Bookmark or link to: www.kobayashi.cjb.net. All other url`s could change!
News Archive    Translate Traducen
News June 2002
30 June 2002

New Trojans:
Optix Lite Firewall Bypass

Basic Hell 1.0

Pizza Server

Vulnerabilities & Exploits:
online.securityfocus.com:
Macromedia JRun Administrative Authentication Bypass Vulnerability. Read more

online.securityfocus.com:
Windows Media Player WMDM Privilege Escalation Vulnerability. Read more

online.securityfocus.com:
Summit Computer Networks Lil' HTTP Server URLCount.CGI Cross Site Scripting Vulnerability. Read more

www.securitytracker.com:
ColdFusion MX Buffer Overflow When Used With Microsoft Internet Information Server (IIS) Lets Remote Users Crash the IIS Web Server. Read more

www.securitytracker.com:
AnalogX SimpleServer:Shout Streaming Audio Server Buffer Overflow May Give Remote Users System Level Access on the Server. Read more

www.securitytracker.com:
Decfingerd Honeypot Finger Server May Let Remote Users Execute Commands on the System. Read more

www.securitytracker.com:
Cisco PIX Firewall Can Be Crashed By Remote Users Scanning the SSH Port. Read more

www.securitytracker.com:
Cisco 11000 Series Content Service Switches Can Be Crashed By Remote Users Scanning the SSH Port. Read more

www.securitytracker.com:
Cisco Catalyst 6000 Can Be Crashed By Remote Users Scanning the SSH Port. Read more

News:
www.cnet.com:
Online hacker raids bank accounts. Read more

timesofindia.indiatimes.com:
Sing bank accounts raided by hacker. Read more

online.securityfocus.com:
Irresponsible Disclosure. Read more

www.neowin.net:
Security or let microsoft own your pc?! Read more

interviews.slashdot.org:
IBM Kernel Hackers Respond. Read more

www-106.ibm.com:
Analyzing selected network attacks. Read more

www-106.ibm.com:
Utilising remote registry access. Read more

enterprisesecurity.symantec.com:
Business Systems Open to Hacking WAR Mongers. Read more

www.cnn.com:
Vietnam seeks to monitor customers at Internet cafes. Read more

www.msnbc.com:
House OKs Internet child-porn ban. Read more

29 June 2002

New Trojans:
Farnaz

DarkScan 1.0

SohoAnywhere

Sood Server

Tool:
Stealth Tools 2.0 FE by Gobo. Read more

Vulnerabilities & Exploits:
www.securiteam.com:
PsyBNC DoS Exploit Code (Long Password). Read more

www.securiteam.com:
Wu-FTPd Exploit code. Read more

www.securiteam.com:
Telindus Router 10xx and 11xx Remote Exploit. Read more

www.westpoint.ltd.uk:
Macromedia JRun Admin Server Authentication Bypass. Read more

www.westpoint.ltd.uk:
'WEB-INF' Folder accessible in Multiple Web Application Servers. Read more

online.securityfocus.com:
Windows Media Player Playlist HTML Script Execution Vulnerability. Read more

online.securityfocus.com:
Rlaj WhoIs Remote Shell Command Execution Vulnerability. Read more

www.securiteam.com:
Scanning for Cisco Provided SSH Can Cause a Crash. Read more

www.securiteam.com:
Falsifying a VeriSign Seal (Japan). Read more

www.securiteam.com:
Multiple Vendors' Domain Name System (DNS) Stub Resolvers Vulnerable to Buffer Overflow. Read more

www.securiteam.com:
Lil' HTTP Server urlcount.cgi CSS. Read more

www.securiteam.com:
Buffer Overflow in AnalogX SimpleServer:Shout. Read more

www.securiteam.com:
How to Reproduce the OpenSSH Overflow (Challenge Response Handling). Read more

www.securiteam.com:
PSReal, Hidden Process Revealer. Read more

www.securitytracker.com:
Windows Media Player May Let Remote Users Execute Code on a Target User's Computer or Let Local Users Gain Elevated Privileges. Read more

www.securitytracker.com:
Microsoft Commerce Server Buffer Overflows and Other Flaws Let Remote Users Execute Arbitrary Code with LocalSystem Privileges. Read more

www.securitytracker.com:
Apache mod_ssl 'Off-by-One' Bug May Let Local Users Crash the Web Server or Possibly Execute Arbitrary Code. Read more

www.securitytracker.com:
Libc Buffer Overflow in gethostnamadr() and getnetnamadr() Functions May Let Remote Users Execute Arbitrary Code. Read more

News:
techrepublic.com:
Polymorphic Simile.D virus could be a watershed event. Read more

zdnet.com.com Watch out for new Apache worm. Read more

www.cnet.com:
New Apache worm starts to spread. Read more

apache.slashdot.org:
Apache Worm in the Wild. Read more

arstechnica.infopop.net:
Webserver worm comes to Apache. Read more

www.theregister.co.uk:
GamesSpy and KaZaA infected by viruses. Read more

linuxtoday.com:
InternetNews.com: Is Microsoft's Palladium a Trojan Horse? Read more

itmanagement.earthweb.com:
Users Urge Disclosure of Security Flaws. Read more

www.it-director.com:
FBI nets broadband hackers. Read more

www.azcentral.com:
Poland hunts hacker who penetrated NASA, caused $1 million in damage. Read more

www.silicon.com:
Nasa on the track of Polish hacker. Read more

www.theregus.com:
Soon al-Qaeda will kill you on the Internet. Read more

www.theregus.com:
MS patches Media Player secure music vulnerability. Read more

www.theregus.com:
Hotmail blindsided by Yaha-E virus. Read more

www.fcw.com:
IBM takes on homeland security. Read more

28 June 2002

New Trojans:
Polymorphic Downloader 1.0 by Aphex.
This will generate a web downloader using random data and a variable size that you can edit.
There are trillions of possible servers.

GŁtyka SPY 2.60

Aphex WebDownloader 0.7.0 Lite. Server only 536 bytes!

Pornu Server

Vulnerabilities & Exploits:
online.securityfocus.com:
Multiple Vendor BSD libc DNS Lookup Buffer Overflow Vulnerability. Read more

www.securitytracker.com:
Sendmail Mail Server 'Theoretical' Buffer Overflow May Allow Remote Users to Execute Arbitrary Code. Read more

www.securitytracker.com:
Sun Solaris 'rcp' Remote Copy Utility May Allow Local Users to Obtain Root Privileges. Read more

www.securitytracker.com:
(Caldera Issues Fix for UnixWare/Open UNIX) CDE 'dtprintinfo' Buffer Overflow in Search Feature Lets Local Users Gain Root Privileges. Read more

www.securitytracker.com:
Caucho Resin 'HelloServlet' Example Code Discloses Web Directory Path to Remote Users. Read more

www.securitytracker.com:
NetWare DHCP Server Can Be Rebooted By Remote Users Issuing Malformed DHCP Requests. Read more

www.securitytracker.com:
NetWare FTP Server Format String Flaw Lets Remote Users Crash the Entire Server. Read more

www.securitytracker.com:
Sun Solaris 'adb' Debugger May Let Local Users Trigger a Kernel Panic. Read more

www.securitytracker.com:
Sun Solaris Operating System Console Can Be Crashed By Local Users. Read more

www.securiteam.com:
OpenSSH Vulnerabilities in Challenge Response Handling. Read more

www.securiteam.com:
Unchecked Buffer in Profile Service Could Allow Code Execution in Commerce Server. Read more

News:
www.guardian.co.uk:
US fears al-Qaida hackers will hit vital computer networks. Read more

zdnet.com.com:
Gamers, beware--Nimda could be lurking. Read more

news.com.com:
Nimda worm feeds on popular game site. Read more

www.businessweek.com:
Yaha Worm Takes Out Pakistan Government's Site. Read more

zdnet.com.com:
Microsoft stomps on Media Player bug. Read more

news.com.com:
Microsoft paves over media player flaws. Read more

www.iht.com:
Microsoft security: Will it be different this time? Read more

zdnet.com.com:
OpenSSH security hole unearthed. Read more

www.cnet.com:
Sun joins Microsoft on Web services security effort. Read more

rtnews.globetechnology.com:
Poland hunts hacker who cracked NASA. Read more

www.finance-now.co.uk:
Inland Revenue fears hackers. Read more

27 June 2002

New Trojans:
Remote Hack 1.5d

RC

DTR 1.0 Server

Vulnerabilities & Exploits:
online.securityfocus.com:
Microsoft Internet Explorer CLASSID Denial of Service Vulnerability. Read more

online.securityfocus.com:
ht://Dig htsearch Cross Site Scripting Vulnerability. Read more

www.securitytracker.com:
SGI NetVisualyzer 'nveventd' Configuration Flaw May Allow Local Users to Write to Any File on the System to Gain Root Access. Read more

www.securitytracker.com:
HP-UX Samba Common Internet File System (CIFS) Client Buffer Overflow May Let Local Users Obtain Elevated Privileges on the System. Read more

www.securitytracker.com:
Microsoft Internet Explorer Can Be Crashed By Malicious AVI Object in HTML. Read more

www.securitytracker.com:
Verity Search97 Search Engine Input Validation Flaw Lets Remote Users Conduct Cross-site Scripting Attacks Against Users of Web Sites Running Search97. Read more

www.securitytracker.com:
Unspecified Vulnerability is Reported in OpenSSH That May Allow Remote Users to Gain Root Access to the System. Read more

News:
Microsoft Security Bulletin MS02-032
26 June 2002 Cumulative Patch for Windows Media Player (Q320920). Read more

Microsoft Security Bulletin MS02-033
Unchecked Buffer in Profile Service Could Allow Code Execution in Commerce Server (Q322273). Read more

www.washingtonpost.com:
Cyber-Attacks by Al Qaeda Feared. Read more

www.nandotimes.com:
Microsoft discloses security flaws. Read more

www.siliconvalley.com:
Microsoft discloses security flaws in Media Player software. Read more

www.washingtonpost.com:
Microsoft Wants Security Hard-Wired in Your Computer. Read more

theregus.com:
Hotmail blindsided by Yaha-E virus. Read more

theregus.com:
OpenSSH hits the fan. Read more

www.cnn.com:
Web site exposes credit card fraud. Read more

www.bday.co.za:
Making hackers' lives difficult. Read more

theregus.com:
Mitnick testimony burns Sprint in Vegas 'vice hack' case. Read more

www.silicon.com:
UK students warned: 'Watch out for ID theft'. Read more

www.businessinsurance.com:
Near North suing ex-employees over hacking. Read more

26 June 2002

New Trojans:
CyberSpy 1.3 version b

Lithium 1.00

Undernet (b) Server

Tool:
www.eeye.com:
Apache Chunked Scanner from eEye Digital Security. Read more

Vulnerabilities & Exploits:
www.cqure.net:
The Netware FTP server has a DOS vulnerability. Read more

www.cqure.net:
The Netware DHCP server has a DOS vulnerability. Read more

online.securityfocus.com:
HP CIFSLogin Buffer Overflow Vulnerability. Read more

online.securityfocus.com:
PHPSquidPass Index.PHP Unauthorized User Deletion Vulnerability. Read more

www.securiteam.com:
Resin Path Disclosure (HelloServlet). Read more

www.securiteam.com:
Upcoming OpenSSH Vulnerability (Privileges Separation). Read more

www.securiteam.com:
4D DoS and Buffer Overflow Vulnerability (Long HTTP Request). Read more

www.securitytracker.com:
YaBB Bulletin Board Lets Remote Users Conduct Cross-site Scripting Attacks Against YaBB Users. Read more

www.securitytracker.com:
phpSquidPass Authentication Software Design Error May Let Remote Authenticated Users Overwrite Certain Other User Accounts. Read more

www.securitytracker.com:
Pirch 98 Internet Relay Chat (IRC) Client Buffer Overflow May Execute Remotely Supplied Arbitrary Code. Read more

News:
www.linuxsecurity.com:
A Guide to Building Secure Web Applications and Web Services: Introduction. Read more

www.nwfusion.com:
Is VoIP vulnerable? Read more

www.siliconvalley.com:
Nationwide alert warns of university computer infiltration by Russian mob. Read more

www.siliconvalley.com:
Computer virus scares: Help or hype? Read more

www.businessweek.com:
Mitnick Testifies Against Sprint in Vice Hack Case. Read more

www.usatoday.com:
Power grid vulnerable to attack, report warns. Read more

www.eweek.com:
IT Pros Predict Major Cyber-Attack. Read more

www.thisislondon.co.uk:
Security messages posted on Net. Read more

25 June 2002

New Trojans:
Aphex WebDownloader 0.6.0 Lite. Only 700 bytes!

Troj2k Server

Slayv Axis

Tomek

Vulnerabilities & Exploits:
www.debian.org:
remote exploit for OpenSSH. Read more

online.securityfocus.com:
Working Resources BadBlue EXT.DLL Cross Site Scripting Vulnerability. Read more

online.securityfocus.com:
SalesCart Shop.MDB Customer Database Disclosure Vulnerability. Read more

online.securityfocus.com:
Sun Solaris RCP Command Line Argument Buffer Overflow Vulnerability. Read more

online.securityfocus.com:
Apache Web Server HTAccess DATE_LOCALE Environment Variable Buffer Overflow Vulnerability. Read more

online.securityfocus.com:
GameCheats Advanced Web Server Malformed HTTP Request Denial Of Service Vulnerability. Read more

online.securityfocus.com:
DPGS Form Field Input Validation Vulnerability. Read more

online.securityfocus.com:
Pirch IRC Client Malformed Link Denial of Service Vulnerability. Read more

www.securiteam.com:
Additional Information on MSSQLXML ISAPI Overflow and Cross-Site Scripting. Read more

www.securiteam.com:
Simpleinit File Descriptor Security Vulnerability. Read more

www.securiteam.com:
Sharity Cifslogin Buffer Overflow (Arguments). Read more

www.securitytracker.com:
AdvServer Web Server Can Be Crashed By Remote Users Sending a Single CR/LF Sequence. Read more

News:
Microsoft Security Bulletin MS02-022
Unchecked Buffer in MSN Chat Control Can Lead to Code Execution (Q321661). Read more

www.washingtonpost.com:
Microsoft Discloses Security Project. Read more

www.nandotimes.com:
Microsoft working on secure Windows area for privy information. Read more

www.eweek.com:
Microsoft Touts Security Initiative. Read more

www.pcmag.com:
More on Outlook E-Mail Security. Read more

zdnet.com.com:
Your PC is under attack. Read more

www.nzherald.co.nz:
Fast modems a hacker's heaven. Read more

rootprompt.org:
Hacking CGI - Security and Exploitation. Read more

www.byte.com:
Security and Viruses. Read more

zdnet.com.com:
You need more than a firewall to stop hackers. Read more

zdnet.com.com:
New Windows lock could be leaky. Read more

24 June 2002

New Trojans:
Glacier 1.2

Katux Latinus 1.0

CFour Server

Vulnerabilities & Exploits:
www.lwfug.org:
The Linux Virus Writing HOWTO
post link-time code modification of ELF executables under Linux/i386. Read more

www.securiteam.com:
Multiple Exploit Codes for Apache Chunked Buffer Vulnerability. Read more

www.securiteam.com:
AdvServer Denial of Service Attack. Read more

www.securiteam.com:
Interbase malloc() Security Issues (INTERBASE). Read more

www.securiteam.com:
Mandrake MSec Security Issue. Read more

www.securiteam.com:
YaBB Cross-Site Scripting Vulnerability (NULL). Read more

www.securiteam.com:
DPGS Allows Any File to Be Overwritten. Read more

www.securiteam.com:
Xitami Errors.gsl Script Injection Vulnerabilities (GSL). Read more

www.securitytracker.com:
SGI IRIX 'xfsmd' Daemon RPC Authentication Weaknesses May Let Remote Users Gain Root Access on the System. Read more

www.securitytracker.com:
BEA WebLogic Server Lets Remote Users Bypass Access Controls to Access Protected Web Pages By Using Forward Slashes in URLs. Read more

News:
www.theregister.co.uk:
MS to micro-manage your computer. Read more

www.ntsecurity.net:
Microsoft's Secret Plan to Secure the PC. Read more

www.manchesteronline.co.uk:
Police in corporate hacker crackdown. Read more

23 June 2002

New Trojans:
Regap Server

Romort

DeadCow Server

Tools:
freshmeat.net:
BlackHole Spam/Virus Filter 0.9.104 (Stable). Read more

freshmeat.net:
FIAIF is an Intelligent Firewall 1.0.0rc1. Read more

www.citi.umich.edu:
Systrace - Interactive Policy Generation for System Calls. Read more

Vulnerabilities & Exploits:
online.securityfocus.com:
YaBB Invalid Topic Error Page Cross Site Scripting Vulnerability. Read more

www.securiteam.com:
SalesCart Database Storage Insecurity. Read more

www.securiteam.com:
Pirch 98 Link Handling Buffer Overflow. Read more

www.securiteam.com:
DoS on IRSSI. Read more

www.securiteam.com:
IRIX rpc.xfsmd Multiple Remote Root Vulnerabilities. Read more

www.securitytracker.com:
Adobe Acrobat Reader for Linux Uses Unsafe Temporary Files. Read more

www.securitytracker.com:
Linksys EtherFast Cable/DSL Routers May Allow Remote Administration Even When This Feature is Disabled. Read more

www.securitytracker.com:
Sun Solaris 2.6 Discloses Portions of the OS Memory to Local Users. Read more

www.securitytracker.com:
Apache Tomcat Java Server for Windows Can Be Crashed By Remote Users Sending Malicious Requests to Hang All Available Working Threads. Read more

News:
www.techfocus.org:
Filipino claims authorship of first jpeg virus. Read more

www.vnunet.com:
Flaws, hacks and patches. Read more

www.vnunet.com:
Bug Watch: Ethical hackers expose legal flaws. Read more

timesofindia.indiatimes.com:
Kremlin says new Web site hacker proof. Read more

22 June 2002

New Trojans:
OMPN Magic

DarkFace 2.0

Winshell 5.0

Vulnerabilities & Exploits:
online.securityfocus.com:
GOST 34.19-2001 Standard Implementation El Gamal Signature Weakness. Read more

online.securityfocus.com:
SGI IRIX rpc.xfsmd Remote Command Execution Vulnerability. Read more

online.securityfocus.com:
Apache Tomcat Null Character Malformed Request Denial Of Service Vulnerability. Read more

online.securityfocus.com:
SGI IRIX rpc.xfsmd Weak Authentication Vulnerability. Read more

online.securityfocus.com:
Adobe Acrobat Reader Insecure Temporary File Creation Vulnerability. Read more

online.securityfocus.com:
APC PowerChute Plus Insecure Shared Folder Permission Vulnerability. Read more

www.securitytracker.com:
Microsoft Word Documents May Execute Remotely Supplied Macro Code Under Certain Conditions. Read more

www.securitytracker.com:
Microsoft Excel Spreadsheet May Execute Remotely Supplied Macro Code Within Malicious Documents. Read more

www.securitytracker.com:
BlackICE Agent Default Configuration Lets Remote Users Consume a Large Amount of Memory on the Target Host, Causing Temporary Denial of Service Conditions. Read more

www.securitytracker.com:
IRSSI IRC Client Can Be Crashed By Remote Users Sending a Specially Crafted Channel Topic Name. Read more

www.securitytracker.com:
Cisco ONS Optical Transport Platform Timing Control Card Can Be Continually Reset By Remote Users, Causing Denial of Service. Read more

www.securitytracker.com:
Microsoft SQL Server 2000 Buffer Overflow in OpenDataSource() Function May Let Remote Users Gain SYSTEM Privileges on the Server. Read more

www.securitytracker.com:
Apache Tomcat Java Server May Disclose the Installation Path to Remote Users. Read more

www.securiteam.com:
Buffer Overflow in UNIX VPN Client. Read more

www.securiteam.com:
Cisco VPNclient Buffer Overflow. Read more

News:
www.it-director.com:
Apache exploit on the warpath. Read more

linuxtoday.com:
CNET News: Study: Equal Security in All Software. Read more

linuxtoday.com:
ZDNet: Is Red Hat Going to be the Next Microsoft? Read more

www.infoworld.com:
McAfee's virus judgement questioned. Read more

www.pcworld.com/:
Veracity of JPEG Virus Questioned. Read more

www.idg.net:
Users question JPEG virus, McAfee stands firm. Read more

www.silicon.com:
Kremlin impervious to hack attacks. Read more

zdnet.com.com:
School hackers may face Secret Service. Read more

21 June 2002

New Trojans:
Acidsena Server

Web Server Lite

Digitalhand 1.0

Tool:
Bound File Extractor is a small program which will allow you to turn a bound file back into separate files.
A bound file is the output from a binder program and contains multiple exe's all wrapped up into one.
Made by mf4. Download

Vulnerabilities & Exploits:
online.securityfocus.com:
Multiple Browser Malformed PNG Image Memory Corruption Vulnerability. Read more

online.securityfocus.com:
Apache Tomcat Web Root Path Disclosure Vulnerability. Read more

online.securityfocus.com:
Microsoft SQL MS Jet Engine Unicode Buffer Overflow Vulnerability. Read more

online.securityfocus.com:
Cisco ONS15454 Non-Zero TOS Bit Denial Of Service Vulnerability. Read more

www.securiteam.com:
TrACESroute GOLD Local Format String Exploit. Read more

www.securiteam.com:
XSS in Audiogalaxy.com. Read more

www.securiteam.com:
Vulnerabilities Found in Telindus 11xx Router Series. Read more

www.securiteam.com:
Xitami Web Server Plaintext Administrator Password Storage. Read more

www.securiteam.com:
Insecure Temporary Files in Acrobat Reader. Read more

www.securitytracker.com:
Procmail Heap Overflow May Let Local Users Gain Elevated Privileges on the System. Read more

www.securitytracker.com:
'ppptalk' Utility on Caldera (SCO) UnixWare and Open UNIX Lets Local Users Grab Root Privileges. Read more

www.securitytracker.com:
Mandrake Linux OS Default Installation Uses Insecure File Permissions on User Directories. Read more

www.securitytracker.com:
4D Web Server Buffer Overflow in Processing Long HTTP Requests May Let Remote Users Execute Arbitrary Code or Crash the Service. Read more

www.securitytracker.com:
Borland InterBase Buffer Overflow May Be Triggered By Local Users to Gain Root Access. Read more

www.securitytracker.com:
Macromedia JRun Java Engine Can Be Crashed in a Multi-user Environment By One User's Malicious Code. Read more

www.securitytracker.com:
Jakarta Tomcat JSP Engine Can Be Crashed in a Multi-user Environment By One User's Malicious Code. Read more

www.securitytracker.com:
Mozilla Mail Download Can Be Crashed By Remote Users Sending Malicious E-mail via POP3. Read more

www.securitytracker.com:
Netscape Communicator Mail Download Can Be Crashed By Remote Users Sending Malicious E-mail via POP3. Read more

News:
www.pcworld.com:
Worm Targets Apache Flaw. Read more

www.osopinion.com:
Security Flaws Continue To Be Issue for Microsoft. Read more

www.spokesmanreview.com:
Judge takes byte out of local hackers. Read more

www.silicon.com:
BT attacked by potty-mouthed hacker. Read more

www.thejakartapost.com:
Fighting cyber crimes. Read more

20 June 2002

New Trojans:
Turkish Port Trojan 1.2 Bonus

Qroject Webdownloader 1.0

Moonpie 1.41

Vulnerabilities & Exploits:
eyeonsecurity.net:
Bypassing JavaScript Filters Ė the Flash! Attack. Read more

Internet Security Systems Security Alert:
Apache HTTP Server Exploit in Circulation. Read more

www.securiteam.com:
TrACESroute GOLD Local Format String Exploit. Read more

online.securityfocus.com:
HP MPE/iX Malformed SNMP Vulnerability. Read more

online.securityfocus.com:
MetaLinks MetaCart2.SQL Database Disclosure Vulnerability. Read more

online.securityfocus.com:
Interbase GDS_Drop Interbase Environment Variable Buffer Overflow Vulnerability. Read more

www.securiteam.com:
Vulnerabilities Found in Telindus 11xx Router Series. Read more

www.securiteam.com:
Lumigent Log Explorer Extended Stored Procedures Buffer Overflow. Read more

www.securiteam.com:
DeepMetrix LiveStats JavaScript Injection. Read more

www.securiteam.com:
My Postcards' Magiccard.cgi Directory Traversal Vulnerability. Read more

www.securiteam.com:
WebBBS Remote Command Execution. Read more

www.securiteam.com:
BasiliX Multiple Vulnerabilities (File Attachments, Privacy, SQL Injection). Read more

www.securitytracker.com:
phpBB Input Validation Error in 'install.php' Lets Remote Users Execute Arbitrary PHP Code and System Commands on the Server. Read more

www.securitytracker.com:
osCommerce e-Commerce Shopping Cart Software Lets Remote Users Execute Arbitrary PHP Code and System Commands on the Server. Read more

www.securitytracker.com:
Cisco uBR7100/7200 Series Cable Modem Routers Have Integrity Verification Flaw That Lets Remote Users Load Alternate Configurations on the Router. Read more

www.securitytracker.com:
PHP Address Allows Remote Users to Execute Arbitrary PHP Code on the Server. Read more

www.securitytracker.com:
NETGEAR Web Safe Router Default Configuration May Let Remote Users Gain Administrative Access to the Device. Read more

www.securitytracker.com:
webMathematica Input Validation Error Discloses Arbitrary Files on the System to Remote Users. Read more

www.securitytracker.com:
ZyXEL Prestige Router Management Ports Can Be Crashed By Remote Users Sending Malformed Packets with TCP SYN and ACK Flags Both Set. Read more

www.securitytracker.com:
Apache Web Server Chunked Encoding Flaw May Let Remote Users Execute Arbitrary Code on the Server. Read more

www.securitytracker.com:
Sympoll PHP-based Voting Script Bug Lets Remote Users Gain Administrator Access to the Script. Read more

www.securitytracker.com:
Zeroboard Web Forum Software Lets Remote Users Execute Arbitrary PHP on the Server. Read more

www.securitytracker.com:
Resin Web Server Discloses Files on the System to Remote Users and Allows Remote Users to Crash the Server. Read more

News:
Microsoft Security Bulletin MS02-031
Cumulative Patches for Excel and Word for Windows (Q324458). Read more

online.securityfocus.com:
Game Consoles -- the Next Hacker Target? Read more

www.nextgenss.com:
OpenDataSource Buffer Overflow. Read more

news.bbc.co.uk:
Pro-Islamic hackers join forces. Read more

www.theregister.co.uk:
US cyber security may draft ISPs in spy game. Read more

www.silicon.com:
BT attacked by potty-mouthed hacker. Read more

europe.cnn.com:
Experts warn of cyber security holes. Read more

www.usatoday.com:
Security flaws continue to plague Microsoft. Read more

www.siliconvalley.com:
American tech alliance's security plan attacked. Read more

www.smh.com.au:
The politics of security flaws. Read more

zdnet.com.com:
Hacking's not just for geeks anymore. Read more

19 June 2002

New Trojans:
AntiLamer Light 1.0

DLP

AIM Jacker 2.0

Tools:
rnmap.sourceforge.net:
Remote Nmap (Rnmap) package contains both client and server programs. Actual idea for this sofware is that various clients can connect to one centralized Rnmap server and do their portscannings. Version 0.8 released. Read more

www.remote-exploit.org:
Wellenreiter is a wireless network sniffer. However, unlike other similar products it also includes a new and unique ESSID-bruteforcing feature. The bruteforce functionality needs at least 2 Cisco cards. One card will constantly sniff and the other will try to bruteforce the ESSID. Wellenreiter-v14 released. Read more

Vulnerabilities & Exploits:
online.securityfocus.com Caucho Technology Resin Server View_Source.JSP Arbitrary File Disclosure Vulnerability. Read more

online.securityfocus.com Caucho Technology Resin Server Denial Of Service Vulnerability. Read more

online.securityfocus.com Apache Chunked-Encoding Memory Corruption Vulnerability. Read more

online.securityfocus.com My Postcards MagicCard.CGI Arbitrary File Disclosure Vulnerability. Read more

httpd.apache.org:
Apache Web Server Chunk Handling Vulnerability. Read more

www.securitytracker.com:
PHP Classifieds Lets Remote Users Conduct Cross-site Scripting Attacks Against PHP Classifieds Users. Read more

www.securitytracker.com:
Marconi (Fore) ATM Switches Can Be Crashed By Remote Users Sending a Single 'Land' Packet to the Switch. Read more

www.securitytracker.com:
Cgiemail Web Mail System May Let Remote Users Relay Mail Via the System. Read more

www.securitytracker.com:
Mewsoft NetAuction Allows Cross-site Scripting Attacks Against NetAuction Users. Read more

www.securiteam.com:
<BODY>Builder SQL modification. Read more

www.securiteam.com:
Cable Modem Termination System Authentication Bypass. Read more

www.securiteam.com:
MetaCart eCommerce Systems Database Exposure. Read more

www.securiteam.com:
PHP Source Injection in PHP-Address. Read more

www.securiteam.com:
Malicious PHP Source Injection in phpBB (install.php). Read more

www.securiteam.com:
PHP Source Injection in osCommerce. Read more

www.isqa.unomaha.edu:
Computer Hacking & Cybercrime The Law Hacking Tools Hacking Tools (PDF). Read more

www.sans.org:
SANS GIAC Intrusion Detection Curriculum. Read more

News:
www.pcmag.com:
The Graphics Virus: No Red Alert. Read more

zdnet.com.com:
Report: Viruses spreading on the double. Read more

www.cnet.com:
Security firm sees bumper crop of worms. Read more

www.thisislondon.com:
Boy of 17 hacks into missile secrets. Read more

digitalmass.boston.com:
Hole in Web software shows lack of coordination in computer security disclosures. Read more

www.crn.com:
Secret Service Agent: Hackers Are Unpatriotic. Read more

www.neowin.net:
Hackers cripple US news sites. Read more

zdnet.com.com:
Uncle Sam to IT: Help fight cybercrime. Read more

zdnet.com.com:
'Mod' squad hacks away at Xbox. Read more

18 June 2002

New Trojans:
RMF_FN 1.1

SweetHeart Skyfire

AIMaster 3.0

Vulnerabilities & Exploits:
online.securityfocus.com:
Microsoft Internet Explorer CSSText Bold Font Denial Of Service Vulnerabilit. Read more

Internet Security Systems Security Advisory:
Heap Overflow in IIS HTR Chunked Encoding. Read more

www.securiteam.com:
Directory Traversal in Wolfram Research's webMathematica. Read more

www.securiteam.com:
IE Gopher View Cross Site Scripting. Read more

www.securiteam.com:
IE CSS Parsing Error (cssText). Read more

www.securiteam.com:
Console Java Applications can Leak Passphrases on Windows. Read more

www.securiteam.com:
Resin DOS device Denial of Service. Read more

www.securiteam.com:
Resin Large Parameter Denial of Service. Read more

www.securiteam.com:
Resin view_source.jsp Arbitrary File Reading. Read more

www.securiteam.com:
Remote Compromise Vulnerability in Apache HTTP Server (Chunked Encoding). Read more

www.securitytracker.com:
Cisco Secure Access Control Server (ACS) Input Validation Flaw Lets Remote Users Conduct Cross-site Scripting Attacks Against ACS Administrators. Read more

www.securitytracker.com:
QNX Real Time Operating System Buffer Overflows Let Local Users Gain Elevated Privileges. Read more

News:
www.smh.com.au:
Major security hole found in APache. Read more

www.osopinion.com:
Hackers Do Not Break, They Build. Read more

zdnet.com.com:
Microsoft tightens security for Wi-Fi. Read more

www.foxnews.com:
Foxnews.com, Other Sites Attacked. Read more

www.vnunet.com:
Hackers cripple US news sites. Read more

timesofindia.indiatimes.com:
Hackers, porn and pirates add to ISP woes. Read more

www.vnunet.com:
DNS default helps hackers. Read more

desmoinesregister.com:
Unwanted spam e-mail messages swell in number, bring frustration. Read more

17 June 2002

New Trojans:
Lan Bypasser

China 1.1

Terminal Server

Tools:
ngrep 1.40.1 - network grep
ngrep strives to provide most of GNU grep's common features, applying them to the network layer. ngrep is a pcap-aware tool that will allow you to specify extended regular or hexadecimal expressions to match against data payloads of packets. It currently recognizes TCP, UDP and ICMP across Ethernet, PPP, SLIP, FDDI, Token Ring and null interfaces, and understands bpf filter logic in the same fashion as more common packet sniffing tools, such as tcpdump and snoop. Read more

Vulnerabilities & Exploits:
www.securitytracker.com:
Microsoft SQL Server Buffer Overflow in 'pwdencrypt()' Function May Let Remote Authorized Users Execute Arbitrary Code. Read more

www.securitytracker.com:

www.securitytracker.com:
Xitami Web Server GSL Templates Contain Unspecified Security Flaw. Read more

www.securitytracker.com:
Lumigent Log Explorer Buffer Overflow May Let Remote Users Crash the Microsoft SQL Server Service or Execute Arbitrary Code on the System. Read more

www.securitytracker.com:
Compaq Insight Manager May Include a Vulnerable Default Configuration of Microsoft MSDE/SQL Server That Allows Remote Users to Execute Commands on the System. Read more

www.securitytracker.com:
nCipher CodeSafe Java Incompatibility May Leak Smart Card Passphrases to the User's Operating System Shell. Read more

www.securitytracker.com:
BODYBuilder Java-based Site Building Engine Input Validation Hole Lets Remote Users Execute Arbitrary SQL Commands on the Database. Read more

www.securiteam.com:
Heap Overrun in HTR Chunked Encoding Could Enable Web Server Compromise. Read more

www.securiteam.com:
Unchecked Buffer in Remote Access Service Phonebook Could Lead to Code Execution. Read more

News:
The Commoner's Virus.
Despite its virulence, the Klez worm is ignored by the newspapers and dismissed by the digerati. Could the demographics of its victims be a factor? Read more

www.cnet.com:
IBM software aims to shut down "drive-by hacking". Read more

www.networkcomputing.com:
Time to Smarten Up About Security. Read more

www.idg.net:
Homeland Security Page Sucks. Read more

www.naplesnews.com:
Computer hackers opening door wider to ID thefts. Read more

www.channelnewsasia.com:
Philippines' first ever anti-hacking case goes to trial. Read more

www.haaretzdaily.com:
Hackers break into eMap website. Read more

www.startribune.com:
Colleges are defending against computer hacker attacks. Read more

asia.internet.com:
Virus Capable Of Corrupting Image Files Found. Read more

asia.internet.com:
Soccer And Shakira's Fans, Be Warned. Read more

16 June 2002

New Trojans:
Bushtrommel TNG 1.0

G-Hack 1.4

WebDownloader Illwill 1.0

Tools:
qb0x.net:
boegADT Library is a buffer overflow exploit generator Abstract Data Type.
The intention of this library is to make possible that anyone can write an exploit without knowledge of the techniques. Read more

Vulnerabilities & Exploits:
online.securityfocus.com:
MIT CGIEmail Arbitrary Recipient Mail Relay Vulnerability. Read more

online.securityfocus.com:
Lumigent Log Explorer XP_LogAttach Buffer Overflow Vulnerability. Read more

online.securityfocus.com:
Lumigent Log Explorer XP_LogAttach_SetPort Buffer Overflow Vulnerability. Read more

online.securityfocus.com:
Microsoft SQL Server 2000 PWDEncrypt Buffer Overflow Vulnerability. Read more

online.securityfocus.com:
Seunghyun Seo MSN666 Remote Buffer Overflow Vulnerability. Read more

online.securityfocus.com:
Lumigent Log Explorer XP_LogAttach_StartProf Buffer Overflow Vulnerability. Read more

www.securiteam.com:
Cross-Site Scripting in Cisco Secure ACS. Read more

www.securiteam.com:
Fore/Marconi ATM Switch 'land' Vulnerability. Read more

www.securiteam.com:
IGMP Denial of Service Vulnerability. Read more

www.securiteam.com:
Buffer Overflow in Microsoft Rasapi32.dll. Read more

www.securiteam.com:
Zeroboard PHP Source Injection. Read more

www.securitytracker.com:
MSN666 Sniffer For MSN Messenger Traffic Has Buffer Overflow That Lets Remote Users Execute Arbitrary Code on the Sniffer to Gain Root Access. Read more

www.securitytracker.com:
Macromedia ColdFusion May Let One User's JSP Code Gain Unauthorized Access to Another User's Data on a Shared Server. Read more

www.securitytracker.com:
Util-linux 'simpleinit' Component Leaves Open File Descriptor in Some Child Processes, Letting Local Users Gain Root Privileges. Read more

www.securitytracker.com:
Active! mail Web-based E-mail System Will Pass Scripts Embedded Within the Header to Be Executed on the Recipient's Web Browser. Read more

www.securitytracker.com:
AnalogX SimpleServer:WWW Web Server Can Be Crashed By Remote Users. Read more

News:
Microsoft Security Bulletin MS02-027
Unchecked Buffer in Gopher Protocol Handler Can Run Code of Attacker's Choice (Q323889). Read more

www.business.scotsman.com:
Hacking it on the right side of the fence. Read more

www.theregister.co.uk:
Entercept hardens anti-hacker blockades. Read more

www.thisislondon.com:
Boy of 17 hacks into missile secrets. Read more

www.cw360.com:
McAfee: Now image files face virus threat. Read more

timesofindia.indiatimes.com:
MS released software with Nimda virus. Read more

15 June 2002

New Trojans:
AutoSpY 1.2 Appocalipse

THC Server

Assasin 1.0

Tool:
ettercap.sourceforge.net:
Ettercap 0.6.6.6 Released. Ettercap is a multipurpose sniffer/interceptor/logger for switched LAN. It supports active and passive dissection of many protocols. Read more

Vulnerabilities & Exploits:
online.securityfocus.com:
TransWare Active Mail HTML Injection Vulnerability. Read more

www.securitytracker.com:
'mmftpd' FTP Server Format String Hole Lets Remote Users Execute Arbitrary Commands to Gain User-Level Access on the Operating System. Read more

www.securitytracker.com:
Microsoft Remote Access Service (RAS) Phonebook Buffer Overflow May Let Local Users Execute Arbitrary Code with Local System Privileges. Read more

www.securitytracker.com:
Microsoft SQLXML Component of Microsoft SQL Server 2000 Contains an Input Validation Flaw in an XML SQL Tag That Allows Cross-Site Scripting Attacks. Read more

www.securitytracker.com:
Microsoft SQLXML Component of Microsoft SQL Server 2000 Contains a Buffer Overflow That Lets Remote Users Take Full Control of the System. Read more

www.securitytracker.com:
Microsoft Internet Information Server (IIS) Heap Overflow in HTR ISAPI Extension While Processing Chunked Encoded Data Lets Remote Users Execute Arbitrary Code. Read more

www.securitytracker.com:
IRCIT Internet Relay Chat (IRC) Client Buffer Overflow Lets Remote IRC Servers Execute Arbitrary Code on the Client. Read more

www.securitytracker.com:
MakeBook Guestbook and Storybook CGI Script Allows Remote Users to Inject SSI Commands and Conduct Cross-Site Scripting Attacks. Read more

www.securitytracker.com:
'mmmail' POP3 and SMTP Mail Server Format String Flaw Lets Remote Users Execute Arbitrary Commands to Gain Access to the Server. Read more

www.securiteam.com:
CRLF Injection. Read more

News:
members.tripod.com:
Infecting Picture Files : A Desperate Approach. Read more

support.microsoft.com:
Inert Virus Found in Korean Language Version of Visual Studio .NET. Read more

www.newsfactor.com:
Microsoft Mistakenly Ships Nimda Worm with Software. Read more

www.computerworld.com:
Microsoft patches developer software infected with Nimda worm. Read more

www.eweek.com:
Flaw Puts SQL Servers at Risk. Read more

www.eweek.com:
Klez and KaZaA Viruses Stay Pesky. Read more

www.usatoday.com:
Computer viruses cross picture barrier. Read more

www.eweek.com:
Microsoft Mends More Security Flaws. Read more

www.computerworld.com:
South Africa's domain administrator hides key file. Read more

www.computerworld.com:
Spam, viruses hit bottom line in U.S. Read more

14 June 2002

New Trojans:
Jokers FTP

NMBK Server

Whomp Downloader 1.0

Tools:
www.insecure.org:
Nmap 2.54BETA35 released. Read more

www.kryptocrew.de:
The Bruteforce Exploit Detector is a perl script that remotely detects unknown buffer overflow vulnerabilities in FTP, SMTP, and POP daemons. Read more

razor.bindview.com:
Fenris is a multipurpose tracer, GUI debugger, stateful analyzer and partial decompiler intended to simplify bug tracking, security audits, code, algorithm, protocol analysis and computer forensics - providing a structural program trace, interactive debugging capabilities, general information about internal constructions, execution path, memory operations, I/O, conditional expressions and much more. Read more

News:
Activex startup method used in subseven 2.2 by HeAdpUtTy. Read more

online.securityfocus.com:
Apache Tomcat JSP Engine Denial of Service Vulnerability. Read more

online.securityfocus.com:
Macromedia JRun JSP Engine Denial Of Service Vulnerability. Read more

online.securityfocus.com:
CGIScript.net CSNews Sensitive File Disclosure Vulnerability. Read more

online.securityfocus.com:
CGIScript.net csNews Header File Type Restriction Bypass Vulnerability. Read more

online.securityfocus.com:
CGIScript.net csNews Double URL Encoding Unauthorized Administrative Access Vulnerability. Read more

online.securityfocus.com:
MMFTPD SysLog Format String Vulnerability. Read more

www.securitytracker.com:
MyHelpdesk Input Validation Holes Let Remote Users Execute Arbitrary SQL Commands and Conduct Cross-Site Scripting Attacks. Read more

www.securitytracker.com:
Microsoft Proxy Server Buffer Overflow in Processing Gopher Protocol Responses Allows Remote Users to Execute Code on the Server to Gain Full Control of the Server. Read more

www.securitytracker.com:
Microsoft Internet Security and Acceleration Server (ISA) Buffer Overflow in Processing Gopher Protocol Responses Allows Remote Users to Execute Code on the Server to Gain Full Control of the Server. Read more

www.securitytracker.com:
csNews Web-News CGI Script Access Control Flaws Let Remote Users View Sensitive Data, Including User Passwords, Modify Administrative Settings, and Execute Commands on the Server. Read nore

www.securitytracker.com:
Belkin Cable/DSL Router Modifies IP Source Addresses on Packets Destined for Internal Hosts. Read more

www.securitytracker.com:
Caldera/SCO OpenServer Xsco Utility Heap Overflow May Let Local Users Gain Root Privileges. Read more

www.securiteam.com:
Oracle Reports Server Buffer Overflow. Read more

www.securiteam.com:
Oracle TNS Listener Buffer Overflow. Read more

www.securiteam.com:
mmmail POP3-SMTP Daemon Format String Vulnerability. Read more

www.securiteam.com:
mmftpd FTP Daemon Format String Vulnerability. Read more

news.com.com:
New virus communicates by pictures. Read more

www.nandotimes.com:
New computer virus could attack image files. Read more

afr.com:
New 'Perrun' virus warning. Read more

www.cnet.com:
Computer photo file virus discovered, no spreading. Read more

www.vnunet.com:
Sneaky worm on the move. Read more

seattletimes.nwsource.com:
Microsoft's Web-site software vulnerable to hacking. Read more

www.theregister.co.uk:
MS security hole extravaganza. Read more

www.pcworld.com:
Microsoft Patches Four More Security Flaws. Read more

13 June 2002

New Trojans:
AIMaster 2.0

Project Mayhem 1.0

JoTroj 1.0

News:
Microsoft Security Bulletin MS02-028
Heap Overrun in HTR Chunked Encoding Could Enable Web Server Compromise (Q321599). Read more

Microsoft Security Bulletin MS02-029
Unchecked Buffer in Remote Access Service Phonebook Could Lead to Code Execution (Q318138). Read more

Microsoft Security Bulletin MS02-030
Unchecked Buffer in SQLXML Could Lead to Code Execution (Q321911). Read more

www.eeye.com:
Windows 2000 and NT4 IIS .HTR Remote Buffer Overflow. Read more

www.nextgenss.com:
Oracle 9iAS Reports Server. Read more

www.nextgenss.com:
Oracle TNS Listener Buffer Overflow. Read more

online.securityfocus.com:
RHMask Local File Overwrite Vulnerability. Read more

online.securityfocus.com:
Caldera OpenServer XSCO Color Database File Heap Overflow Vulnerability. Read more

online.securityfocus.com:
BizDesign ImageFolio Authorized User Web Root Disclosure Vulnerability. Read more

online.securityfocus.com:
MyHelpDesk HTML Injection Vulnerability. Read more

online.securityfocus.com:
MyHelpDesk Cross-Site Scripting Vulnerability. Read more

online.securityfocus.com:
MyHelpDesk SQL Injection Vulnerability. Read more

online.securityfocus.com:
W-Agora Remote File Include Vulnerability. Read more

online.securityfocus.com:
Lokwa BB Multiple SQL Injection Vulnerabilities. Read more

www.securitytracker.com:
Red Hat Distribution of LPRng Print Spooler Has Default Configuration That Allows Any Remote User to Submit a Print Job. Read more

www.securitytracker.com:
AlienForm2 CGI Script For Mailing Web Form Data Discloses Files to Remote Users and Lets Remote Users Write to Arbitrary Files. Read more

www.securitytracker.com:
Mozilla Web Browser Bug in Processing Stylesheets May Let Remote Users Crash the Browser. Read more

www.securitytracker.com:
zenTrack Project Management Software May Disclose the Installation Path to Remote Users. Read more

www.securitytracker.com:
Twibright Labs' Links Web Browser May Execute Arbitrary Code When Viewing Malformed PNG Images. Read more

www.securitytracker.com:
vBulletin PHP-based Forum Software Has Unspecified Security Flaw in the 'db_mysql.php' Module. Read more

www.securitytracker.com:
Datalex BookIt! Consumer Discloses a User's Password to Local or Remote Users. Read more

www.securitytracker.com:
Geeklog Web Portal Software Permits Cross-Site Scripting Attacks and May Allow Remote Users to Execute Arbitrary SQL Commands on the Database Server. Read more

zdnet.com.com:
Microsoft's Gopher hole deepens. Read more

www.zdnet.com:
Serious MS security hole... AOL picks IE... CD piracy on the rise...Read more

www.crn.com:
Microsoft Discloses Security Flaw In Web Server. Read more

www.theregus.com:
Credit-card hackers stung with bogus IIS 'sploit. Read more

www.theregus.com:
Feds, industry battle the biggest network bug. Read more

www.cw360.com:
Better the devil you know. Read more

news.bbc.co.uk:
Hacker watches Nato spy pictures. Read more

www.wired.com:
Virus Girl Finds Hacker Boyfriend. Read more

12 June 2002

New Trojans:
Aphex's Remote Packet Sniffer 0.3.3

Kraimer 1.2

AIMVision 1.2

News:
online.securityfocus.com:
X-Windows Oversized Font Denial Of Service Vulnerability. Read more

online.securityfocus.com:
Geeklog pid CGI Variable SQL Injection Vulnerability. Read more

online.securityfocus.com:
Geeklog Multiple Cross Site Scripting Vulnerabilities. Read more

www.securiteam.com:
ZenTrack System Information Path Disclosure Vulnerability. Read more

www.securiteam.com:
Datalex BookIt! Consumer Password Vulnerabilities. Read more

www.securiteam.com:
SCO OpenServer Xsco Heap Overflow. Read more

www.securiteam.com:
Multiple Security Issues in Geeklog (XSS, SQL Inject). Read more

www.securitytracker.com:
ImageFolio Multi-media Management Software Access Control Flaw Lets Remote Users Reindex the Database and Add User Accounts. Read more

www.nst.com.my:
Najib outlines cyberspace threat to military networks. Read more

www.computerworld.com:
Clarke: Homeland security revamp to help cybersecurity. Read more

www.networknews.co.uk:
Complex Linux virus warning. Read more

rootprompt.org:
How Hackers Do It: Tricks, Tools, and Techniques. Read more

www.cnet.com:
Secure network spending seen over $46 bln by 2006. Read more

www.salon.com:
A new teenage wasteland? Read more

www.networknews.co.uk:
Hacker duo continues cyber assault. Read more

news.bbc.co.uk:
Q&A: A snooper's charter? Read more

11 June 2002

New Trojans:
Shang 1.5

Katux Latinus 1.02

TheefLE 1.0

Tools: sourceforge.net:
New version (1.2.5) of NMapWin released. Read more

verein.lst.de:
Traceroute without s bit. Read more

News:
online.securityfocus.com:
Pine Unix Username Account Information Leakage Vulnerability. Read more

www.securitytracker.com:
Lokwa BB Bulletin Board Bugs Let Remote Authenticated Users Read Private Messages and Also Execute SQL Commands on the Database. Read more

www.securitytracker.com:
W-Agora Web Forum Software Lets Remote Users Execute Arbitrary PHP Code on the Server. Read more

www.securitytracker.com:
SEANOX's Devwex Web Server Discloses Files Located Outside of the Web Root Directory to Remote Users and Allows Remote Users to Crash the Web Server. Read more

www.securitytracker.com:
php(Reactor) Web Site Software Allows Remote Users to Conduct Cross-Site Scripting Attacks to Steal Authentication Cookies. Read more

www.securitytracker.com:
Bugzilla Bug Tracking System Has a Variety of Bugs Including Cross-Site Scripting Flaws and Access Control Errors. Read more

www.msnbc.com:
Hiding (and Seeking) Messages on the Web. Read more

news.com.com:
Old code in Windows is security threat. Read more

www.linuxsecurity.com:
Flying Pigs: Snorting Next Generation Secure Remote Log Servers over TCP. Read more

www.infoworld.com:
President's cyber advisor outlines security plan. Read more

www.internet-magazine.com:
Hacker target sets up own security portal. Read more

www.startribune.com:
A glimpse of the world of teen-age hackers. Read more

english.peopledaily.com.cn:
China on Alert for 'Chinese Hacker' Virus. Read more

www.extremetech.com:
Virus Defense Gets Fortified. Read more

news.zdnet.co.uk:
Hackers earn their place in history. Read more

10 June 2002

New Trojans:
Aphex's WebDownloader 0.5.0

Pest 1.0

Kraimer 1.1

News:
www.securiteam.com:
Ciscokill Exploit Code Released. Read more www.securiteam.com:
Linksys Cable/DSL 4port Exposure Issue. Read more

www.securiteam.com:
eDonkey 2000 URL Buffer Overflow. Read more

www.securiteam.com:
Buffer Overflow in MSIE Gopher Code. Read more

www.securiteam.com:
IE 'Folder View for FTP sites' Script Execution Vulnerability. Read more

www.securiteam.com:
SeaNox Devwex Denial of Service and Directory Traversal. Read more

www.securiteam.com:
Slurp News Retriever Remote Format String Vulnerability. Read more

www.securiteam.com:
SCO OpenServer Crontab Format String Vulnerability. Read more

news.com.com:
Old code in Windows is security threat. Read more

news.bbc.co.uk:
America's most powerful spy agency. Read more

www.time.com:
Cracks in the System. Read more

www.zdnet.com:
Beware Kazaa... Security worth every penny... Ballmer's mission...Read more

www.networkcomputing.com:
Review: Hardened Linux Puts Hackers EnGarde. Read more

09 June 2002

New Trojans:
Aphex's WebDownloader 0.4.0. Server is only 1 KB.

Aphex's Remote Packet Sniffer 0.3.1

DataRape 1.0f

News:
online.securityfocus.com:
SGI MediaMail Memory Corruption Vulnerability. Read more

www.securitytracker.com:
Voxel Dot Net's CBMS ISP Billing Management System Has Input Validation Bugs That Let Remote Authenticated Users Conduct Cross-Site. Read more

www.securitytracker.com:
Splatt Forum Web Bulletin Board Input Validation Flaw in Filtering Image Tags Lets Remote Users Conduct Cross-Site Scripting Attacks to Steal Other Users' Authentication Cookies. Read more

www.securitytracker.com:
Micrsofot ASP.NET Buffer Overflow in Processing Cookies in StateServer Mode May Let Remote Users Crash the Service or Execute Arbitrary Code on the Server. Read more

www.securitytracker.com:
SGI's MediaMail E-mail Application Bug May Let Local Users Cause a Core Dump. Read more

www.securitytracker.com:
TrACESroute Utility Format String Hole May Let Local Users Gain Root Access. Read more

www.securitytracker.com:
MetaMachine's 'eDonkey' File Sharing Software Has a Buffer Overflow May Let Remote Create URLs That Will Cause Arbitrary Arbitrary Code to Be Executed When Loaded. Read more

www.securitytracker.com:
Microsoft Internet Explorer May Execute Remotely Supplied Scripting in the My Computer Zone if FTP Folder Viewing is Enabled. Read more

www.securitytracker.com:
BlackICE Agent Firewall Software May Fail to Perform Firewall Functions After Being in Standby Mode. Read more

www.securiteam.com:
QNX Multiple Security Vulnerabilities (ptrace, SIGSEGV, phgrafx, phlocale). Read more

www.securiteam.com:
Mnews Exploit Code Released. Read more

freshmeat.net:
FIAIF is an Intelligent Firewall 0.9.7-5. Read more

freshmeat.net:
NetBoz Firewall 1.0. Read more

www.startribune.com:
A glimpse of the world of teen-age hackers. Read more

www.extremetech.com:
Can Hackers "Explorer" Your Computer? Read more

www.pcw.co.uk:
High school hackers make the grade. Read more

net-security.org:
Historical database password retrieved. Read more

www.usatoday.com:
Hacker story leads to subpoena drama. Read more

www.idg.net:
New IE flaw enables remote PC attacks. Read more

www.theregister.co.uk:
Security through obsolescence. Read more

08 June 2002

New Trojans:
Digital Spawn (fake)

Silent Spy 2.02

AIMaster 1.0

News:
Microsoft Security Bulletin MS02-026
Unchecked Buffer in ASP.NET Worker Process (Q322289). Read more

online.securityfocus.com:
Microsoft Internet Explorer FTP Web View Cross Site Scripting Vulnerability. Read more

online.securityfocus.com:
Internet Security Systems BlackICE Agent Failure To Reactivate After Suspending Vulnerability. Read more

www.securitytracker.com:
Microsoft Internet Explorer Buffer Overflow in Processing Gopher Protocol Responses Allows Remote Users to Execute Code on the Victim's Computer. Read more

www.securitytracker.com:
Microsoft Windows Help System Buffer Overflows in 'htctrl.ocx' ActiveX Control May Let Remote Users Execute Arbitrary Code on a Target User's Computer By Sending Malicious HTML. Read more

www.securitytracker.com:
Microsoft Internet Explorer Allows HTML-Delivered Compiled Help Files to Be Automatically Executed on the Target User's Computer. Read more

www.securitytracker.com:
Telindus 11xx Routers Disclose the Admin Password to Remote Users and Also Let Remote Users Gain Administrative Control. Read more

www.securitytracker.com:
Oracle Reports Server Buffer Overflow May Let Remote Users Execute Arbitrary Code, Possibly With SYSTEM Level Privileges. Read more

www.securitytracker.com:
Oracle Database TNS Listener Buffer Overflow Lets Remote Users Crash the Server and Possibly Execute Arbitrary Code. Read more

www.securitytracker.com:
Certain Versions of Cisco IOS Routers Can Be Crashed By Remote Users Conducting Port Scans. Read more

www.securitytracker.com:
Red-M 1050 Access Point Wireless Bluetooth Gateway Lets Remote Users Deny Service, Conduct Brute Force Password Guessing Attacks, and Possibly Hijack Administrative Sessions. Read more

www.securitytracker.com:
Solaris 'in.lpd' Printer Daemon Lets Remote Users Gain Root Level Access on the System. Read more

www.securitytracker.com:
LogiSense DNS Manager System Has Input Validation Flaw That Allows Remote Users to Gain Access to the Application and Possibly Execute Arbitrary Commands. Read more

www.securitytracker.com:
LogiSense Hawk-i Customer Management Software Has Input Validation Flaw That Allows Remote Users to Gain Access to the Application and Possibly Execute Arbitrary Commands. Read more

www.securitytracker.com:
SGI IRIX 'rpc.passwd' Utility May Allow Remote Users to Gain Root Privileges on the Operating System. Read more

www.vnunet.com:
Shakira worm on the loose. Read more

www.sun-sentinel.com:
Hacking puts 4,500 students' grades in doubt. Read more

www.vnunet.com:
High school hackers make the grade. Read more

www.vnunet.com:
Hacker group defaces naval websites. Read more

www.vnunet.com:
Archive worker takes password to the grave. Read more

www.businessweek.com:
Download Sites Hacked, Source Code Backdoored. Read more

zdnet.com.com:
New viruses aim to cross multi platforms. Read more

04 June 2002

Due to personal circumstances, I will not be able to update this web site for a while.
I hope to be back soon.
M_R

New trojans:
Aphex's Remote Packet Sniffer 0.2.0

DTr 1.4.2

Fearless Webdownloader 2.0

Tron

Gargamel 1.0

G-Spot Bot 1.5

Ruler 1.42

Sparta 1.1

03 June 2002

New trojans:
Iowa Webdownloader 1.0

Smoke Downloader 1.0

DLX Webdownloader

News:
www.securitytracker.com:
Next Generation POSIX Threading (NGPT) Shared Memory Implementation May Allow Local Users to Deny Service on the System. Read more

www.securitytracker.com:
Charities.cron Script May Allow Local Users to Gain Elevated Privileges By Causing Files to Be Overwritten. Read more

www.securitytracker.com:
Mnews E-mail and News Reader Has Buffer Overflows That May Allow Local Users to Gain Elevated Privileges and Remote Users to Gain Access to the System. Read more

www.securitytracker.com:
Shambala Server Discloses Clear Text Passwords to Authenticated Remote Users Via FTP and Also Lets Remote Users Crash the Web Server. Read more

www.securitytracker.com:
Sun Ray Server With Non-Smartcard Mobility Feature May Allow Remote Users with XDMCP Clients to Login to an Arbitrary Users' Sun Ray Server Account. Read more

www.securitytracker.com:
Advanced Maryland Automatic Network Disk Archiver (AMANDA) Buffer Overflows May Let Remote Users and Certain Local Users Gain Root Access. Read more

www.securitytracker.com:
phpBB Image Tag Filtering Hole Lets Remote Users Conduct Cross-Site Scripting Attacks Against phpBB Users. Read more

www.smh.com.au:
Virus affects both Windows and Linux. Read more

biz.thestar.com.my:
Teenage hackers threat to executives. Read more

www.newsday.com:
Philadelphia man sentenced in library hacking case. Read more

hoovnews.hoovers.com:
E-mail in business: an indispensable tool but a dangerous toy. Read more

news.scotsman.com:
Rogues on the web. Read more

hoovnews.hoovers.com:
WIRED SOCIETY:'Genius' tale shows ignorance of cybercrime. Read more

02 June 2002

New trojans:
Aphex's WebDownloader 0.3.0. Server only 3 KB

Silent Spy 2.01

Trillian Rape 1.0

Tools:
razor.bindview.com:
Fenris is a multipurpose tracer, GUI debugger, stateful analyzer and partial decompiler intended to simplify bug tracking, security audits, code, algorithm, protocol analysis and computer forensics - providing a structural program trace, interactive debugging capabilities, general information about internal constructions, execution path, memory operations, I/O, conditional expressions and much more. Read more

www.remote-exploit.org:
Wellenreiter is a GTK/Perl program that makes the discovery and auditing of 802.11b wireless networks much easier. Read more

wpoison.sourceforge.net:
WPoison is a tool for discovering SQL-Injection related vulnerabilities on remote web servers. Read more

News:
online.securityfocus.com:
Fragroute/Dsniff/Fragrouter Configure Script Trojan Horse Vulnerability. Read more

online.securityfocus.com:
Evolvable Shambala Server FTP Server Directory Traversal Vulnerability. Read more

online.securityfocus.com:
Evolvable Shambala Server Web Server Denial Of Service Vulnerability. Read more

www.securiteam.com:
AIM+ Found to Contain a SpyWare. Read more

www.securiteam.com:
Multiple Security Vulnerabilities in QNX (dumper, monitor, crttrap). Read more

www.securiteam.com:
Shambala Server Directory Traversal and DoS. Read more

www.securiteam.com:
cURL Remote Exploit Code Released. Read more

www.securiteam.com:
Windows 2000 Server IIS 5.0 .ASP Overflow Exploit. Read more

www.securitytracker.com:
IBM Informix SE Database Buffer Overflow in Processing the 'INFORMIXDIR' Environment Variable May Allow Local Users to Obtain Root Privileges. Read more

www.securitytracker.com:
csPassword Script May Disclose Passwords to Local or Remote Users. Read more

www.securitytracker.com:
Quantum 'Snap Server' Network Attached Storage Device Can Be Crashed By Remote Users. Read more

www.securitytracker.com:
FileZilla FTP Server Discloses Files Outside of the Root FTP Directory to Remote Users. Read more

www.securitytracker.com:
Tcpdump Sniffer Has Buffer Overflow in the Processing of NFS Packets That Allows Remote Users to Crash the Sniffer. Read more

www.securitytracker.com:
Firestorm Network Intrusion Detection System (NIDS) Can Be Crashed By Remote Users Sending Malformed IP Options. Read more

www.securitytracker.com:
ECS K7S5A Mainboard Lack of Access Control on Boot Menu Lets Physically Local Users Make Unauthorized Changes to the Boot Process. Read more

www.securitytracker.com:
HP Software Distributor 'swinstall' Hole Lets Local Users View Files That They Are Not Privileged to View. Read more

www.wired.com:
FBI Blunders on Terror E-Mails. Read more

www.wired.com:
Busy Year for Big Brother. Read more

01 June 2002

New trojans:
AutoSpY 1.4

NewFuture 1.0 beta 2

Theef 1.37

News:
pedram.redhive.com:
Users of AIM+ are unwittingly sharing information about themselves every time they connect to AOL. Read more

online.securityfocus.com:
CGIScript.net csPassword.CGI HTPasswd File Disclosure Vulnerability. Read more

online.securityfocus.com:
HP-UX SD Data View Denial Of Service Vulnerability. Read more

online.securityfocus.com:
CGIScript.net csPassword.CGI Password.CGI.TMP File Disclosure Vulnerability. Read more

online.securityfocus.com:
TCPDump Malformed NFS Packet Buffer Overflow Vulnerability. Read more

online.securityfocus.com:
IBM Informix SE sqlexec Buffer Overflow Vulnerability. Read more

online.securityfocus.com:
CGIScript.net csPassword.CGI Information Disclosure Vulnerability. Read more

online.securityfocus.com:
CGIScript.net csPassword.CGI HTAccess File Modification Vulnerability. Read more

online.securityfocus.com:
Apache Tomcat Example Files Web Root Path Disclosure Vulnerability. Read more

online.securityfocus.com:
Apache Tomcat RealPath.JSP Malformed Request Information Disclosure Vulnerability. Read more

online.securityfocus.com:
Apache Tomcat Source.JSP Malformed Request Information Disclosure Vulnerability. Read more

online.securityfocus.com:
Autorun Arbitrary File Read Vulnerability. Read more

www.securitytracker.com:
Kismet Wireless Network Sniffing Software May Let Local Users Gain Root Access or Remote Users Execute Arbitrary Code on the System. Read more

www.securitytracker.com:
Microsoft Exchange 2000 Flaw in Processing a Certain Malformed SMTP Command Allows Remote Users to Deny Service to the Server. Read more

www.securitytracker.com:
FreeBSD /etc/rc Startup Script Unsafely Deletes Temporary Files When Booting, Allowing Local Users to Cause Arbitrary Directory Contents to Be Deleted. Read more

www.securitytracker.com:
FreeBSD Kernel Bug in 'accept_filtering()' Function Allows Remote Users to Cause Denial of Service Conditions. Read more

www.securitytracker.com:
Jakarta Tomcat Java Server Default Installation Sample Pages Disclose Information to Remote Users. Read more

www.securitytracker.com:
Gafware CFXImage Cold Fusion Tag Software Has Module ('showtemp.cfm') That Discloses Files on the System to Remote Users. Read more

www.securitytracker.com:
Novell NetWare Enterprise Web Server Default Files Disclose Server Information to Remote Users. Read more

www.securitytracker.com:
Macromedia JRun Java Server Host Header ISAPI DLL Buffer Overflow Lets Remote Users Execute Arbitrary Code with SYSTEM Level Privileges to Take Full Control of the System. Read more

online.securityfocus.com:
Klez-H tops virus charts - again. Read more

linuxtoday.com:
Linux.Simile: Windows Virus that Affects Linux Too? Read more

news.zdnet.co.uk:
When hacking competitions go wrong. Read more

www.sfgate.com:
Pleasant Hill hacker draws feds' attention. Read more

www.internetwk.com:
Windows XP Service Pack To Let Users 'Unbundle' Five MS Apps. Read more

zdnet.com.com:
FBI: Cybercrime is now a 'top 10 priority'. Read more

www.idg.net:
Court shuts cyberscam. Read more


Copyright© MegaSecurity.org