Security...

 

Microsoft Security Bulletin Update

March 2006

Medical Automation Systems reviews all Microsoft security patches when they are released.  MAS has evaluated and completed reviews for the security patches listed below for March 2006.  Microsoft rates some of these as 'critical' but the vulnerabilities may in fact pose no risk to the RALS system if customers adhere to the intended use of RALS.

The potential impact to RALS customers are Color Coded as follows:

  • Red (immediate threat/urgent action needed)

  • Green (routine process or no action needed)

  • Black (action needed/recommended)

MS06-011 - Important

 

Permissive Windows Services DACLs Could Allow Elevation of Privilege (914798)

  • This affects only Windows XP Service Pack 1 and Windows Server 2003 operating systems.  Windows 2000 Service Pack 4 and Windows XP Service Pack 2 are NOT affected.

  • Recommendation is no action needed for this update since the affected operating systems are not provided with any RALS installations.

MS06-012 - Critical

 

Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (905413)

  • This affects only Microsoft Office 2000 Service Pack 3, Microsoft Office XP Service Pack 3, Microsoft Office 2003 Service Packs 1 and 2, and Microsoft Works Suite.  These products are not provided with any RALS product configuration.

  • Recommendation is no action needed for this update since the affected software is not provided with any RALS installations.

Back to top


MS Patches NOT Critical to RALS Functionality If MAS determines that the vulnerability as described in a Microsoft bulletin should not adversely affect the RALS functionality when the system is used as intended, the security patch will be tested and included in the next routine product version release.  Should the user apply the patches, MAS cannot guarantee or warrant its operation or impact on the RALS system.  In this situation there will be no routine customer notification.

MS Patches Critical to RALS Functionality If it is determined that the security vulnerability as described in a Microsoft bulletin is critical to the RALS functionality, MAS will notify customers via a broadcast email from SecurityUpdates@rals.com and by notice on the MAS website http://www.rals.com.


RALS-Plus I RALS-Web I RALS-eQuiz I RALS-TGCM I RALS-Report I Device Interfacing
Customer Support I Clinical Questions I MS Vulnerabilities I MS Updates I RRC Password of the Day
RRC Installation I RALS-Dataports I MAS News I About MAS I Case Studies
Contact Us I POC Links I Home I Legal Notice


© 2006 Medical Automation Systems, Inc., Charlottesville, VA USA. All rights reserved.