KB3114890) farm-deployment A security vulnerability exists in Microsoft SharePoint Foundation 2010 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability. Security Update for Microsoft Web Applications (KB3115318) A security vulnerability exists in Microsoft Web Applications that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability. Security Update for Microsoft Excel 2010 (KB3115322) 32-Bit Edition A security vulnerability exists in Microsoft Excel 2010 32-Bit Edition that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability. Security Update for Windows 7 for x64-based Systems (KB3168965) A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article. After you install this update, you may have to restart your system. Security Update for Windows 7 (KB3168965) A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article. After you install this update, you may have to restart your system. Security Update for Microsoft .NET Framework 4.6 on Windows 7, Windows Vista, Server 2008, Server 2008 R2 for x64 (KB3164025) A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article. After you install this update, you may have to restart your system. Security Update for Microsoft .NET Framework 4.6 on Windows Vista, Windows 7, Server 2008 (KB3164025) A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article. After you install this update, you may have to restart your system. Security Update for Microsoft .NET Framework 4.6.1 on Windows 7 and Windows Server 2008 R2 for x64 (KB3164025) A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article. After you install this update, you may have to restart your system. Security Update for Microsoft .NET Framework 4.6.1 on Windows 7 (KB3164025) A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article. After you install this update, you may have to restart your system. Security Update for Microsoft .NET Framework 4.5.2 on Windows Vista, Windows 7, Server 2008 (KB3163251) A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article. After you install this update, you may have to restart your system. Security Update for Microsoft .NET Framework 4.5.2 on Windows 7, Vista, Server 2008, and Server 2008 R2 for x64 (KB3163251) A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article. After you install this update, you may have to restart your system. Security Update for Microsoft .NET Framework 3.5.1 on Windows 7 SP1 (KB3163245) A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article. After you install this update, you may have to restart your system. Security Update for Microsoft .NET Framework 3.5.1 on Windows 7 and Windows Server 2008 R2 SP1 for x64-based Systems (KB3163245) A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article. After you install this update, you may have to restart your system. Security Update for Microsoft .NET Framework 4.5.2 on Windows Vista, Windows 7, Server 2008 (KB3135996) A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article. After you install this update, you may have to restart your system. Other Updates Windows Malicious Software Removal Tool – March 2016 (KB890830) After the download, this tool runs one time to check your computer for infection by specific, prevalent malicious software (including Blaster, Sasser, and Mydoom) and helps remove any infection that is found. If an infection is found, the tool will display a status report the next time that you start your computer. A new version of the tool will be offered every month. If you want to manually run the tool on your computer, you can download a copy from the Microsoft Download Center, or you can run an online version from microsoft.com. This tool is not a replacement for an antivirus product. To help protect your computer, you should use an antivirus product. Windows Malicious Software Removal Tool x64 – March 2016 (KB890830) After the download, this tool runs one time to check your computer for infection by specific, prevalent malicious software (including Blaster, Sasser, and Mydoom) and helps remove any infection that is found. If an infection is found, the tool will display a status report the next time that you start your computer. A new version of the tool will be offered every month. If you want to manually run the tool on your computer, you can download a copy from the Microsoft Download Center, or you can run an online version from microsoft.com. This tool is not a replacement for an antivirus product. To help protect your computer, you should use an antivirus product. Update for Windows 7 for x64-based Systems (KB2977759) Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer. Update for Windows 7 (KB2952664) Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer. Update for Windows 7 (KB2977759) Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer. Update for Windows 7 for x64-based Systems (KB2952664) Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer. Update for Windows 7 for x64-based Systems (KB2977759) Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer. Update for Windows 7 (KB2977759) Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer. Update for Windows 7 for x64-based Systems (KB3170735) Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer. Update for Windows 7 (KB3170735) Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer. Windows Malicious Software Removal Tool x64 – July 2016 (KB890830) After the download, this tool runs one time to check your computer for infection by specific, prevalent malicious software (including Blaster, Sasser, and Mydoom) and helps remove any infection that is found. If an infection is found, the tool will display a status report the next time that you start your computer. A new version of the tool will be offered every month. If you want to manually run the tool on your computer, you can download a copy from the Microsoft Download Center, or you can run an online version from microsoft.com. This tool is not a replacement for an antivirus product. To help protect your computer, you should use an antivirus product. Windows Malicious Software Removal Tool – July 2016 (KB890830) After the download, this tool runs one time to check your computer for infection by specific, prevalent malicious software (including Blaster, Sasser, and Mydoom) and helps remove any infection that is found. If an infection is found, the tool will display a status report the next time that you start your computer. A new version of the tool will be offered every month. If you want to manually run the tool on your computer, you can download a copy from the Microsoft Download Center, or you can run an online version from microsoft.com. This tool is not a replacement for an antivirus product. To help protect your computer, you should use an antivirus product. Update for Windows 7 for x64-based Systems (KB2952664) Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer. Update for Windows 7 (KB2952664) Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer.