Continuing Analysis and Resolution of NetApp and RC4 Issues Caused by (KB5019964) For CVE-2022-37967 and KB5021131 CVE-2022-37966

by

A long running issue, which I covered in my previous posts: https://geekmungus.co.uk/?p=3532 and https://geekmungus.co.uk/?p=3593, this should be taken as the current status of the problem and the resolution. Issue Following the patch: KB5021131 CVE-2022-37966, which was released November 8th 2022 we’ve continued to have some issues with Kerberos authentication to servers (devices) that use (and … Read more

Calendar Publishing to Internet from Microsoft Exchange (2016+)

by

Microsoft Exchange provides the capability to allow publishing of user calendars to the Internet, this is different from calendar sharing (which is typically internal, i.e. within our organisation). These instructions explain how to enable publishing by policy and how to apply it your own user mailbox. Calendar Publishing Policy Configuration on Microsoft Exchange These steps … Read more

Further Exploration of KB5019964 Kerberos Changes

by

NOTE: See https://geekmungus.co.uk/?p=3619 for the most up to date article! The following is my analysis going going deeper into my recent article: https://geekmungus.co.uk/?p=3532, hopefully this will give you a bit more context and information, but also allowed me to work through the issue in my head through documentation. Synopsis The patch KB5019964 changes what the … Read more

PL2303HXA PHASED OUT SINCE 2012. PLEASE CONTACT YOUR SUPPLIER

by

If you are seeing this issue, you can resolve the problem by downloading and replacing the Windows driver with this one using Device Manager. In my case this was trying to use a USB to Serial (RS232) adapter which just wasn’t working. https://github.com/brucetsao/Drivers/raw/master/FAKE_PL2303/IO-Cable_PL-2303_Drivers-Generic_Windows_PL2303_Prolific.zip Connectix.nl provide a more detailed overview of the solution here.

Internal, External URLs, InternalAuthenticationMethod and ExternalAuthenticationMethod Explained

by

Within the Microsoft Exchange configuration you’ll see that there is an InternalURL and ExternalURL attribute for each of the key Microsoft Exchange Web Services, e.g. OWA, ECP, ActiveSync etc. Personally i’ve never really used these when they are different, but what it allows is for your internal and external URLs to access the services to … Read more

Have You Got the Multi-Factor?

by

A big topic at the moment in Information Security is multi-factor authentication(MFA), also known as two factor authentication (2FA). So the first question, what is a “factor”? Put simply a “factor” is element that a principal (i.e. a person trying to logon to a system) can use to prove to the system they are the … Read more

“Invalid Verification File“ Patching a Kemp Load Master from 7.2.48.8.21809.RELEASE.20221115-0334 to 7.2.54.4.21493.RELEASE.20220420-0927

by

Had the error: “Invalid Verification File” when attempting to perform an upgrade to a Kemp Load Master, the Kemp has two files for upgrade the actual upgrade patch file and a manifest file needed for verification. If you’ve downloaded the file but whatever you do you still get this error when attempting to upgrade perform … Read more