Description

Download Security Update 15 Release Notes (PDF)

Use the LiveUpdate feature of Symantec NetRecon 3.6 to download the security update.

Symantec NetRecon 3.6 Security Update 15 (SU 15) detects and reports five new vulnerabilities.

New vulnerabilities

• Microsoft MSN Messenger Information Disclosure Vulnerability
• Microsoft Windows Media Services Remote Denial of Service Vulnerability
• Windows Media Services MX_STATS_LogLine NSIISlog.DLL Remote Buffer Overflow
• Microsoft Windows XP explorer.exe Remote Denial of Service Vulnerability
• Multiple Vendor Internet Browser Cookie Path Argument Restriction Bypass

Vulnerability enhancements

• Microsoft Internet Explorer BackToFramedJPU Cross-Domain Policy Vulnerability
  A vendor patch has been released. NetRecon checks for patch KB832894 before reporting this vulnerability.
  
  
• Multiple Browser URI Display Obfuscation Weakness
  A vendor patch has been released. NetRecon checks for patch KB832894 before reporting this vulnerability.
  
  
• Apache Web Server MIME Boundary Information Disclosure Vulnerability
  Apache Web Server versions 1.3.28 and 1.3.29 have been added to this vulnerability signature.
  
  

For details, download the Security Update 15 Release Notes (PDF).