Critical patch for CSP pages now available from Intersystems

[kevin furze]

hi all.
I have just received an email alert from Intersystems

<snip>
November 14, 2003 - Cache' Server Pages

InterSystems has encountered a critical issue with the use of Cache'
Server Pages, which would allow an attacker to remotely compromise the
Cache' Server and gain complete control over it.

All Cache' versions starting with 4.0.3 are affected by this
vulnerability and will be fixed with Cache' 5.1. Please install the
appropriate patch, available from our ftp site
ftp://ftp.intersystems.com/pub/cache/PatchProdlog34606.zip
to help to protect your Cache' system. Included in the zip file are
complete instructions on the steps required to correct this issue.
<snip>

I guess that you need a current support contract to cover this, and I'm
not really sure if the Single user version will be patched,

thought you might want to know.

kev

[Bill McCormick]

Its in a public area - no requirement for a support contract here. Also
the patch will work just fine on a Single User system.

--
Bill McCormick
Web/Objects Support Manager
InterSystems Corporation
bmc...@intersys.com

[Pavel Krehula]

> All Cache' versions starting with 4.0.3 are affected by this
> vulnerability and will be fixed with Cache' 5.1. Please install the

Means all versions prior 5.1 will have again this vunerability???

Pavel

[Ralf Huwald]

Hi!

I'm using 4.0.15 (Win2K). Are there more patches, which i should install?!?

Ralf

"kevin furze" <ke...@oakbeam.co.uk> schrieb im Newsbeitrag
news:Usenet.chcsatbc@localhost...

[Timur Safin]

No, it just means that at the moment of writing this security alert MXT526 was
in the main/latest (5.1) branch only. Since then Marvin has checked-in to
5.0/latest (will be 5.0.6), 5.0.5, and 4.1 objects branches.

It supposed to be fixed in all subsequent maintenance releases.

Best Regards,
Timur

"Pavel Krehula" <pavel....@nlm.cz> wrote in message
news:3fb9d...@info2.kinich.com...
: > All Cache' versions starting with 4.0.3 are affected by this

:

[Bill McCormick]

New maintenance kits issued after this will include the patch - 5.0.5
and 4.1.17

[Jon P Jensen]

[Ralf Huwald]

[kevin furze]

talking to the distributor?
it depends what the arrangements are. perhaps he is keeping track of
what he THINKS is installed on your system?


Ralf Huwald wrote:
>
> Yes, you are right. It's 4.1.15... Is there a public link, where i
> can download the 4.1.16 or do i have to talk to my distributor?!?
>
> Ralf
>
> "Jon P Jensen" <jens...@intersystems.com> schrieb im Newsbeitrag
> news:3fba7...@info2.kinich.com... Hi
> You mentioned you had 4.0.15...Did you mean 4.1.15?
> If so, you might be interested in seeing
> http://www.intersystems.com/cache/technology/product-
> tables/releasenotes/4116/index.html
>
> This lists all the changes made between 4.1.15 and 4.1.16(this is
> the latest 4.1.x release)
>
> jon

[Jon P Jensen]

Hi

If you have purchased Caché directly from InterSystems and have a valid
support contract, you can contact your local office about getting an update.

If you have purchased Caché(or Caché is part of an application you
purchased) from a distributor/reseller/VAR/etc., you should talk to your
supplier to determine what options are available to you/your application.


jon

Ralf Huwald wrote:
> Yes, you are right. It's 4.1.15... Is there a public link, where i can
> download the 4.1.16 or do i have to talk to my distributor?!?
>
> Ralf
>
>
> "Jon P Jensen" <jens...@intersystems.com

> <mailto:jens...@intersystems.com>> schrieb im Newsbeitrag

> news:3fba7...@info2.kinich.com...
> Hi
> You mentioned you had 4.0.15...Did you mean 4.1.15?
> If so, you might be interested in seeing
> http://www.intersystems.com/cache/technology/product-tables/releasenotes/4116/index.html
>
> This lists all the changes made between 4.1.15 and 4.1.16(this is
> the latest 4.1.x release)
>
> jon
>
>
> Ralf Huwald wrote:
>

[Ralf Huwald]

Thank you! Maybe i should contact the reseller.

Ralf

"Jon P Jensen" <jens...@intersystems.com> schrieb im Newsbeitrag
news:3fbb6...@info2.kinich.com...