Security News

The finest blend of the latest IT security news headlines, updated every 4 hours.

IT Security News
Regular Security News
Social Media
Tools

Exploits
Vulnerabilities
Security Videos & Podcasts
Other Stuff

Security Blogs
Microsoft Security Advisories
Mailing Lists

Bookmark + Share

Colour scheme

IT Security News

Packet Storm Security Headlines Serious Flaw Discovered In Apache FA Launches Security Probe After England Team Bugged Opera Users Baffled By Vulnerability Warnings Chile Earthquake Moved Entire City 10 Feet To The West Online Security Questions Need Improving Microsoft Plugs Dangerous Excel Security Holes Hackers Aren’t As Sneaky As You Think Microsoft Warns Of Zero-Day IE Hole On Patch Tuesday New Smartphone App Exposes Vulnerability To Hackers Vodafone Ships Mariposa-Infected HTC Magic Feds Move To Break Voting-Machine Monopoly Crazy Man Cuffed For Plotting Cyber Extortion Scheme	The Register – Security Fraud-prevention service ponies up $12m for ‘false’ ads It’s official: Adobe Reader is world’s most-exploited app New Internet Explorer code-execution attacks go wild FA launches security probe after England team bugged Smartphone app botnet experiment blows up a storm Vodafone ships Mariposa-infected HTC Magic Thailand approves extradition of credit card hack suspect ‘Crazy’ man cuffed for plotting cyber extortion scheme Ubisoft undone by anti-DRM DDoS storm Paypal freezes Cryptome Botnet takedowns ‘don’t hurt crooks enough’ Energizer Duo software suffers backdoor Trojan bother Patchy Windows patching leaves users insecure Opera says bug probably can’t commandeer machines Think software patching is a hassle? You’re not alone Scareware sellers fool Google with file switch	Security Bloggers Network Importance of end-to-end encryption in the retail space APT: Should your panties be in a bunch, and how do you un-bunch them? LifeLock will pay $12 million for false claims Is it Wireless Security or Secure Wireless? March Patch Tuesday Overshadowed by New IE Zero-Day Vulnerability USB充电器软件后门 SecurosisTV: Low Hanging Fruit – Endpoint Security XKCD: Seismograph RSA 2010 大会纪行 More on the Cryptographers Panel misunderstanding Who?s the hardest working researcher of all time? Of 2009? The PBA attack on RSA Email with subject “scan upon download” contains trojan Blatant Stupidity: The Charney Tax Chip Bok: Death Panel The Four Billion Dollar Hacker
SANS Internet Storm Center, InfoCON: green Infocon: green What’s My Firewall Telling Me? (Part 4), (Wed, Mar 10th) Microsoft Security Advisory 981374 – Remote Code Execution Vulnerability for IE6 and IE7, (Wed, Mar 10th) March 2010 – Microsoft Patch Tuesday Diary, (Tue, Mar 9th) Samurai WTF 0.8, (Mon, Mar 8th) Vodafone Android Phone: Complete with Mariposa Malware, (Tue, Mar 9th) Energizer Malware, (Tue, Mar 9th) SEO poisoning on TV show, (Mon, Mar 8th) Microsoft announced two important bulletins (fixing multiple vulns. affecting Windows and Office) for tomorrow: http://www.microsoft.com/technet/security/Bulletin/MS10-mar.mspx, (Mon, Mar 8th)	SecurityFocus News News: Twitter attacker had proper credentials News: PhotoDNA scans images for child abuse News: Conficker data highlights infected networks News: Popular apps need better patching, says report Brief: Google offers bounty on browser bugs Brief: Cyberattacks from U.S. "greatest concern" Brief: Microsoft patches as fraudsters target IE flaw Brief: Attack on IE 0-day refined by researchers News: Monster botnet held 800,000 people’s details News: Google: ‘no timetable’ on China talks News: Latvian hacker tweets hard on banking whistle News: MS uses court order to take out Waledac botnet Infocus: Enterprise Intrusion Analysis, Part One Infocus: Responding to a Brute Force SSH Attack Infocus: Data Recovery on Linux and ext3 Infocus: WiMax: Just Another Security Challenge?	[ISN] InfoSec News Mailing List Thailand approves extradition of credit card hack suspect RSA: Cybersecurity A Joint Fed, Industry Effort Cybersecurity program has serious defects, GAO says Ford Motor Rolls Out New Security Features To Prevent Car-Hacking Backdoor found in Energizer Duo USB battery charger FDIC: Hackers took more than $120M in three months Tokyo’s Cyber Emergency Centre at the vanguard of hacking defence The Corporate Side of Snooping Microsoft’s tax-for-hacks ‘horrible’ idea, say security experts Facebook founder Mark Zuckerberg ‘hacked into emails of rivals and journalists’ Westin Bonaventure Los Angeles latest victim of hotel hackers Linux Advisory Watch: March 6th, 2010 At RSA, Some Security Pros Don’t Practice What They Preach Iowa Homeland Security Web site "compromised" Nation’s cybersecurity suffers from a lack of information sharing New BlackEnergy Trojan Targeting Russian, Ukrainian Banks
CNET News – Security Malware found on HTC Android phone from Vodafone Microsoft warns of zero-day IE hole on Patch Tuesday Drudge Report accused of serving malware, again Backdoor found in Energizer Duo USB battery charger Police get Webcam pictures in school spy case RSA 2010: Taking on cyberthreats Microsoft to fix eight Windows and Office holes Symantec exhibit makes cybercrime tangible ‘Mission Impossible’-style heist hits N.J. Best Buy Study lauds IE for blocking Web’s social attacks	IT Security Microsoft warns: Don’t press F1 The unwelcome return of image spam Is the infamous Waledac botnet out of the picture or not? A user name is not a password Five features of a good password manager Avoid ambiguity when referring to account names Default passwords: Change them or Chuck Norris might What defaults should random password generators use? Chip and PIN: The technology is no longer secure Fight back against bad password policy	Do you <3 the security news? Then help us get more links by bookmarking us on sites like digg, delicious, etc.
Regular Security News
hacking – Google News Hacking Humans Naiveté – Examiner.com Malaysian linked to $210m card scam – AsiaOne Max Clifford drops News of the World phone hacking action in £1m deal – The Guardian No answer needed in political whodunnit – Stuff.co.nz (blog) Chicopee Website Victim Of Argentina Hack – WSHM-TV Father faces parricide charges for shooting, hacking son – ABS CBN News Ford Motor Rolls Out New Security Features To Prevent Car-Hacking – Dark Reading China Says Google Never Filed Complaint in Hacking Case – Datamation Brash emails hacked, says Key – Stuff.co.nz China pulls rug out from under Google by disputing hacking claims – V3.co.uk	computer security – Google News Security gaps exploited in grade scandal remain, may be difficult to close – Washington Post Top Five Tips for Securing your Business Reputation – NewsMaker (press release) Smile guy; you’re on criminal camera – Stuff.co.nz Asiasoft expands – Bangkok Post Panda Discovers Malware on HTC Magic Phone – PC World Investigating the cyber attack on Google – CBC.ca Police waited for media to solve Brash’s email leaks, report reveals – New Zealand Herald Major botnet closed by security team – BCS US building top cyber defense team: Napolitano – AFP Businesses spend $2m on average over cyber attacks – National Business Review	Threat Level Supreme Court Takes ‘Informational Privacy’ Case Lifelock Dinged $12 Million for Deceptive Business Practices Pink Floyd, EMI Brawl Over iTunes Royalties Feds Move to Break Voting-Machine Monopoly Funeral Flap: Justices Weigh Religion, Speech Rights 11 More U.S. Airports Get Body Scanners White House Cyber Czar: ‘There Is No Cyberwar’ Security Pros Question Deployment of Smart Meters DMCA Muscle Kills DVD Copying, for Real ‘Google’ Hackers Had Ability to Alter Source Code
Social Media
Reddit network security APT: Should your panties be in a bunch, and how do you un-bunch them? Tor Onions Subreddit /r/onions nmap script to check for Energizer trojan New IE 0day being exploited in the wild. Schneier: Fight for privacy or kiss it good-bye Is Bing safer than Google or Yahoo? PDF Based Targeted Attacks are Increasing Online accessible 90GB rainbow table of XP-NTLM hashes (hosted on SSD for speed) How do the net admins of reddit manage passwords? NoMoreCrypto: New Site for Sharing Rainbow Tables via Bit Torrent Energizer battery charger contains backdoor Salary Question: Systems Consultant Organized cyber criminals stole more than $25 million from small to mid-sized businesses in e-banking heists in the 3rd quarter of 2009 alone. In contrast, traditional bank robbers stole less than $9.5 million. 1024-bit RSA encryption cracked by carefully starving CPU of electricity 5 Steps to Building a Malware Analysis Toolkit Using Free Tools Brian Snow, former NSA tech chief, don’t trust cloud. Adi Shamir agrees for different reasons.	digg.com: Stories / Security / Popular Energizer Duo battery charger hides a Trojan Why Google Scares Us: Say Bye Privacy, Say Hi Hungry Beast Pentagon-Backed Venture Aims for ‘Google Underground’ Why Google keeps your data forever, tracks you with ads Botnet Blueprint: Build Your Own ZeuS Botnet for $2,753.50 Wave of Ransom Malware Hits Internet Despite New Policy, Pentagon Still Wary of the Tubes 11 More U.S. Airports Get Body Scanners Is chasing cybercrooks worth it? Dr. Drew’s Cyber-Spies Bust Alleged Stalker Spanish police smash huge botnet U.S. Declassifies Part of Secret Cybersecurity Plan Cyberwar Hype Intended to Destroy the Open Internet Wiseguy Ticketmaster.com Scam Netted Hackers $25M Can Adobe Stop the Hate? New materials could lead to super crypto chips	digg.com: Stories / Security / Upcoming Byekis Trojan How To Uninstall Video Warning: Scams on Freelance Writers on Craigslist \| IDEAS DI Precursor to 666: ID Card for All US Workers For Forescout its about the profits, not the product Bryan How To Remove XP Guardian 2010 & Uninstall XPGuardian 2010 Solar Powered Outdoor Lights Best Locksmith in Dallas is Metro-Keys Locksmith Service Computer Virus Removal and Protection Tips Disk Encryption: Server Stolen From McNair Eye Center Tips Memilih Password Free 3 years Norman Virus Control genuine license SSL-What exactly is SSL???-Note by Ankit Fadia. Trojan di Pengecas Baterai Energizer 30th Anniversary of How does a parent handle cyberbullying? Stop Telemarketers From Calling Your Mobile Phone.
Delicious/tag/security Electronic Signature Solution \| EchoSign Passpack Password Manager Home \| Free Online Password Manager Overview HIPAA – General Information Main Page – UntangleWiki 突然の事故に効く！メールアーカイブ特集/キーマンズネット Unmask Parasites. Blog. Understanding Access Credentials for AWS/EC2 – Alestic.com Security in Web Applications 「SpyEye」と「Zeus」の両ボットを比較 – 世界のセキュリティ・ラボから：ITpro Use Adeona to help recover a lost or stolen laptop – Simple Help Heap-based and Stack-based Overflows 新品のAndroid携帯にマルウェア、USB経由でPCに感染 – ITmedia エンタープライズ UDP Tunneling to avoid hotspot or firewall restrictions \| Adam Palmer … IE 6と7に未修正の脆弱性見つかる、既に標的型攻撃の発生も – ITmedia エンタープライズ IEEE Registration Authority – OUI Company_id Assignments	Delicious/tag/hacking Open Source GSM Baseband implementation UDP Tunneling to avoid hotspot or firewall restrictions \| Adam Palmer … Top 5 Websites To Learn How To Hack Like A Pro Permanently disable Google Software Update on OS X « Twenty Ways YouTube – NET-ART\|NOIZ 22022001 No-Such on mix [live 1/2] by Zden California – HackerspaceWiki rootkit.com Home – Process Hacker CURL PHP Examples • View topic – curl running very slow sending HTTP POST using curl command » Linux by Examples SecCom Labs " Exploit-Me – Niebezpiecznik.pl – Whatever happened to programming? « The Reinvigorated Programmer Turning on a MacBook without keyboard – Mac Forums #slug	Delicious/tag/encryption PGP Download Center – Download Free PGP Desktop Encryption Trial Software – Improved Version of PGP Freeware Flash Makes Games doswf – Project Hosting on Google Code userguidegpg4win.pdf (application/pdf Object) 1024-bit RSA encryption cracked by carefully starving CPU of electricity — Engadget How to Use Gnu Privacy Guard – Community Ubuntu Documentation 1024-bit RSA encryption cracked by carefully starving CPU of electricity — Engadget doswf – Project Hosting on Google Code PCI Compliance Guide, PCI Data Security Standards, Manage a Data Breach, Protection Compliance and Reporting EFF: EFFector Newsletter Archive Password Management \| Web based password management software \| Secret Server How to Set Up Encrypted Mail on Mac OS X – O’Reilly Media How to create a fully-encrypted HFS+ hard drive – Mac OS X Hints Case for Email Security – Why Use Encryption? \| LuxSci FYI Techie blurbs: How to replace FileVault with EncFS
Slashdot: Your Rights Online Jeff Jaffe Named CEO of W3C Doctors Skirt FDA To Heal Patients With Stem Cells Nokia Targets Mobile Kinetic Energy Charging Cybercrooks Surpassed Old School Bankrobbers In ‘09 European Parliament Declaring War Against ACTA Apple’s iPhone Developer License Agreement Revealed US Immigration Bill May Bring a National Biometric ID Card Major ISPs Help Fund BitTorrent User Tracking Research US Eases Internet Export Rules To Iran, Sudan, Cuba Edward Tufte Appointed To Help Track and Explain Stimulus Funds Apple’s "iKey" Wants To Unlock All Doors Facebook Founder Accused of Hacking Into Rivals’ Email Sumo Wrestler Steals Cash Machine From Moscow Shop Some Newegg Customers Received Fake Intel Core i7s PayPal Freezes Cryptome’s Account	Got any bright ideas about what to put here?	I’m sure you can think of something with an rss feed

Tools

Packet Storm Security Tools

tor.uclibc.i686.20100309.iso Tor-ramdisk is an i686 uClibc-based micro Linux distribution whose only purpose is to host a Tor server in an environment that maximizes security and privacy. Tor is a network of virtual tunnels that allows people and groups to improve their privacy and security on the Internet. Security is enhanced. […]
reverberation.c Reverberation is a proof of concept denial of service tool that makes use of UDP echo servers.
Ravage.zip Ravage is a rogue DHCP server written in PHP.
reglookup-0.12.0.tar.gz RegLookup is a small command line utility for parsing and searching registry files from Windows NT and later.
khc_0.2.tar.gz Known Host Cracker (khc) is a small tool designed to recover hashed known_host files back to their plain-text equivalents.
geoipgen-0.4.tar.gz GeoIPgen is a country-to-IPs generator. It’s a geographic IP generator for IPv4 networks that uses the MaxMind GeoLite Country database. Geoipgen is the first published use of a geographic ip database in reverse to translate from country-to-IPs instead of the usual use of IP-to-country. Features: Ra. […]
nessus-xmlrpc-0.3.tar.gz nessus-xmlrpc is a Ruby library for the Nessus XML-RPC interface. It comes with an example command line program that shows how easy it is to interact with the Nessus scanner.
openssh-5.4p1.tar.gz This is a Linux/portable port of OpenBSD’s excellent OpenSSH. OpenSSH is based on the last free version of Tatu Ylonen’s SSH with all patent-encumbered algorithms removed, all known security bugs fixed, new features reintroduced, and many other clean-ups.
AdvancedWinServiceManager.zip AdvancedWinServiceManager is a smart tool to remove hidden rootkit services. It makes it easy to eliminate such malicious services by separating out third party services from Windows services. By default it shows only third party services along with more details such as Company Name, Description, In. […]
kolang-bypass.txt Kolang is a php script that can be leveraged in local and remote file inclusion attacks and performs safe mode bypass for PHP versions 4.3.10 through 5.3.10.

CNET Download.com Security Software New Releases

Video Padlock 03/09/10 – Encrypt your personal videos securely and conveniently.
Norton AntiVirus Definitions Update (x86 Package) 03/09/10 – Update Norton AntiVirus virus definitions and antivirus products of multiple versions.
Symantec Norton AntiVirus Virus Definition 03/09/10 – Get the latest virus definition file.
Norton AntiVirus Definitions Update (i32 Package) 03/09/10 – Update Norton virus definitions and antivirus products.
Panda Virus Signature File 03/09/10 – Get recent virus signature file.
Avast Internet Security 03/09/10 – Protect your Windows PC from online threats.
Avast Pro Antivirus 03/09/10 – Protect your PC from viruses, worms, and Trojans.
Avast Free Antivirus 03/09/10 – Protect your PC against the latest viruses and spyware.
IEPasswordDecryptor 03/09/10 – Recover stored passwords from Internet Explorer.
OperaPassView 03/08/10 – Recover password from the Opera Web browser password file.

Exploits

Packet Storm Security Exploits

rivercms-sql.txt River CMS version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass.
nusnewssystem-sql.txt NUs Newssystem version 1.02 suffers from a remote SQL injection vulnerability.
jevci-disclose.txt Jevci Siparis Formu Scripti suffers from a remote database disclosure vulnerability.
mhproducts-sql.txt Mhproducts Kleinanzeigenmarkt suffers from a remote SQL injection vulnerability.
easyftp.rb.txt This Metasploit module exploits a stack overflow in the CWD verb in Easy~FTP Server. You must have valid credentials to trigger this vulnerability.
energizer_duo_payload.rb.txt This Metasploit module will execute an arbitrary payload against any system infected with the Arugizer trojan horse. This backdoor was shipped with the software package accompanying the Energizer Duo USB battery charger.
orbital_viewer_orb.rb.txt This Metasploit module exploits a stack-based buffer overflow in David Manthey’s Orbital Viewer. When processing .ORB files, data is read from file into a fixed-size stack buffer using the fscanf function. Since no bounds checking is done, a buffer overflow can occur. Attackers can execute arbitrary. […]
rsstatic-sql.txt Rsstatic suffers from a remote SQL injection vulnerability.
uebimiauwebmail-disclose.txt Uebimiau Webmail version 3.2.0-2.0 suffers from a remote email disclosure vulnerability.
aef-xss.txt AEF version 1.0.8 suffers from a cross site scripting vulnerability.

Exploit-DB updates

Securityvulns exploits channel

sudo-xpl.sh Tod Miller Sudo 1.6.x before 1.6.9p21 and 1.7.x before 1.7.2p4
easyftp.py Exploits Easy FTP Server 1.7.0.2 Remote BoF
operaex.html Opera
iMailDecrypt.py Ipswitch IMail Server – IMAP4 Server (IMail 11.01) Password Decryptor
nautiluspoc.tar.gz GNOME Nautilus code execution PoC
cmsd_exploit.c RPC.cmsd remote PoC for AIX 6.1 and lower
360secex.c 360 Security Guard breg device drivers Privilege Escalation exploit
serversman.py Apple Iphone/Ipod – Serversman 3.1.5 HTTP Remote DoS exploit
Rising0day.cpp Rising AntiVirus 2008/2009/2010 Local Privilege Escalation Exploit
server.c Mod_proxy from apache 1.3 Integer overflow PoC
attftpd.c TFTP Daemon Version 1.9 Remote Buffer Overflow Exploit
tls-renegotiation-poc.py PoC exploit for the TLS renegotiation vulnerability (CVE-2009-3555)
simplephp.pl Simple PHP Blog
thedailyshow.pl Mozilla Codesighs Memory Corruption PoC
php 9sg_illu.php Adobe Illustrator CS4 (V14.0.0) Encapsulated Postscript (.eps) overlong DSC Comment Buffer Overflow Exploit
eurekaex.py Eureka Mail Client Remote Buffer Overflow Exploit XP SP3 English Egghunter Edition

Inj3ct0r.com

Kandidat CMS versions 1.3.1 Cross Site Scripting Vulnerability Kandidat CMS versions 1.3.1 Cross Site Scripting Vulnerability
NUs Newssystem v1.02 (id) SQL Injection Vulnerability NUs Newssystem v1.02 (id) SQL Injection Vulnerability
Rsstatic SQL Injection Vulnerability Rsstatic SQL Injection Vulnerability
ABB v1.1 Forum Remote Database Disclosure Vulnerability ABB v1.1 Forum Remote Database Disclosure Vulnerability
JAD java decompiler 1.5.8g (argument) Local Crash Vulnerability JAD java decompiler 1.5.8g (argument) Local Crash Vulnerability
Todoo Forum 2.0 Cross Site Scripting Vulnerability Todoo Forum 2.0 Cross Site Scripting Vulnerability
Joomla Component com_hezacontent (id) SQL injection Vulnerability Joomla Component com_hezacontent (id) SQL injection Vulnerability
Winn Guestbook V2.4 Cross Site Scripting Vulnerability Winn Guestbook V2.4 Cross Site Scripting Vulnerability
QuickZip 4.x (.zip) Buffer Overflow Exploit #2 QuickZip 4.x (.zip) Buffer Overflow Exploit #2
OpenSSL < 0.9.8l and previous versions Multiple Vulnerability OpenSSL < 0.9.8l and previous versions Multiple Vulnerability
Apache Spamassassin Milter Plugin Command Execution Vulnerability Apache Spamassassin Milter Plugin Command Execution Vulnerability
PHP File Uploader Upload Vulnerability PHP File Uploader Upload Vulnerability
Uebimiau Webmail v3.2.0-2.0 | Email Disclosure Vulnerability Uebimiau Webmail v3.2.0-2.0 | Email Disclosure Vulnerability
JAD java decompiler 1.5.8g (.class) Stack Overflow DoS JAD java decompiler 1.5.8g (.class) Stack Overflow DoS
mhproducts kleinanzeigenmarkt (search.php) SQL Injection mhproducts kleinanzeigenmarkt (search.php) SQL Injection
AEF Version 1.0.8 CMS Cross Site Scripting Vulnerability AEF Version 1.0.8 CMS Cross Site Scripting Vulnerability

Vulnerabilities

Packet Storm Security Advisories

TA10-068A.txt Technical Cyber Security Alert 2010-68A – Microsoft has released updates to address vulnerabilities in Microsoft Windows and Microsoft Office.
CORE-2009-1103.txt Core Security Technologies Advisory – A memory corruption occurs on Microsoft Office Excel 2002 when parsing a .XLS file with a malformed DbOrParamQry record. This vulnerability could be used by a remote attacker to execute arbitrary code in the context of the currently logged on user, by enticing t. […]
CORE-2009-0813.txt Core Security Technologies Advisory – A vulnerability was found in Windows Movie Maker and Microsoft Producer, which can be triggered by a remote attacker by sending a specially crafted file and enticing the user to open it. This vulnerability results in a write access violation and can lead to remo. […]
MDVSA-2010-058.txt Mandriva Linux Security Advisory 2010-058 – Multiple vulnerabilities have been found and corrected in PHP. Packages for 2008.0 are provided for Corporate Desktop 2008.0 customers. The updated packages have been patched to correct these issues.
ZDI-10-026.txt Zero Day Initiative Advisory 10-026 – This vulnerability allows remote attackers to execute arbitrary commands on vulnerable installations of Hewlett-Packard Performance Insight. Authentication is not required to exploit this vulnerability. The specific flaw exists in the handling of requests to the. […]
HPSBMA02489-SSRT090065.txt HP Security Bulletin – A potential vulnerability has been identified with HP Performance Insight. The vulnerability could be exploited remotely to execute arbitrary commands.
ZDI-10-025.txt Zero Day Initiative Advisory 10-025 – This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Office Excel. User interaction is required to exploit this vulnerability in that the target must open a malicious file. The specific flaw exists in the. […]
dsa-2008-1.txt Debian Linux Security Advisory 2008-1 – Several remote vulnerabilities have been discovered in the TYPO3 web content management framework: Cross-site scripting vulnerabilities have been discovered in both the frontend and the backend. Also, user data could be leaked.
USN-907-1.txt Ubuntu Security Notice 907-1 – It was discovered that gnome-screensaver did not correctly lock all screens when monitors get hotplugged. An attacker with physical access could use this flaw to gain access to a locked session. It was discovered that gnome-screensaver did not correctly handle keyboard. […]
MDVSA-2010-057.txt Mandriva Linux Security Advisory 2010-057 – The ap_read_request function in server/protocol.c in the Apache HTTP Server 2.2.x before 2.2.15, when a multithreaded MPM is used, does not properly handle headers in subrequests in certain circumstances involving a parent request that has a body, which mi. […]

Bugtraq

ZDI-10-025: Microsoft Office Excel XLSX File Parsing Remote Code Execution Vulnerability Posted by ZDI Disclosures on Mar 09ZDI-10-025: Microsoft Office Excel XLSX File Parsing Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-025 March 9, 2010 — CVE ID: CVE-2010-0263 — Affected Vendors: Microsoft — Affected Products: Microsoft Office Excel — Vul. […]
[security bulletin] HPSBMA02489 SSRT090065 rev.1 – HP Performance Insight , Remote Execution of Arbitrary Commands Posted by security-alert on Mar 09SUPPORT COMMUNICATION – SECURITY BULLETIN Document ID: c02033170 Version: 1 HPSBMA02489 SSRT090065 rev.1 – HP Performance Insight , Remote Execution of Arbitrary Commands NOTICE: The information in this Security Bulletin should be acted upon as soon as possible. Rel. […]
[SECURITY] [DSA 2008-1] New typo3-src packages fix several vulnerabilities Posted by Moritz Muehlenhoff on Mar 09———————————————————————— Debian Security Advisory DSA-2008-1 security () debian org http://www.debian.org/security/ Moritz Muehlenhoff March 08, 2010 http://www.debian.org/security/faq —————————–. […]
IBM ENOVIA SmarTeam v5 Cross Site Scripting Vulnerability Posted by lament on Mar 09========================================= Yaniv Miron aka “Lament” Advisory March 7, 2010 IBM ENOVIA SmarTeam v5 Cross Site Scripting Vulnerability ========================================= ===================== I. BACKGROUND ===================== ENOVIA SmarTeam provides h. […]
Re: Apple Airport Wireless Products: Promiscuous FTP PORT Allowed in FTP Proxy Provides Security Bypass Posted by Sabahattin Gucukoglu on Mar 09Do you have firmware information on which products it affects. Tested with firmware 7.5 on the latest-generation units. Should work just fine with 7.4.2, on the previous generation. These are the latest versions. I don’t know about previous releases for Airpor. […]
SQL injection vulnerability in wILD CMS Posted by Maciej Gojny on Mar 09# Title: [SQL injection vulnerability in wILD CMS] # Date: [09.03.2010] # Author: [Ariko-Security] # Software Link: [http://www.wildcms.com/] # Version: [ALL] ============ { Ariko-Security – Advisory #4/3/2010 } ============= SQL injection vulnerability in wILD CMS Ve. […]
Croogo CMS 1.2 Cross Site Scripting Vulnerabilities Posted by Paulino Calderon on Mar 09Croogo CMS 1.2 Cross Site Scripting Vulnerabilities ========================================== Vulnerable Software: 1.2 and prior Release Date: 2010-03-06 Last Update: 2010-02-01 Critical: Low Impact: Session hijack Denial of service Code execution Solution Status. […]
[ MDVSA-2010:057 ] apache Posted by security on Mar 08 _______________________________________________________________________ Mandriva Linux Security Advisory MDVSA-2010:057 http://www.mandriva.com/security/ _______________________________________________________________________ Package : apache Date : March 6, 2010 Affecte. […]
Re: phpinfo() XSS Vulnerability Posted by Salvatore Fresta aka Drosophila on Mar 08I tested it with php 5.1.6 and 5.2.6 and seems not work. The request_uri’s content is encoded before to be printed: /phpinfo.php?+%3CScRipT%3Ealert(0111001101100101011000110111010101110010011010010111010001111001);%3C/sCrIpT%3E+
[USN-907-1] gnome-screensaver vulnerabilities Posted by Marc Deslauriers on Mar 08=========================================================== Ubuntu Security Notice USN-907-1 March 08, 2010 gnome-screensaver vulnerabilities CVE-2010-0285, CVE-2010-0422 =========================================================== A security issue affects the foll. […]
rPSA-2010-0014-1 mysql mysql-bench mysql-server Posted by rPath Update Announcements on Mar 08rPath Security Advisory: 2010-0014-1 Published: 2010-03-07 Products: rPath Appliance Platform Linux Service 1 rPath Appliance Platform Linux Service 2 rPath Linux 1 rPath Linux 2 Rating: Severe Exposure Level Classification: Remote System User Determinis. […]
rPSA-2010-0013-1 gzip Posted by rPath Update Announcements on Mar 08rPath Security Advisory: 2010-0013-1 Published: 2010-03-07 Products: rPath Appliance Platform Linux Service 1 rPath Appliance Platform Linux Service 2 rPath Linux 1 rPath Linux 2 Rating: Major Exposure Level Classification: Local System User Non-determin. […]
rPSA-2010-0012-1 postgresql postgresql-contrib postgresql-server Posted by rPath Update Announcements on Mar 08rPath Security Advisory: 2010-0012-1 Published: 2010-03-07 Products: rPath Appliance Platform Linux Service 1 rPath Appliance Platform Linux Service 2 rPath Linux 1 rPath Linux 2 Rating: Severe Exposure Level Classification: Remote System User Determinis. […]
rPSA-2010-0011-1 gnome-ssh-askpass openssh openssh-client openssh-server Posted by rPath Update Announcements on Mar 08rPath Security Advisory: 2010-0011-1 Published: 2010-03-07 Products: rPath Appliance Platform Linux Service 1 rPath Appliance Platform Linux Service 2 rPath Linux 1 rPath Linux 2 Rating: Minor Exposure Level Classification: Remote User Non-deterministic. […]
ZoneAlarm Security Circumvention Posted by Andrew Barkley on Mar 08Hi, During my (in)security research, I’ve discovered what appears initially to be a design oversight and not necessarily a vulnerability, affecting ZoneAlarm and various other security vendors. I’ve tested this on various XP platforms successfully, please feel free. […]

SecurityFocus Vulnerabilities

Unofficial Secunia Security Advisories

[5/5] 1 user comment A vulnerability has been reported in Internet Explorer, which can be exploited by malicious people to compromise a user’s system. http://secunia.com/advisories/38860/#comments
[3/5] SSH Tectia Audit Player Multiple Vulnerabilities SSH Communications has acknowledged a security issue and some vulnerabilities in SSH Tectia Audit Player, which can be exploited by malicious people to conduct spoofing attacks, bypass certain security restrictions, manipulate certain data, and cause a DoS (Denial of Service). http://secunia.com/adv. […]
[5/5] Internet Explorer Unspecified Code Execution Vulnerability A vulnerability has been reported in Internet Explorer, which can be exploited by malicious people to compromise a user’s system. http://secunia.com/advisories/38860/
[4/5] Microsoft Office Excel Multiple Vulnerabilities Multiple vulnerabilities have been reported in Microsoft Office Excel, which can be exploited by malicious people to compromise a user’s system. http://secunia.com/advisories/38805/
[3/5] Microsoft Producer Project File Parsing Buffer Overflow A vulnerability has been reported in Microsoft Producer 2003, which can be exploited by malicious people to compromise a user’s system. http://secunia.com/advisories/38845/
[3/5] Microsoft Windows Movie Maker Buffer Overflow Vulnerability A vulnerability has been reported in Microsoft Windows, which can be exploited by malicious people to compromise a user’s system. http://secunia.com/advisories/38791/
[2/5] bbsmax "action" Cross-Site Scripting Vulnerability Liscker has reported a vulnerability in bbsmax, which can be exploited by malicious people to conduct cross-site scripting attacks. http://secunia.com/advisories/38873/
[2/5] MediaWiki Multiple Vulnerabilities A vulnerability and a security issue have been reported in MediaWiki, which can be exploited by malicious users to disclose sensitive information and bypass certain security restrictions. http://secunia.com/advisories/38856/
[1/5] lshell Command and Path Restriction Bypass Security Issues Some security issues have been reported in lshell, which can be exploited by malicious, local users to bypass certain security restrictions. http://secunia.com/advisories/38879/
[3/5] TikiWiki CMS/Groupware Multiple Vulnerabilities Some vulnerabilities have been reported in TikiWiki CMS/Groupware, one of which has an unspecified impact and others that can be exploited by malicious users to bypass certain security restrictions and by malicious people to conduct SQL injection attacks. http://secunia.com/advisories/38896/
[3/5] DZ Auktionshaus "V4.rgo" "id" SQL Injection Vulnerability Easy Laster has reported a vulnerability in DZ Auktionshaus http://secunia.com/advisories/38886/
[3/5] TikiWiki CMS/Groupware Multiple Vulnerabilities Some vulnerabilities have been reported in TikiWiki CMS/Groupware, where one has an unknown impact and the other can be exploited by malicious people to conduct SQL injection attacks. http://secunia.com/advisories/38882/
[4/5] eGroupWare Cross-Site Scripting and Arbitrary Command Execution Vulnerabilities Some vulnerabilities have been discovered in eGroupWare, which can be exploited by malicious people to conduct cross-site scripting attacks and compromise a vulnerable system http://secunia.com/advisories/38859/
[2/5] Dovecot Mailbox Large Header Denial of Service A vulnerability has been reported in Dovecot, which can be exploited by malicious people to cause a DoS (Denial of Service). http://secunia.com/advisories/38881/
[3/5] HP Performance Insight Arbitrary Command Execution Vulnerability A vulnerability has been reported in HP Performance Insight, which can be exploited by malicious people to compromise a vulnerable system. http://secunia.com/advisories/38899/
[3/5] eclime Multiple Vulnerabilities Some vulnerabilities have been discovered in eclime, which can be exploited by malicious people to conduct SQL injection, cross-site scripting, and session fixation attacks. http://secunia.com/advisories/38307/

Security Videos & Podcasts

SecurityTube.Net HNN ShmooCon 2010 Interviews by Space Rogue Video Tutorial Using Fireforce to Bruteforce Web Login Forms Video Tutorial Building, Growing, and Extending Online Anonymity using Tor (FOSDEM 2010) Video Tutorial Nmap Scripting Engine Primer Video Tutorial Phishing (Evil on the Internet) FOSDEM Talk Video Tutorial Open Source Host based Intrusion Detection System (OSSEC) Video Tutorial HNNCast for the first week of March, 2010 Video Tutorial Attacking and Defending WPA Enterprise Networks Video Tutorial DNS Tool Showdown (DNSMap, Fierce and Dns_enum) Video Tutorial SSH Gymnastics using ProxyChains Video Tutorial GSM SRSLY (Shmoocon 2010) Video Tutorial Stealing Guests the Vmware Way Video Tutorial A New Project for Insecure Web Applications (Shmoocon 2010) Video Tutorial GPU vs CPU Supercomputing Security Shootout (Shmoocon 2010) Video Tutorial Windows File Pseudonyms (Shmoocon 2010) Video Tutorial Wifi Security, or Descending into Depression and Drink (Shmoocon 2010) Video Tutorial	PaulDotCom PaulDotCom Security Weekly – Episode 189 – March 5, 2010 Episode 189 date & time change! SSH gymnastics with proxychains "IPv6 Survival Guide" seminar discount offer! PaulDotCom Security Weekly – Episode 188 – February 25, 2010 PaulDotCom Episode 188 Featuring Daniel Suarez Meterpreter script to unlock the screensaver Killing the Monkey in the Middle Links between forensics and pen tests Running a command on every machine in your domain from the command line PaulDotCom Security Weekly – Episode 187 – February 18, 2010 Bypassing AV with msfencode -x Smashing the General Ledger for fun and Profit (AKA Accounting 101 for Penetration Testers) PaulDotCom Security Weekly – Episode 186 Part 2 – February 11, 2010 Episode 187 recording tonight at 19:30 EST	Risky Business Risky Business #142 — Special guest H D Moore talks fun with NTP Risky Business #141 — Why does patch management STILL suck? Risky Business #140 — Former NSA tech director, info assurance, Brian Snow Risky Business #139 — Moore bugs for moar software Risky Business #138 — Dan Geer on the future of computing Risky Business #137 — Year in review special! Risky Business #136 — 14-byte Cisco 0day exploit! ZOMG!! Risky Business #135 — Climategate and hacking scientists Risky Business #134 — Adam Boileau wraps Kiwicon Risky Business #133 — SSL/TLS flaw now useful, 9/11 pages and more
Other Stuff
Hack a Day Will this mouse get me kicked out of the coffee shop? One minute review of your wasted time Add a clean room to your workshop LEGO sequencer builds sound in 3D Tube clock database Cardboard Androids LEDs invade coffee table crevice Dr. Boardman’s Color Conundrum Give 1984 Mac a Leopard makeover Lava lamp centrifuge Don’t worry occifer, there is no blood in my alcohol! 137 years of Popular Science online free Time delay door alarm Strobeshnik, an HDD clock Lucid dreaming		There are no items in this feed.

Packet Storm Security Miscellaneous Files

exploit-writing-tutorial-part-9-win32-shellcoding.pdf Introduction to Win32 shellcoding. Part 9 in a series of tutorials.
exploit-writing-tutorial-part-8-win32-egg-hunt.pdf Win32 Egg Hunting. Part 8 in a series of tutorials.
codegate2010.txt The CodeGate 2010 Capture The Flag contest has been announced. It will take place from March 13th through the 14th.
jitednotepad-shellcode.txt JITed exec notepad shellcode.
jitedstage0-shellcode.txt JITed Stage-0 Shellcode. This JIT shellcode finds VirtualProtect, restores the address of the shellcode, makes mem exec and jumps to it.
Writing-JIT-Spray-Shellcode.pdf Whitepaper called Writing JIT-Spray Shellcode For Fun And Profit.
execve-md.c 64 bytes small Linux/x86 disable modsecurity shellcode.
joomla-rfis.txt This paper documents approximately 50 remote file inclusion vulnerabilities in Joomla and related components.
GoogleGears_for_Attackers.pdf This is a whitepaper called Google Gears for Attackers, Data Theft and Backdoor Placement Attacks on Google Gears’ Users.
F_IE_PrisonBreak.pdf This is a whitepaper called Flash + IE = Prison Break, Stealing Local Files through the Flash Plugin in IE.

Packet Storm Security Last Files

TA10-068A.txt Technical Cyber Security Alert 2010-68A – Microsoft has released updates to address vulnerabilities in Microsoft Windows and Microsoft Office.
tor.uclibc.i686.20100309.iso Tor-ramdisk is an i686 uClibc-based micro Linux distribution whose only purpose is to host a Tor server in an environment that maximizes security and privacy. Tor is a network of virtual tunnels that allows people and groups to improve their privacy and security on the Internet. Security is enhanced. […]
CORE-2009-1103.txt Core Security Technologies Advisory – A memory corruption occurs on Microsoft Office Excel 2002 when parsing a .XLS file with a malformed DbOrParamQry record. This vulnerability could be used by a remote attacker to execute arbitrary code in the context of the currently logged on user, by enticing t. […]
CORE-2009-0813.txt Core Security Technologies Advisory – A vulnerability was found in Windows Movie Maker and Microsoft Producer, which can be triggered by a remote attacker by sending a specially crafted file and enticing the user to open it. This vulnerability results in a write access violation and can lead to remo. […]
rivercms-sql.txt River CMS version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass.
MDVSA-2010-058.txt Mandriva Linux Security Advisory 2010-058 – Multiple vulnerabilities have been found and corrected in PHP. Packages for 2008.0 are provided for Corporate Desktop 2008.0 customers. The updated packages have been patched to correct these issues.
nusnewssystem-sql.txt NUs Newssystem version 1.02 suffers from a remote SQL injection vulnerability.
jevci-disclose.txt Jevci Siparis Formu Scripti suffers from a remote database disclosure vulnerability.
ZDI-10-026.txt Zero Day Initiative Advisory 10-026 – This vulnerability allows remote attackers to execute arbitrary commands on vulnerable installations of Hewlett-Packard Performance Insight. Authentication is not required to exploit this vulnerability. The specific flaw exists in the handling of requests to the. […]
mhproducts-sql.txt Mhproducts Kleinanzeigenmarkt suffers from a remote SQL injection vulnerability.

Security Blogs

Security Bloggers Network Importance of end-to-end encryption in the retail space APT: Should your panties be in a bunch, and how do you un-bunch them? LifeLock will pay $12 million for false claims Is it Wireless Security or Secure Wireless? March Patch Tuesday Overshadowed by New IE Zero-Day Vulnerability USB充电器软件后门 SecurosisTV: Low Hanging Fruit – Endpoint Security XKCD: Seismograph RSA 2010 大会纪行 More on the Cryptographers Panel misunderstanding Who?s the hardest working researcher of all time? Of 2009? The PBA attack on RSA Email with subject “scan upon download” contains trojan Blatant Stupidity: The Charney Tax Chip Bok: Death Panel The Four Billion Dollar Hacker	Schneier on Security Marc Rotenberg on Google’s Italian Privacy Case Guide to Microsoft Police Forensic Services Google in The Onion Eating a Flash Drive De-Anonymizing Social Network Users Friday Squid Blogging: Squid Teapot Another Interview with Me Mariposa Botnet Shut Down Comprehensive National Cybersecurity Initiative Crypto Implementation Failure Tom Engelhardt on Fear of Terrorism More on the Al-Mabhouh Assassination	LinuxSecurity.com – Latest News Multiple Apache Web Server Flaws Patched Top Ten Wi-Fi Security Threats Scan a Windows drive for viruses using Linux IBM to release secure software development tools FDIC: Hackers took more than $120M in three months Enterprise security on a small business budget
TaoSecurity Traffic Talk 10 Posted Einstein 3 Coming to a Private Network Near You? Making a Point with Pressure Points Keeping FreeBSD Applications Up-to-Date in BSD Magazine Bejtlich Teaching at Black Hat EU and USA 2010 Bejtlich to Speak at FIRST 2010 Information Security Jobs in GE-CIRT and Other GE Teams Reaction to Cyber Shockwave Review of Intelligence, 4th Ed Posted Offshoring Incident Response Advice for Academic Researchers Answers Regarding Military Service Max Ray Butler Sentenced (Again) Get the Divers Out of the Water A Hacker in Charge of Your Tax Dollars? Thor vs Clown	SecuriTeam Blogs Security Seal company sued by FTC Google and security. Oil and Water. (Or: How to DoS google groups) Thoughts on Haiti, Olympics, and other disasters Mac Virus update So Microsoft has known about the IE vulnerability (CVE-2010-0249) since last September. How not to handle a responsible XSS disclosure! Vendor response to vulnerability disclosure Signs of the (end) times … Adobe 0-Day (CVE-2009-4324) Fix To Be Pushed 12th January 2010 Adobe 0-day vulnerability (CVE-2009-4324) – what this means? Latest Adobe 0-Day Exploit Now In Metasploit KISS shellcoding and exploitation Using Nmap Remotely Through F5 FirePass VPN Bypassing Windows Unknown Publisher Verification For Web Downloaded Executables Exploiting WebView through Internet Explorer to remotely discover windows directory Stop blaming us	Offensive Computing – Community Malicious code research and analysis Rootkit Agent.adah Anatomy and Executables Carving via Cryptoanalytical Approach Vizsec 2010 CFP Now Open Spam and Abuse Trouble Unpacking One Million Samples PHP/Spy.Bull Cryptanalysis of Encryption used and Threat Analysis Good Guys Bring Down the Mega-D Botnet Siberia Exploit Pack. Another package of explois In-the-Wild Rule2Alert RussKill. Application to perform denial of service attacks
Darknet – The Darkside Energizer Duo USB Battery Charger Software Has Backdoor Trojan SAHI – Web Automation & Application Security Testing Tool Boffins Crack OpenSSL Library Using Power Fluctuations Ncrack – High Speed Network Authentication Cracking Tool High Tech Ticket Scalpers Earn $25 Million Profits Web Security Dojo – Training Environment For Web Application Security US School Remotely Spying On Kids With Webcams keimpx – Open Source SMB Credential Scanner US Investigators Pinpoint Author Of Google Attack Code Medusa 2.0 Released – Parallel Network Login Brute Forcing Tool	The Dark Visitor Shanghai Jiaotong named as a source in Google compromise PRC Gov Responses to Hacking Allegations – Timeline Freedom of Speech? Not according to Baidu. Lawyers for company ripped off by green dam targeted in spear phishing attacks Chinese hackers don’t like Iranian Diabetics Brav[e\|o] Google.cn PRC hackers attack Iranian websites Baidu pwn3d by Iranian DNS hijackers PRC Internet “most free” Ph4nt0m Security webzine number four	Jeremiah Grossman Best of Application Security (Friday, Mar. 5) Best of Application Security (Friday, Feb. 26) Compliance and Habit holding back Application Security Best of Application Security (Friday, Feb. 19) Hey Massachusetts, where is your application security requirement? Infrastructure vs. Application Security Spending Best of Application Security (Friday, Feb. 12) Where’s WhiteHat? Re: Scanner Comparisons Best of Application Security (Friday, Feb. 5) Web 2.0 Pivot Attacks Converting unimplementable Cookie-based XSS to a persistent attack The Web won’t be safe, let alone secure, unless we break it Be Ready — With Answers Best of Application Security (Friday, Jan. 29) WASC RSA Meet-Up 2010! Best of Application Security (Friday, Jan. 22)
cr0 blog CVE-2010-0232: Microsoft Windows NT #GP Trap Handler Allows Users to Switch Kernel Stack Virtualization security and the Intel privilege model CVE-2009-2267: Mishandled exception on page fault in VMware Security in Depth for Linux Software CVE-2009-2793: Iret #GP on pre-commit handling failure: the NetBSD case CVE-2009-2698: udp_sendmsg() vulnerability Linux NULL pointer dereference due to incorrect proto_ops initializations (CVE-2009-2692) Old school local root vulnerability in pulseaudio (CVE-2009-1894) Bypassing Linux’ NULL pointer dereference exploit prevention (mmap_min_addr) Time-stamp counter disabling oddities in the Linux kernel Write once, own everyone, Java deserialization issues Local bypass of Linux ASLR through /proc information leaks Interesting vulnerability in udevd 26 Massive exploitation of instant messaging applications proved feasible CanSecWest 2009 report	Hack In The Box Building a Linux Incident Response / Forensic Disk UK still lousy on electronic nosiness Five Best VPN Tools Researchers dissect ZeuS botnet blueprint Feds Move to Break Voting-Machine Monopoly 1024-bit RSA encryption cracked by carefully starving CPU of electricity Limewire taps AVG for virus free torrents Physicists Find Way to See Through Paint, Paper, and Other Opaque Materials The Basics of SAN Security Army plans enterprise email system Microsoft skips patch for PowerPoint add-on Symantec Offers New Approach to Mobile Security Top Five Tips for Securing your Business Reputation Hackers target freshly uncovered Internet Explorer hole BITSTALKER: Accurately and effectively monitoring BitTorrent traffic A Practical Attack to De-Anonymize Social Network Users	GNUCITIZEN Hacking Linksys IP Cameras (pt 6) dnsmap v0.30 is now out! Old-school Remote Command Exec Vulnerabilities on Avaya Intuity Skydive Free Web Application Security Testing Tool Of Sec Cons and Magstripe Gift Cards CVE-2009-1151: phpMyAdmin Remote Code Execution Proof of Concept Hacking Linksys IP Cameras (pt 5) Breaking Into a Home With an iPhone Extensions at War Exploit Sweatshop Jeriko Group and Source Code Repository Hacking Linksys IP Cameras (pt 4) Hacking Linksys IP Cameras (pt 3) Hacking Linksys IP Cameras (pt 2) Hacking Linksys IP Cameras (pt 1)

The Ethical Hacker Network RSS News Feed

carnal0wnage.attackresearch.com

Daily Dave

ha.ckers.org web application security lab

Security4all – Dedicated to digital security, enterprise 2.0 and presentation skills

Metasploit

DVLabs: Blogs

The RISKS Digest

Security Fix

Microsoft Security Advisories

The Microsoft Security Response Center (MSRC)

March 2010 Security Bulletin Release Today we are releasing two Important security bulletins addressing eight vulnerabilities in Windows and Microsoft Office. Both bulletins have an aggregate Exploitability Index rating of “1” so we recommend that customers deploy these updates as soon as possible. The Microsoft Exploitability Inde. […]
Security Advisory 981374 Released Hi everyone, Today we released Security Advisory 981374 addressing a publicly disclosed vulnerability in Internet Explorer 6 and Internet Explorer 7. Internet Explorer 8 is not affected by this issue. Customers using Internet Explorer 6 or 7 should upgrade to Internet Explorer 8 immediately to benef. […]
March 2010 Bulletin Release Advance Notification Today we are providing advance notification to customers that we will be releasing two bulletins this month affecting Windows and Microsoft Office products. Both bulletins are rated Important and address a total of 8 vulnerabilities. We recommend that customers review the Advance Notification webpag. […]
Update: MS10-015 security update re-released with new detection logic Hi, I am writing to let you know that we have revised the installation packages for MS10-015 with new logic that prevents the security update from being installed on systems if certain abnormal conditions exist. Such conditions could be the result of an infection with a computer virus such as the Al. […]
Security Advisory 981169 Released Hello again, Today we released Security Advisory 981169 to address the VBScript issue involving Windows Help files that we blogged about yesterday. To reiterate what we said in that post, we are not aware of any active attacks at this time and the following operating systems are not affected by this. […]
Investigating a new win32hlp and Internet Explorer issue Hi everyone, On Friday 2/26/2010, an issue was posted publicly that could allow an attacker to host a maliciously crafted web page and run arbitrary code if they could convince a user to visit the web page and then get them to press the F1 key in response to a pop up dialog box. We are not aware of. […]
Update – Restart Issues After Installing MS10-015 and the Alureon Rootkit Hi, We wanted to provide you with an update on our ongoing investigation into the “blue screen” issues affecting a limited number of customers who installed MS10-015. We have been working around the clock with our customers, partners and several teams at Microsoft to determine the cause of the. […]
Update – Restart Issues After Installing MS10-015 In our continuing investigation in to the restart issues related to MS10-015 that a limited number of customers are experiencing, we have determined that malware on the system can cause the behavior. We are not yet ruling out other potential causes at this time and are still investigating. Please re. […]
February 2010 Security Bulletin Webcast Hi everyone, As we do every month following our public webcast, we have posted the questions and answers (which you can find here) and the recorded webcast below. This month there were no particular themes that emerged in the questions. They ranged from wanting clarification of what it means when we. […]
Restart issues after installing MS10-015 Hi everyone, I am writing to let you know that we are aware that after installing the February security updates a limited number of users are experiencing issues restarting their computers. Our initial analysis suggests that the issue occurs after installing MS10-015 (KB977165). However, we have not. […]
February 2010 Security Bulletin Release MSRC Bulletin Release Blog Post Hi everyone, As mentioned in our ANS blog post last week, today we are releasing 13 bulletins addressing 26 vulnerabilities. 11 bulletins affect Windows and 2 affect older versions of Microsoft Office. In the post on Thursday, we mentioned that bulletins in the ANS li. […]
February 2010 Bulletin Release Advance Notification Today we released February bulletin information through our Advance Notification Service (ANS). This month, we will be releasing 13 bulletins – five rated Critical, seven rated Important, and one rated Moderate – addressing 26 vulnerabilities. Eleven of the bulletins affect Windows and the remaining. […]
Security Advisory 980088 Released Hi everyone, Today we released Security Advisory 980088 to address a publicly disclosed vulnerability in Internet Explorer that may allow Information Disclosure for customers running on Windows XP or who have disabled Internet Explorer Protected Mode. At this time we are not aware of any attacks s. […]
January 2010 Out-of-Band Security Bulletin Webcast Hello everyone, Yesterday Adrian Stone from the Microsoft Security Response Center (MSRC) and I hosted a live webcast to discuss Security Bulletin MS10-002 and Security Advisory 979682 in more detail with customers. Below is the video of that presentation and you can find the question & answer trans. […]
Bulletin MS10-002 Released Hello, Today we released Security Bulletin MS10-002 out-of-band to address vulnerabilities in Internet Explorer. All customers using currently supported versions of Windows and Internet Explorer should apply this update as soon as possible. Once applied, customers are protected against the known att. […]

MS Sec Notification

Microsoft Security Bulletin Major Revisions Posted by Microsoft on Mar 09******************************************************************** Title: Microsoft Security Bulletin Major Revisions Issued: March 9, 2010 ******************************************************************** Summary ======= The following bulletins have undergone a maj. […]
Microsoft Security Bulletin Summary for March 2010 Posted by Microsoft on Mar 09******************************************************************** Microsoft Security Bulletin Summary for March 2010 Issued: March 9, 2010 ******************************************************************** This bulletin summary lists security bulletins released for. […]
Microsoft Security Bulletin Summary for February 2010 Posted by Microsoft on Feb 09******************************************************************** Microsoft Security Bulletin Summary for February 2010 Issued: February 9, 2010 ******************************************************************** This bulletin summary lists security bulletins release. […]
Microsoft Security Bulletin Summary for January 2010 Posted by Microsoft on Jan 21******************************************************************** Microsoft Security Bulletin Summary for January 2010 Issued: January 21, 2010 ******************************************************************** This bulletin summary lists the out-of-band security bu. […]
Microsoft Security Bulletin Major Revision Posted by Microsoft on Jan 14******************************************************************** Title: Microsoft Security Bulletin Major Revision Issued: January 13, 2010 ******************************************************************** Summary ======= The following bulletin has undergone a maj. […]
Microsoft Security Bulletin Summary for January 2010 Posted by Microsoft on Jan 12******************************************************************** Microsoft Security Bulletin Summary for January 2010 Issued: January 12, 2010 ******************************************************************** This bulletin summary lists security bulletins released. […]
Microsoft Security Bulletin Re-Release Posted by Microsoft on Jan 12******************************************************************** Title: Microsoft Security Bulletin Re-Release Issued: January 12, 2010 ******************************************************************** Summary ======= The following bulletin has undergone a major r. […]
Microsoft Security Bulletin Major Revisions Posted by Microsoft on Dec 08******************************************************************** Title: Microsoft Security Bulletin Major Revisions Issued: December 8, 2009 ******************************************************************** Summary ======= The following bulletins have undergone a. […]
Microsoft Security Bulletin Summary for December 2009 Posted by Microsoft on Dec 08******************************************************************** Microsoft Security Bulletin Summary for December 2009 Issued: December 8, 2009 ******************************************************************** This bulletin summary lists security bulletins release. […]
Microsoft Security Bulletin Major Revisions Posted by Microsoft on Nov 24******************************************************************** Title: Microsoft Security Bulletin Major Revisions Issued: November 24, 2009 ******************************************************************** Summary ======= The following bulletins have undergone a. […]
Microsoft Security Bulletin Major Revisions Posted by Microsoft on Nov 10******************************************************************** Title: Microsoft Security Bulletin Major Revisions Issued: November 10, 2009 ******************************************************************** Summary ======= The following bulletins have undergone a. […]
Microsoft Security Bulletin Summary for November 2009 Posted by Microsoft on Nov 10******************************************************************** Microsoft Security Bulletin Summary for November 2009 Issued: November 10, 2009 ******************************************************************** This bulletin summary lists security bulletins releas. […]
Microsoft Security Bulletin Advance Notification for November 2009 Posted by Microsoft on Nov 05******************************************************************** Microsoft Security Bulletin Advance Notification for November 2009 Issued: November 5, 2009 ******************************************************************** This is an advance notification of securi. […]
Microsoft Security Bulletin Major Revisions Posted by Microsoft on Nov 03******************************************************************** Title: Microsoft Security Bulletin Major Revisions Issued: November 2, 2009 ******************************************************************** Summary ======= The following bulletins have undergone a. […]
Microsoft Security Bulletin Major Revisions Posted by Microsoft on Oct 28******************************************************************** Title: Microsoft Security Bulletin Major Revisions Issued: October 28, 2009 ******************************************************************** Summary ======= The following bulletins have undergone a. […]

Mailing Lists

Full Disclosure

Re: Ubisoft DDoS Posted by Jan Schejbal on Mar 09Am 09.03.2010 21:11, schrieb James Matthews: If the attack behaved like LOTS of legitimate clients, it might have been hard to lock out the bots while not locking out players. The option that the attack is just made up as an excuse for too few resources to support all. […]
CORE-2009-1103: Microsoft Office Excel DbOrParamQry Record Parsing Vulnerability Posted by CORE Security Technologies Advisories on Mar 09 Core Security Technologies – CoreLabs Advisory http://www.coresecurity.com/corelabs/ Microsoft Office Excel DbOrParamQry Record Parsing Vulnerability 1. *Advisory Information* Title: Microsoft Office Excel DbOrParamQry Record Parsing Vulnerab. […]
CORE-2009-0813: Windows Movie Maker and Microsoft Producer IsValidWMToolsStream() Heap Overflow Posted by CORE Security Technologies Advisories on Mar 09 Core Security Technologies – CoreLabs Advisory http://www.coresecurity.com/corelabs/ Windows Movie Maker and Microsoft Producer IsValidWMToolsStream() Heap Overflow 1. *Advisory Information* Title: Windows Movie Maker and Microsoft Producer I. […]
Re: Ubisoft DDoS Posted by Christian Sciberras on Mar 09Perhaps Cisco xt 5650a? Also, 6500 series are actually switches, not routers. Cheers.
[ MDVSA-2010:058 ] php Posted by security on Mar 09 _______________________________________________________________________ Mandriva Linux Security Advisory MDVSA-2010:058 http://www.mandriva.com/security/ _______________________________________________________________________ Package : php Date : March 9, 2010 Affected:. […]
Re: Ubisoft DDoS Posted by James Matthews on Mar 09I don’t see why they didn’t just block the attack. It must be more then this.
ZDI-10-026: Hewlett-Packard OVPI helpmanager Servlet Remote Code Execution Vulnerability Posted by ZDI Disclosures on Mar 09ZDI-10-026: Hewlett-Packard OVPI helpmanager Servlet Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-026 March 9, 2010 — CVE ID: CVE-2010-0447 — Affected Vendors: Hewlett-Packard — Affected Products: Hewlett-Packard OpenVie. […]
ZDI-10-025: Microsoft Office Excel XLSX File Parsing Remote Code Execution Vulnerability Posted by ZDI Disclosures on Mar 09ZDI-10-025: Microsoft Office Excel XLSX File Parsing Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-025 March 9, 2010 — CVE ID: CVE-2010-0263 — Affected Vendors: Microsoft — Affected Products: Microsoft Office Excel — Vul. […]
Re: Mozilla Firefox 3.6 plenitude StringCrash(0day) Exploit Posted by Kaddeh on Mar 09I wouldn’t call this a bug in the least bit. I would call it a lack of hardware issue than anything, similar to “minimal requirements” on software, etc. This issue only happens on 32-bit with the configuration that you yourself are running, there is no issue with Firefox it. […]
List Charter Posted by John Cartwright on Mar 09[Full-Disclosure] Mailing List Charter John Cartwright – Introduction & Purpose – This document serves as a charter for the [Full-Disclosure] mailing list hosted at lists.grok.org.uk. The list was created on 9th July 2002 by Len Rose, and is. […]
Re: Mozilla Firefox 3.6 plenitude StringCrash(0day) Exploit Posted by information security on Mar 09 The testcase crashes in Mozilla because The reason for this is that the are stack exhaustion crashes and are not exploitable. Stack exhaustion occurs when there is no more room on the program stack to push any more data. This is not a stack-based buffer overf. […]
Re: Ubisoft DDoS Posted by Dobbins, Roland on Mar 09A good way to get started w/scalable DDoS mitigation is to implement S/RTBH on one’s hardware-based edge routers, and then make use of open-source NetFlow tools for visibility. There are commercial solutions as well – in the interests of full disclosure (pardon the. […]
Re: Ubisoft DDoS Posted by Valdis . Kletnieks on Mar 09On Tue, 09 Mar 2010 15:24:44 GMT, Michal said: Oh, I didn’t say they didn’t exist. There’s some *really* nice gear for DDoS mitigation available, if your budget is in the high 6 digits to 7 digits range per year. Your average 6509 router is going to need some ex. […]
SQL injection vulnerability in wILD CMS Posted by Maciej Gojny on Mar 09============ { Ariko-Security – Advisory #4/3/2010 } ============= SQL injection vulnerability in wILD CMS Vendor’s Description of Software: # http://www.wildcms.com/ Vulnerable DEMO # http://www.wildcms.com/page.php?page_id=139 Dork: # N/A Application Info: # Name: w. […]
Re: Ubisoft DDoS Posted by Michal on Mar 09I’ve worked at huge online better company and they had network devices that worked to stop DDoS as we got hit quite a bit. I have to say they managed quite well, often we would only notice because we regularly checked the graphs over 24 hours periods. Other times the attack. […]

Top WordPress blogs