Medical Automation Systems reviews all Microsoft security
patches when they are released. MAS is in process for
reviewing the security patches listed below for August
2005. Microsoft rates some of these as 'critical'
but the vulnerabilities may in fact pose no risk to the
RALS system if customers adhere to the intended use of
RALS.
MS05-038 -
Critical
- Cumulative Security Update for Internet Explorer
(896727)
MS05-039 -
Critical -
Vulnerability in Plug and Play Could Allow Remote Code
Execution and Elevation of Privilege (899588)
MS05-040 -
Important
-
Vulnerability in Telephony Service Could Allow Remote Code
Execution (893756)
MS05-041 -
Moderate
-
Vulnerability in Remote Desktop Protocol Could Allow
Denial of Service (899591)
MS05-042 -
Moderate
-
Vulnerabilities in Kerberos Could Allow Denial of Service,
Information Disclosure, and Spoofing (899587)
MS05-043 -
Critical
-
Vulnerability in Print Spooler Service Could Allow Remote
Code Execution (896423)
MS Patches
NOT
Critical
to RALS Functionality
If MAS determines that the vulnerability as described in a
Microsoft bulletin should not adversely affect the
RALS functionality when the system is used as intended,
the security patch will be tested and included in the next
routine product version release. Should the user apply
the patches, MAS cannot guarantee or warrant its operation
or impact on the RALS system. In this situation there
will be no routine customer notification.
MS Patches
Critical
to RALS Functionality
If it is determined that the security vulnerability as
described in a Microsoft bulletin is critical to the RALS
functionality, MAS will notify customers via a broadcast
email from
SecurityUpdates@rals.com and by notice on the
MAS website
http://www.rals.com.