Home    News Archive    Translate Traducen
News march 20003
31 march 2003

New Trojans:
Fx 1.2

Back Attack 1.3

Sucker Matrix

Vulnerabilities & Exploits:
www.securitytracker.com:
Mutt Off-by-one Buffer Overflow in Processing IMAP Messages May Let Remote Users Execute Arbitrary Code. Read more

www.securitytracker.com:
Eye of Gnome Viewer Input Validation Flaw May Let Remote Users Execute Arbitrary Code. Read more

www.securitytracker.com:
Sun LDAP Name Service Buffer Overflow May Let Remote Users Gain Root Access. Read more

www.securitytracker.com:
Alexandria Source Code/Project Management Flaws Disclose Files to Remote Users and Let Remote Users Send E-mail to Arbitrary Recipients. Read more

www.securiteam.com:
Bajie HTTP Server Cross-Site Scripting Vulnerability. Read more

www.securiteam.com:
Remote BitchX/Epic Exploit Code (Serverside). Read more

www.securiteam.com:
OpenSSL Ptrace Exploit Code. Read more

www.securiteam.com:
Alexandria-dev / SourceForge Multiple Vulnerabilities. Read more

www.securiteam.com:
CGI-City's CCGuestBook Script Injection Vulnerabilities. Read more

www.inq7.net:
Bug can freeze Siemens phones: anti-virus firm. Read more

News:
www.zdnet.com.au:
Cyber-war rages over Iraq. Read more

www.nbr.co.nz:
Sleuthing Iraq's DNS: Who's switching out the lights? Read more

www.crime-research.org:
Hackers bombard US sites, pasting anti-war messages. Read more

www.crime-research.org:
Al Jazeera faces continued hacker attacks. Read more

www.usatoday.com:
Hack attack on Al-Jazeera raises questions. Read more

searchsecurity.techtarget.com:
Winkler-Mitnick rematch set for RSA Conference. Read more

30 march 2003

New Trojans:
Z-Demon 1.26

Z-downloader 1.2

Chat1

Vulnerabilities & Exploits:
www.iss.net:
Email Processing Vulnerability in Sendmail. Read more

www.coresecurity.com:
GNOME's Eye Of Gnome incorrect file name handling. Read more

www.securitytracker.com:
Snort Sniffer May Not Detect Certain Types of Packets in the Default Configuration. Read more

www.securitytracker.com:
D-Link DSL-500 Router Default Configuration Lets Remote Users Change the Device Configuration. Read more

www.securitytracker.com:
myGuestBk Input Validation Flaw Lets Remote Users Conduct Cross-Site Scripting Attacks. Read more

www.securitytracker.com:
RealOne and RealPlayer Buffer Overflow in RealPix Compression Library Lets Remote Users Execute Arbitrary Code. Read more

www.securitytracker.com:
HP/UX 'ipcs' Buffer Overflow May Let Local Users Gain Elevated Privileges. Read more

www.securitytracker.com:
Ceilidh Input Validation Flaw Lets Remote Users Conduct Cross-Site Scripting Attacks. Read more

www.securitytracker.com:
Sambar Server Input Validation Flaws Disclose Files on the System to Remote Users and Permit Cross-Site Scripting Attacks. Read more

www.securitytracker.com:
(Product is Not Vulnerable) Verity K2 Enterprise Search Feature Input Validation Flaw Lets Remote Users Conduct Cross-Site Scripting Attacks. Read more

www.securiteam.com:
RealPlayer PNG Deflate Heap Corruption Vulnerability. Read more

www.securiteam.com:
Additional Details Released on MS Windows XP Redirector Buffer Overflow Vulnerability. Read more

www.securiteam.com:
Vulnerability in GNOME's Eye of Gnome. Read more

www.securiteam.com:
Mod_Survey ENV Tag Security Vulnerability. Read more

News:
www.hacktivismo.com:
'Iraq war sparks tit-for-tat hacker attacks'. Read more

www.trib.com:
Utah ISP is victim of retaliation following hackers' attack on Al-Jazeera. Read more

www.theregister.co.uk:
ID theft: a $1bn a year crime. Read more

29 march 2003

New Trojans:
Polymorphic Downloader 3.0

D-Web 1.0

DarkPortal

Queen 0.8E-2

Vulnerabilities & Exploits:
www.securitytracker.com:
Symantec Enterprise Firewall Lets Remote Users Bypass URL Blocking. Read more

www.debian.org:
DSA-274-1 mutt -- buffer overflow. Read more

www.debian.org:
DSA-273-1 krb4 -- Cryptographic weakness. Read more

News:
www.washingtonpost.com:
Wartime Internet Security Is 'Business as Usual'. Read more

www.fcw.com:
Army taps DMS for wartime comm. Read more

www.trib.com:
Utah ISP is victim of retaliation following hackers' attack on Al-Jazeera. Read more

www.informationweek.com:
Be Prepared: Gartner Outlines Top Security Risks. Read more

www.hindustantimes.com:
Iraq war sparks hacker attacks. Read more

www.accessatlanta.com:
Hackers strike Georgia Tech computer, gain credit card data. Read more

www.nwfusion.com:
Windows flaw could allow denial-of-service attacks. Read more

28 march 2003

New Trojans:
NeoTurk 1.5

BlueFire 0.43

SystemDebug

BestPics

Vulnerabilities & Exploits:
www.securitytracker.com:
PHP WEB CHAT Input Validation Flaws Let Remote Users Conduct Cross-Site Scripting Attacks. Read more

www.securitytracker.com:
J Walk Application Server Discloses Files to Remote Users. Read more

www.securitytracker.com:
PHP-Nuke Input Validation Flaw in 'viewpage.php' Discloses Files on the System to Remote Users. Read more

www.securitytracker.com:
PHP Integer Overflow in socket_iovec_alloc() May Let Remote Users Execute Code in Certain Cases. Read more

www.debian.org:
DSA-272-1 dietlibc -- integer overflow. Read more

www.debian.org:
DSA-271-1 ecartis -- unauthorized password change. Read more

www.debian.org:
DSA-270-1 linux-kernel-mips -- local privilege escalation. Read more

News:
www.smh.com.au:
Email worm beginning to spread. Read more

www.eweek.com:
Security Mailing Lists Come Under Fire. Read more

www.securityfocus.com:
Incident Response Tools For Unix, Part One: System Tools. Read more

www.internetweek.com:
Microsoft Patches Security Hole -- But Not For NT 4 Users. Read more

slashdot.org:
Microsoft Refuses To Fix NT 4.0 Exploit. Read more

www3.gartner.com:
Exploit Code Helps Hackers, Not Enterprises. Read more

www.idg.net:
INTERVIEW: Microsoft's Security Strategist. Read more

www.nypost.com:
IBM BIG SON-BURNED. Read more

www.washingtonpost.com:
Wartime Internet Security Is 'Business as Usual'. Read more

www.prnewswire.com:
aljazeera.net Domain Hacked and Moved to MyDomain.com. Read more

www.pc-radio.com:
Iraq's Uruklink "0wned" By Hackers. Read more

www.nzherald.co.nz:
Beware of emails from the bank. Read more

27 march 2003

New Trojans:
Autocrat 1.06.0058

Snow 1.4 client

Izram 1.7

UDPS 1.0

Tool:
Tunneld 2.0 by Aphex. This tool allows normal client-server connections to be made through routers, firewalls and other setups that would normally block them. Read more

Vulnerabilities & Exploits:
omen.vuagnoux.com:
"proof of concept" for theVaudenay's TLS Timing Attack for OpenSSL/9.7a. (CAN-2003-78)BID REF: 6884. Read more

www.debian.org:
DSA-269-1 heimdal -- Cryptographic weakness. Read more

www.securitytracker.com:
3Com SuperStack Remote Access System 1500 Discloses Configuration Information to and Can Be Crashed By Remote Users. Read more

www.securitytracker.com:
paFileDB Input Validation Flaws Let Remote Users Inject SQL Commands to Be Executed on the Database Server. Read more

www.securitytracker.com:
PHP Topsites 'counter.php' Input Validation Flaw Lets Remote Users Modify Files on the System. Read more

www.securiteam.com:
Digital Signature for Adobe Acrobat/Reader plug-in can be Forged. Read more

www.securiteam.com:
Flaw in RPC Endpoint Mapper Could Allow Denial of Service Attacks. Read more

www.securiteam.com:
Symantec Enterprise Firewall (SEF) HTTP URL Pattern Evasion Issue. Read more

www.securiteam.com:
PostNuke Sensitive Information Disclosure. Read more

News:
Microsoft Security Bulletin MS03-010
Flaw in RPC Endpoint Mapper Could Allow Denial of Service Attacks (331953). Read more

www.securityfocus.com:
Virus Hoaxes and the Real Dangers They Pose. Read more

news.bbc.co.uk:
Anti-war hacking rises sharply. Read more

www.content-wire.com:
Net Wars Intensify. Read more

www.idg.com.sg:
10 Downing Street Web site attacked in antiwar protest. Read more

net-security.org:
"How Hackers Discover your Vulnerabilities" Seminar at InfoSecurity Europe. Read more

www.vnunet.com:
Bugwatch: Patches weather the 'perfect storm'. Read more

news.com.au:
Net con artists strike. Read more

news.bbc.co.uk:
Commuters hack wireless networks. Read more

www.newscientist.com:
Key Arab news station knocked offline. Read more

media.guardian.co.uk:
Al-Jazeera websites 'hit by hackers'. Read more

www.smh.com.au:
Microsoft issues 10th security advisory for 2003. Read more

news.com.com:
Bush order covers Internet secrets. Read more

www.wired.com:
Swedish Worm Writer Nabbed. Read more

26 march 2003

New Trojans:
Lamers Death 2.7 RC2 (b3)

XT Bot 1.0

Fosen

RM Toolkit 1.0

Vulnerabilities & Exploits:
www.debian.org:
DSA-268-1 mutt -- buffer overflow. Read more

News:
www.theage.com.au:
US warns of rising hacker attacks. Read more

www.internetweek.com:
Windows 2000 Security Flaw Worse Than First Thought. Read more

news.com.com:
Program exploits Windows 2000 flaw. Read more

www.news.com.au:
Hit parade of email worms. Read more

asia.cnet.com:
Arab news Web site suffers hits. Read more

www.vnunet.com:
Microsoft rapped for 'extinct' hacker claim. Read more

www.theage.com.au:
Microsoft forced to pull 'misleading' advertisement. Read more

www.canada.com:
IT insiders can manipulate system for own advantage. Read more

www.theage.com.au:
Hackers hit Al-Jazeera web site. Read more

www.zdnet.com.au:
Anti-war hackers strike the US Navy. Read more

www.nationalpost.com:
'Mouthpiece of al-Qaeda' hacks Alaskan tourism Web site. Read more

www.upi.com:
Analysts: Beware anti-war cyber attacks. Read more

www.heraldtribune.com:
Anti-war hackers alter Secretary of State's Web site. Read more

www.theregister.co.uk:
'Iraq war' virus suspect detained. Read more

www.smh.com.au:
Suspected Ganda virus author in custody. Read more

www.emarketer.com:
Calculating Cost of Computer Viruses. Read more

www.eweek.com:
Security Mailing Lists Come Under Fire. Read more

www.theregister.co.uk:
War on Warez. Read more

25 march 2003

New Trojans:
EasyServ 1.1 (c)

Little Witch 6.1 (k) server

Solitaire FTP

HoneyPot 1.0

Vulnerabilities & Exploits:
www.securitytracker.com:
SimpleChat! Discloses Information About Current Users to Remote Users. Read more

www.debian.org:
DSA-267-1 lpr -- buffer overflow. Read more

www.debian.org:
DSA-266-1 krb5 -- several. Read more

www.securiteam.com:
WebDAV Exploit Code Released. Read more

News:
www.securityfocus.com:
Why the Dogs of Cyberwar Stay Leashed. Read more

www.theage.com.au:
Microsoft forced to pull 'misleading' advertisement. Read more

www.zdnet.com.au:
Anti-war hackers strike the US Navy. Read more

www.hackinglinuxexposed.com:
Everyone needs a good reminder about when it's time to change their passwords. Read more

slashdot.org:
Hacker Leaks Unreleased CERT Reports. Read more

24 march 2003

New Trojans:
Near Mohists 1.5

Sequel 1.0

SysStats

Vulnerabilities & Exploits:
www.securitytracker.com:
ProtWare's HTML Guardian Script Source Code Encryption Software Uses Weak Encoding Algorithm. Read more

www.securitytracker.com:
Basit Content Management System Input Validation Flaw Lets Remote Users Conduct Cross-Site Scripting Attacks. Read more

www.securitytracker.com:
Mambo Site Server Search Script Input Validation Flaw Lets Remote Users Conduct Cross-Site Scripting Attacks. Read more

www.securitytracker.com:
Siteframe 'search.php' Input Validation Flaw Lets Remote Users Conduct Cross-Site Scripting Attacks. Read more

www.securitytracker.com:
Microsoft ActiveSync Application Can Be Crashed By Remote Users. Read more

www.securitytracker.com:
'Guestbook tr3.a' Discloses Passwords to Remote Users. Read more

www.securitytracker.com:
Kerberos Buffer Overflow in Principal Name Handling Could Let Remote Users Compromise or Crash the System. Read more

www.securitytracker.com:
Check Point FireWall-1/VPN-1 Component Can Be Crashed By Remote Users Sending Syslog Messages in Certain Cases. Read more

www.securiteam.com:
Ptrace Exploit Code Released. Read more

www.securiteam.com:
IBM Tivoli Firewall Security Toolbox (TFST) Remote Buffer Overflow Vulnerability. Read more

www.securiteam.com:
Check Point FW-1 DoS Attack against Syslog Daemon. Read more

www.securiteam.com:
Safeboot PC Security User Emuneration Vulnerability. Read more

www.securiteam.com:
New Attack Vectors and a Vulnerability Dissection of MS03-007. Read more

www.securiteam.com:
Heap Overflow in Windows Script Engine. Read more

www.securiteam.com:
ActiveSync Denial of Service Vulnerability. Read more

www.securiteam.com:
Flaw in Windows Script Engine Could Allow Code Execution. Read more

www.securiteam.com:
Flaw in ISA Server DNS Intrusion Detection Filter Can Cause Denial of Service. Read more

www.securiteam.com:
PHP-Nuke 'News' Module SQL Injection. Read more

www.securiteam.com:
Kerberos Faulty Length Checks in xdrmem_getbytes. Read more

www.securiteam.com:
Multiple vulnerabilities in Ximian's Evolution Mail User Agent. Read more

www.securiteam.com:
XSS Bugs in osCommerce. Read more

www.securiteam.com:
Mutt Controlled IMAP Server Buffer Overflow. Read more

www.securiteam.com:
Path Disclosure Vulnerability in XOOPS. Read more

www.securiteam.com:
Stunnel - RSA Timing Attacks and Key Discovery. Read more

www.securiteam.com:
Sensitive Information Disclosure Vulnerability Found in SIPS (PHP). Read more

News:
www.zdnet.com:
How to prepare for the coming virus onslaught. Read more

23 march 2003

New Trojans:
Cruel Intentionz 1.0

Little Witch 6.1 (h) server

Hupigon (a) server

Vulnerabilities & Exploits:
www.securitytracker.com:
WFChat Discloses Nicknames and Passwords to Remote Users. Read more

www.securitytracker.com:
DCP-Portal Input Validation Flaw Lets Remote Users Conduct Cross-Site Scripting Attacks. Read more

www.securitytracker.com:
eZ publish Input Validation Flaw Lets Remote Users Conduct Cross-Site Scripting Attacks. Read more

www.securitytracker.com:
osCommerce Input Validation Flaws Allow Remote Users to Conduct Cross-Site Scripting Attacks. Read more

www.securitytracker.com:
SafeBoot PC Encryption Error Messages Disclose Whether a Username is Valid or Not. Read more

www.securityfocus.com:
Microsoft Windows Script Engine JScript.DLL Heap Overflow Vulnerability. Read more

News:
www.neowin.net:
Microsoft asks colleges to teach hacking. Read more

www.informationweek.com:
As War Heats Up, Hacker And Virus Activity Increases. Read more

www.theregister.co.uk:
The Pentagon's tactical Internet - a war too early? Read more

www.theregister.co.uk:
Is SSL safe? Read more

www.computerworld.com:
Microsoft warns of firewall vulnerability. Read more

www.theregister.co.uk:
Norton SystemWorks heisted for terror war spam scam. Read more

www.theregister.co.uk:
Hackers claim NSA breach. Read more

22 march 2003

New Trojans:
Big Bot

Yet Another Trojan 2.24 server

NetvAAi 2.21 client

Vulnerabilities & Exploits:
rafa.h0stile.net:
Windows 2000 Server Exploit. Read more

www.debian.org:
DSA-265-1 bonsai -- several. Read more

www.securitytracker.com:
XOOPS Portal Software Discloses Installation Path to Remote Users. Read more

www.securitytracker.com:
NETGEAR FVS318 VPN Firewall Can Be Crashed Via the Web Browser Interface. Read more

www.securitytracker.com:
Mac Keychain Access Application Discloses the .Mac Password. Read more

www.securitytracker.com:
OpenSSL Side Channel Leakage Lets Remote Users Determine SSL Session Keys. Read more

www.securitytracker.com:
Mutt Buffer Overflow May Cause Arbitrary Code to Be Executed When Downloading Mail. Read more

www.securitytracker.com:
Ximian Evolution Mail User Agent Multiple Bugs May Let Remote Users Execute Arbitrary Code. Read more

www.securitytracker.com:
Kaspersky Anti-Hacker Personal Firewall Can Be Made to Block Connections. Read more

www.securitytracker.com:
ChitChat Message Board Guestbook Software Discloses Password File to Remote Users. Read more

www.securitytracker.com:
IBM Tivoli Firewall Security Toolbox Unspecified Flaw Lets Remote Users Execute Arbitrary Code. Read more

www.securitytracker.com:
Microsoft Windows Buffer Overflow in Windows Script Engine JScript.DLL Lets Remote Users Execute Arbitrary Code. Read more

www.securitytracker.com:
Microsoft ISA Server DNS Intrusion Detection Flaw Lets Remote Users Block DNS Inbound Requests. Read more

News:
www.hindustantimes.com:
Web site hacks rise as war rages in Iraq. Read more

www.islandpacket.com:
Computer virus exploits interest in Iraq war. Read more

slashdot.org:
Microsoft: We Make Hackers Obsolete. Read more

www.neowin.net:
Microsoft Struggles with Role as Top Hacker Target. Read more

www.iht.com:
Cyberterrorists sharpening their tools for online warfare. Read more

australianit.news.com.au:
Cyber war bombardment begins. Read more

www.newscientist.com:
Internet traffic cops could foil web attacks. Read more

21 march 2003

New Trojans:
Cold Fusion 1.1 (build 031)

Lamers Death 2.7 RC2

Simon

Vulnerabilities & Exploits:
www.debian.org:
DSA-264-1 lxr -- missing filename sanitizing. Read more

www.coresecurity.com:
Vulnerability in Mutt Mail User Agent. Read more

News:
www.securityfocus.com:
Hackers Claim NSA Breach. Read more

www.securityfocus.com:
IDS Logs in Forensics Investigations: An Analysis of a Compromised Honeypot. Read more

www.net4nowt.com:
Critical Windows script engine flaw. Read more

australianit.news.com.au:
Cyber war bombardment begins. Read more

www.theage.com.au:
Slammer worm: two months on, the warnings continue. Read more

www.washingtonpost.com:
Web Sites Vandalized With Antiwar Messages. Read more

www.iht.com:
Cyberterrorists sharpening their tools for online warfare. Read more

20 march 2003

New Trojans:
Netsnake 4.8

Puerto Oculto 2.0

RedGhost

Vulnerabilities & Exploits:
www.idefense.com:
Heap Overflow in Windows Script Engine. Read more

www.securityfocus.com:
Microsoft Windows 2000 ntdll.dll WebDAV Interface Buffer Overflow Vulnerability. Read more

www.securitytracker.com:
BEA WebLogic Server and Express Access Control Bug Lets Remote Authenticated Users Delete Empty Sub-Contexts. Read more

www.securitytracker.com:
BEA WebLogic Memory Session Persistence Error May Let Remote Users Access Applications. Read more

www.securitytracker.com:
MyABraCaDaWeb Input Validation Flaw Lets Remote Users Conduct Cross-Site Scripting Attacks. Read more

www.securitytracker.com:
WebLogic Server and Express Authentication Flaw May Let Remote Users Access Administrative Functions. Read more

www.securitytracker.com:
Microsoft IIS Web Server WebDAV Buffer Overflow Lets Remote Users Execute Arbitrary Code. Read more

www.securitytracker.com:
Linux Kernel ptrace() Flaw Lets Local Users Gain Root Privileges. Read more

www.securitytracker.com:
Kerberos 4 Security Protocol Weaknesses May Let Certain Remote Users Create Tickets. Read more

www.securitytracker.com:
Qpopper E-mail Server Authentication Timing Discloses Whether a Requested Username is Valid or Not. Read more

www.securitytracker.com:
Kebi Academy 2001 Input Validation Flaw Lets Remote Authenticated Users View and Upload Files from/to Arbitrary Locations on the Server. Read more

www.securitytracker.com:
McAfee ePolicy Orchestrator Format String Bug Lets Remote Users Execute Arbitrary Code with System Privileges. Read more

www.securiteam.com:
Locator Service Buffer Overflow Exploit Code. Read more

www.securiteam.com:
RSA ClearTrust Cross Site Scripting Issues. Read more

www.securiteam.com:
Unchecked Buffer in Windows Component could Cause Web Server Compromise (WebDAV). Read more

www.securiteam.com:
XDR Integer Overflow (Additional Details). Read more

www.securiteam.com:
Ptrace Vulnerability Allows Gaining of Elevated Privileges under Linux. Read more

www.securiteam.com:
PHP-Nuke's AvantGo, News, and Forums Modules Path Disclosure. Read more

www.securiteam.com:
PHP-Nuke Referer Hijacking (HTTP_REFERER). Read more

www.securiteam.com:
Vulnerabilities in the Kerberos Version 4 Protocol. Read more

www.securiteam.com:
Security Bugfix for Samba (SMB/CIFS Overflow). Read more

www.securiteam.com:
Path Disclosure and Cross Site Scripting Vulnerability in MyABraCaDaWeb. Read more

News:
A security issue has been identified that could allow an attacker to run programs on a computer running Microsoft® Windows®.
The attacker would first have to send you an e-mail message or entice you into visiting a malicious Web site. Read more

Microsoft Security Bulletin MS03-008
Flaw in Windows Script Engine Could Allow Code Execution. Read more

Microsoft Security Bulletin MS03-009
Flaw In ISA Server DNS Intrusion Detection Filter Can Cause Denial Of Service (331065). Read more

www.computeruser.com:
Security Hole in Windows 2000 Servers. Read more

www.internetweek.com:
Windows, Unix Hit By Critical Security Vulnerabilities. Read more

www.eweek.com:
Sun Library Flaw Opens Door to Remote Attacks. Read more

news.com.com:
Hacker says he leaked info on Unix flaw. Read more

www.securityfocus.com:
Point, click, get root on Yahoo. Read more

www.securityfocus.com:
Remote Desktop Management Solution for Microsoft. Read more

edition.cnn.com:
Looking into the mind of a virus writer. Read more

edition.cnn.com:
Hacker accesses 5.6 million credit cards. Read more

19 march 2003

New Trojans:
Little Witch 6.1 (e) server

HTTP RAT 0.1a

MrMofie

BlackIce

Tool:
www.insecure.org:
Nmap 3.20 Released. Read more

packit.sourceforge.net:
Packit is a network auditing tool that allows you to monitor, manipulate, and inject customized IP traffic into your network. Read more

Vulnerabilities & Exploits:
www.securitytracker.com:
Sun RPC Library Integer Overflow in xdrmem_getbytes() May Let Remote Users Execute Arbitrary Code. Read more

www.securiteam.com:
Multiple Vulnerabilities in BEA WebLogic Server (Un-authenticated File Uploading). Read more

News:
www.theage.com.au:
Email worm attempts to exploit interest in war. Read more

www.pcworld.com:
Human Error Is Greatest Security Risk. Read more

www.bangkokpost.com:
A pair of security helpers. Read more

catless.ncl.ac.uk:
Search engines making sensitive information easy to locate. Read more

www.internetwk.com:
U.S. Army, Other Web Servers Were Attacked Through Windows 2000 Security Flaw. Read more

www.computerworld.com:
U.S. Army Web servers hacked. Read more

www.ecommercetimes.com:
Hackers Evolve from Pranksters into Profiteers. Read more

www.eweek.com:
More Net Attacks Loom, CERT Says. Read more

www.channelnewsasia.com:
Hackers post anti-war slogans on US diplomatic website. Read more

www.wired.com:
Does the End Justify the Means? Read more

www.smh.com.au:
Internet banking passwords stolen. Read more

18 march 2003

New Trojans:
Helios 3.0

rSocks 1.2

AntiLamer Backdoor 2.0 (j) server

Ojo

Vulnerabilities & Exploits:
www.securityfocus.com:
Microsoft Windows 2000 WebDAV Buffer Overflow Vulnerability. Read more

Debian Security Advisory
DSA-263-1 netpbm-free -- math overflow errors. Read more

Debian Security Advisory
DSA-262-1 samba -- remote exploit. Read more

www.securitytracker.com:
'Business::OnlinePayment::WorldPay::Junior' Commerce Module Input Verification Flaw May Let Remote Users Modify Commerce Pricing and Ordering Data. Read more

www.securitytracker.com:
Sun Java JDK Bugs Allows Malicious Applets to Cause Denial of Service Conditions. Read more

www.securitytracker.com:
RSA ClearTrust Input Validation Holes Let Remote Users Conduct Cross-Site Scripting Attacks. Read more

www.securitytracker.com:
Samba 'smbd' Buffer Overflow May Let Remote Users Gain Root Access. Read more

www.securiteam.com:
McAfee ePolicy Orchestrator Format String Vulnerability. Read more

www.securiteam.com:
Exploit Released for the Intel PXE Buffer Overflow. Read more

www.securiteam.com:
Cryptographic Weaknesses in Kerberos v4 Protocol. Read more

www.securiteam.com:
Kebi Academy 2001 Web Solution Directory Traversing Vulnerability. Read more

www.securiteam.com:
Timing Attack on OpenSSL (OpenSSL Private Key Disclosure. Read more

News:
Microsoft Security Bulletin MS03-007
Unchecked Buffer In Windows Component Could Cause Web Server Compromise (815021). Read more

www.infoworld.com:
Microsoft publishes alert, warns of exploit. Read more

www.bakutoday.net:
Security hole in Windows 2000 servers. Read more

www.theinquirer.net:
Further security problem hits Windows 2000. Read more

17 march 2003

New Trojans:
SubRoot 1.1

Remote Kit 1.0 (b) server

Sparta 1.1(b1) client

XZone 1.0

Bubbel

Tool:
www.insecure.org:
Nmap 3.15BETA3. Read more

Vulnerabilities & Exploits:
www.securitytracker.com:
'gbook.php' Input Validation Flaw Lets Remote Users Conduct Cross-Site Scripting Attacks. Read more

www.securitytracker.com:
Thunderstone's TEXIS Database Discloses System Information to Remote Users. Read more

www.securitytracker.com:
Microsoft Windows 2000/XP PostMessage() API Flaw May Let Local Users Grab Passwords from Local Dialog Boxes. Read more

www.securitytracker.com:
Tcpdump RADIUS Decoding Error Lets Remote Users Hang the Sniffer. Read more

www.securiteam.com:
PGP4Pine Exploit Mail Generator. Read more

www.securiteam.com:
Exploit Released for SUNWlldap Library Buffer Overflow. Read more

www.securiteam.com:
Nokia SGSN (DX200 Based Network Element) SNMP issue. Read more

www.securiteam.com:
Lotus Notes/Domino R6-beta PROTOS LDAP Denial of Service Regression. Read more

www.securiteam.com:
Lotus Notes/Domino Web Retriever HTTP Status Buffer Overflow. Read more

www.securiteam.com:
Buffer Overflow in Lotus Notes Protocol Authentication. Read more

www.securiteam.com:
Sun ONE (iPlanet) Application Server Connector Module Overflow. Read more

www.securiteam.com:
GiantRat Mailer Exposes Plain Text POP Password. Read more

www.securiteam.com:
Texis Sensitive Information Leak. Read more

www.securiteam.com:
PGP4Pine Buffer Overflow Vulnerability. Read more

News:
www.zdnet.com.au:
Companies throw security out with the garbage. Read more

seattletimes.nwsource.com:
LapLink says hackers left key clue. Read more

www.pcworld.com:
Discover Card Users Hit With E-Mail Scam. Read more

timesofindia.indiatimes.com:
ID theft logs on to the Net. Read more

www.activedayton.com:
Battling hackers. Read more

16 march 2003

New Trojans:
Snoopy

AntiLamer Backdoor 2.0 (l) server

Supcount 1.0 server

Nethief 4.2

Vulnerabilities & Exploits:
www.securitytracker.com:
OpenSSL Timing Characteristics Let Remote Users Determine Private Keys in Certain Cases. Read more

www.securitytracker.com:
Nokia Serving GPRS Support Node (SGSN) Platform Discloses SNMP Data to Remote Users. Read more

www.securitytracker.com:
Protegrity Secure.Data for Microsoft SQL Server 2000 Contains Buffer Oveflows That Let Remote Users Execute Arbitrary Code. Read more

www.securitytracker.com:
Sun ONE/iPlanet Application Server Buffer Overflow in Connector Module Lets Remote Users Execute Arbitrary Code. Read more

News:

15 march 2003

New Trojans:
Helios 2.6

rSocks 1.0

Lamers Death 2.5 (c) Server

Alpha

Peep 1.0

Vulnerabilities & Exploits:
www.debian.org:
DSA-261-1 tcpdump -- infinite loop. Read more

www.debian.org:
DSA-260-1 file -- buffer overflow. Read more

www.securitytracker.com:
'usermode' Package on Mandrake Linux Lets Local Users Shutdown Processes and Gain Root Access. Read more

www.securitytracker.com:
SquirrelMail 'VPOPMail Account Administration' Plug-in Input Validation Flaw Lets Remote Users Execute Commands on the System. Read more

www.securitytracker.com:
PostgreSQL Database Allocation Flaw in Authentication Code Lets Remote Users Crash the Database. Read more

www.securitytracker.com:
pgp4pine Buffer Overflow in Reading Messages Lets Remote Users Execute Arbitrary Code. Read more

News:
www.msnbc.com:
Password-stealing e-mails spread. Read more

www.theregister.co.uk:
Tricky Windows worm poses as game. Read more

sethf.com:
Google Censorship - How It Works. Read more

www.theregister.co.uk:
Opera in fresh browser security drama. Read more

www.asahi.com:
`Key-catching' cyber-thief netted 3 million with swindled bank card. Read more

www.washingtonpost.com:
Student Charged With Hacking Into U-Tex. Read more

www.vnunet.com:
Bugwatch: How to win the security arms race. Read more

www.securityfocus.com:
Hi-Tech Surveillance Firm Prospers. Read more

www.enn.ie:
Irish Honeynet slammed by attacks. Read more

www.newsfactor.com:
Security Firms Warn of New Code Red Variant. Read more

news.bbc.co.uk:
Cyber terrorism 'overhyped'. Read more

www.vnunet.com:
The City's wireless security is still too lax. Read more

14 march 2003

New Trojans:
Zalivator 1.2 Pro (build 78)

Nethief 2.5

Ereet 1.0

DXM SMTP Trojan

Barbare

Vulnerabilities & Exploits:
www.securitytracker.com:
Opera Browser Download Filename Buffer Overflow Lets Remote Users Execute Arbitrary Cod. Read more

www.securitytracker.com:
'man' Manual Pager Bug May Let Local Users Cause Arbitrary Code to Be Executed. Read more

www.securitytracker.com:
Multi-Tech's SOHO RouteFinder 550 VPN Lets Remote Users Execute Arbitrary Code. Read more

www.securitytracker.com:
Lotus Domino Authentication Process Buffer Overflow Lets Remote Users Crash the Server. Read more

www.securitytracker.com:
Lotus Domino Server Web Retriever Buffer Overflow Lets Remote Systems Crash the Web Retriever. Read more

www.securitytracker.com:
Linux Cross-Referencing (LXR) Project Discloses Files on the System to Remote Users. Read more

www.securitytracker.com:
Qpopper POP3 Mail Server Buffer Overflow May Let Remote Authenticated Users Execute Arbitrary Code on the Server. Read more

www.securitytracker.com:
HP-UX HFS File System Bug in VVOS May Let Local Users Access Files to Gain Privileges. Read more

News:
www.zdnet.com.au:
Thousands 'trojaned' through net shares: CERT. Read more

www.wired.com:
Yaha Virus Uses Netizens as Pawns. Read more

www.pcworld.com:
Antivirus Vendor Urges Net Regulation. Read more

www.crime-research.org:
Unleashing the dogs of cyber-war on Iraq. Read more

news.bbc.co.uk:
Indian hackers target Pakistan. Read more

news.bbc.co.uk:
Paedophiles exploit file-sharing. Read more

13 march 2003

New Trojans:
Blaire

WinProtectFull

Destructor 1.3

Lula 147

Assasin 2.0 Pegasus

Vulnerabilities & Exploits:
www.securitytracker.com:
NetScreen Denial of Service Bug May Let Remote Users Cause the Device Configuration to Erase. Read more

www.securitytracker.com:
DeleGate Overflow in Processing 'robots.txt' Fields Lets Remote Users Execute Arbitrary Code on the Proxy Server. Read more

www.securitytracker.com:
PeopleSoft PeopleTools Input Filtering Bug in SchedulerTransfer Java Servlet Lets Remote Users Upload and Execute Arbitrary Code. Read more

www.securitytracker.com:
Microsoft Internet Explorer Buffer Overflow in Processing '.MHT' Web Archives Lets Remote Users Execute Arbitrary Code. Read more

www.securiteam.com:
ISMail Remote Buffer Overrun. Read more

www.securiteam.com:
QPopper Qvsnprintf Vulnerability (Exploit, MDEF). Read more

News:
www.forbes.com:
Computer worm linked to India-Pakistan cyber-spat. Read more

itmanagement.earthweb.com:
India/Pakistan Virus Writers Take War Online. Read more

www.theage.com.au:
War of words - via viruses. Read more

news.com.com:
Code Red offshoot packs mild punch. Read more

www.internetwk.com:
CERT Reports Rise In Attacks On Weak Admin Passwords. Read more

www.asahi.com:
`Key-catching' cyber-thief netted 3 million with swindled bank card. Read more

catless.ncl.ac.uk:
IEEE Symposium on Security and Privacy. Read more

news.com.com:
Group resumes Xbox cracking project. Read more

news.com.com:
Congress cracks down on P2P porn. Read more

12 march 2003

New Trojans:
MiniCli MegaSecurity.org

Akosch Keylogger v2

Contempt

Lamers Death 2.6 (f) server

Nethief 1.0 Beta 4

Aphex WebDownloader 0.2.0 v2

Aphex Remote Packet Sniffer 0.3.2

Vulnerabilities & Exploits:
Code Red! Whose to Blame? And a surprise way to protect your server. Read more

www.krusesecurity.dk:
SOHO Routefinder 550 VPN, DoS and Buffer Overflow. Read more

www.securitytracker.com:
PostNuke Input Validation Bugs in Members_List and in the 'theme' Variable Let Remote Users Inject SQL Commands and Execute Scripts on the System. Read more

News:
www.ntsecurity.net:
New Code Red Variant Spreading. Read more

www.securitynewsportal.com:
Code Red F variant floating around the Internet. Read more

www.theage.com.au:
Network worm slow to spread. Read more

zdnet.com.com:
Security alert posted for PeopleSoft. Read more

www.theage.com.au:
Spam's up; viruses and porn are down. Read more

zdnet.com.com:
Bad passwords open new can of worms. Read more

www.extremetech.com:
Worms Prove Passwords Do Matter. Read more

www.nwfusion.com:
Flaws put open source on hot seat. Read more

www.globetechnology.com:
Hundreds warned as data disappears. Read more

hoovnews.hoovers.com:
INDUSTRIAL ESPIONAGE CASE 2: Canal Plus. Read more

www.theage.com.au:
Catch me if you can. Read more

www.nytimes.com:
Military to Clamp Down on E-Mail. Read more

www.mytelus.com:
Computer hacking for profit. Read more

www.smh.com.au:
Hackers come out to play. Read more

www.securitynewsportal.com:
'Stinky' Web Sites hacked, E-Mail bombed, hit with DOS Attacks and shut down. Read more

www.theregister.co.uk:
Senate leader explains poll "hack". Read more

news.com.com:
AOL unveils Web pop-up controls. Read more

11 march 2003

New Trojans:
Nuclear Scan 1.0

Helios 2.4

Helios 2.5

Clop server

Vulnerabilities & Exploits:
www.iss.net:
PeopleSoft PeopleTools Remote Command Execution Vulnerability. Read more

www.securitytracker.com:
Upload Lite Temporary File Bug Lets Remote Users Upload and Execute Arbitrary CGI Code on the Server. Read more

www.securitytracker.com:
Ethereal SOCKS Dissector Format String Flaw Lets Remote Users Execute Arbitrary Code. Read more

www.securiteam.com:
Upload Lite Allows Remote Code Execution. Read more

www.securiteam.com:
DeleGate Pointer Array Overflow May Let Remote Users Execute Arbitrary Code. Read more

www.securiteam.com:
TCPDUMP ISAKMP Denial of Service Exploit Released. Read more

www.securiteam.com:
MySQL's Default Configuration Allows Modification of MySQL's Execution Owner (FILE Permissions). Read more

www.securiteam.com:
SimpleBBS Stores Database with Insufficient Permissions Settings. Read more

News:
www.securityfocus.com:
IP Spoofing: An Introduction. Read more

star-techcentral.com:
Recent worms punish bad passwords. Read more

www.internetweek.com:
AirDefense Introduces Technology For Wireless LAN Security And Management. Read more

www.informationweek.com:
Japanese Software Maker Warns Of New Virus. Read more

www.zdnet.com.au:
Worm paves way for crippling DDoS attack. Read more

www.smh.com.au:
Hackers come out to play. Read more

www.theage.com.au:
Catch me if you can. Read more

10 march 2003

New Trojans:
Taladrator 2.0.1

Y3K_Rat 1.7

MSN Kamuflao 2.0. Thanks to Q

Lamers Death 2.5 (g) server

Vulnerabilities & Exploits:
voodoo.somoslopeor.com:
A practical approach for defeating Nmap OS-Fingerprinting. Read more

www.securitytracker.com:
SimpleBBS Discloses User Account Names and Information to Remote Users. Read more

www.securitytracker.com:
MAILsweeper Lets Remote Users Send Malformed MIME Attachments That Will Bypass the Content Filter. Read more

www.securitytracker.com:
Wordit Logbook Input Filtering Flaw Lets Remote Users Execute Arbitrary Commands on the System. Read more

www.securitytracker.com:
DBManager Pro Discloses Database Usernames and Passwords to Local Users. Read more

www.securiteam.com:
Implementation Flaws in Adobe Document Server for Reader Extensions. Read more

www.securiteam.com:
Clearswift MAILsweeper MIME Attachment Evasion Issue. Read more

www.securiteam.com:
Multiple Vulnerabilities Found in Forum Web Server. Read more

www.securiteam.com:
OpenBSD lprm(1) Exploit. Read more

www.securiteam.com:
Win32hlp Exploit for : ":LINK overflow". Read more

www.securiteam.com:
Webmin/Usermin Session ID Spoofing Vulnerability "Episode 2". Read more

www.securiteam.com:
Sourceforge Jacobuddy Cross Site Scripting (XSS) and Upload Exploit. Read more

News:
www.securityfocus.com:
Iraqi Cyberwar: an Ageless Joke. Read more

www.zdnet.com:
Can the feds make software more secure? Yup! Read more

quote.bloomberg.com:
How to Arm Your PC Against Viruses, Hackers, Spam and Spyware. Read more

09 march 2003

New Trojans:
MoSucker Server by ErEbuS

Tiny Uploader

bling.bling 1.0

BlackShade 1.0

DTr 1.5 (a) server

QueBus

Vulnerabilities & Exploits:
www.securitytracker.com:
Logan Pro Input Filtering Flaw Lets Remote Users Conduct Cross-Site Scripting Attacks Against LoganPro Users. Read more

www.securitytracker.com:
WebLog Expert Input Filtering Flaw Lets Remote Users Conduct Cross-Site Scripting Attacks Against WebLog Expert Users. Read more

www.securitytracker.com:
SurfStats Input Filtering Flaw Lets Remote Users Conduct Cross-Site Scripting Attacks Against SurfStats Users. Read more

www.securitytracker.com:
WebTrends Input Filtering Flaw Lets Remote Users Conduct Cross-Site Scripting Attacks Against WebTrends Users. Read more

www.securitytracker.com:
XScreenSaver Buffer Overflow May Let Local Users Obtain Root Privileges. Read more

www.securitytracker.com:
Sun Solaris sendmail '.forward' Bug May Let Local Users Deny Service or Gain Root Privileges. Read more

www.securitytracker.com:
Solaris UFS File System May Allow Local Users to Deny Service. Read more

www.securitytracker.com:
'PHP ping' Lets Remote Users Execute Arbitrary Commands on the Server. Read more

www.securitytracker.com:
Forum Web Server Discloses Files on the System, Including Clear Text Passwords, to Remote Users. Read more

www.cgisecurity.net:
Header Based Exploitation: Web Statistical Software Threats. Read more

News:
www.securityfocus.com:
Windows Root Kits a Stealthy Threat. Read more

www.computeruser.com:
Security flaw found in Windows ME. Read more

www.theregister.co.uk:
Google closes Blogger security holes. Read more

www.vnunet.com:
Bugwatch: The cocktail hour. Read more

www.ciol.com:
Enterprise Security: For your eyes only. Read more

www.crime-research.org:
Appeals court strikes down Net porn law. Read more

www.theregister.co.uk:
Senate Leader scraps website war poll, blaming hackers. Read more

news.com.com:
E-mail scam tries to fool PayPal users. Read more

www.theregister.co.uk:
Games' copy protection cracked in days, says newsletter. Read more

08 march 2003

New Trojans:
AIM Snitch 1.0

PW Thief 1.0

Darkbot

FTP99

Tool:
Process hiding for NT in asm by Aphex. Download

Vulnerabilities & Exploits:
www.securitytracker.com:
SCO Open UNIX X Server Sets Weak Permissions on /dev/X Directory, Allowing Local Users to Deny Service or Hijack Session Data. Read more

www.securitytracker.com:
3COM SuperStack 3 Content Filtering Can Be Bypassed By Remote Users With Fragmented Packets. Read more

www.securitytracker.com:
Eudora E-mail Client Can Be Crashed By a Remote User Sending an Attachment With a Long Filename. Read more

www.securitytracker.com:
Dr.Web Virus Scanner Buffer Overflow Lets Local Users Gain Root Privileges. Read more

www.securitytracker.com:
Netpbm Graphics Software Buffer Overflows May Let Users Execute Arbitrary Code. Read more

www.securitytracker.com:
OpenBSD 'lprm' Buffer Overflow May Let Local Users Gain Elevated Privileges. Read more

www.securitytracker.com:
SAP R/3 Remote Function Call API Lets Remote Users Conduct Password Guessing Attempts. Read more

www.securitytracker.com:
RealServer Buffer Overflow in Processing RTSP URLs Lets Remote Users Execute Arbitrary Code. Read more

www.securiteam.com:
New HP Jetdirect SNMP Password Vulnerability when Using Web JetAdmin. Read more

www.securiteam.com:
XFree86 XLOCALEDIR Exploit Code. Read more

www.securiteam.com:
Buffer Overflow in Snort RPC Preprocessor. Read more

www.securiteam.com:
Technical Analysis of Remote Sendmail Vulnerability (Exploit). Read more

News:
www.thesentinel.co.uk:
PALESTINIAN HACKERS. Read more

www.washingtonpost.com:
Hackers Breach Student Database at the University of Texas. Read more

www.asahi.com:
2 held over theft that cracked online banking. Read more

www.zdnet.com.au:
Decoding the lessons of Slammer. Read more

www.crime-research.org:
Security Nightmare. Read more

www.techweb.com:
Cyber-Terrorism Barks, But Probably Won't Bite. Read more

www.computerworld.com:
Security holes found in Google's Blogger. Read more

www.acsac.org:
The 19th Annual Computer Security Applications Conference. Read more

07 march 2003

New Trojans:
Nethief 3.3

Remote Commands

Remote Connection 2.1

GUPHs noPwd NetBus

Vulnerabilities & Exploits:
www.securitytracker.com:
Pastel Accounting Lets Local Users Access and Modify Account Information, Including Passwords. Read more

www.securitytracker.com:
BIND 'libbind' Stub Resolver Library Buffer Overflow May Let Remote Users Execute Arbitrary Code. Read more

www.securitytracker.com:
'file' Utility Buffer Overflow May Let Local Users Gain Elevated Privileges in Certain Cases. Read more

www.securitytracker.com:
Uploader PHP Script Default Configuration Lets Remote Users Upload Arbitrary Files and Then Execute Them. Read more

www.securitytracker.com:
'uschedule' Job Scheduling Utility May Let Local Users Obtain Root Privileges. Read more

www.securiteam.com:
Buffer Overflow Vulnerability Found in file (Exploit Code). Read more

www.securityfocus.com:
Microsoft Windows Help and Support Center Buffer Overflow Vulnerability. Read more

www.securityfocus.com:
Multiple Vendor FTP pipe Vulnerability. Read more

News:
www.fcw.com:
Kellogg describes cyber battlefield. Read more

www.washingtonpost.com:
Hackers Breach Student Database at the University of Texas. Read more

www.asahi.com:
2 held over theft that cracked online banking. Read more

reuters.com:
Credit-Card Co. Visa to Mask Card Numbers. Read more

quote.bloomberg.co:
University of Texas Says Hackers Attacked Its Computer System. Read more

06 march 2003

New Trojans:
Cold Fusion 1.1 (build 027)

Remote Kit 1.0

Raid

Vulnerabilities & Exploits:
www.securityfocus.com:
[LSD] Technical analysis of the remote sendmail vulnerability. Read more

www.securitytracker.com:
Anonymizer.com May Silently Fail to Encrypt Back-end Connections in Certain Specific Cases. Read more

www.securitytracker.com:
Macromedia Flash Player Has Unspecified Buffer Overflow That May Allow Remote Users to Execute Arbitrary Code. Read more

www.securitytracker.com:
SHOUTcast Server Log File Input Validation Flaw Allows Cross-Site Scripting Attacks. Read more

www.securitytracker.com:
Snort Intrusion Detection System Buffer Overflow in Processing RPC Messages Lets Remote Users Execute Arbitrary Code. Read more

www.securitytracker.com:
Sendmail Buffer Overflow in Parsing Certain Header Comments May Let Remote Users Execute Arbitrary Code with Root Privileges. Read more

www.securitytracker.com:
Adobe Acrobat Reader Digital Signature Implementation Flaws Let Users Enable Editing Functions. Read more

www.securitytracker.com:
gtcatalog Include File Bug Lets Remote Users Execute Arbitrary Commands and Access Control Bug Discloses the Administrator Password. Read more

www.securiteam.com:
Critical Security Hole Found in Macromedia Flash Player. Read more

www.securiteam.com:
Buffer Overflow Vulnerability in Dr. Web. Read more

www.securiteam.com:
SQL Injection Vulnerability Found in PHPMyShop. Read more

www.securiteam.com:
DoS Vulnerability in Eudora. Read more

News:
www.theregister.co.uk:
LSD puts Sendmail bug under the microscope. Read more

www.securityfocus.com:
China's Web surveillance slows access even as government promotes Internet use. Read more

www.bizreport.com:
Most Viral Computer Viruses. Read more

www.alertnet.org:
U.S. energy network seen vulnerable to hackers. Read more

www.knoxstudio.co:
Are warnings about cyber-terrorism overblown? You bet. Read more

www.sfgate.com:
'One-woman crime wave' results in 4-year sentence. Read more

www.modbee.com:
School hacker won't be expelled. Read more

www.networkmagazine.com:
Wireless LAN Analyzers: The Ultimate Hacking Tools? Read more

05 march 2003

New Trojans:
MSN Crack Store 3.0

Net Antrax 1.1.0

Game 1.0

Peep 2.01

Vulnerabilities & Exploits:
www.idefense.com:
Locally Exploitable Buffer Overflow in file(1). Read more

www.securitytracker.com:
Sun Solaris FTP Client Displays The User Password When in Debug Mode. Read more

www.securitytracker.com:
CoffeeCup Password Wizard Discloses Passwords to Remote Users. Read more

www.securitytracker.com:
WebChat Include File Bug in 'defines.php' Lets Remote Users Execute Arbitrary Commands. Read more

www.securitytracker.com:
IBM AIX secldapclntd Daemon Authentication Flaw Lets Remote Users Modify User Accounts. Read more

www.securitytracker.com:
Toppler Game Buffer Overflow Lets Local Users Grab 'Games' Group Privileges. Read more

www.securitytracker.com:
PY-Livredor Guest Book Input Validation Holes in Certain Fields Let Remote Users Conduct Cross-Site Scripting Attacks. Read more

www.securiteam.com:
Remote Sendmail Header Processing Vulnerability. Read more

www.securityfocus.com:
Analysis of the potential remote Sendmail vulnerability. Read more

News:
www.securiteam.com:
The 419 nigerian frauds - step by step live explanation. Read more

www.securityfocus.com:
An Analysis of Simile. Virus writers have always tried to develop new methods to make malware detection more difficult. Read more

news.com.com:
Hackers' code exploits Sendmail flaw. Read more

asia.reuters.com:
Hackers Post Anti-Bush Message on Cuban Web Sites. Read more

www.newsfactor.com:
Patching Sendmail: The Clock Is Ticking. Read more

www.newscientist.com:
Email Security Flaw Triggers Global Worm Watch. Read more

www.wired.com:
Google: Net Hacker Tool du Jour. Read more

04 march 2003

New Trojans:
SubSeven 2.1.5

TapTrap

Nethief 1.0

Vecna's B.O Control 1.1

Vulnerabilities & Exploits:
www.iss.ne:
Remote Sendmail Header Processing Vulnerability. Read more

www.securiteam.com:
Cross Site Scripting Trick May Fool Shoutcast Admins. Read more

www.securityfocus.com:
USRobotics Broadband-Router GET Request DoS Vulnerability. Read more

www.securityfocus.com:
CuteNews Remote File Include Vulnerability. Read more

www.securityfocus.com:
Typo3 HTML Hidden Form Field Information Disclosure Weakness. Read more

News:
www.wired.com: Big Hole in E-Mail Transfer App. Read more

news.com.com:
Sendmail flaw tests Homeland Security. Read more

news.com.com:
Companies mobilize to patch Sendmail. Read more

www.pcworld.com:
Mail Server Flaw Could Spawn Slammer II. Read more

www.dailytelegraph.news.com.au:
Cyber battle as jihad goes off line. Read more

www.insurancetech.com:
Slammer Raises Patch Debate. Read more

news.zdnet.co.uk:
EU sets jail terms for hackers. Read more

www.informationweek.com:
Klez Is Still No. 1 Worm. Read more

www.idg.com.sg:
EU cybercrime code could punish online demonstrations. Read more

www.govexec.com:
Elimination of cybersecurity board concerns tech industry. Read more

03 march 2003

New Trojans:
Stealth Email Redirector 2.0.1

FDAR 1.0

FDAR 1.1

Supcount 1.0

Vulnerabilities & Exploits:
www.securitytracker.com:
WEB-ERP Discloses Configuration File to Remote Users, Yielding Full Access to the Database. Read more

www.securitytracker.com:
Invision Power Board Include File Error Lets Remote Users Execute Arbitrary Commands on the Server. Read more

www.securiteam.com:
Vulnerability in myphpPagetool Enables Arbitrary Code Execution. Read more

News:
www.zdnet.com:
How to guard against today's Trojan horses. Read more

www.sfgate.com:
Internet Shield Secrecy and security. Read more

www.sunspot.net:
Gearing up to use information warfare in Iraq. Read more

www.geeknewscentral.com:
RIAA Hacked but that isn't the whole story. Read more

www.sundaylife.co.uk:
Bank insiders may be behind Ulster frauds. Read more

www.usatoday.com:
Norwegian teen faces retrial for DVD-piracy technology. Read more

zdnet.com.com:
Gates reveals Windows code to China. Read more

zdnet.com.com:
Week in review: The wild, wild Web. Read more

02 march 2003

New Trojans:
Khe Sanh 2.10 Pro

Luzak 2.0

DTr 1.5 final (version g)

Nethief 4.1

Vulnerabilities & Exploits:
www.securityfocus.com:
Microsoft Internet Explorer Self Executing HTML File Vulnerability. Read more

www.securitytracker.com:
Tcpdump May Enter an Infinite Loop When a Remote Users Sends a Malformed ISAKMP Packet. Read more

www.securitytracker.com:
ISMail Mail Server Buffer Overflow in Processing Certain SMTP Commands Lets Remote Users Execute Arbitrary Code with System Privileges. Read more

www.securitytracker.com:
Ecartis List Management Software Lets Remote Authenticated Users Change the Password of Other Users. Read more

www.digitaldefense.net:
TERMINAL EMULATOR SECURITY ISSUES. Read more

News:
www.securitynewsportal.com:
Hackers and virus coders march on United Nations for free healthcare coverage. Read more

www.theregister.co.uk:
Disabled war veteran hosts Disabled RIAA website. Read more

www.securitynewsportal.com:
New worm hunts hackers and script kiddies. Read more

www.techtv.com:
Worm Targets Hackers. Read more

slashdot.org:
Dutch Wiretaps: Too Many To Bother Counting. Read more

01 march 2003

New Trojans:
SubRoot 1.0

FoxEyes 1.0

Sub-Mariner 1.0

Lightning 1.0 client

Vulnerabilities & Exploits:
www.idefense.com:
TCPDUMP Denial of Service Vulnerability in ISAKMP Packet Parsing. Read more

www.debian.org:
DSA-256-1 mhc -- insecure temporary file. Read more

www.securitytracker.com:
nCipher KeySafe and 'generatekey' Utilities May Leave Copies of Imported Keys on the System. Read more

www.securitytracker.com:
Libmcrypt Buffer Overflows May Allow Denial of Service Attacks or Arbitrary Code to Be Executed. Read more

www.securitytracker.com:
Microsoft Windows Me Help and Support Center URL Handler Overflow Lets Remote Users Execute Arbitrary Code. Read more

www.securitytracker.com:
Opera Web Browser Redirection Input Validation Hole Allows Cross-Site Scripting Attacks. Read more

www.securityfocus.com:
Netscape JavaScript Regular Expression Denial Of Service Vulnerability. Read more

News:
news.com.com:
EU sets jail terms for hackers. Read more

www.idg.net:
How to develop blueprints for network security. Read more

www.theregister.co.uk:
Klez-H tops monthly virus charts. Again. Read more

www.techweb.com:
Catherine Zeta Jones Worm Causes Mountain Of E-mail. Read more

www.theregister.co.uk:
Internet telephony protocol riddled with security bugs. Read more

www.vnunet.com:
Bugwatch: Harden your anti-hacker defences. Read more

www.theregister.co.uk:
Google in paedo censorship debacle. Read more

news.bbc.co.uk:
Finger-tapping to combat fraud. Read more

www.theregister.co.uk:
The Great Year 2003 Bug. Read more

news.com.com:
Monster.com warns of ID theft (update). Read more


Copyright© MegaSecurity.org