IRIS

Instructional & Research Information Systems

EECS

Mark Kraitchman

bouncing email

by

A mistake was made. When new EECS CalMail accounts was created for people that had the following three non-alphanumeric characters in their IRIS login name, their forwarding for their EECS CalMail account was set incorrectly:

dash –

underbar _

dot .

Any emails sent to the @EECS.Berkeley.EDU email address for IRIS login names with those three non-alphanumeric characters between 9am Thursday September 9, 2010 and when the forwarding was corrected, would have resulted in a non-delivery error message to the sender.

The forwarding for the non-alphanumeric characters EECS CalMail accounts were fixed approximately as follows:

underbar _ 1pm Thursday September 9, 2010

dot . 7am Friday September 10, 2010

dash – 7am Friday September 10, 2010

The CalMail admins plan to provide us information concerning the bounced emails.

has info about our migration to EECS CalMail.

Resolved as of 2010-09-10 07:00:00

New SSL Certificate for gateway.EECS

by

The current 1024 bit SSL certificate for gateway.EECS.Berkeley.ED will expire soon.

The current Entrust SSL certificate is being replaced by a 2048 bit Entrust SSL certificate that utilizes the Entrust 2048 bit L1B chain root certificate.

Our testing suggests that thunderbird, pine, Outlook, Microsoft Windows Mail (replacement for Outlook Express) and Apple Mail should be able to use the 2048 bit SSL certificate on gateway.EECS.Berkeley.EDU for outgoing smtp service using STARTTLS without any problems.

If you have problems sending email using gateway.EECS.Berkeley.EDU with the new SSL certifciate please contact the IRIS help desk (help@eecs, 395 Cory M-F 9:30am-5pm, 642-7777).

https://iris.eecs.berkeley.edu/15-faq/15-software/#Email has documentation on configuring various mail user agents.

Note, if your mail user agent can not handle 2048 bit SSL certificates, the outgoing smtp server on calmail.Berkeley.EDU still uses a 1024 bit SSL certificate.

Resolved as of 2009-11-16 07:14:00

vulnerability in Internet Explorer

by

Microsoft posted Security Advisory (972890)
entitled “Vulnerability in Microsoft Video ActiveX
Control Could Allow Remote Code Execution” on
Monday July 6, 2009 –

The flaw affects people running Internet Explorer
on machines running Windows XP or Windows Server 2003.
A remote, unauthenticated attacker could execute arbitrary code
with the privileges of the victim user.

For such devices, it is recommended that
Microsoft Video ActiveX Control be disabled from
running in Internet Explorer –
http://support.microsoft.com/kb/972890#FixItForMe

http://www.kb.cert.org/vuls/id/180513
[Read more…] about vulnerability in Internet Explorer

BWRC wireless networking maintenance

by

There will be maintenance affecting BWRC
wireless networking starting Thursday
June 25, 2009 at 9:30 am. During the
maintenance, BWRC wireless clients will
not be able to get a new dhcp lease on the
IRIS wireless network. Devices that obtained a
dhcp lease prior to the maintenance will not
be affected. AirBears will not be affected.

Maintenance is scheduled to be completed by
10:30am, but if work goes as planned
it could be completed by 9:40am.

The existing dhcp server at BWRC providing
IRIS wireless support has a corrupted operating
system and will be replaced by another device
during the maintenance.
[Read more…] about BWRC wireless networking maintenance

phpMyAdmin vulnerabilities and scanning

by

John Ives from the campus SNS (System & Network Security) wrote:

“Everyone,

As many of you may be aware, web based management tools, whether they are used to manage database backends, web content or anything else, are frequently the targets of attacks by would be hackers. In both March an April, phpMyAdmin, a tool for managing MySQL servers via the web, released patches for issues that would allow users to execute arbitrary php code on the server. In the last couple of days, System and Network
Security has seen a marked increase in the number of attackers who have been scanning for these vulnerabilities across campus. This increase also coincides with an increase in phpMyAdmin scanning that has been reported from other sources, like the Internet Storm Center.

If your system runs phpMyAdmin and you have not already applied the March and April patches (see the reference section below), I would urge you to do so, as soon as possible.

Yours,

John Ives

References:

phpMyAdmin Homepage:

April Patch:

March Patch: