NIST IT Security: Daylight Savings Time (DST) Problems Abound

NIST Site Search

Product Research

Advertise on this site

Headlines

US-CERT Current Activity

»	Insecure Loading of Dynamic Link Libraries in Windows Applications
»	VMware Releases Updates for ESX Service Console Packages
»	Cisco Releases Security Advisory for IOS XR Software Border Gateway Protocol
»	RealNetworks Releases Update to Address Vulnerabilities in RealPlayer
»	Cisco Releases Advisories for Unified Communications Manager and Unified Presence
»	APWG Fax Back Phishing Education Program
»	Adobe Releases Security Bulletin for Shockwave Player
»	Apple Releases Security Update 2010-005
»	Microsoft Releases Security Advisory
»	VideoLAN Releases a Security Advisory for VLC Media Player

Date published: not known
Details

DOE-CIRC Updates

»	T-430: Apple QuickTime Flaw in QTPlugin.ocx ActiveX Control Lets Remote Users Execute Arbitrary Code Apple QuickTime Flaw in QTPlugin.ocx ActiveX Control Lets Remote Users Execute Arbitrary Code
»	T-429: WaspTime MS-SQL Database instance with blank password for sa account WaspTime MS-SQL Database instance with blank password for sa account
»	T-428: Vulnerability in Help and Support Center Vulnerability in Help and Support Center
»	T-427: VMWare WebAccess Vulnerability VMWare WebAccess Vulnerability
»	T-426: Microsoft Windows Shortcut 'LNK/PIF' Files Automatic File Execution Vulnerability Microsoft Windows Shortcut 'LNK/PIF' Files Automatic File Execution Vulnerability
»	T-425: Desktop Java running in web browsers Desktop Java running in web browsers
»	T-424: Windows TCP/IP Stack IcmpSendEcho2Ex() Bug Lets Local Users Deny Service Windows TCP/IP Stack IcmpSendEcho2Ex() Bug Lets Local Users Deny Service
»	T-423: Microsoft Security Advisory (2269637) - Insecure Library Loading Could Allow Remote Code Execution Microsoft Security Advisory (2269637) - Insecure Library Loading Could Allow Remote Code Execution
»	T-422: Adobe Flash Player and AIR (CVE-2010-2216) Unspecified Memory Corruption Vulnerability Adobe Flash Player and AIR (CVE-2010-2216) Unspecified Memory Corruption Vulnerability
»	T-421: Multiple CACTI Security Vulnerabilities Multiple CACTI Security Vulnerabilities
»	T-420: Microsoft Windows TCP/IP IPv6 Extension Header Remote Denial of Service Vulnerability Microsoft Windows TCP/IP IPv6 Extension Header Remote Denial of Service Vulnerability
»	T-419: PHP 'ibase_gen_id()' Function off-by-one Buffer Overflow Vulnerability PHP 'ibase_gen_id()' Function off-by-one Buffer Overflow Vulnerability
»	T-418: Adobe Acrobat and Reader Font Parsing Remote Code Execution Vulnerability Adobe Acrobat and Reader Font Parsing Remote Code Execution Vulnerability
»	T-417: Apache HTTP Server Multiple Remote Denial of Service Vulnerabilities Apache HTTP Server Multiple Remote Denial of Service Vulnerabilities
»	T-417: Apache HTTP Server Multiple Remote Denial of Service Vulnerabilities Apache HTTP Server Multiple Remote Denial of Service Vulnerabilities

Date published: not known
Details

Virus Bulletin news

»	ARF published as IETF standard Abuse report format helps auto-handling of email complaints
»	Microsoft releases new fix for DLL vulnerability Earlier workaround believed to be too complex for most users.
»	Malicious tweets link to fake TweetDeck update Twitter resets passwords for accounts that appear to have been hacked.
»	94% of Internet users befriend unknown 'good-looking woman' Sensitiva data shared after two-hour chat.
»	Investment boost for Quick Heal Indian security firm gets hefty cash injection.
»	41% of spam sent via Rustock botnet Botnet spam back after short summer break.
»	Avast gets $100m investment boost Growth equity firm invests in Czech firm
»	Computer chip giant buys AV giant Intel becomes new owner of McAfee for the princely sum of $7.8bn
»	AV-Test.org issues latest round of testing results Symantec and Microsoft outdo Trend and McAfee in live tests.

Date published: not known
Details

DarkReading - All Stories

»	Networked Scanners Offer A Window Into The Enterprise, Researcher Says Emerging Web-based features make it possible to capture document contents remotely from networked sc ...
»	U.S. Businesses Could Lose Up To $1 Billion In Online Banking Fraud This Year Small- to midsized businesses taking the biggest hit, experts say, but consumer banking customers co ...
»	Product Watch: Verizon, VMware Team Up With Hybrid Cloud Service New Verizon service offers private public-cloud option
»	Could USB Flash Drives Be Your Enterprise's Weakest Link? The Pentagon last week conceded that a USB flash drive carried an attack program inside a classified ...
»	Delaware Contractor Mistakenly Posts Personal Data Of 22,000 Employees State of Delaware contractor Aon mistakenly posts personal data of 22,000 retirees without randomiza ...
»	IBM Corrects Unpatched Vulnerability Numbers After Google Challenge X-Force Team at IBM revises data on vendors with most unpatched bugs in recent IBM X-Force 2010 Mid- ...
»	Major Disruption of Pushdo Botnet Wasn't The Original Goal Botnet's spam traffic cut by 80 percent
»	China, Taiwan Nab 450 Suspects In Biggest Fraud Raid Ever Law enforcement authorities in China, Taiwan seize cash, fraud "manuals" from alleged tele ...
»	Four Best Practices For Tokenization Going beyond Visa's best practices guide

Date published: not known
Details

Daylight Savings Time (DST) Problems Abound

Several problems with Daylight Savings Time (DST) have come to light today. We're keeping a running list below. If you note more please send them.

Though there aren't apparently any planes falling out of the sky or trains running backwards there are some minor unpredicted problems being reported that are due to DST.

DST problems noted so far.:

eWeek.com - Time Change Brings 'Nightmare' Issues with Outlook, Calendars
eWeek.com - Daylight-Saving Time Change: Bigger than Y2K?
NIST.org - Multiple reports of problems with calendar connectors (e.g. Outlook to Lotus Notes)
SANS.org - Daylight Saving Time Change Problem With Symantec Backup Exec 10d and 10.1
SANS.org - MS DST Patch issue(?). Problems with the Microsoft Daylight Savings time patch.
SANS.org - Daylight Saving Time Change Problem With APC
SANS.org - Daylight Saving Time Change Problem With CISCO Phones
SANS.org - Daylight Saving Time Change Problem With Watchguard Fireware 8.3.1 and Watchguard System Manager 8.3.1
RIM.com - Blackberry Devices / Software
Microsoft-Watch.com - No Saving Time in Microsoft DST Patches? Apparently conflicts between the OS patch and the Outlook patch have caused “an absolute nightmare situation.”
ZDNet.com - Cellular phones batch DST
IBM Lotus Notes - - Daylight Saving Time (DST) 2007 information for Lotus Notes and Domino. Various reports of problems, nothing too serious and may be due to not fully following all of the IBM provided instructions.
Infoworld.com - GoDaddy tells client its servers don't need DST fix. But apparently their customers disagree and are having problems.
Problems due to not rebooting after applying fixes. Seen on Windows 2000 Server, reported on various systems. If you applied a DST fix bounce the box.
Various reports of organizations PBX and voice mail systems not changing time. New phone system administrators scrambling to figure out how to change the time manually. (Note, you better write this down as you'll be doing it again in 3 weeks)