On November 11, 2008, Microsoft Corporation (NASDAQ:MSFT) released two security bulletins where it provided necessary information and patches for four program bugs. One bulletin, talking about the vulnerability known as MS08-068 has been rated "important" and the other vulnerability, MS08-069, has been rated "critical."

The MS08-068 is a vulnerability related to Microsoft’s Server Message Block (SMB) system. According to the official website of Microsoft, the vulnerability allows remote code execution on affected systems. It says:

An attacker who successfully exploited this vulnerability could install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.

The MS08-068 security update has been rated important for all the editions of Microsoft Windows 2000, Windows XP, and Windows Server 2003, and moderate, for all the editions of Windows Vista and Windows Server 2008. Interestingly, this vulnerability was made public in 2001. Eric Schultze, CTO, Shavlik Technologies, LLC, said:

“Sir Dystic, from Cult of the Dead Cow, found a vulnerability in Microsoft operating systems that enabled attackers complete access to user’s computers. He wrote a utility called SMBRelay to demonstrate the flaw. Microsoft was aware of the issue but didn’t issue any security bulletins or patches to correct the behavior. Well, it looks like they’ve finally seen the light and have addressed this issue via the MS08-068 patch.”

Schultze used to demonstrate the after effect of the attack in various classroom training sessions and it surprised the students very much. Christopher Budd, who used to work at the Microsoft Security Response Center (MSRC) in 2001 said:

When this issue was first raised back in 2001, we said that we could not make changes to address this issue without negatively impacting network-based applications. And to be clear, the impact would have been to render many (or nearly all) customers' network-based applications then inoperable. For instance, an Outlook 2000 client wouldn't have been able to communicate with an Exchange 2000 server. We did say that customers who were concerned about this issue could use SMB signing as an effective mitigation, but, the reality was that there were similar constraints that made it infeasible for customers to implement SMB signing.

Tyler Reguly, security research engineer, nCircle, said that Microsoft has chosen to release the patch now because of the availability of the SMB relay module in the Metaspoilt framework for several months.

The MS08-069 is a vulnerability of Microsoft MSXML parser. It comes with the MS office products. If the user opens up a malicious document or website that has been maliciously crafted, he/she will be hacked. Computer World says:

The most serious of the two updates, MS08-069, fixed three separate flaws in XML Core Services, the component that not only provides interoperability between several scripting languages — including JScript and Visual Studio — and XML applications, but more importantly allows Internet Explorer to render XML-based content.

“The name says it all,” said Andrew Storms, director of security operations at nCircle Network Security Inc. “This is a core service for all versions of Microsoft Windows, and it will certainly be a source of research for attackers.”

Ben Greenbaum, Senior research manager, Symantec Corporation (NASDAQ:SYMC)  said that the XML Core Services vulnerability is more of a concern because it would have more of an opportunity to be exploited. Of the three bugs, there is one "critical" patch which was labeled as Common Vulnerabilities and Exposures (CVE) in early 2007. Microsoft said that the patch was published more than 22 months ago.

Useful links:

Computer World

CIO

blogs.technet.com

Information Week

Title: Dostana

Director: Tarun Mansukhani

Producer: Karan Johar and Hiroo Johar

Cast:

Abhishek Bachchan…… Sameer

John Abraham…… Kunal

Priyanka Chopra…… Neha

Bobby Deol…… Abhimanyu

Synopsis: Dostana is Karan Johar's upcoming movie as a producer. An NRI romantic comedy, Dostana, is full of fun and humor. The background of the movie is set in Miami, famous for its beaches, parties and clubs. Two friends- Sameer (Abhishek Bachchan) and Kunal (John Abraham) are looking for apartments and the landlady of the apartment turned them down because the last thing she wants is some young men corrupting her beautiful niece, Neha (Priyanka Chopra).

Now, the two desperate friends pose as gay to get the land lady's approval. Neha, without knowing Sameer and Kunal's real intention, befriends with them. Sameer and Kunal, once two friends, turns enemies as they compete for Neha's love. In the mean time, a third person enters the scene; Abhimanyu, Neha's boss, and this makes the situation more confusing, fun and interesting.

Related article:

Bollywood Hungama

This morning, I went to the secretariat of Bangladesh Computer Samity (BCS) to attend a press conference on the eve of BCSICTWorld 2008. The convener of BCSICTWORLD 2008, A.T. Shafique Uddin Ahmed along with BCS President Mustafa Jabbar and other members of the executive committee of Bangladesh Computer Samity, briefed the journalists about the fair and its latest preparations. A.T. Shafique Uddin Ahmed read a written statement to the journalists and I am giving a translated version of his speech:

My dear journalist friends,

On behalf of the organizers of the "BCS ICT World 2008," the largest ICT fair in Bangladesh, I welcome you all. You must remember that on October 29, 2008 we organized a 'Press meet' to give you information and exchange opinions regarding the ICT fair.  On that day, we gave out all the relevant information about the fair. This meeting has been called to upgrade you about our activities and advancements in the last fifteen days. In today's speech, I will give you the key information on the ICT fair; hence, there will be repetition of some of the information we gave you in the last meeting.    

As you all know, "BCS ICT World 2008," the largest ICT fair in Bangladesh, is going to be held at the Bangladesh China Friendship Conference Center (BCFCC), the only venue in Bangladesh with international standards, from November 17, 2008 to November 21, 2008.  The fair will start from 10 a.m. and continue till 8 p.m. at night except the first day. The fair will be formally inaugurated at 11 a.m. on November 17, 2008. On that day, the fair will be opened for visitors after 1 p.m. Dr. Hossain Zillur Rahman, the honorable Education Adviser of Bangladesh Government, gave his consent to be the chief guest of the ceremony. Major General Manzurul Alam, ndc, psc (retd), Chairman, Bangladesh Telecommunication Regulatory Commission will be the special guest in the ceremony. Among others, Mr. Manik Lal Samaddar, Special Assistance to the Honorable Chief Adviser Ministry of Fisheries & Livestock and Ministry of Science & ICT, and Professor Dr. S.M.A. Faiz Vice-Chancellor, University of Dhaka are going to be present at the ceremony.

Bangladesh Computer Samity (BCS), the main business organization in the ICT sector of Bangladesh, is the organizer of "BCS ICT World 2008." We also received assistance from the ICT Business Promotion Council, the organization under the Ministry of Business. Acer, BenQ and Microsoft are the gold sponsor; ISP Bangladesh – Agni Systems Limited, AOC Monitor, and Hitachi are silver sponsors of the fair. Index IT Limited and Kaspersky are going to sponsor the ticket and ticket counter.

In the "BCS ICT World 2008," sixty five companies will showcase their products and services in 23 pavillions and 76 stalls. The fair premise is divided into two areas. The stalls are situated in the main building of BCFCC and the pavilion zone is situated in the outer area of the building. The stall zone is further divided according to various devices such as desktop, laptop, digital imaging and software sub-zones. Beside the pavilion zone, there will be internet browsing zone, gaming zone, children's drawing composition zone. As usual, we have arranged some stalls for media at a cheaper price.

Dear journalist friends,

You already know that the theme of  the  "BCS ICT World 2008" is- "Towards Digital Bangladesh." For the last fifteen years, we have been organizing the largest ICT fair of the country. Over the years, we observed a significant growth in the number of visitors who are interested about computer and information technology. Now, we think that this is the ideal time to ensure the use of IT in every Bangladeshi household. We want to build a digital Bangladesh and with that end in mind, we chose this theme.

          You are well aware of the fact that BCS exhibitions attract hundreds and thousands of IT enthusiasts from different corners of the country. Throughout the year, they eagerly wait for this fair to know about the latest products and technologies available in the country. The companies who showcase their products also sale them and offer discounts. Every ICT fair BCS has arranged so far has become a memorable experience for the IT enthusiasts and this year there will be no exception.   

You must have noticed that BCS fairs are not just any typical fairs. In each and every fair, we always make sure that we present something unique and special and new to the people this country. Continuing that trend, this year, BCS made special arrangements to bring students of 40/50 schools from different areas of the city. Necessary arrangements have been made to bring them to the fair and participate in various educational events. In addition, we have arranged children's art competition. The participants are going to be divided into three age groups: 'A' group consists of below six years of age, 'B' group consists of six to eight years old, and 'C' group consists of eight to ten year olds. The competition is going to be held on November 21, 2008. It is arranged by Faber Castle. Aside from painting competitions, the students are going to be introduced with various computer machineries and software. They will also enjoy gaming.

We have also arranged for seminars in the fair. We have tried to present new subjects in these seminars. They are: 'Display of the future,' 'New Technology to life,' 'Next generation internet,' 'Digital education is the foundation of Digital Bangladesh' and 'Digitized government is the first step towards building digital Bangladesh.' Famous domestic and international ICT personalities are going to present in these seminars.

Visitors can browse internet for free where they would get the real experience of broadband internet connection. They will be able to enjoy Video on Demand (VOD), IPTVT, net gaming, file sharing and a host of other services. The fair premise has been brought under Wi-fi internet connectivity. Hence, visitors can easily access the internet from anywhere.

Hourly press briefing and journalist discussions are usual feature of BCS ICT fairs and this time we have made necessary arrangements. Mr. Mustafa Jabbar , President, Bangladesh Computer Samity, is going to be present in the discussion on a regular basis and meet with other journalists. The control room, information and security booth will be set up in the fair premise. Food stalls will also be set up to provide refreshments to the visitors. Famous company, Nestle is going to serve free Nescafe coffee in the fair.

The entry fee in the fair has been fixed taka 20 per person. As usual, school students will enjoy free entry.

The Final ceremony will take place at 5.30 p.m. on November 21, 2008. In the ceremony, crest will be awarded among the visitors. We are expecting various important government officials as guests in the ceremony. Mr. S. M. Wahid-uz-Zaman, Secretary, Ministry of Science, Information and Communication, Professor Dr. A.M.M. Safiullah,  Vice Chancellor, Bangladesh University of Engineering and Technology, and Mr.  Mustafa Mohiuddin, Joint secretary (FTA), Ministry of Commerce, are going to be present as special guests.

          The executive committee of Bangladesh Computer Samity (BCS) is the organizing committee of "BCS ICT World 2008." To make the fair successful, I have been appointed as the convener, Md. Shahid-ul-Monir, Treasurer, BCS, has been appointed as the assistant convener and head of the fair execution committee, and BCS members who are experienced in various fields are assigned in various sub committees including: reception sub-committee, finance sub-committee, security sub-committee, logistics sub-committee, seminar sub-committee, event management sub-committee and media sub-committee. We believe that the diligent efforts of the executive committee members and members of various sub-committees will result into a successful "BCS ICT World 2008."

Dear journalist friends,

One last thing, without which, my speech would be in-complete is that, we would like to thank our journalist friends for receiving their timely assistance. BCS and the media world share a great rapport.  I feel very happy to say that media has played a big role in the popularity BCS has gained today. We also tried to help them in various ways possible.  As a sign of this friendly relationship, to help the media during the "BCS ICT World 2008," BCS has taken the help of the journalists and it believes that they will help BCS organizers in every possible way. During fair, for any kind of information, you can contact the members of "BCS ICT World 2008" media committee or me. In addition, we will be regularly updating the official website of BCS and "BCS ICT World 2008." These websites are: www.bcs.org.bd and www.bcsictworld.com. In addition, for your convenience, we have provided key information of the five day fair below. In conclusion, we thank you all for attending the press meet.

A.T. Shafiquddin Ahmed

Convener

BCS ICT World 2008

De Dana Dan starring Akshay Kumar, Sunil Shetty and Katrina Kaif in lead roles is a upcoming bollywood comedy film directed by Priyadarshan.

This is not the first time these three stars are acting together for priyadarshan directed films , they have acted before hera pheri part1 and 2 and a few others Other actors are Paresh Rawal, Neha Dhupia and Sameera Reddy.

The film is going to be released on November 27, 2009.