Home    News Archive    Translate Traducen
News January 20003
31 january 2003

New Trojans:
Silver FTP 1.0

Remote Control 1.4

WinGate

MSN RAT 2.5

Vulnerabilities & Exploits:
Debian Security Advisory
DSA-247-1 courier-ssl -- missing input sanitizing. Read more

www.securitytracker.com:
Kerberos and Other FTP Clients Allow Malicious FTP Servers to Execute Arbitrary Code on the Client. Read more

www.securitytracker.com:
Sun Java Runtime Environment (JRE) Unspecified Hole Lets Java Code Bypass Access Controls. Read more

www.securitytracker.com:
List Site PRO Allows Remote Users to Hijack User Accounts. Read more

www.securitytracker.com:
Replicom ProxyView Default Configuration Gives Remote Users Full Access. Read more

www.securitytracker.com:
Kerberos KDC Bugs May Yield Remote Access to Remote Users, Enable Identity Forging, and Let Remote Users Crash the Server. Read more

www.securitytracker.com:
Sun Java Secure Socket Extension (JSSE) May Incorrectly Authenticate Invalid Entities. Read more

www.securitytracker.com:
Rediff Bol Instant Messaging Client Sends Authentication Data in the Clear and Permits Remote Users to Terminate Sessions. Read more

www.securitytracker.com:
Sun Solaris 'in.ftpd' FTP Server Can Be Temporarily Hung By Remote Users. Read more

www.securiteam.com:
MS-SQL Vulnerability Exploiting Trusted Connections. Read more

www.securiteam.com:
Solaris 'at' Exploit Code. Read more

www.securiteam.com:
Locator Service Buffer Overflow Vulnerability. Read more

www.securiteam.com:
phpTopsites Remote File Upload Vulnerability. Read more

www.securiteam.com:
phpLinks mail() Abuse Vulnerability. Read more

www.securiteam.com:
Apache Jakarta Tomcat 3 URL Parsing Vulnerability. Read more

www.securiteam.com:
dotproject Remote File Access Vulnerability. Read more

www.securiteam.com:
dotproject Remote Code Execution Vulnerability. Read more

www.securiteam.com:
Hypermail Buffer Overflows. Read more

News:
online.securityfocus.com:
The Busy Life of a Welsh Virus-Writer. Read more

polls.zdnet.co.uk:
Polling Form. What do you think of the sentence handed down to virus writer Simon Vallor? Read more

online.securityfocus.com:
$1m hacking challenge' product is flawed. Read more

www.theage.com.au:
The Slammer worm: a sysadmin's view. Read more

www.govexec.co:
The worm that turned: A new approach to hacker hunting. Read more

storage.ziffdavis.com:
Slammer Worm: A Blow to Remote Storage? Read more

www.washingtonpost.com:
FBI Skeptical on Internet Attack Source. Read more

www.hindustantimes.com:
Experts say Microsoft security effort failing. Read more

uk.news.yahoo.com:
Microsoft security effort said failing. Read more

30 january 2003

New Trojans:
Stealth Eye 1.0 version b

AIM Pws 1.0

Sinred Keylogger 1.0

Sinred Keylogger 1.1

Vulnerabilities & Exploits:
www.idefense.com:
SSH2 Clients Insecurely Store. Passwords (AbsoluteTelnet, SecureCRT, Entunnel, SecureFx, and PuTTY). Read more

Debian Security Advisory
DSA-246-1 tomcat -- information exposure, cross site scripting. Read more

www.securitytracker.com:
'dotproject' Include File Error Discloses Arbitrary Files to Remote Users. Read more

www.securitytracker.com:
Sun Solaris 'at' Command Race Condition Enables Local Users to Delete Arbitrary Files. Read more

www.securiteam.com:
Microsoft SQL Server 2000 Vulnerabilities in Cisco Products. Read more

www.securiteam.com:
Outlook Remote Code Execution in Preview Pane (S/MIME, PoC). Read more

www.securiteam.com:
MSSQL2000 Remote UDP Exploit. Read more

www.securiteam.com:
Multiple Vulnerabilities in Old Releases of MIT Kerberos. Read more

www.securiteam.com:
New YabbSE Remote Code Execution Vulnerability Found (News.php). Read more

www.securiteam.com:
Multiple Cross-Site Scripting Vulnerabilities in Nuked-Klan. Read more

www.securiteam.com:
MIT Kerberos FTP Client Remote Shell Commands Execution. Read more

www.securiteam.com:
ftls.org Guestbook Script Injection Vulnerabilities. Read more

News:
www.govexec.com:
The worm that turned: A new approach to hacker hunting. Read more

news.com.com:
Slammer may not feed on Microsoft alone. Read more

www.smh.com.au:
UK security specialist says his code was used in Slammer worm. Read more

www.computerworld.com:
Slow response to Slammer worm points to NIPC woes. Read more

www3.gartner.com:
How to Protect Against the Sapphire Worm. Read more

news.com.com:
Security clearinghouse under the gun. Read more

europe.cnn.com:
Music industry site hacked again. Read more

www.thekcrachannel.com:
Hackers Attack Station Web Site. Read more

news.com.com:
Net security chief to quit. Read more

29 january 2003

New Trojans:
Turkojan 1.0

Noname Trojan 2.0

WinMX 1.0

TightVNC 1.2.3

Vulnerabilities & Exploits:
www.securitytracker.com:
NuKed-KlaN PHP Gateway Input Validation Flaw Lets Remote Users Conduct Cross-Site Scripting Attacks. Read more

www.securitytracker.com:
PlatinumFTPserver Discloses Directory Listings To and Can Be Crashed By Remote Authenticated Users. Read more

www.securitytracker.com:
Hypermail Buffer Overflow Lets Remote Users Execute Arbitary Code. Read more

News:
www.smh.com.au:
Microsoft failed to patch own software against worm. Read more

www.lasvegassun.com:
Experts: Internet Attack Hunt Difficult. Read more

www.islandpacket.com:
Few clues in hunt for virus source. Read more

www.themoscowtimes.com:
Chinese Linked to Web Attack. Read more

www.telecomasia.net:
Chinese hacker group named as suspects in Slammer case. Read more

www.computeruser.com:
Worm exposes laziness and Microsoft flaws. Read more

www.washingtonpost.com:
Internet Worm Unearths New Holes. Read more

www.convergedigest.com:
Defense Experts Investigate Collateral Damage from Microsoft Slammer Worm. Read more

www.sunspot.net:
Internet attack rattles assumptions. Read more

news.bbc.co.uk:
Firms more at risk from hackers. Read more

www.dailyvanguard.com:
Hackers sneak into system. Read more

www.nzherald.co.nz:
Computer sleuth - the inside job. Read more

28 january 2003

New Trojans:
KoKo 2.0 version b

Chat Spy

Invisible Activity Spy 2.3

Nethief 3.2

Vulnerabilities & Exploits:
Debian Security Advisory
DSA-244-1 noffle -- buffer overflows. Read more

online.securityfocus.com:
SyGate Insecure UDP Source Port Firewall Bypass Weak Default Configuration Vulnerability. Read more

online.securityfocus.com:
Macromedia Shockwave GETNETTEXT local file disclosure vulnerability. Read more

online.securityfocus.com:
Kerberos Key Distribution Center Denial of Service Vulnerability. Read more

online.securityfocus.com:
Sun JSSE/Java Plug-In/Java Web Start Incorrect Certificate Validation Vulnerability. Read more

online.securityfocus.com:
Sun Java Virtual Machine Illegal Access To Object Methods Vulnerability. Read more

online.securityfocus.com:
Kodak KCMS KCS_OPEN_PROFILE Procedure Arbitrary File Access Vulnerability. Read more

online.securityfocus.com:
SpamAssassin BSMTP Mode Buffer Overflow Vulnerability. Read more

online.securityfocus.com:
PlatinumFTPServer Dot-Dot-Slash Directory Traversal Vulnerability. Read more

online.securityfocus.com:
ELog Web Logbook Multiple Buffer Overflow Vulnerabilities. Read more

online.securityfocus.com:
GNU Mailman 'email' Cross Site Scripting Vulnerability. Read more

online.securityfocus.com:
KDE Parameter Quoting Shell Command Execution Vulnerability. Read more

online.securityfocus.com:
Microsoft Windows MSGINA.DLL Read-Lock Denial Of Service Vulnerability. Read more

online.securityfocus.com:
EditTag edittag.pl File Disclosure Vulnerability. Read more

online.securityfocus.com:
CVS Directory Request Double Free Heap Corruption Vulnerability. Read more

online.securityfocus.com:
YaBB SE News.PHP Remote File Include Vulnerability. Read more

online.securityfocus.com:
ZyXEL DSL Modem Default Remote Administration Password Vulnerability. Read more

News:
www.canada.com:
Internet attack's damage more serious than many thought possible, experts say. Read more

www.computerworld.com:
Viruses get smarter. Read more

www.cnn.com:
Experts try to track vicious 'Slammer' worm. Read more

www.cnn.com:
As Net attack eases, blame game surges. Read more

www.theage.com.au:
Countries recovering from worm attack. Read more

www.hindustantimes.com:
Spooky cyber octopus. Read more

www.washingtonpost.com:
Always Be Prepared. Read more

news.bbc.co.uk:
South Korean markets hit by net worm. Read more

www.theage.com.au:
New software aims to snare crackers. Read more

www.theregister.co.uk:
Crooks harvest bank details from Net kiosk. Read more

www.zdnet.com.au:
Blanket hack muffles RIAA site - again. Read more

www.theregister.co.uk:
Child porn list leaked to Sunday Times. Read more

www.canada.com:
Wireless Warriors discover cracks in Calgary's corporate security systems. Read more

27 january 2003

New Trojans:
Jaros Trojan

Kronical Fire 1.0 beta

Sandesa 1.1

Vulnerabilities & Exploits:
Cisco Security Advisory:
Microsoft SQL Server 2000 Vulnerabilities in Cisco Products - MS02-061. Read More

online.securityfocus.com:
Efficient Networks DSL Router Denial Of Service Vulnerability. Read more

online.securityfocus.com:
Simple Web Counter URI Parameter Buffer Overflow Vulnerability. Read more

online.securityfocus.com:
ISC DHCPD NSUPDATE MiniRes Library Remote Buffer Overflow Vulnerabilities. Read more

online.securityfocus.com:
Trend Micro ScanMail For Exchange Authentication Bypass Vulnerability. Read more

online.securityfocus.com:
Trend Micro Virus Control System Information Disclosure Vulnerability. Read more

online.securityfocus.com:
Trend Micro Virus Control System Denial Of Service Vulnerability. Read more

online.securityfocus.com:
Trend Micro OfficeScan CGI Directory Insufficient Permissions Vulnerability. Read more

online.securityfocus.com:
Multiple Vendor HTTP CONNECT TCP Tunnel Vulnerability. Read more

online.securityfocus.com:
YABB SE Packages.PHP Remote File Include Vulnerability. Read more

online.securityfocus.com:
Microsoft Windows SMB Signing Vulnerability. Read more

online.securityfocus.com:
Palm HotSync Manager Remote Denial of Service Vulnerability. Read more

online.securityfocus.com:
PHPOutsourcing Zorum Remote Include Command Execution Vulnerability. Read more

online.securityfocus.com:
Python os.py Predictable Temporary Filename Command Execution Vulnerability. Read more

online.securityfocus.com:
Rediff Bol URL Handling Denial Of Service Vulnerability. Read more

www.securitytracker.com:
SpamAssassin Off-by-one Buffer Overflow May Let Remote Users Execute Arbitrary Code. Read More

www.securitytracker.com:
Enceladus Server Suite Discloses Directory Contents on the System to Remote Users. Read More

www.securitytracker.com:
Mailman List Software Input Validation Flaw in 'email' Variable Allows Remote Users to Conduct Cross-Site Scripting Attacks. Read More

www.securitytracker.com:
Microsoft Windows Terminal Server MSGINA.DLL Flaw Lets Remote Authenticated Users Reboot the Server. Read More

www.securitytracker.com:
YaBB SE Forum 'News.php' Include Bug Lets Remote Users Execute Arbitrary Code on the System. Read More

News:
Microsoft Security Bulletin MS02-061
Elevation of Privilege in SQL Server Web Tasks (Q316333). Read More

online.securityfocus.com:
Latest computer worm exposes reactionary nature to security flaws. Read more

news.com.com:
Worm exposes laziness and Microsoft flaws. Read more

www.thescotsman.co.uk:
The worm that made the internet choke and crawl. Read more

news.independent.co.uk:
How a computer hacker and an internet virus called Slammer gave the worldwide web a serious cold. Read more

www.theage.com.au:
Countries recovering from worm attack. Read more

news.yahoo.com:
Hong Kong Team Searches for Worm Origin. Read more

www.smh.com.au:
Slammer worm: is this a trial run? Read more

www.aberdeennews.com:
Firms Clean Servers, Desktops in Web Worm's Wake. Read more

www.washingtonpost.com:
Bank of America ATMs Disrupted by Virus. Read more

www.washingtonpost.com:
Internet Worm Hits Airline, Banks. Read more

www.reuters.com:
Web-Savvy South Korea Counts Cost of Slammer Worm. Read more

www.pcworld.com:
Virus Forecast for 2003. Read more

news.tbo.com:
FBI Investigating Theft Of Data On International Students. Read more

www.cleveland.com:
Hacker steals U. of Kansas information. Read more

26 january 2003

New Trojans:
Scorpina 17c3

Kcom Web Server

Snow 1.0

Vulnerabilities & Exploits:
Internet Security systems:
Microsoft SQL Slammer Worm Propagation. Read More

www.eeye.com:
Microsoft SQL Sapphire Worm Analysis. Read more

online.securityfocus.com:
IRIX uux Buffer Overflow Vulnerability. Read More

online.securityfocus.com:
IRIX 'mv' Insecure Directory Permissions Vulnerability. Read More

online.securityfocus.com:
IRIX fsr_efs Symlink Vulnerability. Read more

online.securityfocus.com:
IRIX rpcbind Symlink Vulnerability. Read more

online.securityfocus.com:
Microsoft Outlook 2002 V1 Exchange Server Security Certificate Information Leakage Vulnerability. Read more

online.securityfocus.com:
Microsoft Content Management Server Cross-Site Scripting Vulnerability. Read more

www.securitytracker.com:
Palm HotSync Manager Can Be Crashed By Remote Users. Read More

www.securitytracker.com:
ModLogAn Heap Overflow in Decoding URLs May Let Remote Users Execute Arbitrary Code. Read More

www.securitytracker.com:
Astaro Security Linux Firewall Access Control Flaw Lets Remote Users Connect to Arbitrary Hosts Behind the Firewall. Read More

www.securitytracker.com:
phpLinks Access Control Bug Lets Remote Users Send Unauthorized E-mail Via the Server. Read More

News:
www.internetnews.com:
Could Attack on DALnet Spell End for IRC? Read more

www.bbspot.com:
Hackers Demand Benefits. Read more

www.infoworld.com:
U.S. agencies get help with security patches. Read more

www.theregister.co.uk:
DoD offering admin privileges on .mil Web sites. Read more

25 january 2003

New Trojans:
PtakkS 2.0 r9

RMS 2.8

Kryptonic Ghost 1.5 version b

Vulnerabilities & Exploits:
Debian Security Advisory:
DSA-243-1 kdemultimedia -- several. Read More

Debian Security Advisory:
DSA-242-1 kdebase -- several. Read More

Debian Security Advisory:
DSA-241-1 kdeutils -- several. Read More

www.securitytracker.com:
YaBB SE Forum Include Bug Allows Remote Users to Execute Arbitrary Code on the Server. Read More

www.securitytracker.com:
WinRAR Buffer Overflow May Let Remote Users Execute Arbitrary Code. Read More

www.securitytracker.com:
Zorum Forum Software Input Validation Flaw Lets Remote Users Include Remote PHP Code to Be Executed on the Target Server. Read More

www.securitytracker.com:
Sygate Personal Firewall Allows Remote Users to Traverse the Firewall in Certain Cases. Read More

www.securitytracker.com:
Solaris Implementation of Kodak Color Management System (KCMS) Library Discloses Arbitrary Files to Remote Users. Read More

www.securitytracker.com:
Microsoft Outlook May Fail to Encrypt User E-mail, Disclosing the Contents to Remote Users. Read More

www.securitytracker.com:
Microsoft Locator Service Buffer Overflow Lets Remote Users Execute Arbitrary Code with System Level Privileges. Read More

www.securitytracker.com:
Apache Web Server 2.x Windows Device Access Flaw Lets Remote Users Crash the Server or Possibly Execute Arbitrary Code. Read More

www.securitytracker.com:
Apache Web Server Path Parsing Flaw May Allow Remote Users to Execute Code in Certain Configurations. Read More

News:
www.theregister.co.uk:
Flaw leaves door open for Trojan contamination. Read More

www.internetwk.com:
Security Hole Leaves AOL Accounts Wide Open. Read More

timesofindia.indiatimes.com:
'40-50 Indian sites hacked by Pak cyber criminals monthly'. Read More

www.newsfactor.com:
Daily CyberCrime and Security Report for January 24, 2003. Read More

24 january 2003

New Trojans:
Guptachar 2.0

Backstabb Lite 1.0

Snag 0.2 Beta

Vulnerabilities & Exploits:
Debian Security Advisory:
DSA-240-1 kdegames -- several. Read More

Debian Security Advisory:
DSA-239-1 kdesdk -- several. Read More

Debian Security Advisory:
DSA-238-1 kdepim -- several. Read More

Debian Security Advisory:
DSA-237-1 kdenetwork -- several. Read More

online.securityfocus.com:
Evolvable Shambala FTP Server CWD Denial Of Service Vulnerability. Read More

online.securityfocus.com:
ModLogAn Remote Heap Corruption Vulnerability. Read More

online.securityfocus.com:
Nite Server FTPD File Disclosure Vulnerability. Read More

online.securityfocus.com:
Lotus Domino HTTP Authentication Logging Buffer Overflow Vulnerability. Read More

online.securityfocus.com:
Multiple FTP Server Virtual User File Removal Vulnerability. Read More

online.securityfocus.com:
PeopleSoft XML External Entity Remote File Disclosure Vulnerability. Read More

online.securityfocus.com:
PHPMyPub Unauthorized Administrative Access Vulnerability. Read More

online.securityfocus.com:
MyRoom save_item.php Arbitrary File Upload Vulnerability. Read More

online.securityfocus.com:
Sambar Server results.stm Cross Site Scripting Vulnerability. Read More

www.kb.cert.org:
Microsoft Locator service contains buffer overflow. Read More

www.securitytracker.com:
Blackboard Learning System Discloses Encrypted Passwords to Remote Users. Read More

www.securitytracker.com:
Mandrake Linux 'printer-drivers' Package May Yield Root Privileges to Local Users. Read More

www.securitytracker.com:
Citrix MetaFrame Server May Let Remote Users Gain Elevated Privileges on Novell Networks. Read More

www.securiteam.com:
CuteFTP Buffer Overflow in LIST's Response. Read More

www.securiteam.com:
Unchecked Buffer in Locator Service Could Lead to Code Execution. Read More

www.securiteam.com:
Flaw in Outlook 2002's Way of Handling V1 Exchange Server Security Certificates Leads To Information Disclosure. Read More

www.securiteam.com:
WinRAR Buffer Overflow Vulnerability (Long Extension). Read More

www.securiteam.com:
Sambar Server Cross-Site Scripting Vulnerability (Results.stm). Read More

News:
The Register:
One, two, three, four MS alerts are at our door. Read More

online.securityfocus.com:
Lessons from the Laboratory. Read More

online.securityfocus.com:
The Curmudgeon's Crystal Ball: Security Predictions for 2003. Read More

www.zdnet.com.au:
Aust hackers launch security conference. Read More

www.thepittsburghchannel.com:
Team 4: Judge's E-Mail Hacker Found Guilty. Read More

www.businessweek.com:
Senate limits Pentagon 'snooping' plan. Read More

news.com.com:
Gates vows better security to customers. Read More

www.financialexpress.com:
Cyber Threats And You. Read More

23 january 2003

New Trojans:
Dark Sill 4.4

OMPN mini

JustJoke Mailer 1.3

Vulnerabilities & Exploits:
CROSS-SITE TRACING (XST). THE NEW TECHNIQUES AND EMERGING THREATS TO BYPASS CURRENT WEB SECURITY MEASURES USING TRACE AND XSS.(pdf) Read More

Debian Security Advisory:
DSA-236-1 kdelibs -- several. Read More

Debian Security Advisory:
DSA-235-1 kdegraphics -- several. Read More

Debian Security Advisory:
DSA-234-1 kdeadmin -- several. Read More

www.securitytracker.com:
SuSE Linux 'susehelp' Input Validation Flaw Lets Remote Users Execute Arbitrary Commands on the Server. Read More

www.securitytracker.com:
phpLinks Include File Error Lets Remote Users Execute Arbitrary Shell Commands on the Server. Read More

www.securitytracker.com:
Concurrent Versions System (CVS) Double-Free Bug Lets Remote Users Execute Arbitrary Code on the System. Read More

www.securitytracker.com:
PeopleSoft PeopleTools Web Server Component Discloses Files to Remote Users. Read More

www.securiteam.com:
Local and Remote Exploit For ISC DHCPd Format String (Update Log). Read More

www.securiteam.com:
Blackboard Password Retrieval (search.pl). Read More

www.securiteam.com:
Multi-Vendor Game Server DDoS Advisory. Read More

www.securiteam.com:
YaBB SE Remote Code Execution Vulnerability (/Sources). Read More

www.securiteam.com:
PeopleSoft XML External Entities Vulnerability. Read More

www.securiteam.com:
XSS (Cross Site Scripting) on FormMail.CGI. Read More

www.securiteam.com:
Cyboards Remote Code Execution and XSS. Read More

www.securiteam.com:
Buffer Overflows in Mandrake Linux printer-drivers Package. Read More

News:
Microsoft Security Bulletin MS03-001
Unchecked Buffer in Locator Service Could Lead to Code Execution (810833). Read More

Microsoft Security Bulletin MS03-002
Cumulative Patch for Microsoft Content Management Server (810487). Read More

Microsoft Security Bulletin MS03-003
Flaw in how Outlook 2002 handles V1 Exchange Server Security Certificates could lead to Information Disclosure (812262). Read More

Microsoft Security Bulletin MS02-070
Flaw in SMB Signing Could Enable Group Policy to be Modified (329179). Read More

www.theage.com.au:
Updates and double dates. Read More

quote.bloomberg.com:
Microsoft's Windows OS Bug Allows Hackers to Access User's PC. Read More

www.internetweek.com:
Solaris Security Hole Allows Attackers To Read Any File On Vulnerable System. Read More

www.whitehatsec.com:
WHITEHAT DISCOVERS SERIOUS SECURITY FLAW AFFECTING ALL WEB SERVERS WORLDWIDE. Read More

www.eweek.com:
Security Flaw Exposes AOL Accounts. Read More

www.itworld.com:
UK virus writer sentenced to two years in prison. Read More

online.securityfocus.com:
The Turkey that Bites. Read More

www.businessweek.com:
Feds Seek Public Input on Hacker Sentencing. Read More

www.techtv.com:
New Antivirus Virus Doesn't Help. Read More

www.lasvegassun.com:
Identity Theft Complaints Double in 2002. Read More

www.newsfactor.com:
Daily CyberCrime and Security Report for January 22, 2003. Read More

22 january 2003

New Trojans:
Z-Demon 1.11

Beast 1.91

Net Antrax 1.0.0

Vulnerabilities & Exploits:
www.idefense.com:
Buffer Overflows in Mandrake Linux printer-drivers Package. Read More

www.debian.org:
DSA-233-1 cvs -- doubly freed memory. Read More

online.securityfocus.com:
Multiple Vendor Network Device Driver Frame Padding Information Disclosure Vulnerability. Read More

online.securityfocus.com:
GlobalScape CuteFTP LIST Response Buffer Overflow Vulnerability. Read More

online.securityfocus.com:
KDE Parameter Quoting Shell Command Execution Vulnerability. Read More

www.securitytracker.com:
Allegro RomPager Input Validation Hole Lets Remote Users Conduct Cross-Site Scripting Attacks. Read More

www.securitytracker.com:
PhpPass Input Validation Flaw Lets Remote Users Inject SQL Commands to Gain Access to the System. Read More

www.securitytracker.com:
PHP My Pub Authentication Flaw Gives Remote Users Administrative Access to the Application. Read More

www.securitytracker.com:
Sambar Server Input Validation Hole in Query Feature Lets Remote Users Conduct Cross-Site Scripting Attacks. Read More

www.securiteam.com:
Directory Traversal Bug Found in Xynph FTP Server. Read More

News:
news.bbc.co.uk:
Computer virus author jailed. Read More

www.hindustantimes.com:
British hacker receives two-year jail sentence. Read More

www.theage.com.au:
Web designer jailed for creating email worms. Read More

www.internet-magazine.com:
New York university trials hacker trap. Read More

www.computerworld.com:
Heeeee's back: Hacker Kevin Mitnick free to use computers again. Read More

www.eweek.com:
Stopping Attacks in Their Tracks. Read More

21 january 2003

New Trojans:
Poison-tipped Arrow

Deftcode 1.0

Global Killer 1.0

Vulnerabilities & Exploits:
Internet Security Systems:
PeopleSoft XML External Entities Vulnerability. Read More

online.securityfocus.com:
Citrix Metaframe ICA Client Privilege Inheritance Vulnerability. Read More

online.securityfocus.com:
Sun Solaris UTMP_Update Local Buffer Overflow Vulnerability. Read More

online.securityfocus.com:
HP-UX 11.22 Xserver Privilege Escalation Vulnerability. Read More

online.securityfocus.com:
Saafnet AlphaShield Connection Tracking Weakness. Read More

online.securityfocus.com:
HP-UX sort Unspecified File Handling Vulnerability. Read More

online.securityfocus.com:
Symantec Norton Internet Security ICMP Packet Flood Denial Of Service Vulnerability. Read More

online.securityfocus.com:
OpenSSH Challenge-Response Buffer Overflow Vulnerabilities. Read More

online.securityfocus.com:
GameSpy 3D Packet Amplification Denial Of Service Vulnerability. Read More

online.securityfocus.com:
fnord Web Server Buffer Overflow Vulnerability. Read More

online.securityfocus.com:
phpBB2 privmsg.php SQL Injection Vulnerability. Read More

www.securitytracker.com:
MYROOM Commerce Gallery Software May Disclose Files to Remote Users. Read More

www.securitytracker.com:
Shambala Server FTP Input Validation Bugs Let Remote Authenticated Users View and Upload Files and Crash the Server. Read More

www.securitytracker.com:
CuteFTP Client Buffer Overflow in Processing Command Responses May Let Remote Users Execute Code. Read More

News:
www.reuters.com:
Microsoft Reveals Secret Code to Russia. Read More

www.accessatlanta.com:
Some say Big Brother looms. Read More

www.sophos.com:
Female virus writer attacks her fellow coders. Read More

asia.cnet.com:
Risky business:Keeping security a secret. Read More

www.wired.com:
How to Foil Data Thieves, Hackers. Read More

online.securityfocus.com:
New software aims to snare computer intruders in real time. Read More

online.securityfocus.com:
Open Source Honeypots: Learning with Honeyd. Read More

www.wired.com:
MS: Add Java to Windows and Stir. Read More

asia.cnet.com:
Microsoft: Security fix due for phone OS. Read More

straitstimes.asia1.com.sg:
Opposition party's website defaced. Read More

www.newsfactor.com:
Daily CyberCrime and Security Report for January 20, 2003. Read More

20 january 2003

New Trojans:
Z-demon 1.1

Z-downloader 1.1

Remote Grab 1.0

Vulnerabilities & Exploits:
online.securityfocus.com:
WGet NLST Client Side File Overwriting Vulnerability. Read More

online.securityfocus.com:
PHPLinks Search HTML Injection Vulnerability. Read More

online.securityfocus.com:
PHPLinks Add Site HTML Injection Vulnerability. Read More

online.securityfocus.com:
Microsoft Windows Fontview Denial of Service Vulnerability. Read More

online.securityfocus.com:
Mambo Site Server Arbitrary File Upload Vulnerability. Read More

online.securityfocus.com:
CSO Lanifex Outreach Project Tool HTML Injection Vulnerability. Read More

online.securityfocus.com:
CSO Lanifex Outreach Project Tool Request Origin Spoofing Vulnerability. Read More

online.securityfocus.com:
Bugzilla LocalConfig Backup File Disclosure Vulnerability. Read More

online.securityfocus.com:
Bugzilla Data/Mining Directory Insecure Permissions Vulnerability. Read More

online.securityfocus.com:
VIM ModeLines Arbitrary Command Execution Vulnerability. Read More

online.securityfocus.com:
mpg123 Incorrect Framesize Calculation Memory Corruption Vulnerability. Read More

www.securitytracker.com:
HP-UX Operating System 'sort(1)' Command Bug May Let Local Users Access Files. Read More

www.securitytracker.com:
Symantec Norton Internet Security Can Be Crashed By Remote Users Sending ICMP Messages. Read More

www.securitytracker.com:
HP-UX Xserver May Let Remote Authenticated Users Obtain Elevated Privileges. Read More

www.securitytracker.com:
Sun Solaris Operating System /usr/lib/utmp_update Buffer Overflow May Give Local Users Root Privileges. Read More

www.securitytracker.com:
Sun Solaris RCP AUTH_DES Bug May Give Remote Users Root Access. Read More

News:
star-techcentral.com:
2003 viruses: More of the same. Read More

www.vnunet.com:
Well-known security flaws go ignored. Read More

www.siliconvalley.com:
Legendary hacker to get unleashed and online. Read More

star-techcentral.com:
Microsoft: Security fix due for phone OS. Read More

19 january 2003

New Trojans:
AntiPC 1.1

Gates of Hell 2.1

Akosch 1 client

Tools:
www.klcconsulting.net:
SMAC, Windows MAC Address Modifying Utility. Read More

www.securityfriday.com:
NBTdeputy register a NetBIOS computer name on the network and is ready to respond to NetBT name-query requests. Read More

freshmeat.net:
WormWarner is a Perl script that is used to warn hosts that are probably infected by a worm. Read More

Vulnerabilities & Exploits:
online.securityfocus.com:
vBulletin HTML Injection Vulnerability. Read More

online.securityfocus.com:
Trend Micro ScanMail For Exchange Authentication Bypass Vulnerability. Read More

online.securityfocus.com:
Trend Micro Virus Control System Information Disclosure Vulnerability. Read More

online.securityfocus.com:
Trend Micro Virus Control System Denial Of Service Vulnerability. Read More

online.securityfocus.com:
Trend Micro OfficeScan CGI Directory Insufficient Permissions Vulnerability. Read More

online.securityfocus.com:
W-Agora Remote File Disclosure Vulnerability. Read More

online.securityfocus.com:
mpg123 Invalid MP3 Header Memory Corruption Vulnerability. Read More

online.securityfocus.com:
PHP TopSites HTML Injection Vulnerability. Read More

www.securitytracker.com:
phpBB Input Validation Flaw Lets Remote Authenticated Users Inject SQL Commands to Delete Private Messages on the System. Read More

www.securitytracker.com:
CyBoards PHP Lite Input Validation Bugs Let Remote Users Execute Arbitrary Code and Conduct Cross-Site Scripting Attacks. Read More

www.securitytracker.com:
vAuthenticate Security Script Input Validation and Authentication Flaw May Let Remote Users Gain Admin Access on the Application. Read More

www.securitytracker.com:
vSignup Registration Script Input Validation and Authentication Flaw May Let Remote Users Gain Admin Access on the Application. Read More

www.securiteam.com:
Stunnel Format String Vulnerability (Exploit). Read More

www.securiteam.com:
Local and Remote Exploit for MySQL (Password Scrambling). Read More

www.securiteam.com:
Psunami Bulletin Board CGI Remote Command Execution. Read More

www.securiteam.com:
ISC DHCPD Minires Library Contains Multiple Buffer Overflows. Read More

www.securiteam.com:
XSS Vulnerability in NOKIA Official Website. Read More

www.securiteam.com:
Allegro RomPager Cross Site Scripting. Read More

www.securiteam.com:
D-Link DWL-900AP+ Security Hole (Password-less Access). Read More

www.securiteam.com:
Directory Traversal Vulnerabilities Found in NITE FTP Server. Read More

News:
www.computeruser.com:
Microsoft launches government security program. Read More

straitstimes.asia1.com.sg:
Hackers turn Keadilan website into porn site. Read More

www.theregister.co.uk:
GameSpy could let crackers mount network DDoS attacks. Read More

www.theregister.co.uk:
"I poisoned P2P networks for the RIAA" - whistleblower. Read More

18 january 2003

New Trojans:
Windows Key Analyst 1.4a

EPS 1.65

Doped 1.0 beta

Vulnerabilities & Exploits:
online.securityfocus.com:
Session Fixation Vulnerability Web-based Applications. (pdf)Read More

Debian Security Advisory
DSA-231-1 dhcp3 -- stack overflows. Read More

Debian Security Advisory
DSA-230-1 bugzilla -- insecure permissions, spurious backup files. Read More

online.securityfocus.com:
PostgreSQL Circle_Poly Buffer Overflow Vulnerability. Read More

online.securityfocus.com:
PostgreSQL SET TIME ZONE Environment Variable Buffer Overflow Vulnerability. Read More

online.securityfocus.com:
PostgreSQL TZ Environment Variable Buffer Overflow Vulnerability. Read More

online.securityfocus.com:
PostgreSQL path_add() Buffer Overrun Vulnerability. Read More

online.securityfocus.com:
PostgreSQL path_encode() Buffer Overflow Vulnerability. Read More

online.securityfocus.com:
PostgreSQL Date Parser Buffer Overflow Vulnerability. Read More

online.securityfocus.com:
HTML Forms Generation And Validation Forms.PHP HTML Injection Vulnerability. Read More

online.securityfocus.com:
D-Link DWL-900AP+ Firmware Upgrade Configuration Reset Vulnerability. Read More

online.securityfocus.com:
PostgreSQL String Pad Function Buffer Overflow Vulnerability. Read More

online.securityfocus.com:
PostgreSQL Repeat Function Buffer Overflow Vulnerability. Read More

online.securityfocus.com:
PostgreSQL cash_words Function Buffer Overflow Vulnerability. Read More

online.securityfocus.com:
Psunami Bulletin Board Psunami.CGI Remote Command Execution Vulnerability. Read More

online.securityfocus.com:
vSignup Remote SQL Injection Vulnerability. Read More

vAuthenticate Remote SQL Injection Vulnerability. Read More

www.securitytracker.com:
D-Link AirPlus Access Point Manager Allows Remote Users to Upgrade Firmware Without Authentication. Read More

www.securitytracker.com:
Geeklog Input Validation Holes in Various Scripts Allow Remote Users to Conduct Cross-Site Scripting Attacks. Read More

www.securitytracker.com:
ISC DHCPD Minires Library Buffer Overflows Let Remote Users Execute Arbitrary Code. Read More

www.securitytracker.com:
NiteServer FTP Server Input Validation Bug Discloses Directories on the System to Remote Users. Read More

News:
news.com.com:
Microsoft: Security fix due for phone OS. Read More

news.com.com:
Game server flaw poses attack threat. Read More

zdnet.com.com:
Week in review: Security blame game. Read More

zdnet.com.com:
Brains gather to outsmart spam. Read More

www.vnunet.com:
Review lame hacker law, says business. Read More

17 january 2003

New Trojans:
KoKo 2.0

Z-downloader 1.01

Nethief 3.0

Vulnerabilities & Exploits:
online.securityfocus.com:
Solaris UUCP Local Buffer Overflow Vulnerability. Read More

online.securityfocus.com:
Xitami Webserver Administrative Port Buffer Overflow Vulnerability. Read More

online.securityfocus.com:
AN HTTPD HTTP Request Buffer Overflow Vulnerability. Read More

online.securityfocus.com:
POC32 Unauthorized Telnet Access Vulnerability. Read More

online.securityfocus.com:
AN HTTPD Cross Site Scripting Vulnerability. Read More

online.securityfocus.com:
Cyboards PHP Lite Multiple Cross Site Scripting Vulnerabilities. Read More

online.securityfocus.com:
Cyboards PHP Lite Remote File Include Vulnerability. Read More

online.securityfocus.com:
Microsoft Windows 2000 Lanman Denial of Service Vulnerability. Read More

online.securityfocus.com:
Microsoft Windows 2000/XP NetDDE Privilege Escalation Vulnerability. Read More

online.securityfocus.com:
PHP wordwrap() Heap Corruption Vulnerability. Read More

online.securityfocus.com:
phpPass AccessControl.PHP SQL Injection Vulnerability. Read More

online.securityfocus.com:
Stunnel Unspecified SIGCHLD Signal Handler Vulnerability. Read More

www.securitytracker.com:
WebCollection Plus Discloses Files on the System to Remote Users. Read More

www.securitytracker.com:
PHP TopSites Input Validation Flaws Let Remote Users Access the Database and Conduct Cross-Site Scripting Attacks. Read More

online.securityfocus.com:
CUPS File Descriptor Leakage Denial Of Service Vulnerability. Read More

News:
online.securityfocus.com:
Rumsfeld orders .mil Web lockdown. Read More

www.nytimes.com:
Iraqi Computer Attacks Feared. Read More

zdnet.com.com:
CERT warns of DHCP vulnerability. Read More

www.crn.com:
Internet Security Systems Launches New Strategy. Read More

news.com.com:
ACLU: You're being watched. Read More

news.com.com:
Perspective: Decrypting the secret to strong security. Read More

zdnet.com.com:
Hackers attack new smart phones. Read More

www.wired.com:
Hackers Humble Security Experts. Read More

www.newarchitectmag.com:
Reformed hackers want to lend a hand with your IT security strategy. Read More

www.westernherald.com:
Unknown hacker taps into business college Web site. Read More

www.net-security.org:
Halting the Hacker: A Practical Guide to Computer Security. Read More

16 january 2003

New Trojans:
BackLash 1.01 Alpha

Mini-web 1.0

SC-KeyLog 1.025

Vulnerabilities & Exploits:
Debian Security Advisory
DSA-229-1 imp -- SQL injection. Read More

www.securitytracker.com:
Solaris 'uucp' Buffer Overflow May Allow Local Users to Obtain Elevated Privileges. Read More

www.securitytracker.com:
Psunami Bulletin Board Input Validation Bug Lets Remote Users Execute Arbitrary Commands. Read More

www.securitytracker.com:
mpg123 Audio Player Buffer Overflow May Let Remote Users Execute Arbitrary Code. Read More

www.securitytracker.com:
W-Agora Input Validation Bug Discloses Files on the System to Remote Users. Read More

News:
www.vnunet.com:
SoBig worm brags its way onto the web. Read More

www.vnunet.com:
SoBig virus infections on the rise. Read More

www.vnunet.com:
Microsoft spills source code secrets. Read More

212.100.234.54:
MS plays the security card in Gov shared source retread. Read More

asia.cnet.com:
Security flaw may threaten cell phones. Read More

www.newarchitectmag.com:
Dangerous Dealings. Read More

www.vnunet.com:
Password problems swamp help desks. Read More

www.sunspot.net:
'Sanitized' hard drives prove data trove. Read More

allafrica.com:
Network Security - a Functional Approach. Read More

www.informationweek.com:
RIAA Says Worm Advisory Was A Hoax. Read More

www.marionstar.com:
Ohio State University computers crippled by e-bomb. Read More

www.eweek.com:
How Sharing Thwarts Hacks. Read More

15 january 2003

New Trojans:
Gates of Hell 1.8

Massaker 1.2

FallingDoor 1.1 server

Vulnerabilities & Exploits:
sec.drorshalev.com:
Internet Explorer Hacking Kit. Read More

Debian Security Advisory
DSA-228-1 libmcrypt -- buffer overflows and memory leak. Read More

online.securityfocus.com:
YABB SE Reminder.PHP SQL Injection Vulnerability. Read More

online.securityfocus.com:
BitMover BitKeeper Local Insecure Temporary File Permissions Vulnerability. Read More

online.securityfocus.com:
BitMover BitKeeper Local Temporary File Race Condition Vulnerability. Read More

online.securityfocus.com:
BitMover BitKeeper Daemon Mode Remote Command Execution Vulnerability. Read More

www.securitytracker.com:
FormMail Input Validation Flaw Lets Remote Users Conduct Cross-Site Scripting Attacks. Read More

News:
online.securityfocus.com:
Strikeback, Part Deux. Read More

ItWeb:
Stop the music before it kills your network. Read More

www.itp.net:
Users face increasingly virulent virus threats. Read More

www.nationmultimedia.com:
E-GOVERNMENT: 'First fight the hackers'. Read More

14 january 2003

New Trojans:
Freak 0.10 Beta 1

DTr 1.5 final

Magic Link 2.1

Vulnerabilities & Exploits:
Debian Security Advisory
DSA-227-1 openldap2 -- buffer overflows and other bugs. Read More

online.securityfocus.com:
Bea Systems WebLogic ResourceAllocationException System Password Disclosure Vulnerability. Read More

www.securitytracker.com:
Middleman Proxy Buffer Overflow May Let Remote Users Execute Arbitrary Code on the Proxy Server. Read More

www.securitytracker.com:
Xynph FTP-Server Input Validation Flaw Discloses Files on the System to Remote Users. Read More

www.securitytracker.com:
BitKeeper Source Code Management System Input Validation Hole Lets Remote Users Execute Arbitrary Shell Commands. Read More

www.securitytracker.com:
Mambo Site Server Input Validation Bugs Let Remote Authenticated Users Upload and Execute Code on the Server. Read More

www.securiteam.com:
More Information Regarding Etherleak. Read More

www.securiteam.com:
WebIntelligence Vulnerable to Session Hijacking. Read More

www.securiteam.com:
Security Vulnerability Found in S8Forum. Read More

www.securiteam.com:
Multiple Vulnerabilities Found in PlatinumFTPserver. Read More

www.securiteam.com:
Mambo PHP-Portal Vulnerability (XSS and Command Execution). Read More

News:
www.crn.com:
Group Names Top Web Application Flaws. Read More

www.hardwarezone.com:
Today's latest mass mailing worm. Read More

www.net4nowt.org:
New virus spreading rapidly warn experts. Read More

www.theage.com.au:
Female virus writer creates new worm. Read More

www.extremetech.com:
Sobig Virus Picks Up Steam. Read More

www.internetweek.com:
Anti-Virus Vendors Gear Up For Next-Generation Infections. Read More

www.theregister.co.uk:
Is the RIAA "hacking you back"? Read More

online.securityfocus.com:
Feds seek public input on hacker sentencing. Read More

www.theregister.co.uk:
Kevin Mitnick's 'lost' bio. Read More

www.eweek.com:
How Sharing Thwarts Hacks. Read More

www.computerworld.com:
Microsoft's Report Card. Read More

www.newsfactor.com:
The Enterprise Authentication Game. Read More

13 january 2003

New Trojans:
Thief 3.1

Nethief 3.9

Earthquake 1.5

Vulnerabilities & Exploits:
online.securityfocus.com:
FormMail Cross-Site Scripting Vulnerability. Read More

online.securityfocus.com:
Business Objects WebIntelligence Application Session Hijacking Vulnerability. Read More

online.securityfocus.com:
Eric S. Raymond Fetchmail Heap Corruption Vulnerability. Read More

online.securityfocus.com:
Horde IMP Database Files SQL Injection Vulnerabilities. Read More

online.securityfocus.com:
Ethereal LMP Dissector Malformed Packet Memory Corruption Vulnerability. Read More

online.securityfocus.com:
Ethereal BGP Dissector Infinite Loop Denial of Service Vulnerability. Read More

online.securityfocus.com:
Ethereal TDS Dissector Malformed Packet Memory Corruption Vulnerability. Read More

online.securityfocus.com:
Sudo Password Prompt Heap Overflow Vulnerability. Read More

online.securityfocus.com:
Sun Solaris Network Interface Denial Of Service Vulnerability. Read More

online.securityfocus.com:
Apache Tomcat Invoker Servlet File Disclosure Vulnerability. Read More

online.securityfocus.com:
AppIdeas MyCart Information Disclosure Vulnerability. Read More

www.securitytracker.com:
versatileBulletin Board Authentication Bug Lets Remote Users Gain Administrative Access on the Bulletin Board. Read More

www.securitytracker.com:
Efficient Networks 5861 DSL Router Processing Bug Lets Remote Users Crash the Router. Read More

www.securitytracker.com:
BRS WebWeaver FTP Server Flaw Lets Remote Authenticated Users Create Arbitrary Directories on the Server. Read More

www.securitytracker.com:
Macromedia ColdFusion MX Input Validation Flaw Lets Certain Remote Authenticated Users Access Arbitrary Data on the Server. Read More

www.securiteam.com:
BitKeeper Remote Shell Command Execution/Local Vulnerability. Read More

www.securiteam.com:
Half-Life StatsMe Remote Security Hole. Read More

News:
europe.cnn.com:
U.S. e-mail attack targets key Iraqis. Read More

www.sfgate.com:
Microsoft trying to turn itself around with regards to security. Read More

www.canada.com:
No confessions in cyberspace, Vatican says. Read More

www.cnn.com:
University falls prey to phone tricksters. Read More

www.theeagle.com:
Overseas phone hackers infiltrate A&M phone system. Read More

www.idg.com.sg:
Xbox encryption key hackers take up challenge again. Read More

12 january 2003

New Trojans:
Knightseven 1.0 server

DTr 1.4.4 version h

EPS 1.61

Vulnerabilities & Exploits:
online.securityfocus.com:
AJ's Internet Cafe World-Writeable Files Vulnerability. Read More

online.securityfocus.com:
A.ShopKart Multiple SQL Injection Vulnerabilities. Read More

online.securityfocus.com:
iPlanet Admin Server Cross Site Scripting Vulnerability. Read More

online.securityfocus.com:
iPlanet Admin Server Insecure Open Call Vulnerability. Read More

www.securitytracker.com:
WebIntelligence Predictable Session Cookies Let Remote Users Hijack Sessions. Read More

online.securityfocus.com:
Canna Server Denial Of Service Vulnerability. Read More

online.securityfocus.com:
Canna Server Local Buffer Overflow Vulnerability. Read More

online.securityfocus.com:
LibPNG Incorrect Offset Calculation Buffer Overflow Vulnerability. Read More

online.securityfocus.com:
TANne Session Manager SysLog Format String Vulnerability. Read More

online.securityfocus.com:
Netscape Communicator type=password Browser Buffer Overflow Vulnerability. Read More

News:
www.introversion.co.uk:
Uplink is a simulated hacking tool, which allows you to perform various acts of high-tech computer crime. Read More

www.hoosiertimes.com:
Police tracking down hacker of Crime Stoppers computer. Read More

rtnews.globetechnology.com:
The Holy Grail of Security. Read More

www.gnutellanews.com:
RIAA Website Hacked Once Again..... Read More

icsurreyonline.icnetwork.co.uk:
Majority of companies are affected by external hacking. Read More

11 january 2003

New Trojans:
Grifin

Breath of Death 1.0

MagicLink 1.4

Vulnerabilities & Exploits:
Debian Security Advisory
DSA-226-1 xpdf-i -- integer overflow. Read More

online.securityfocus.com:
PHP 4.0.3 IMAP Module Buffer Overflow Vulnerability. Read More

online.securityfocus.com:
Multiple Vendor Linux LCDProc Buffer Overflow Vulnerability. Read More

online.securityfocus.com:
Solaris cachefsd Heap Overflow Vulnerability. Read More

online.securityfocus.com:
Oracle 9i Application Server Sample Scripts Information Disclosure Vulnerability. Read More

online.securityfocus.com:
CGIHTML Insecure Form-Data Temporary File Vulnerability. Read More

online.securityfocus.com:
CGIHTML Form Data File Corruption Vulnerability. Read More

online.securityfocus.com:
Captaris Infinite WebMail HTML Injection Vulnerability. Read More

online.securityfocus.com:
cgihtml Denial Of Service Vulnerability. Read More

online.securityfocus.com:
FreeBSD System Call f_count Integer Overflow Vulnerability. Read More

online.securityfocus.com:
cgihtml Signed Integer Content-Length Memory Corruption Vulnerability. Read More

online.securityfocus.com:
Linksys WET11 Denial Of Service Vulnerability. Read More

online.securityfocus.com:
GeneWeb File Disclosure Vulnerability. Read More

online.securityfocus.com:
Sendmail check_relay Access Bypassing Vulnerability. Read More

online.securityfocus.com:
Sendmail SMRSH Double Pipe Access Validation Vulnerability. Read More

online.securityfocus.com:
Cyrus SASL Library Logging Memory Corruption Vulnerability. Read More

online.securityfocus.com:
Cyrus SASL Library Username Heap Corruption Vulnerability. Read More

online.securityfocus.com:
Cyrus SASL Library LDAP Heap Corruption Vulnerability. Read More

online.securityfocus.com:
HTTP Fetcher Library Multiple Buffer Overflow Vulnerabilities. Read More

www.securitytracker.com:
GeneWeb Input Validation Flaw Discloses Files on the System to Remote Users. Read More

www.securitytracker.com:
Horde IMP Mail Server Input Validation Holes May Let Remote Users Execute Commands on the Underlying Database Server. Read More

www.securitytracker.com:
a.shopKart Input Validation Flaw Permits SQL Command Injection and Discloses Shopping Database Information to Remote Users. Read More

News:
www.informationweek.com:
Four New Windows Worms Are On The Loose. Read More

www.theregister.co.uk:
The return of the celebrity virus. Read More

www.theregister.co.uk:
Microsoft adds security layers to ISA Server. Read More

techupdate.zdnet.com:
Networked storage not yet secure. Read More

www.computerworld.com:
How to toughen the weakest link in the security chain. Read More

www.detnews.com:
Feds enlist hacker to foil piracy rings. Read More

www.washingtonpost.com:
The View From Symantec's Security Central. Read More

www.theeagle.com:
Overseas phone hackers infiltrate A&M phone system. Read More

10 january 2003

New Trojans:
DTr 1.5 version e

Dua ti choi

F-Backdoor 1.5 beta

Vulnerabilities & Exploits:
Debian Security Advisory
DSA-225-1 tomcat4 -- source disclosure. Read More

online.securityfocus.com:
Active PHP Bookmarks Arbitrary Bookmark Addition Vulnerability. Read More

online.securityfocus.com:
Active PHP Bookmarks Multiple File Include Vulnerabilities. Read More

online.securityfocus.com:
S8Forum Remote Command Execution Vulnerability. Read More

www.securitytracker.com:
Cgihtml Script Package Contains Multiple Flaws That Let Remote Users Deny Service or Upload Files to the System. Read More

News:
www.vnunet.com:
Three new viruses on the loose. Read More

www.vnunet.com:
Bugwatch: Out with the old, in with the new. Read More

www.news.com.au:
Oz immune to new worm. Read More

www.townonline.co:
Police raise red Flag on identity theft. Read More

news.ft.com:
Shorter version of snooping rules a relief to employers. Read More

techupdate.zdnet.co.uk:
New user a security nightmare. Read More

www.eweek.com:
Microsoft Offers Security Guide. Read More

www.usatoday.com:
Feds enlist hacker to foil piracy rings. Read More

www.newsday.com:
Gay porn program pops up in Army show on cable. Read More

www.newsfactor.com:
Daily CyberCrime and Security Report for January 9, 2003. Read More

09 january 2003

New Trojans:
Amitis 1.2

CiGiCiGi 1.0

Nethief 3.8

Vulnerabilities & Exploits:
Debian Security Advisory
DSA-224-1 canna -- buffer overflow and more. Read More

online.securityfocus.com:
CUPS Negative Length HTTP Header Vulnerability. Read More

online.securityfocus.com:
Microsoft Windows 2000 Lanman Denial of Service Vulnerability. Read More

online.securityfocus.com:
MySQL COM_CHANGE_USER Password Memory Corruption Vulnerability. Read More

www.securitytracker.com:
FluxNetz's Tanne Session Management Software Format String Error Lets Remote Users Execute Commands on the Server. Read More

www.securitytracker.com:
FreeBSD Kernel Integer Overflow May Let Local Users Deny Service, Gain Elevated Privileges, or View Files on the System. Read More

www.securitytracker.com:
Longshine Wireless Access Point Discloses Passwords to Remote Users. Read More

www.securitytracker.com:
Insightful's S-PLUS Uses Unsafe Temporary Files That May Let Local Users Modify Files or Obtain Elevated Privileges. Read More

www.securitytracker.com:
CommuniGate Pro Input Validation Bug Lets Remote Users View Files on the System. Read More

www.securitytracker.com:
H-Sphere Web Hosting Software Buffer Overflow in 'WebShell' Lets Remote Users Grab Root Privileges. Read More

www.securitytracker.com:
Smart Search CGI Input Validation Flaw Lets Remote Users Execute Commands on the Web Server. Read More

www.securitytracker.com:
IBM DB2 Database for iSeries (OS/400) Lets Remote Authenticated Users Execute Programs on the System. Read More

www.securitytracker.com:
IBM Net.Data May Disclose Internal Variables to Remote Users. Read More

www.securitytracker.com:
HTTP Fetcher Buffer Overflows May Let Remote Servers Execute Arbitrary Code. Read More

www.securitytracker.com:
IP Filter Packet State Error May Let Remote Users Deny Service. Read More

www.securiteam.com:
Tanne Format String Exploit Code. Read More

www.securiteam.com:
Remote Format String Vulnerability in Tanne. Read More

www.securiteam.com:
Remote Root Vulnerability in HSphere WebShell. Read More

www.securiteam.com:
Directory Traversal Bug in CommuniGate Pro 4's Webmail Service (*). Read More

www.securiteam.com:
Multiple Issues in Nettelephone Dialer. Read More

News:
news.zdnet.co.uk:
Lirva worm attaches to Avril Lavigne. Read More

www.extremetech.com:
Avril Lavigne Virus Hits the Web. Read More

www.theage.com.au:
New variant of 1999 worm spotted. Read More

www.esj.com:
Security Expert Predicts End of Mass-Mailing Worms in 2003. Read More

rtnews.globetechnology.com:
Porn popup may be virus or ad-ware. Read More

news.yahoo.com:
Microsoft Releases Security Software For Exchange And Internet Information Server. Read More

www.pcworld.com:
Xbox Hackers Resume Effort. Read More

techupdate.zdnet.com:
Make 2003 more secure. Read More

www.gcn.com:
Fed sites hacker could spend a decade in jail. Read More

www.aftenposten.no:
'DVD Jon' scores huge legal victory. Read More

www.businessweek.com:
The Network Is the Battlefield. Read More

online.securityfocus.com:
California disclosure law has national reach. Read More

www.newsfactor.com:
Daily CyberCrime and Security Report for January 8, 2003. Read More

08 january 2003

New Trojans:
hackBOY's Trojan 1.0beta

Gates of Hell 1.4

Insect 1.0 beta version a

Vulnerabilities & Exploits:
Debian Security Advisory
DSA-223-1 geneweb -- information exposure. Read More

Debian Security Advisory
DSA-222-1 xpdf -- integer overflow. Read More

online.securityfocus.com:
Microsoft Windows 2000 Lanman Denial of Service Vulnerability. Read More

online.securityfocus.com:
MySQL COM_CHANGE_USER Password Memory Corruption Vulnerability. Read More

News:
www.eweek.com:
Flaw Found in Ethernet Device Drivers. Read More

www.gcn.com:
Fed sites hacker could spend a decade in jail. Read More

www.theregister.co.uk:
Hackers take on MS on copyright protection for eBooks. Read More

www.wired.com:
Help Wanted: Steal This Database. Read More

www.securiteam.com:
KaZaA Lunches Ads in the Wrong Security Zone. Read More

07 january 2003

New Trojans:
NeoTurk 1.4

WM Trojan Generator 1.1

DTr 1.5 version d

Vulnerabilities & Exploits:
www.securitytracker.com:
AN HTTPD Web Server Discloses Installation Path to Remote Users. Read More

www.securitytracker.com:
CuteFTP Client Buffer Overflow in Processing FTP Banners May Let Remote Users Execute Code. Read More

www.securitytracker.com:
Winamp Buffer Overflow in Loading 'b4s' Playlists Lets Remote Users Execute Arbitrary Code on the Player. Read More

online.securityfocus.com:
Solaris NFS lockd Remote Denial of Service Vulnerability. Read More

online.securityfocus.com:
Pedestal Software Integrity Protection Driver Symbolic Link Bypass Vulnerability. Read More

online.securityfocus.com:
Pine From: Field Heap Corruption Vulnerability. Read More

online.securityfocus.com:
SGI FAM Arbitrary Root Owned Directory File Listing Vulnerability. Read More

online.securityfocus.com:
Sun Solaris Wall Spoofed Message Origin Vulnerability. Read More

online.securityfocus.com:
Jabber Gadu-Gadu Transport Denial of Service Vulnerability. Read More

online.securityfocus.com:
MHonArc m2h_text_html Filter Cross Site Scripting Vulnerability. Read More

online.securityfocus.com:
Microsoft Pocket Internet Explorer Denial Of Service Vulnerability. Read More

online.securityfocus.com:
iCal Remote Buffer Overflow Vulnerability. Read More

online.securityfocus.com:
iCal Malformed HTTP Request Denial Of Service Vulnerability. Read More

News:
online.securityfocus.com:
California disclosure law has national reach. Read More

www.theregister.co.uk:
NTL in alleged hack probe. Read More

www.theregister.co.uk:
Hackers take on MS on copyright protection for eBooks. Read More

www.wired.com:
Help Wanted: Steal This Database. Read More

www.osopinion.com:
Why Kevin Mitnick Worries Me. Read More

06 january 2003

New Trojans:
Z-Demon 1.0

Freak 1.01

Evasive Keylog 3.2.6

Tool:
freshmeat.net:
Network Security Analysis Tool 1.5. Read More

Vulnerabilities & Exploits:
www.securitytracker.com:
'wall' (/usr/sbin/wall) Bug Lets Local Users Spoof Broadcast Messages. Read More

www.securitytracker.com:
S8Forum Input Validation Flaw Lets Remote Users Execute Operating System Commands on the Target Server. Read More

www.securiteam.com:
OpenBSD and NetBSD LKM That Hides Files by Patching getdirentries(). Read More

www.securiteam.com:
Ptrace() Injector (Malaria). Read More

www.securiteam.com:
Smart Search CGI Remote Command Execution Exploit. Read More

www.securiteam.com:
CUPS Integer Overflow Exploit. Read More

www.securiteam.com:
DB2 on iSeries Stored Procedures Vulnerability. Read More

www.securiteam.com:
IBM Net.Data Internal Variables Display Vulnerability. Read More

www.securiteam.com:
CuteFTP Banner Buffer Overflow. Read More

www.securiteam.com:
iCal Remote DoS and Path Disclosure. Read More

www.securiteam.com:
Eserv Remote Denial of Service (5mb Garbage). Read More

www.securiteam.com:
Yabbse XSS Vulnerability in news_template.php (threadid, msgid). Read More

www.securiteam.com:
OpenTopic XSS Security Hole. Read More

www.securiteam.com:
Yabbse XSS Vulnerability in news_template.php. Read More

www.securiteam.com:
Remote Database Password Disclosure in Bugzilla. Read More

News:
www.nytimes.com:
Hacking Away, Long Before There Were Hackers. Read More

www.counterpunch.org:
Les Miserable and the Hackers from Hell. Read More

starbulletin.com:
ID Theft. Read More

www.theregister.co.uk:
Microsoft's masterplan to screw phone partner - full details. Read More

05 january 2003

New Trojans:
Skun 0.1b1

Ducktoy 1.4 beta

Ayan Bilisim 0.1 client

Vulnerabilities & Exploits:
online.securityfocus.com:
Netscape Email Client Message Deletion Weakness. Read More

www.securitytracker.com:
Brown Bear Software's iCal Web Calendar Server Can Be Crashed By Remote Users. Read More

www.securitytracker.com:
N/X Content Management System Include File Error Lets Remote Users Execute Arbitrary Commands on the Server. Read More

www.securitytracker.com:
Bugzilla Bug Tracking System Default '.htaccess' Configuration May Disclose the Underlying Database Password to Remote Users. Read More

www.securiteam.com:
Vulnerabilities in Leafnode. Read More

News:

04 january 2003

New Trojans:
DTr 1.4.4 version i

SC-KeyLog 2.2

Spion 3.5.5.15

Tool:
pedestalsoftware.com:
IPD is an Open Source program to protect Windows 2000 kernel integrity. Read More

Vulnerabilities & Exploits:
Debian Security Advisory
DSA-221-1 mhonarc -- cross site scripting. Read More

Debian Security Advisory
DSA-220-1 squirrelmail -- cross site scripting. Read More

online.securityfocus.com:
ShadowJAAS Command Line Password Disclosure Vulnerability. Read More

online.securityfocus.com:
Perl-HTTPd File Disclosure Vulnerability. Read More

online.securityfocus.com:
PEEL Remote File Include Vulnerability. Read More

online.securityfocus.com:
DHCPCD Character Expansion Remote Command Execution Vulnerability. Read More

www.securitytracker.com:
PhysTech 'dhcpcd' Allows Remote Users to Execute Arbitrary Commands With Root Privileges. Read More

www.securitytracker.com:
Ensim WEBpliance Server Management Software Lets Remote Authenticated Users Receive E-mail for Subsequently Created Users on the Hosted Domain. Read More

www.securitytracker.com:
GNU Emacs Editor May Let Local Users Cause a Target User to Execute Arbitrary Shell Commands. Read More

www.securitytracker.com:
Netscape E-mail Client Fails to Delete Messages When 'Empty Trash' is Selected. Read More

News:
www.theage.com.au:
Latest email worm causes confusion among vendors. Read More

www.comnews.com:
How to secure switches and routers. Read More

www.wired.com:
Why RIAA Keeps Getting Hacked. Read More

www.zwire.com:
Teach Your Kid to be a Hacker. Read More

patriot.net:
The Dark Side of NTFS. Read More

03 january 2003

New Trojans:
CyberWarrior Beta 2

Nethief 3.7

hRat 1.0

Vulnerabilities & Exploits:
online.securityfocus.com:
Microsoft Visual SourceSafe Client-Side Access Control Weakness. Read More

online.securityfocus.com:
PlatinumFTPserver Denial Of Service Vulnerability. Read More

online.securityfocus.com:
PlatinumFTPServer Information Disclosure Vulnerability. Read More

online.securityfocus.com:
PlatinumFTPServer Arbitrary File Deletion Vulnerability. Read More

online.securityfocus.com:
Web-cyradm Remote Denial of Service Vulnerability. Read More

online.securityfocus.com:
OpenLDAP Multiple Buffer Overflow Vulnerabilities. Read More

online.securityfocus.com:
Telindus 1100 Series Router Administration Password Leak Vulnerability. Read More

www.securitytracker.com:
PHP-Nuke Input Validation Flaw in New User Registration Signature Field Lets Remote Users Conduct Cross-Site Scripting Attacks. Read More

www.securitytracker.com:
PEEL Include File Error Lets Remote Users Execute Arbitrary Commands on the Server. Read More

News:
www.upi.com:
India, Pakistan conflict enters computers. Read More

straitstimes.asia1.com.sg:
Click and get a date - with a virus. Read More

www.theregister.co.uk:
Macro and script viruses dying off. Read More

online.securityfocus.com:
Windows Forensics: A Case Study, Part One. Read More

www.harktheherald.com:
Hackers prompt Nebo District to upgrade software security. Read More

www.news.com.au:
Student arrested for security secrets. Read More

www.paloaltoonline.com:
Un-Wired. Read More

www.newsfactor.com:
Daily CyberCrime and Security Report for January 2, 2003. Read More

02 january 2003

New Trojans:
Destructor 1.2

Ass4ss1n 1.0

GhostVoice 1.02 modified

Vulnerabilities & Exploits:
www.securiteam.com:
Citibank (Canada) Internet Explorer Miss-configuration. Read More

www.securiteam.com:
Visual SourceSafe - Preliminary Observations. Read More

www.securitytracker.com:
Gallery Image Management Software Discloses Server Files to Remote Authenticated Users. Read More

www.securitytracker.com:
Platinum FTP Server Input Validation Flaw Lets Remote Authenticated Users View File Listings and Crash the Server. Read More

www.securitytracker.com:
Web-cyradm IMAP Administration Software May Let Remote Authenticated Users Crash the Server. Read More

www.securitytracker.com:
Leafnode NNTP News Server Lets Remote Users Deny Service. Read More

www.securitytracker.com:
GuildFTPd FTP Server Can Be Crashed By Remote Users Requesting DOS Device Names. Read More

News:
news.zdnet.co.uk:
Yaha virus variant heats up. Read More

www.informationweek.com:
Threat Of Yaha Virus Upgraded. Read More

news.zdnet.co.uk:
The Year Ahead: The future of viruses. Read More

www.theage.com.au:
New Word macro virus spotted. Read More

www.tech-report.com:
Are many security holes going unexploited? Read More

www.globetechnology.com:
The Internet: collateral damage? Read More

www.harktheherald.com:
Hackers prompt Nebo District to upgrade software security. Read More

www.msnbc.com:
The year the criminals took over. Read More

01 january 2003

New Trojans:
R.A.S. 2002 v1.0

3 x Backdoor

Nethief 2.2

Vulnerabilities & Exploits:
online.securityfocus.com:
Gallery Remote Code Execution Vulnerability. Read More

online.securityfocus.com:
Multiple Vendor SSH2 Implementation Buffer Overflow Vulnerabilities. Read More

online.securityfocus.com:
Multiple Vendor Sun RPC xdr_array Buffer Overflow Vulnerability. Read More

online.securityfocus.com:
PHP wordwrap() Heap Corruption Vulnerability. Read More

online.securityfocus.com:
Sun Solaris System Panic Denial Of Service Vulnerability. Read More

online.securityfocus.com:
Cyrus SASL Library LDAP Heap Corruption Vulnerability. Read More

online.securityfocus.com:
Cyrus SASL Library Username Heap Corruption Vulnerability. Read More

online.securityfocus.com:
monopd Remote Buffer Overflow Vulnerability. Read More

online.securityfocus.com:
Mambo Site Server Path Disclosure Vulnerability. Read More

online.securityfocus.com:
Mambo Site Server Account Registration HTML Injection Vulnerability. Read More

online.securityfocus.com:
Mambo Site Server PHPInfo.PHP Information Disclosure Vulnerability. Read More

online.securityfocus.com:
D-Link DWL-1000AP Wireless LAN Access Point Public Community String Vulnerability. Read More

online.securityfocus.com:
D-Link DWL-1000AP Wireless LAN Access Point Plaintext Password Vulnerability. Read More

online.securityfocus.com:
CHETCPASSWD Shadow File Disclosure Vulnerability. Read More

online.securityfocus.com:
Cyrus IMAPD Pre-Login Heap Corruption Vulnerability. Read More

online.securityfocus.com:
SkyStream Edge Media Router-5000 Local Buffer Overflow Vulnerability. Read More

online.securityfocus.com:
Typespeed Local Buffer Overflow Vulnerability. Read More

online.securityfocus.com:
Sun Solaris RPC AUTH_DES Privilege Escalation Vulnerability. Read More

online.securityfocus.com:
PFinger Syslog Format String Vulnerability. Read More

online.securityfocus.com:
Solaris priocntl() System Call Local Root Vulnerability. Read More

News:
www.theage.com.au:
New email worm alert. Read More

www.wired.com:
So Many Holes, So Few Hacks. Read More

www.computerworld.com:
Six top security issues for executives. Read More

www.internetweek.com:
Warning: Tough Year Ahead For IT Security. Read More

www.theregister.co.uk:
Unhappy new Yaha. Read More

news.zdnet.co.uk:
The Year Ahead: The future of viruses. Read More

www.ispreview.co.uk:
2003 - Year Of the Killer Internet Virus? Read More

www.gnutellanews.com:
RIAA HaCkEd Again....Read More

www.theregister.co.uk:
Want to know how RIAA.org was hacked? Read More

www.theregister.co.uk:
RIAA invites comments. Read More


Copyrightę MegaSecurity.org