IRIS Staff

Around 8:00 this morning parts of campus, including Soda and Cory halls, lost power for about an hour. This affected all of the computing and infrastructure services in EECS.

IDSG and network staff are working to restore computing and network services to the department. Many have been restored already and the rest should follow shortly.

We appreciate your patience as we continue to recover from the outage. For further details, please see the UC Berkeley newscenter.

Macserver is down, we apologize for the inconvenience. IDSG and Apple are working to bring it back, hopefully some time tomorrow. If you require software on macserver please send IDSG an email. Thank you for your patience.
[Read more…] about MAC Server Down

Microsoft Security Bulletin Summary for February 14, 2006

Issued: February 14, 2006

Version Number: 1.0

Security patches defined by Microsoft as “critical” or “important”
MUST be applied within 10 business days of notification. Should there
be active exploits, the time will be adjusted and users will be
informed appropriately. Hosts unpatched after the defined time are
subject to scanning and removal from the EECS network as per campus IT security policies.

Patching is sometimes dependent on the service pack level of the
Microsoft OS, and installed applications, please read requirements
carefully.

Critical Security Bulletins

MS06-004—Cumulative Security Update for Internet Explorer (910620)

Impact: Remote Code Execution

Affected Software:

• Windows 2000 Service Pack 4

MS06-005—Vulnerability in Windows Media Player Could Allow Remote Code Execution (911565)

Impact: Remote Code Execution

Affected Software:

• Windows 2000 Service Pack 4
• Windows XP Service Pack 1
• Windows XP Service Pack 2
• Windows Server 2003

Important Security Bulletins

MS06-006—Vulnerability in Windows Media Player Plug-in with Non-Microsoft Internet Browsers Could Allow Remote Code Execution
(911564)

Impact: Remote Code Execution

Affected Software:

• Windows 2000 Service Pack 4
• Windows XP Service Pack 1
• Windows XP Service Pack 2
• Windows XP Professional x64 Edition
• Windows Server 2003
• Windows Server 2003 Service Pack 1
• Windows Server 2003 x64 Edition

MS06-007—Vulnerability in TCP/IP Could Allow Denial of Service
(913446)

Impact: Remote Denial of Service

Affected Software:

• Windows XP Service Pack 1
• Windows XP Service Pack 2
• Windows XP Professional x64 Edition
• Windows Server 2003
• Windows Server 2003 Service Pack 1
• Windows Server 2003 for Itanium-based Systems
• Windows Server 2003 with SP1 for Itanium-based Systems
• Windows Server 2003 x64 Edition

MS06-008—Vulnerability in Web Client Service Could Allow Remote
Code Execution (911927)

Impact: Remote Code Execution

Affected Software:

• Windows XP Service Pack 1
• Windows XP Service Pack 2
• Windows XP Professional x64 Edition
• Windows Server 2003
• Windows Server 2003 Service Pack 1
• Windows Server 2003 for Itanium-based Systems
• Windows Server 2003 with SP1 for Itanium-based Systems
• Windows Server 2003 x64 Edition

MS06-009—Vulnerability in the Korean Input Method Editor Could
Allow Elevation of Privilege (901190)

Impact: Elevation of Privilege

Affected Software:

• Windows XP Service Pack 1
• Windows XP Service Pack 2
• Windows XP Professional x64 Edition
• Windows Server 2003
• Windows Server 2003 for Itanium-based Systems
• Windows Server 2003 with SP1 for Itanium-based Systems
• Windows Server 2003 x64 Edition
• Microsoft Office 2003 Service Pack 1
• Microsoft Office 2003 Service Pack 2
• Microsoft Office 2003 Multilingual User Interface Packs
• Microsoft Office Visio 2003 Multilingual User Interface Packs
• Microsoft Office Project 2003 Multilingual User Interface Packs
• Microsoft Office 2003 Proofing Tools
• Microsoft Office Visio 2003
• Microsoft Office OneNote 2003
• Microsoft Office Project 2000

MS06-010—Vulnerability in PowerPoint 2000 Could Allow Information Disclosure (889167)

Impact: Information Disclosure

Affected Software:

• Microsoft Office PowerPoint 2000

Previous blocking of ICMP traffic from off campus to EECS networks has been lifted.

Microsoft will release their patches for the month on Tuesday, February 14, 2006. HERMES, PRINT, RIS and WINSWW will be down for patching the following Wednesday, February 15, 2006, from 3:00p¿5:00p.

macserver.eecs.berkeley.edu, which hosts the Mac software warehouse, will be down for maintenance at this time as well.

In an effort to thwart continued ICMP attacks through our firewall, we have temporarily blocked ICMP from off campus networks to EECS.

This post will be updated when we return to our normal configuration.

We are currently seeing a high number of DOS (Denial Of Service) attacks coming from off campus and these are impeding the performance of our firewall. As such, there is intermittent connectivity from EECS to campus and the Internet. We are investigating to remedy the problem.

[Read more…] about Degraded network performance due to DOS attacks

Beginning last evening and continuing off and on this morning, we have experienced some loss of connectivity to our border router through the EECS firewall. We are seeing very high CPU utilization on the firewall and, as a result, some packet loss to and from the border. I have opened a case with the vendor and we are actively pursuing the issue.

Please bear with us.

Due to continued staffing and scheduling constraints, the EECS Helpdesk in 313 Soda Hall will be operating on a reduced schedule and will be open 9:00a–1:00p, M–F from now on, unless otherwise noted.

This does not affect the Helpdesk in 395 Cory Hall, which will continue to be open during normal business hours.

We apologize for any confusion this may cause our customers in Soda Hall. We think that a reduced Helpdesk presence is better than none at all and will be working to increase our personel in order to be able to adequately staff both locations.

The main UPS in Soda 290 computer room failed this morning. It is now on bypass mode, which means our critical servers are now on city powers only. The staff is working on identifying the cause and working on a solution, including get vendors to do onsite emergency repairs. However, there is no estimate when this will be fixed.

Since our servers are now without the protection of UPS, we want to let you know that we are subject to power outages. If that does happen, there could be considerable downtimes. We will update the status over the IRIS website and helpdesk phone.

Thank you for your understanding and cooperation.