IRIS

The IRIS general UNIX login server argus.EECS.Berkeley.EDU
is scheduled for routine maintenance on Wednesday, April 20th and will be shutdown and rebooted at 5:00pm.

We expect argus will be off-line for less than 10 minutes.

Please make your plans accordingly.

Microsoft has released security patches as of April 12th, 2005. See http://www.microsoft.com/technet/security/bulletin/ms05-apr.mspx for complete bulletin.

Security patches defined by Microsoft as “critical” or “important” MUST be applied within 5 business days of notification. Should there be active exploits, the time will be adjusted and users will be informed appropriately. Hosts unpatched after the defined time are subject to scanning and removal from the EECS network as per campus IT security policies (http://socrates.berkeley.edu:2002/MinStds/).

Patching is sometimes dependent on the service pack level of the Microsoft OS, and installed applications, please read requirements carefully.

Critical Security Bulletins

---

Microsoft Security Bulletin MS05-019
Vulnerabilities in TCP/IP Could Allow Remote Code Execution and Denial of Service (893066)
– Impact: Remote Code Execution
– No active exploit as of 04/14/05.
Microsoft Windows 2000 Service Pack 3 and 4
Microsoft Windows XP Service Pack 1 and 2
Microsoft Windows XP 64-Bit Edition Service Pack 1 (Itanium)
Microsoft Windows XP 64-Bit Edition Version 2003 (Itanium)
Microsoft Windows Server 2003
Microsoft Windows Server 2003 for Itanium-based Systems

Microsoft Security Bulletin MS05-020
Cumulative Security Update for Internet Explorer (890923)
– Impact: Remote Code Execution
– No active exploit as of 04/14/05.
Microsoft Windows 2000 Service Pack 3 and 4
Microsoft Windows XP Service Pack 1 and 2
Microsoft Windows XP 64-Bit Edition Service Pack 1
Microsoft Windows XP 64-Bit Edition Version 2003 (Itanium)
Microsoft Windows Server 2003
Microsoft Windows Server 2003 for Itanium-based Systems

Microsoft Security Bulletin MS05-021
Vulnerability in Exchange Server Could Allow Remote Code Execution (894549)
– Impact: Remote Code Execution
– No active exploit as of 04/14/05.
Microsoft Exchange 2000 Server Service Pack 3
Microsoft Exchange Server 2003
Microsoft Exchange Server 2003 Service Pack 1

Microsoft Security Bulletin MS05-022
Vulnerability in MSN Messenger Could Lead to Remote Code Execution (896597)
– Impact: Remote Code Execution
– No active exploit as of 04/14/05.
MSN Messenger 6.2

Microsoft Security Bulletin MS05-023
Vulnerabilities in Microsoft Word May Lead to Remote Code Execution (890169)
– Impact: Remote Code Execution
– No active exploit as of 04/14/05.
Microsoft Word 2000
Microsoft Works Suite 2001
Microsoft Word 2002
Microsoft Works Suite 2002
Microsoft Works Suite 2003
Microsoft Works Suite 2004
Microsoft Office Word 2003
[Read more…] about Microsoft Security Bulletin Summary for April 2005

The Soda network on the fourth floor will be down for a network upgrade on next Tuesday (04/19/2005) at 7:00AM. There will be brief network outages from 7:00AM to 8:00AM. This will affect users in Soda fourth floor only. I regret any inconvenience this may cause.

Please make your plans accordingly.

On Sunday, April 10 at 9PM, the EECS Web Server, web1.eecs.berkeley.edu,
will be unavailable for a short time while the operating system software
is patched.  Downtime should not exceed 30 minutes.  Department personal
web pages and the following sites will be unavailable during this time.



www.cs.berkeley.edu
www.eecs.berkeley.edu
ee.berkeley.edu
titanium.cs.berkeley.edu
blackouts.eecs.berkeley.edu
quantum.cs.berkeley.edu
www-bisc.cs.berkeley.edu
www-w2k.cs.berkeley.edu
tenet.berkeley.edu
safetp.cs.berkeley.edu
aima.eecs.berkeley.edu
networks.eecs.berkeley.edu
orange.eecs.berkeley.edu
osq.cs.berkeley.edu
bebop.cs.berkeley.edu
www.object-recognition.org
harmonia.cs.berkeley.edu
cc05.cs.berkeley.edu
lithonet.eecs.berkeley.edu
nanophotonics.eecs.berkeley.edu
sipc.eecs.berkeley.edu
theory.eecs.berkeley.edu
web1.eecs.berkeley.edu

Microsoft will release their patches for the month on April 12th. HERMES, PRINT, RIS and WINSWW will be down for patching the following Wednesday, April 13th, from 3:00 – 5:00pm.

There was a brief internet outage today (April 1st) around 11:20am, and it lasted for about 10 minutes. There was an issue with our border router – it was unresponsive possibly due to an attack. After a reboot, the router functioned normally again. Further investigation will entail.

For those of you that are using our EECS spam service, here is an update.

After months of service degrade, the vendor finally concluded that our spam appliances have been “poisoned” inadvertently due to the overall setup within EECS. That is why we are seeing less than optimal success rate, indeterministic tagging of emails, etc.

The only way to resolve this is to do a complete reset of our spam configs. We will do this on Tuesday, 3/29/05, at 9am. There will be no downtimes. We will do as much pre-training as possible, especially for false negatives. The extra taggings will continue.

As a user, you might see some false positives/negatives, which you should send them to helpdesk (help@eecs), along with the complete header. If you opted out of the auto-filing on IMAP server, this will not have any impact. Please also let us know if you encounter any other problems.

—-

To All Windows Domain Users:

As you may know the departments remote installation server for Windows, ris.eecs.berkeley.edu, has been down for several months. Starting Wednesday, March 23rd, we will resume serving an XP SP2 image to all authenticated domain users.

Unfortunately, Microsoft is still at work on a fix for our Windows 2000 image. Assuming we get this fix, we will resume serving the Windows 2000 image. Until we get this fix, you can continue to use the install CD’s available at the departments help desk to install Windows 2000.

Thanks for your patience during this down time. If you have any questions about using the XP SP2 image, please see the department’s Help Desk in 395 Cory Hall or send mail to help@eecs.

The departmental NIS, DNS and time server, rhea.cs, will be down for routine maintenance beginning Monday, March 21st at 5:00 PM. The maintenance is scheduled to end at 5:30 PM, but we expect rhea to be back on-line by 5:15 PM.

We expect that rhea (and cronus) will not need to be off-line on Wednesday, March 23rd when repairs to the cooling tower system in Cory Hall will effect the 165 Cory machine room.

Please make your plans accordingly.

On Tuesday, March 22, the EECS wireless network will be down to load a maintenance release of code. The outage window will be from 06:00-08:00. AirBears service within Cory, Soda and Euclid will also be down during this time. Please note that only portions of the net will be down at any one time. However, users may experience more than one service interruption during this window. We regret any inconvenience this may cause.
[Read more…] about Upcoming Wireless Outage