Badkey Corner

VMware ESXi 4.1 Patch 04. VMSA-2011-0007

John Willemse — Wed, 28 Mar 2012 22:25:29 +0200

VMware ESXi 4.1 Patch 04 and VMSA-2011-0007. Release date: April 28, 2011
The Badkey Team. LinkedIn: http://nl.linkedin.com/in/willemsej

Badkey now on VMware ESXi 4 Build 582267 of VMSA-2011-0007 (28 Apr 2011). VMware ESXi 4.1 Patch 04.
VMware ESXi 4.1 Patch ESXi410-201201401-SG: Updates firmware for build information, see KB 2009137

@kb.vmware.com/selfservice
VMware ESXi 4.1 Patch ESXi410-201104401-SG: Updates Firmware. Release date: April 28, 2011

On Securityfocus.com VMSA-2011-0007 VMware ESXi and ESX Denial of Service and third party updates for Likewise components and ESX Service Console Apr 28 2011 04:54PM

@cvedetails.com
Vulnerability Details : CVE-2011-1785
VMware ESXi 4.0 and 4.1 and ESX 4.0 and 4.1 allow remote attackers to cause a denial of service (socket exhaustion) via unspecified network traffic. Publish Date : 2011-05-03 Last Update Date : 2012-01-26

@nvd.nist.gov
Vulnerability Summary for CVE-2011-1785
Original release date:05/03/2011. Last revised:01/27/2012. Source: US-CERT/NIST

@xforce.iss.net
VMware ESX Server and ESXi socket denial of service
vmware-esxserver-socket-dos (67195) The risk level is classified as MediumMedium Risk
Description: VMware ESX Server and ESXi are vulnerable to a denial of service, cause by an error when handling sockets. An attacker could exploit this vulnerability to exahust all available sockets.

@isc.sans.edu
VMware ESXi 4.1 Security and Firmware Updates
Published: 2011-04-28, Last Updated: 2011-04-28 17:23:27 UTC
The patch resolves several security issues (CVE-2011-1786, CVE-2010-1324, CVE-2010-1323, CVE-2010-4020, CVE-2010-4021, and CVE-2011-1785) affecting OpenLDAP and KRB5.

Now we are running on Build 582267. Release Date: January 30, 2012
More @support.vmware.com/selfsupport/download

VMware ESXi 4 Build 582267. Patch 04 (30 Jan 2012)

VMSA-2011-0007. 28 Apr 2011
VMware ESXi and ESX Denial of Service and third party updates for Likewise components and ESX Service Console
1. Summary
VMware ESXi and ESX could encounter a socket exhaustion situation which may lead to a denial of service. Updates to Likewise components and to the ESX Service Console address security vulnerabilities.

2. Relevant releases
VMware ESXi 4.1 without patch ESXi410-201104401-SG.
VMware ESXi 4.0 without patch ESXi400-201104401-SG.

Summaries and Symptoms:
This bulletin includes all software updates required to install VMware ESXi 4.1 Patch 04 on a host.
A host is not considered running ESXi 4.1 Patch 04 until it is compliant with this bulletin.
For more information, see the KBs for the individual bulletins.
ESXi410-201201401-SG Security. KB 2009143
ESXi410-201201402-BG Critical. KB 2009144

The Badkey Team. LinkedIn: http://nl.linkedin.com/in/willemsej

Linux ClearOS. RedHat / CentOS

John Willemse — Sun, 11 Mar 2012 00:02:22 +0200

Badkey goes: Linux ClearOS. Linux build on on CentOS. http://www.clearfoundation.com

ClearOS, Distribution Timeline and Software.
We are old friends to open source. At ClearFoundation, our team has been together for nearly 10 years with over 118,000 registered systems in the field. ClearOS is based upon RedHat / CentOS Linux and has been developed over time by diligent developers with tons of customer feedback.

In 2005, we incorporated several elements of CentOS to the benefit of the solution. We are excited about what the future will bring with new resources, developers, and partners in the future!

What is ClearOS?

Information:
http://www.clearfoundation.com/Software/overview.html

wikipedia.org:
http://en.wikipedia.org/wiki/ClearOS

ClearOS (formerly named ClarkConnect) is a Linux distribution, based on CentOS and Red Hat Enterprise Linux, designed for use in small and medium enterprises as a network gateway and network server with a web-based administration interface.[4] It is designed to be an alternative to Windows Small Business Server.ClearOS succeeds ClarkConnect.
The software will be built by ClearFoundation, and support services can be purchased from ClearCenter. ClearOS 5.1 removes previous limitations to mail, DMZ, and MultiWAN functions.

Starting with the ClearOS 6 release:
The distribution will be a full-featured operating system for servers and workstations built from source packages for Red Hat Enterprise Linux.

Features include:
Stateful firewall (iptables), networking and security
Intrusion detection and prevention system (SNORT)
Virtual private networking (PPTP, IPSec, OpenVPN)
Web proxy, with content filtering and antivirus (Squid, DansGuardian)
E-mail services (Webmail, Postfix, SMTP, POP3/s, IMAP/s)
Groupware (Kolab)
Database and web server (easy to deploy LAMP stack)
File and print services (Samba and CUPS)
Flexshares (unified multi-protocol storage which currently employs CIFS, HTTP/S, FTP/S, and SMTP)
MultiWAN (Internet fault tolerant design)
Built-in reports for system statistics and services (MRTG and others)

ClearCenter has created the ClearOS Enterprise User Guides and Video Tutorials. You can find these reference materials on clearcenter.com.
http://www.clearfoundation.com/docs/user_guide/start

Check us out in action! Click below to see a live demo of a ClearOS platform in all its glory!
ClearOS Demo Compatible Browsers:
URL: https://demo1.clearos.com:81 or URL: https://demo2.clearos.com:81
User Name: get and Password: clear

Servers are for demonstration and short term evaluation use. Restrictions to use apply. Servers are for an international audience and may appear in different languages. To change the languages please visit the language page of demo1 and demo2. Servers reset at the bottom and top of each hour respectively.

ClearOS Download:
http://www.clearfoundation.com/Software/downloads

@virtual marketplace:
ClearOS is a powerful network and gateway server operating system designed for small business and distributed environments.
http://www.vmware.com/appliances/directory/node/325873

Description:
ClearOS is an integrated software distribution that includes everything for a small IT environment from easy to understand file storage to cloud-based services with an intuitive management console. With over 119,800 deployments in 122 countries and 21 languages, ClearOS is a proven, secure, and cost-effective IT delivery platform for anyone looking to develop, deploy or deliver managed IT services like the growing list of ClearCenter Partners across the globe.

Features & Benefits:
ClearOS is a network and gateway server Linux distribution. Updates and new modules can be obtained through ClearSDN. With over then 118,000 registered deployments around the globe, ClearOS has been proven to be a secure and robust gateway on the network edge. ClearOS can operate on standard x86 hardware, turning standard hardware into a powerful appliance for control of network servers and network gateway.

ClearOS is an aggregation of the leading open source network and gateway applications and content to manage your IT needs.
ClearOS is the next evolution in IT for small business and distributed environments because it takes advantage of open source reliability while using the latest updates from commercial content sources. ClearOS is a perfect fit for businesses looking for real value within a cost effective structure.

One advantage of the ClearOS open source architecture is the flexibility to deploy the appropriate elements for a given environment. If you are only looking for a reliable content filtering solution, you can provision just that function and ignore the rest. You can pick and choose the elements you need to deploy, know you have access to more functions as needed.

ClearOS Robust Feature Set Includes:
Intrusion Detection: Detect and notify security breaches on your network from inside and out
Firewall: Advanced control over network access
Content Filtering: Ability to control access to inappropriate and dangerous content
Antispam: Detect:, reduce and control the volume of unsolicited email
Antivirus: Detect and quarantine malware and malicious content with email, web traffic
Wireless Support: Manage wireless access to your network
File Server: Central storage for all of your valuable documents
Print Server: Advanced network printing for all major brands of printers
MultiWAN: Connect and load balance multiple Internet connections
Web Server: Maintain your own local web site for Internet

And much more... pricing: Free. http://www.clearfoundation.com

VMware Virtual Appliances (VOF). Appliance Type: Partner
http://www.vmware.com/appliances/directory/node/325873

Distrowatch ClearOS:
http://distrowatch.com/table.php?distribution=clearos

ClearOS Enterprise is a server, network, and gateway platform designed for small businesses and distributed enterprise environments. ClearOS Enterprise is based upon ClearOS Core which is a rebuild of Red Hat Enterprise Linux. The distribution is flexible and includes an extensive list of features and integrated services which can be configured through a web-based interface. Some of the tools found in ClearOS Enterprise include anti-virus, anti-spam, VPN, content filtering, bandwidth manager, file services, SMTP services, print services, SSL certification, and web services. ClearOS includes a marketplace which simplifies the installation of software including 3rd party modules. The distribution is provided as a free download, inclusive of basic OS updates with free registration.

The Badkey Team.

LinkedIn: http://nl.linkedin.com/in/willemsej
Website: http://www.badkey.com
Twitter: http://twitter.com/willemsej
Facebook: http://www.facebook.com/profile.php?id=688777727

Windows Server Update Services (WSUS)

John Willemse — Thu, 8 Mar 2012 23:52:47 +0200

Windows Server Update Services 3.0 Service Pack 2

Even een server hier @badkey.com

History: Sunday 30th, October 2005
Badkey Corner. WSUS Rollup Tool Sample. via URL: http://wsus.editme.com
http://www.badkey.com/db/blogsphere.nsf/d6plinks/JWIE-6HNU2W

Windows Server Update Services 3.0 Service Pack 2 (WSUS 3.0 SP2) delivers new features, including Windows Server 2008 support,
integration with Server Manager in Windows Server 2008 R2, API enhancements, and software updates.

Microsoft Windows Server Update Services 3.0 SP1 (WSUS 3.0 SP1) enables information technology administrators to deploy the latest Microsoft product updates to computers running Microsoft Windows Server 2003, Windows Server� 2008, Windows Vista�, Microsoft Windows XP with Service Pack 2, and Windows 2000 with Service Pack 4 operating systems. By using WSUS, administrators can fully manage the distribution of updates that are released through Microsoft Update to computers in their network.

How WSUS works:
WSUS provides a management infrastructure consisting of the following: Microsoft Update
The Microsoft Web site that distributes updates of Microsoft products. Windows Server Update Services server

This component is installed on a Windows Server 2003 SP1 or Windows Server 2008 server inside the corporate firewall. The WSUS server allows administrators to manage and distribute updates through the WSUS 3.0 Administration console, which can be installed on any Windows computer in the domain. In addition, a WSUS server can be the update source for other WSUS servers within the organization. At least one WSUS server in the network must connect to Microsoft Update to get available update information. The administrator can determine, based on network security and configuration, whether or not other servers should connect directly to Microsoft Update.
Automatic Updates

This component is built into the Windows Server 2008, Windows Vista, Windows Server 2003, Windows XP, and Windows 2000 SP4 operating systems. Automatic Updates enables both server and client computers to receive updates from Microsoft Update or from a WSUS server.

Overview:
WSUS 3.0 SP2 delivers important customer-requested management, stability, and performance improvements. Some of the features and improvements include the following:

Integration with Windows Server 2008 R2.
Support for the BranchCache feature in Windows Server 2008 R2.
Support for Windows 7 and Windows Server 2008 R2 clients.
Compliance Report
Windows Update Agent (WUA) offers a collection of performance enhancements, user experience improvements, and bug fixes software updates.

WSUS 3.0 SP2 can be installed alone, or as an upgrade of WSUS 3.0 SP1.

This package installs both the WSUS 3.0 SP2 Server, WSUS 3.0 SP2 Administration Console components and WUA client for down-level operating system. You must install the server components on a computer that is running on Windows Server 2003 SP2 or later versions. You may install the Administration Console on a remote computer that is running one of the supported operating systems, see below the Supported Operating Systems section.

WSUS Support Forums. http://www.wsus.info

Stapsgewijze handleiding voor Windows Server Update Services 3.0 SP2.
http://technet.microsoft.com/nl-nl/library/dd939822%28v=ws.10%29.aspx

Microsoft Windows Server Update Services 3.0 SP2 Step By Step Guide.
http://www.microsoft.com/download/en/details.aspx?id=913

Windows Server Update Services
http://en.wikipedia.org/wiki/Windows_Server_Update_Services

Microsoft Windows Server Update Services 3.0 SP2 Operations Guide
http://www.microsoft.com/download/en/details.aspx?id=7328

Windows Server Update Services Tools and Utilities
http://technet.microsoft.com/en-us/wsus/bb466192

WSUS 3.0 SP2 is een uitgebreide en veelzijdige oplossing voor het beheer van updates. Zie de volgende documenten voor uitgebreide informatie over de installatie en het gebruik van WSUS:
De WSUS Deployment Guide op http://go.microsoft.com/fwlink/?LinkId=139832
De WSUS Operations Guide op http://go.microsoft.com/fwlink/?LinkId=139838
De release-opmerkingen voor WSUS op http://go.microsoft.com/fwlink/?LinkId=139840

The Badkey Team

LinkedIn: http://nl.linkedin.com/in/willemsej

Windows Home Server�2011 (WHS)

John Willemse — Sat, 18 Feb 2012 00:00:00 +0200

Wat is Windows Home Server 2011?
URL: http://windows.microsoft.com/nl-NL/windows/products/windows-home-server

Windows Home Server 2011 is ontworpen om gezinnen te helpen bij het automatisch uitvoeren van een back-up en het organiseren en toegankelijk houden van hun bestanden en gegevens. Windows Home Server is betaalbaar en eenvoudig in het gebruik en beschikbaar als vooraf ge�nstalleerde oplossing. Met Windows Home Server kunt u bestanden terugzetten die u kwijt bent geraakt, uw pc herstellen, uw apparatuur probleemloos en veilig laten draaien en mediabestanden over uw thuisnetwerk streamen.
Een boek nodig? bol.com

Wat kost Windows Home Server 2011:
Microsoft heeft de adviesprijs van zijn Windows Home Server 2011 besturingssysteem recentelijk laten zakken, zo blijkt uit een rondgang langs een aantal grote webshops en de prijshistorie in de Hardware.Info prijsvergelijker. De Nederlandstalige uitvoering van Home Server 2011 is op dit moment al vanaf €50 verkrijgbaar!

Microsoft heeft zijn Windows Home Server besturingssysteem in het leven geroepen als alternatief voor een NAS-server. Het beschikt over een aantal specifieke voordelen die erg interessant kunnen zijn als je makkelijk back-ups van Windows computers wilt maken en op zoek bent naar een server waarop je eenvoudig (Windows) applicaties kunt draaien. Vorig jaar bespraken al uitgebreid de nieuwe mogelijkheden en features van de 2011-versie ten opzichte van zijn voorganger.

Belangrijkste functies:

Automatische, dagelijkse back-ups van alle netwerk-pc's
Eenvoudig, gecentraliseerd pc-onderhoud en beveiligde toegang tot alle bestanden vanuit uw hele thuisnetwerk
Streamen van mediabestanden over uw hele netwerk
Online toegang op afstand tot bestanden en thuisgebaseerde pc's
Uitbreidbaar met invoegtoepassingen en apps van derden

Beveiliging en onderhoud:

Dagelijks een back-up van elke computer in uw netwerk maken, met inbegrip van de server.
Alles herstellen, van losse bestanden die u kwijt bent tot de hele inhoud van pc's.
Eenvoudig uw hele server terugzetten als er zich een noodsituatie heeft voorgedaan.
Zich beschermd weten door uw firewall met sterke wachtwoordcontroles.
Delen wat u wilt en de rest priv� houden.
De status en prestaties van elke computer bij u thuis monitoren.
Ervoor zorgen dat uw antivirus- en andere beveiligingssoftware up-to-date is.

Organiseren en toegankelijkheid:

Al uw foto's, films en andere bestanden op een centrale locatie opbergen.
Al deze bestanden vanaf elke computer in uw thuisnetwerk openen.
Gedeelde foto's, muziek en video's streamen op netwerkapparaten.
Met uw hele gezin genieten van uw muziekcollectie.
Vloeiend gestreamde video's, digitaal opgenomen tv-programma's en door Silverlight ondersteunde diashows bekijken, zowel thuis als elders.
Digitaal opgenomen programma's en films op uw tv bekijken via een Xbox 360 of een andere ondersteunde digitale mediaontvanger.
Op afstand uw thuisnetwerk benaderen.
Bestanden uploaden naar (en downloaden van) gedeelde mappen op uw thuisserver via een beveiligde, gepersonaliseerde URL.*
Programma's uitvoeren waarbij het lijkt alsof u voor uw eigen thuiscomputer zit.

@computertotaal.nl 28 september 2011
Het is alweer ruim vier jaar geleden dat de eerste versie van Windows Home Server werd ge�ntroduceerd: de makers hebben ruim de tijd genomen om een nieuwe versie te maken. Windows Home Server is gebaseerd op Windows Server 2008 R2. Deze serverversie is afgeslankt en aangepast voor thuisgebruik. Windows Home Server 2011 heeft drie doelen. Allereerst kunt u met Windows Home Server de computers in uw thuisnetwerk centraal onderhouden en beheren. Zo worden er back-ups gemaakt van de aangesloten computers, kunt u gegevens terughalen en wordt er gecontroleerd of alle updates zijn toegepast. Dit centraal beheer heeft als groot voordeel dat u niet langer de individuele computers los hoeft te onderhouden; vergelijk het met een bedrijf waarin het beheer en onderhoud ook gecentraliseerd plaatsvindt. Een tweede doel van Windows Home Server is het centraal opslaan van uw bestanden, de gegevens zijn hierdoor niet meer verspreid over de losse computers (met alle risico's van dien). Tot slot biedt Windows Home Server de mogelijkheid om de gegevens van de server en uw individuele computers van buitenaf toegankelijk te maken. Zo kunt u bijvoorbeeld vanaf uw werk de nieuwste vakantiefoto's op uw computer thuis bekijken.

Hier nog even paar links:
Windows Home Server Blog
Windows Home Server Tips & tricks voor WHS 2011

Het Badkey Team

Sophos Endpoint Version 10. Virusscan Server 2008 and WHS.

John Willemse — Tue, 7 Feb 2012 23:05:54 +0200

Sophos Endpoint Version 10. Version 10 Upgrade Center

For customers with an Endpoint Protection license using Enterprise Console. Upgrading made easy

What’s new
- Faster scanning - We've improved our scan speeds by whitelisting common Windows OS files
- Improved management - It's now easier to find computers for remediation and manage alerts
- Faster installation - We've rebuilt the installer so it's now quicker and simpler to secure new computers
- Patch, Web and Encryption add-ons - To further enhance your security
More @Sophos

10 ways our complete security just got better:
We’ve built Endpoint 10 to give your business even better protection against malware infection and data loss. It’s complete security that businesses of all sizes can actually use - and it’s faster than ever before. We’re reducing your vulnerability to infection, giving your users the same protection wherever they are, and making securing data simple.
More @Sophos

The Badkey Team.

Just an upgrade to IBM Lotus Notes/Domino 8.5.3 Upgrade Pack 1

John Willemse — Sun, 29 Jan 2012 14:41:40 +0200

Just upgraded Linux Server to Lotus Notes/Domino 8.5.3

Lotus Notes and Domino 8.5.3 Upgrade Pack 1 provides a rich set of assets for building desktop and mobile web applications as well as including two social application templates. Upgrade Pack 1 contains the following:

- Domino XPages Extension Library
- Includes new set of mobile specific XPages controls and other assets
- Updated templates built with controls in Extension Library
- TeamRoom: XPages UI including mobile access
- Discussion: new mobile access
- Domino Access Services: New set of JSON based REST services for accessing Domino data

http://www-01.ibm.com/software/lotus/notesanddomino/nd85-UpgradePack853-1.html

Notes/Domino Fix List URL: http://www-10.lotus.com/ldd/r5fixlist.nsf/%28Progress%29/853

From @IBM
IBM� Lotus Notes� and Domino� 8.5.3 includes a vast array of end-user feature enhancements to increase personal productivity of Lotus Notes, Lotus� iNotes™, and Lotus Notes Traveler for users and developers using Domino Designer.

Highlights:
Lotus Notes 8.5.3 delivers significant usability enhancements to support social businesses and helps users get work done fast. Calendar and mail enhancements:
Auto processing, which automatically applies updates to meetings that you have accepted as updates arrive
Counter proposals so that when you propose a new time for a meeting, you can choose to leave a placeholder for the original meeting time on the calendar
Enhanced new mail notification, which provides a pop up preview of new mail messages as they arrive
Notification to existing invitees when adding or removing attendees from an existing meeting, informing them of the change and updating the invitee list on their calendar invitation

Entitlement to IBM Connections Files and Profiles, for no additional charge, allows you to tap into the knowledge of networks of professionals with a single click. This helps users to quickly find skills within their organization and to easily share content with other people and remove the need to send large files through email.
Lotus Domino 8.5.3 provides greater platform flexibility and improved hardware efficiency through expanded virtualization support.
Lotus Domino Designer 8.5.3 continues to deliver innovation for developers with enhancements focused on performance and scalability and enhanced user experience. Improved XPages support for industry-standard web application models makes it easier to bring applications to mobile devices. Availability of a Domino Server trial makes it easy for customers to try before they buy.
Lotus Notes Traveler support for Nokia Symbian 3 devices allows you to expand the reach of the business to more devices. For Android users, additional Lotus Traveler enhancements improve usability, performance, and deployment in the areas of additional operating system support, calendar, mail, and deployment. The capability to wipe only Lotus Traveler Mail, Calendar, and Contact data from an Apple iOS device is also available.
Lotus iNotes 8.5.3 delivers productivity gains with enhancements to improve the deployment experience.

Quick Start Guide and Release Notes
CI1L0ML - Quick Start Guide - IBM Lotus Notes and Domino V8.5.3 Multilingual - 3 MB
CI1L1EN - IBM Lotus Notes and Domino V8.5.3 Release Notes English - 1 MB

IBM Lotus Notes Client 8.5.3
Windows 7 Enterprise, Windows 7 Ultimate, Windows Vista Business, Windows Vista Enterprise, Windows Vista Ultimate, Windows XP Professional
CI1L2EN - IBM Lotus Notes Client V8.5.3 Basic Configuration for Windows English - 182 MB
CI1L4EN - IBM Lotus Notes Client V8.5.3 for Windows English - 524 MB
CI1MUML - IBM Lotus Notes Dictionaries V8.5.3 for Windows Multilingual - 19 MB
CI243ML - IBM Lotus Notes XTAF Dictionaries V8.5.3 for Windows and Linux Multilingual - 13 MB
CI1LQEN - IBM Lotus Notes, Domino Designer and Admin V8.5.3 for Windows XP, Vista and Windows 7 32 Bit English - 687 MB
CI1MZEN - IBM Lotus Domino Offline Services Client Preinstaller for Notes/Domino V8.5.3 English -145 MB
CI1N0EN - IBM Lotus Domino Global Workbench V8.5.3 for Windows English - 47 MB

Mac OS Leopard, Mac OS Lion
CI1L3EN - IBM Lotus Notes Client V8.5.3 Basic Configuration for Mac English - 163 MB
CI1L7EN - IBM Lotus Notes Client V8.5.3 for MAC English - 421 MB
CI1MWML - IBM Lotus Notes Dictionaries V8.5.3 for Mac Multilingual - 20 MB
CI244ML - IBM Lotus Notes XTAF Dictionaries V8.5.3 for Mac Multilingual - 9 MB

Linux
CI1L5EN - IBM Lotus Notes Client V8.5.3 for Linux (RPM Install) English - 508 MB
CI1L6EN - IBM Lotus Notes Client V8.5.3 for Linux (Debian Install) English - 526 MB
CI1MVML - IBM Lotus Notes Dictionaries V8.5.3 for Linux Multilingual - 19 MB
CI243ML - IBM Lotus Notes XTAF Dictionaries V8.5.3 for Windows and Linux Multilingual - 13 MB

IBM Lotus Traveler 8.5.3
CI1MXML - IBM Lotus Notes Traveler V8.5.3 for Windows Multilingual - 177 MB
CI1MYML - IBM Lotus Notes Traveler V8.5.3 for Linux for xSeries Multilingual - 183 MB

IBM Lotus Domino 8.5.3
CI1L8EN - IBM Lotus Domino V8.5.3 32 bit for Windows English - 635 MB
CI1L9EN - IBM Lotus Domino V8.5.3 64 bit for Windows English - 685 MB
CI1LBEN - IBM Lotus Domino V8.5.3 32 bit Linux for xSeries English - 610 MB
CI1LCEN - IBM Lotus Domino V8.5.3 64 bit Linux for zSeries English - 598 MB
CI1LEEN - IBM Lotus Domino V8.5.3 for AIX 32 bit English - 622 MB
CI1LAEN - IBM Lotus Domino V8.5.3 64 bit for AIX English - 628 MB
CI1LDEN - IBM Lotus Domino V8.5.3 32 bit Solaris English - 637 MB
CI1LFEN - IBM Lotus Domino V8.5.3 for IBM i English - 1038 MB

IBM Connections Files and Profiles
CI2IAML - Quick Start Guide- IBM Connections Files and Profiles for Lotus Notes and Domino V8.5.3 for AIX, Windows, Linux Multilingual - 17 MB
CI351EN - IBM Connections Files and Profiles for Lotus Notes and Domino V8.5.3 Readme English - 1 MB
CI2IBML - IBM Connections Files and Profiles for Lotus Notes and Domino V8.5.3 for Windows Multilingual - 1049 MB
CI2IEML - IBM Connections Files and Profiles for Lotus Notes and Domino V8.5.3 Wizard for Windows Multilingual - 153 MB
CI2ICML - IBM Connections Files and Profiles for Lotus Notes and Domino V8.5.3 for Linux,AIX Multilingual - 1220 MB
CI2IDML - IBM Connections Files and Profiles for Lotus Notes and Domino V8.5.3 for Linux for System z Multilingual - 1066 MB
CI2IFML - IBM Connections Files and Profiles for Lotus Notes and Domino V8.5.3 Wizard for Linux,AIX Multilingual - 305 MB

Date: 2011 jun 11th
IBM Lotus Sametime Entry V8.5.2 for Domino V8.5.3 Multiplatform Multilingual eAssembly
CZY9GML - IBM Sametime Standard V8.5.2 Multilingual Multiplatform Quickstart Guide - 5 MB
CZY9XML - IBM Sametime Entry Community Server V8.5.2 Windows Multilingual - 1011 MB
CZY9YML - IBM Sametime Entry Community Server V8.5.2 AIX, Linux, Solaris SPARC Multilingual - 959 MB
CZY9ZML - IBM Sametime Entry Community Server V8.5.2 IBM i Multilingual - 586 MB
CZZ92ML - IBM Sametime Entry Connect Client and Network Installer V8.5.2 Multiplatform Multilingual - 2064 MB

Tools
CZ5S8EN - IBM Lotus Domino Configuration Tuner 1.0.0 for Windows English - 2 MB
C84T5NA - Install Shield Tuner for Lotus Notes 7.0.x, 8.0.x and 8.5.x for Windows 2000, 2003 English - 14 MB

The Badkey Team

Dominoblog.ntf. Lotus/Domino 8.5.x

John Willemse — Sun, 29 Jan 2012 02:20:34 +0200

Again an opening. I'm working on a blog template dominoblog.ntf
The: 'IBM� Lotus Notes� blog template (dominoblog.ntf).

The Blog (dominoblog.ntf) template has been updated to be more consistent with the new look and feel of Lotus Notes that was introduced in 8.0. Improvements to the blog template include simplified forms for creating posts and comments, easier attachment handling, and an emphasis on using tags instead of categories. In addition, blog administrators have control over which users can access configuration views. The Web Administrator client rich text editor has been updated to the Dojo rich text editor. All existing users automatically get the updated rich text editor, however, the layout of the editor does not update automatically so that any custom enhancements are not lost. To refresh the Web-based Administrator rich text editor to the new look and feel, click Advanced > HTML Templates > Web Client Templates, and then click Reset Web Templates.

Web logs (blogs)
You can create your own personal Web logs (blogs) using the IBM� Lotus Notes� blog template (dominoblog.ntf).
After you create a blog application, you can then open it as you would any other Notes� application (NSF) file. From your blog application, you can create and manage content and blog discussions.
You can use one template to create a number of blogs and maintain consistency across the templates. If there are updates to the template, you can update your template design without losing any of the customization.
Although you can use Notes to add content to a blog and manage it, you can also add content using a Web browser, and you can manage your blog using a default Web browser client from Microsoft� Internet Explorer or Mozilla Firefox.
You can create and manage a blog application locally on your hard drive or on any server. However, for your blog to be accessible to others via the Internet, a signed copy of the NSF file must be on a Web-facing server.

Moving to: http://www.badkey.com/db/dominoblog.nsf

The Badkey Team

IBM Lotus Domino RPC Operation Denial of Service Vulnerability. 8.5.2

John Willemse — Sat, 28 Jan 2012 21:43:50 +0200

According to the IBM page about this: "If an attacker can monitor and record all communications between a Notes client and a Domino server then it is possible to crash the Domino server by modifying a specific packet, in a specific way, during a specific operation.", so a relatively low threat. Upgrade to 8.5.3 if you can, if not (because of the server changes in 8.5.3) upgrade to 8.5.2 FP4.

Source: SecurityFocus

IBM Lotus Domino RPC Operation Denial of Service Vulnerability

Bugtraq ID:	51167
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2011-1393
Remote:	Yes
Local:	No
Published:	Dec 22 2011 12:00AM
Updated:	Jan 02 2012 11:20PM
Credit:	Xiaopeng Zhang of Fortiguard Labs
Vulnerable:	IBM Lotus Domino 8.5.2 IBM Lotus Domino 8.5 IBM Lotus Domino 8.0.2 Fix Pack 5 IBM Lotus Domino 8.0.2 IBM Lotus Domino 8.5.2 FP3 IBM Lotus Domino 8.5.2 FP2 IBM Lotus Domino 8.5.0.1 IBM Lotus Domino 8.5 FP1 IBM Lotus Domino 8.5 IBM Lotus Domino 8.0.2.4 IBM Lotus Domino 8.0.2.3 IBM Lotus Domino 8.0.2.2 IBM Lotus Domino 8.0.2.1 IBM Lotus Domino 8.0

Not Vulnerable:	IBM Lotus Domino 8.5.3 IBM Lotus Domino 8.5.2 FP4

IBM Lotus Domino is prone to a denial-of-service vulnerability.
An attacker can exploit this issue to crash the affected application, denying service to legitimate users.
An attacker can use readily available network utilities.

Solution:
The vendor released an update. Please see the references for details.

Location metatags uncovered. MetaTag Name location

John Willemse — Sat, 28 Jan 2012 17:25:38 +0200

Just adjusted the Meta Tag names:

MetaTag Name ICBM
Meta Tag Value 51.967609,4.621247

MetaTag Name geo.position
Meta Tag Value 51.967609;4.621247

MetaTag Name geo.placename
Meta Tag Value Netherlands,Nieuwerkerk aan den IJssel

Badkey Nieuwerkerk aan den IJssel. Link.

LET OP !, Badkey heeft:
ADT automatische politie melding.
http://www.adtfireandsecurity.nl

The Badkey Team

Badkey aangepaste metatags analyse & controle.

John Willemse — Sat, 14 Jan 2012 00:53:26 +0200

We draaien nu met de aangepaste metatags voor 2012.

De informatie komt nog steeds goed in de zoekmachines van Google, Yahoo, Ask, Bing en Ilse.

Badkey Corner
Statement: Security, IBM/Lotus Domino and Linux. Security is our Goal, but we don't stop at the limits of Lotus Notes Domino
Link: http://www.badkey.com

Via de Gratis metatags analyse & controle van de metatags hebben we de aanpassingen gemaakt.
Voor de robots van: Google, Yahoo, Ask, Bing en Ilse. Link Badkey

Het Badkey Team