Home    News Archive    Translate Traducen
News July 2005
31 July 2005

Guides, Papers, etc
blogs.msdn.com:
Standards and CSS in IE. Read more

www.spywarewarrior.com:
The State of Hotbar Detections by some antispyware programs. Read more

www.securitydocs.com:
Computer Virus. Read more

Back-Door’ed by the Slammer. Read more

 

Vulnerabilities & Exploits
rgod.altervista.org:
phpeasynews v1.13 RC2 (possibly prior versions) cross site scripting, path disclosure , user check bypass. Read more

www.securityfocus.com:
Trillian Ver 3.1 saves password's in plain Text. Read more

 

News
news.com.com:
Hackers rally behind Cisco flaw finder. Read more

news.com.com:
Feds look to hire at Defcon. Read more

news.com.com:
More legal threats over Cisco flaws. Read more

www.wired.com:
Whistleblower Faces FBI Probe. Read more

www.vnunet.com:
Cisco/ISS go after websites in IOS spat. Read more

makezine.com:
DefCon Coverage from MakeZine.com. Read more

edition.cnn.com:
Geeks gather at 'What The Hack'. Read more

software.silicon.com:
Microsoft gets outside help for IE 7. Read more

www.vnunet.com:
Virus writer gets bitchy. Read more

www.technewsworld.com:
Feds Eye New Mission: Zombie Hunting. Read more

www.wired.com:
A Hacker Games the Hotel. Read more

www.technewsworld.com:
Eight Charged in Internet Piracy Probe. Read more

www.technewsworld.com:
Latest Online Scam Prompts Warning. Read more

. 30 July 2005

Guides, Papers, etc
www.securityfocus.com:
Exclusive Preview of Stealing the Network: How to Own an Identity. Read more

msdn.microsoft.com:
About Window Restrictions. Read more

 

Vulnerabilities & Exploits
www.rgod.altervista.org:
Web Content Management News System Administrative Account creation & cross site scripting poc. Read more

www.rgod.altervista.org:
qliteNews arbitrary database manipulation & cross site scripting poc exploit. Read more

securitytracker.com:
Cisco IOS IPv6 Bug Lets Remote Users Execute Arbitrary Code. Read more

securitytracker.com:
HP NonStop Server DCE Core Services Daemon Can Be Crashed By Remote Users. Read more

securitytracker.com:
Linksys WRT54G Common SSL Certificate and Private Key Lets Remote Users Decrypt Management Sessions. Read more

securitytracker.com:
Novell Modular Authentication Service May Let Remote Users Change Passwords. Read more

securitytracker.com:
PHPmyGallery Include File Bug Lets Remote Users Execute Arbitrary Commands. Read more

securitytracker.com:
Opera 'javascript:' Object Dragging Flaw May Let Remote Users Conduct Cross-Site Scripting Attacks. Read more

securitytracker.com:
Opera Error in Processing Extended ASCII Codes Lets Remote Users Spoof File Extensions in the Download Dialog Box. Read more

www.cisco.com:
Cisco Security Advisory: IPv6 Crafted Packet Vulnerability. Read more

www.debian.org:
DSA-770-1 gopher -- insecure tmpfile creating. Read more

www.debian.org:
DSA-769-1 gaim -- memory alignment bug. Read more

www.debian.org:
DSA-768-1 phpbb2 -- missing input validation. Read more

www.debian.org:
DSA-767-1 ekg -- integer overflows. Read more

 

News
www.securityfocus.com:
Settlement reached in Cisco flaw dispute. Read more

www.techworld.com:
Security researcher quits job to defy Cisco. Read more

www.techweb.com:
Cisco Threatens Web Site That Leaked Exploit Presentation. Read more

news.bbc.co.uk:,br> FBI holds eight on piracy charge. Read more

www.chron.com:
Hackers find way around Microsoft's anti-piracy push. Read more

www.theregister.co.uk:
Sophos bug highlights wider anti-virus flaws. Read more

www.theregister.co.uk:
Phishing attacks soar as viral onslaught wanes. Read more

informationweek.com:
Hackers Gather For Woodstock-Style Conference. Read more

www.iht.com:
At hackers conference, orderly mayhem rules. Read more

informationweek.com:
Investors Warned About Online Accounts. Read more

news.com.com:
Oracle vs. the hackers. Read more

in.today.reuters.com:
PGP founder unveils secure Internet phone. Read more

news.bbc.co.uk:
GTA sex scandal hits Australia. Read more

. 29 July 2005

Guides, Papers, etc
www.viruslist.com:
Malware Evolution: April - June 2005. Read more

www.dmst.aueb.gr:
Security Applications of Peer-to-Peer Networks. Read more

www.eweek.com:
Windows Vista Security Looks Promising by Larry Seltzer. Read more

www.whitedust.net:
interview with Paul Watson. Watson, who discovered a flaw in TCP/IP that could allow attackers to reset connections. Read more

www.windowsecurity.com:
Securing Windows Member Servers. Read more

astalavista.com:
Trojan Horse Attacking Strategy on Quantum Cryptography. Read more

astalavista.com:
arphide, hiding hosts inside trusted networks. Read more

 

Tools:
www.callingid.com:
CallingID™ protects Internet users from becoming scam victims. Read more

 

Vulnerabilities & Exploits
www.boingboing.net:
Microsoft "Genuine Advantage" cracked in 24h. Read more

rgod.altervista.org:
php news manager 1.45/1.46/1.47 (last release date 2005-05-03) login bypass/sql injection, multiple cross site scripting & path disclosure. Read more

rgod.altervista.org:
PHPFreeNews Version 1.32 news cross site scripting, path disclosure, information disclosure PHPFreenews previous versions MySQL injection / Login bypass. Read more

securitytracker.com:
Opera 'javascript:' Object Dragging Flaw May Let Remote Users Conduct Cross-Site Scripting Attacks. Read more

securitytracker.com:
Simplicity oF Upload Lets Remote Users Upload and Execute Arbitrary Code. Read more

securitytracker.com:
McAfee WebShield Appliance Default Password May Grant Access to Remote Users. Read more

securitytracker.com:
MDaemon Input Validation Hole in Attachment Quarantine Feature Lets Remote Users Write Files to Arbitrary Locations. Read more

securitytracker.com:
Sophos Anti-Virus Buffer Overflow Lets Remote Users Execute Arbitrary Code. Read more

securitytracker.com:
FreeBSD Bug in IPSec AES-XCBC-MAC Algorithm May Cause the Incorrect Key to Be Used. Read more

 

News
seattletimes.nwsource.com:
Microsoft suit wasn't personal, ex-VP says he was told. Read more

www.theregister.co.uk:
Microsoft uses former exec as lawsuit springboard 'to stop' Google. Read more

www.securitypipeline.com:
Treat Windows Vista As A Massive Security Patch. Read more

www.eweek.com:
Hackers Claim Crack of Microsoft Genuine Advantage Scan. Read more

news.zdnet.com:
Microsoft enlists security partner in browser update. Read more

www.theregister.co.uk:
Hackers look outside Windows for flaws. Read more

www.theinquirer.net:
Judge backs Microsoft. Read more

www.theregister.co.uk:
Vista - searching for something fresh. Read more

www.wired.com:
Cisco Security Hole a Whopper. Read more

www.latimes.com:
Exposer of Cisco Flaws to Go Silent. Read more

www.theregister.co.uk:
IE7 nukes Google, Yahoo! search. Read more

news.zdnet.com:
Flaw researcher settles dispute with Cisco. Read more

www.iol.co.za:
Bank reveals details of phishing attack. Read more

www.theregister.co.uk:
Lighten up: spam should be a game. Read more

news.zdnet.com:
Congress threatens P2P networks on porn. Read more

dailytelegraph.news.com.au:
Piracy charges after 15-nation sweep. Read more

. 28 July 2005

Guides, Papers, etc
www.microsoft.com:
Anti-phishing White Paper. Read more

 

Tools:
www.geocities.com/ijookeren:
Open TelnET with PasSWord, Stealth BAckGround Proses..Read more

 

Vulnerabilities & Exploits
www.frsirt.com:
Sophos AntiVirus Products Remote Heap Overflow Vulnerability. Read more

www.frsirt.com:
McAfee WebShield User Interface Default Credentials Issue. Read more

www.securityfocus.com:
Getting round website authentication with Firefox. Read more

securitytracker.com:
VBZooM Forum Input Validation Bug in 'show.php' May Let Remote Users Inject SQL Commands. Read more

securitytracker.com:
IBM Lotus Domino Discloses Hashed Passwords and Other Information to Remote Authenticated Users. Read more

securitytracker.com:
Ethereal ~20 Dissector Bugs Let Remote Users Deny Service or Execute Arbitrary Code. Read more

securitytracker.com:
SPI Dynamics WebInspect Reporting Function Lets Remote Sites Execute Scripting Code on the Target System. Read more

securitytracker.com:
CartWiz Input Validation Hole in 'viewCart.asp' Permits Cross-Site Scripting Attacks. Read more

securitytracker.com:
FTPshell Bug in Handling Closed Connections Lets Remote Users Crash the FTP Service. Read more

www.securiteam.com:
FtpLocate Command Execution (Exploit). Read more

www.securiteam.com:
SlimFTPd Buffer Overflow (LIST). Read more

 

News
news.com.com:
Antivirus insecurity at Black Hat confab. Read more

www.theregister.co.uk:
Personal storage sites are a 'safe haven for hackers'. Read more

www.techweb.com:
Hackers Spreading Spyware From Free Personal Web Sites. Read more

news.zdnet.co.uk:
Cisco tries to silence researcher. Read more

www.iht.com:
Techbrief: Hacker on a mission. Read more

today.reuters.com:
Microsoft releases trial version of Windows Vista. Read more

reviews.zdnet.co.uk:
Windows Vista: a first look. Read more

www.theregister.co.uk:
Red Hat holes less severe than Windows - study. Read more

www.theregister.co.uk:
'Pentagon hacker' McKinnon fights extradition. Read more

www.theregister.co.uk:
Internet has 'given Al Qaeda wings' claims BBC potboiler. Read more

news.zdnet.com:
Ex-Microsoft employee a million-dollar man. Read more

www.vnunet.com:
More e-crime training for UK police. Read more

. 27 July 2005

Guides, Papers, etc
www.windowsecurity.com:
Installing and Configuring Microsoft’s Data Protection Manager (DPM) Part 1. Read more

www.securityelf.org:
Software Misuse: from malicious actions to mind control. Read more

 

Vulnerabilities & Exploits
rgod.altervista.org:
Simplicity OF Upload 1.3 (possibly prior versons) remote code execution & cross site scripting. Read more

securitytracker.com:
Sun Multilanguage Environment Library (libmle) Buffer Overflow Lets Local Users Obtain Elevated Privileges. Read more

securitytracker.com:
Office Connect Wireless 11g Access Point Discloses System Information to Remote Users. Read more

securitytracker.com:
Hosting Controller 'comgetfile.asp' Discloses Reseller Information to Remote Authenticated Users. Read more

securitytracker.com:
Ares Fileshare Buffer Overflow in Search History Lets Users Execute Arbitrary Code. Read more

securitytracker.com:
Apache mod_ssl Off-by-one Buffer Overflow in Processing CRLs May Let Remote Users Execute Arbitrary Code. Read more

securitytracker.com:
Gentoo Sandbox Unsafe Temporary Files May Let Local Users Gain Elevated Privileges. Read more

securitytracker.com:
NETonE phpBook Input Validation Hole in 'guestbook.php' Permits Cross-Site Scripting Attacks. Read more

securitytracker.com:
FtpLocate Lets Remote Users Execute Arbitrary Commands. Read more

securitytracker.com:
Atomic Photo Album Include File Flaw Lets Remote Users Execute Arbitrary Commands. Read more

securitytracker.com:
SAP Internet Graphics Server Input Validation Hole Discloses Files to Remote Users. Read more

securitytracker.com:
Windows Buffer Overflow in Unspecified USB Device Driver Lets Physically Local Users Execute Arbitrary Code. Read more

www.debian.org:
DSA-766-1 webcalendar -- authorisation failure. Read more

www.debian.org:
DSA-765-1 heimdal -- buffer overflow. Read more

www.cybsec.com:
Default Configuration Information Disclosure in Lotus Domino (Including password hashes). Read more

 

News
www.vnunet.com:
Internet security threat rises. Read more

www.mosnews.com:
Russia’s Biggest Spammer Brutally Murdered in Apartment. Read more

www.eweek.com:
Black Hat Confab to Spotlight Database Security. Read more

informationweek.com:
Security Researchers Share Crackers’ Insider Tips. Read more

www.sans.org:
The Twenty Most Critical Internet Security Vulnerabilities (Updated) ~ The Experts Consensus. Read more

www.zdnet.com.au:
Hosting sites help hackers recruit 'zombies'. Read more

www.vnunet.com:
CA buys anti-spam firm. Read more

www.theregister.co.uk:
CA aims to curb spam with Qurb. Read more

management.silicon.com:
Police ask for power to hit terrorist websites. Read more

informationweek.com:
One In Four Identity-Theft Victims Never Fully Recover. Read more

australianit.news.com.au:
Hackers target backup flaws. Read more

www.wired.com:
Privacy Guru Locks Down VOIP. Read more

www.securityfocus.com:
3Com launches vulnerability-buying program. Read more

arstechnica.com:
Get paid for hacking? It's not just for movies anymore! Read more

www.geeknewscentral.com:
New E-Mail Virus Trick. Read more

informationweek.com:
Good Security Means Covering The Basics. Read more

www.vnunet.com:
Google adds RSS feeds to homepage. Read more

www.theregister.co.uk:
Fakers beware: no more MS updates for you. Read more

www.blackpressusa.com:
Beware of Internet scams: Nigeria 419. Read more

www.siliconvalley.com:
Many Internet users lagging on lingo. Read more

www.theregister.co.uk:
MS website trumpets 'pyramid' company. Read more

news.bbc.co.uk:
Student's role in £250m swindle. Read more

. 26 July 2005

Vulnerabilities & Exploits
www.rem0te.com:
ClamAV Library RemØte Heap Overflows Security Advisory. Read more

securitytracker.com:
Clam AntiVirus Integer Overflows May Let Remote Users Deny Service. Read more

securitytracker.com
Fetchmail Buffer Overflow in Processing POP3 UID Values Lets Remote Servers Execute Arbitrary Code. Read more

www.securiteam.com:
Netquery Command Execution (Exploit). Read more

www.securiteam.com:
SlimFTPd RNFR Buffer Overflow (Exploit). Read more

www.securiteam.com:
Microsoft Color Management Buffer Overflow (MS05-036, Exploit). Read more

 

News
www.theregister.co.uk:
Spyware 'calling home' volumes soar. Read more

www.theregister.co.uk:
3Com puts a bounty on vulns. Read more

software.silicon.com:
Beware free web services, warns Websense. Read more

news.zdnet.com:
Attackers lurk on photo sites, firm warns. Read more

www.detnews.com:
Hackers' new strategy is to steal identifying information. Read more

www.zdnet.com.au:
Bankers wrestle with online security. Read more

news.zdnet.co.uk:
Banks urged to wise up on spyware. Read more

www.stuff.co.nz:
Two-factor security cracked - SentryBay. Read more

www.eweek.com:
Adware Tries to Climb Out of the Muck. Read more

news.bbc.co.uk:
Bug hunters get big cash rewards. Read more

www.theregister.co.uk:
FTC cracks down on email smut barons. Read more

software.silicon.com:
Gartner: Don't believe the tech security myths. Read more

www.techspot.com:
Spanish Police raid 300 email scammers. Read more

www.theregister.co.uk:
Sales of DVD duplication software blocked. Read more

www.sfgate.com:
2 professors go fishing for phishers Barriers erected to protect against password-theft scams. Read more

news.zdnet.com:
Google ups ante in mapping rivalry. Read more

news.zdnet.co.uk:
Testers get their hands on OneCare. Read more

. 25 July 2005

Guides, Papers, etc
www.eweek.com:
With a Name Like Microsoft… by Larry Seltzer. Read more

www.dailyherald.com:
Does Google know too much? Read more

 

Tools:
www.nixgeneration.com:
Netdiscover is an active/passive address reconnaissance tool, mainly developed for those wireless networks without dhcp server, when you are wardriving. It can be also used on hub/switched networks. Read more

 

Vulnerabilities & Exploits
securitytracker.com:
PHP FirstPost Include File Bug in 'block.php' Lets Remote Users Execute Arbitrary Commands. Read more

securitytracker.com:
RealChat Non-secure Login Protocol Lets Remote Users Impersonate Other Users. Read more

securitytracker.com:
GoodTech's SMTP Server Buffer Overflows in Processing RCPT TO Commands Let Remote Users Execute Arbitrary Code. Read more

 

News
www.theinquirer.net:
Chinese worms steal trade secrets. Read more

software.silicon.com:
Bug bounty hunters recruited by security firm. Read more

www.zdnet.com.au:
Is there method in Microsoft's security buys? Read more

www.businessweek.com:
They're Playing Our Virus. Read more

www.net4now.com:
Chief Police Officers require disclosure of encryption keys. Read more

searchenginewatch.com:
Microsoft Launches MSN Virtual Earth. Read more

www.macworld.com:
Yahoo! acquires Konfabulator. Read more

. 24 July 2005

Guides, Papers, etc
channel9.msdn.com:
Video interview with Kim Cameron, Microsoft's Architect of Identity, about Kim's Laws of Identity. Read more

 

Vulnerabilities & Exploits
www.rgod.altervista.org:
Flex PHPNews 0.0.4 login bypass/ sql injection, cross site scripting & resource consumption poc exploit. Read more

 

News
www.theregister.co.uk:
UK police chiefs seek powers to attack terror web sites. Read more

www.techworld.com:
Ex-hacker preaches virtues of saying no. Read more

www.techworld.com:
World's biggest e-crime bust nets 310 people. Read more

www.techworld.com:
India Crushes 7/7 Worm Posing as News Footage. Read more

seattletimes.nwsource.com:
Microsoft Windows' new Vista. Read more

. 23 July 2005

Tools:
www.maxpatrol.com:
MaxPatrol Network Security Scanner Free unlimited version 7.0.1401 has been released. Read more

 

Vulnerabilities & Exploits
securitytracker.com:
KF Web Server Discloses Directory Listings to Remote Users. Read more

securitytracker.com:
Domain Name Relay Daemon (DNRD) Buffer Overflows May Let Remote Users Execute Arbitrary Code. Read more

securitytracker.com:
CMSimple Input Validation Hole in 'index.php' in 'search' Parameter Permits Cross-Site Scripting Attacks. Read more

securitytracker.com:
Asn Guestbook Input Validation Holes Permit Cross-Site Scripting Attacks. Read more

securitytracker.com:
Contrexx Input Validation Holes Permit SQL Injection and Cross-Site Scripting Attacks. Read more

securitytracker.com:
PHP TopSites Discloses Configuration Data to Remote Users. Read more

securitytracker.com:
Mozilla Firefox xpcom Race Condition Lets Remote Users Crash the Browser. Read more

securitytracker.com:
Mozilla Browser xpcom Race Condition Lets Remote Users Crash the Browser. Read more

securitytracker.com:
cpio Race Condition in 'copyin.c' Lets Local Users Modify File Permissions. Read more

securitytracker.com:
avast! antivirus Directory Traversal and Buffer Overflow in UNACEV2.DLL Lets Remote Users Write Files and Execute Arbitrary Code. Read more

securitytracker.com:
SlimFTPd Buffer Overflow in LIST, DELE, and RNFR Commands Lets Remote Authenticated Users Execute Arbitrary Code. Read more

www.securityfocus.com:
SlimFTPd Server: PoC Exploit. Read more

exploitlabs.com:
EXPL-A-2005-012 exploitlabs.com Advisory 041 PHP TopSites. Read more

 

News
www.theregister.co.uk:
MS Anti-Spyware built on MS Abandonware. Read more

www.theregister.co.uk:
Microsoft passes da Vista baby. Read more

news.zdnet.co.uk:
Is there method in Microsoft's security buys? Read more

www.informationweek.com:
Microsoft Beefing Up Windows Anti-Piracy Program. Read more

www.theinquirer.net:
Google retaliates by suing Microsoft. Read more

news.zdnet.co.uk:
Massive security breach may kill processing firm. Read more

news.com.com:
University of Colorado servers hacked. Read more

www.cyber-army.org:
Others: Hackers attacked Microsoft's Korean News site. Read more

news.bbc.co.uk:
Student's role in £250m swindle. Read more

blogs.zdnet.com:
Web searches growth: Google grows by 6%, Yahoo! by 9%, MSN loses 4%. Read more

blogs.zdnet.com:
60% of men but only 44% of women know what adware is. Read more

. 22 July 2005

Guides, Papers, etc
www.securityfocus.com:
Interview with Dan Kaminsky on Microsoft's security. Read more

www.securityfocus.com:
If it isn't broken...Read more

www.theglobeandmail.com:
The Web cookie is crumbling -- and marketers feel the fallout. Read more

www.eweek.com:
With a Name Like Microsoft… Read more

informationweek.com:
Voice Over IP's Quality Surprise. Read more

 

Vulnerabilities & Exploits
archives.neohapsis.com:
Compromising pictures of Microsoft Internet Explorer! Read more

www.rgod.altervista.org:
Netquery 3.1 remote commands execution, cross site scripting, information disclosure poc exploit. Read more

securitytracker.com:
zlib Buffer Overflow in 'inftrees.c' Lets Remote Users Deny Service. Read more

securitytracker.com:
EKG Integer Overflow in 'libgadu.c' May Let Remote Users Execute Arbitrary Code. Read more

securitytracker.com:
PHP Surveyor Input Validation Holes Permit SQL Injection and Cross-Site Scripting Attacks. Read more

securitytracker.com:
FreeBSD devfs Access Control Bug May Let Local Users Gain Elevated Privileges. Read more

www.cyber-army.org:
POC exploit for the MS05-03 JPEG ICC overflow issue. Read more

www.frsirt.com:
Avast! Antivirus ACE Archive Handling Multiple Vulnerabilities. Read more

 

News
www.theregister.co.uk:
Worm wears iTunes guise. Read more

news.zdnet.com:
Unpatched IE flaws reported. Read more

news.com.com:
Spying worm spreads via MSN Messenger, AIM. Read more

news.com.com:
Longhorn to be renamed Windows Vista? Read more

www.technewsworld.com:
New Spam-Fighting Technique Under Scrutiny. Read more

news.com.com:
Google seeks to stop Microsoft from suing new hire. Read more

www.theregister.co.uk:
Google drugs ring smashed. Read more

. 21 July 2005

Guides, Papers, etc
www.windowsecurity.com:
Sys Admin: Friend or Foe? Read more

 

Vulnerabilities & Exploits
securitytracker.com:
Website Generator Image Upload Preview Lets Remote Users Execute Arbitrary Code. Read more

securitytracker.com:
Blue Coat ProxySG Error in Processing TCP Sequence Numbers in ICMP Messages Lets Remote Users Deny Service. Read more

securitytracker.com:
Blue Coat Spyware Interceptor Error in Processing TCP Sequence Numbers in ICMP Messages Lets Remote Users Deny Service. Read more

securitytracker.com:
Blue Coat Director Error in Processing TCP Sequence Numbers in ICMP Messages Lets Remote Users Deny Service. Read more

securitytracker.com:
Blue Coat CacheOS Error in Processing TCP Sequence Numbers in ICMP Messages Lets Remote Users Deny Service. Read more

securitytracker.com:
Apple AirPort Card May Connect to Malicious Networks. Read more

www.securiteam.com:
phpSlash Account Hijacking (Exploit). Read more

www.securiteam.com:
OpenBB CID SQL Injection (Exploit). Read more

www.red-database-security.com:
Run any OS Command via unauthorized Oracle Forms. Read more

www.red-database-security.com:
Read parts of any file via desformat in Oracle Reports. Read more

www.red-database-security.com:
Various Cross-Site-Scripting Vulnerabilities in Oracle Reports. Read more

www.debian.org:
DSA-764-1 cacti -- several vulnerabilities. Read more

www.debian.org:
DSA-763-1 zlib -- remote DoS. Read more

 

News
news.com.com:
Microsoft licenses Finjan security patents. Read more

money.cnn.com:
Microsoft buys another security firm. Read more

www.geekinformed.com:
Microsoft Acquires e-Mail Security Company, FrontBridge. Read more

www.eetimes.com:
Microsoft to Acquire FrontBridge Technologies, a Leading Provider of Secure Messaging Services. Read more

news.com.com:
Kaspersky Lab to buy Spamtest Project. Read more

news.com.com:
iTunes IM worm drops adware. Read more

www.computerworld.com:
Attackers turning to fake online greeting cards. Read more

www.theregister.co.uk:
Firefox update fixes stability glitches. Read more

www.theregister.co.uk:
Firefox's Greasemonkey slippery on security. Read more

www.zdnet.com.au
Security experts round on Oracle over unpatched holes. Read more

www.theregister.co.uk:
ID theft fears prompt ecommerce boycott. Read more

www.theregister.co.uk:
Spam king surrenders his ignoble crown. Read more

www.sophos.com:
Over 300 arrested in huge 419 scam investigation, Sophos reports. Read more

news.com.com:
Bank branch robberies are passe. Read more

www.newsfactor.com:
Virus Bounties No Longer Effective. Read more

news.com.com:
ISPs versus the zombies. Read more

news.com.com:
Microsoft, Google duke it out for China. Read more

news.com.com:
9-year-old earns accolade as Microsoft pro. Read more

news.com.com:
Microsoft's eye on open source. Read more

www.computerworld.com.au:
Hacker Mitnick preaches social engineering awareness. Read more

www.net4now.com:
Security guru says write down passwords. Read more

voxilla.com:
VoIP Providers Worry as FCC Clams Up. Read more

. 20 July 2005

Guides, Papers, etc
online.wsj.com:
Where the Dangers Are
The threats to information security that keep the experts up at night -- and what businesses and consumers can do to protect themselves. Read more

www.windowsecurity.com:
Ethical Issues for IT Security Professionals. Read more

www.airmagnet.com:
Phlooding: Potential for New Distributed Wireless Attack Against Wired Authentication Assets. Read more

 

Vulnerabilities & Exploits
securitytracker.com:
Eksperymentalny Klient Gadu-Gadu (EKG) May Permit Command Execution and Local Privilege Escalation. Read more

securitytracker.com:
Alt-N MDaemon IMAP AUTHENTICATE and CREATE Command Bugs Let Remote Users Deny Service. Read more

securitytracker.com:
Race Driver Format String and Buffer Overflow Flaws May Let Remote Users Execute Arbitrary Code. Read more

securitytracker.com:
Hosting Controller 'AccountActions.asp' Access Control Bug Lets Remote Authenticated Users Add Usernames. Read more

securitytracker.com:
MRV's In-Reach Port-Specific Access Controls Can Be Bypassed By Remote Authenticated Users. Read more

securitytracker.com:
Form Sender Input Validation Holes in 'processform.php3' Permit Cross-Site Scripting Attacks. Read more

securitytracker.com:
Novell GroupWise Webaccess Lets Remote Users Conduct Cross-Site Scripting Attacks. Read more

securitytracker.com:
CuteNews Input Validation Holes in 'login.php' and 'search.php' Permit Cross-Site Scripting Attacks. Read more

securitytracker.com:
e107 Input Validation Flaw in BBCode URL Tags Lets Remote Users Conduct Cross-Site Scripting Attacks. Read more

securitytracker.com:
KDE Kate/Kwrite May Disclose Backup Files to Local Users or Remote Authenticated Users. Read more

www.debian.org:
DSA-762-1 affix -- several vulnerabilities. Read more

www.debian.org:
DSA-761-1 heartbeat -- insecure temporary files. Read more

www.debian.org:
DSA-760-1 ekg -- several vulnerabilities. Read more

www.debian.org:
DSA-759-1 phppgadmin -- missing input sanitising. Read more

 

News
www.computerworld.com.au:
Microsoft sues Google, former employee over hiring. Read more

www.theregister.co.uk:
Search Wars - the Empire strikes back. Read more

www.technewsworld.com:
Windows Flaw Could Allow DOS Attacks. Read more

www.cmpnetasia.com:
Windows XP DoS Bug Worse Than Thought. Read more

news.bbc.co.uk:
UN at odds over internet's future. Read more

www.washingtonpost.com:
Whose Internet? Read more

www.watchguard.com:
What's wrong with "spammer strikeback"? Let me count the ways... Read more

www.techweb.com:
Startup Aims To Overload Spammer Web Sites. Read more

www.vnunet.com:
Trojans stampede across the web. Read more

australianit.news.com.au:
US uni added to hacking hit-list. Read more

www.securitypipeline.com:
The Need To Focus On Hidden Security Threats. Read more

dozleng.com:
What’s the use of Security Advisories? Read more

www.dmreview.com:
Surging "Click Fraud" Imperils Internet Marketing. Read more

wired-vig.wired.com:
Terror Forum Sows Seeds of Jihad. Read more

. 19 July 2005

Guides, Papers, etc
www.usenix.org:
14th USENIX Security Symposium July 31-August 5, 2005, Baltimore, MD. Read more

astalavista.com:
Examining The Cyber Capabilities of Islamic Terrorist Groups. Read more

www.techworld.com:
Protective Layers: Securing Corporate Networks. Rea more

www.eweek.com:
It's Time to Standardize Vulnerability Day. Read more

How It Works...The Computer
This book was published in 1971, and the revised edition was published in 1979. Read more

 

Vulnerabilities & Exploits
securitytracker.com:
VP-ASP Input Validation Holes in 'productid' and 'catalogid' Permit SQL Injection Attacks. Read more

securitytracker.com:
PHPPageProtect Input Validation Holes in 'admin.php' and 'login.php' Permit Cross-Site Scripting Attacks. Read more

securitytracker.com:
SEO-Board Input Validation Hole in 'smilies_popup.php' Permits Cross-Site Scripting Attacks. Read more

securitytracker.com:
DzSoft PHP Editor Lets Remote Users Hang the Service. Read more

securitytracker.com:
Small HTTP Server FTP Service Lets Remote Authenticated Users Write to Arbitrary Files. Read more

www.securiteam.com:
FutureSoft TFTP Server 2000 Remote Buffer Overflow Exploit. Read more

www.securiteam.com:
GNU Mailutils "imap4d" Format String (Exploit). Read more

www.spidynamics.com:
Stack-Based Buffer Overflow in Sybase EAServer 4.2.5 to 5.2. Read more

 

News
www.windowsitpro.com:
Microsoft Refreshes Windows AntiSpyware Beta. Read more

www.vnunet.com:
Virus bounties no longer effective. Read more

news.com.com:
Zone Labs adds spyware protection. Read more

software.silicon.com:
Symantec website under DDoS attack. Read more

www.pcauthority.com.au:
New worm uses old tricks. Read more

www.net4now.com:
New virus targets iTunes users. Read more

news.zdnet.co.uk:
Sasser's heirs spread slowly. Read more

www.usatoday.com:
Hackers shift focus to swiping ID information. Read more

news.zdnet.co.uk:
IE and MSN Messenger open door for attackers. Read more

news.com.com:
Coding misstep forces new Firefox release. Read more

news.com.com:
Windows flaw reaches beyond XP. Read more

www.itp.net:
Number of hijacked PCs increasing. Read more

www.technewsworld.com:
Sophos Launches Zombie-Seeking Service. Read more

news.com.com:
Between phishers and the deep blue sea. Read more

www.technewsworld.com:
Australian Banks May Be Losing $70 Million to Web Fraud. Read more

www.itp.net:
Banks fight off hacker attacks. Read more

www.theinquirer.net:
Man with spyware fixes problem by buying new PCs. Read more

news.bbc.co.uk:
'Amateur culture' set to explode. Read more

. 18 July 2005

Guides, Papers, etc
dr00.sts.winisp.net:
Analyzing Browser Based Vulnerability Exploitation Incidents. Read more

A PHYSIOLOGICAL DECOMPOSITION OF VIRUS AND WORM PROGRAMS by Prabhat Kumar Singh. Read more

 

Vulnerabilities & Exploits
securitytracker.com:
HP Tru64 TCP/IP ISN and ICMP Processing Flaws Let Remote Users Deny Service. Read more

securitytracker.com:
PowerDNS Input Validation Flaw in LDAP Backend and Error In Processing Restricted Recursion Requests Let Remote Users Deny Service. Read more

securitytracker.com:
Skype Unsafe Temporary File When Adding Pictures to Profiles May Let Local Users Gain Elevated Privileges. Read more

securitytracker.com:
Y.SAK Scripts Have Input Validation Holes That Let Remote Users Execute Arbitrary Commands. Read more

securitytracker.com:
Hosting Controller 'IISActions.asp' Script Lets Remote Authenticated Users Add Domains/Subdomains. Read more

securitytracker.com:
Microsoft Internet Explorer (IE) JPEG Rendering Bugs Let Remote Users Deny Service. Read more

securitytracker.com:
Invision Power Board Input Validation Flaw in 'login.php' Permits SQL Injection. Read more

securitytracker.com:
Microsoft Windows Remote Desktop Protocol Bug Lets Remote Users Deny Service. Read more

www.debian.org:
DSA-758-1 heimdal -- buffer overflow. Read more

www.debian.org:
DSA-757-1 krb5 -- buffer overflow, double-free memory. Read more

 

News
www.theinquirer.net:
Google security is risk of the century. Read more

www.bizjournals.com:
Lawsuit cliams law firm hacked into Net library site. Read more

today.reuters.com:
Nigeria jails woman in $242 mln email fraud case. Read more

www.techspot.com:
Firefox site hacked. Read more

nwc.securitypipeline.com:
Cyber Crime Rates, Losses Fall, Says Survey. Read more

www.usatoday.com/:
Cybercrooks lure citizens into international crime. Read more

www.vnunet.com:
Nothing to fear but fear itself. Read more

. 17 July 2005

Tools:
www.apachesecurity.net:
Apache httpd Tools. Read more

lists.freebsd.org:
FreeBSD 6.0-BETA1 Available. Read more

 

Vulnerabilities & Exploits
securitytracker.com:
Sybase EAServer Buffer Overflow in 'TreeAction.do' Lets Remote Authenticated Users Execute Arbitrary Code. Read more

securitytracker.com:
Hosting Controller Access Control Bugs Let Remote Authenticated Users View, Edit, and Add Plans. Read more

securitytracker.com:
BitDefender AntiVirus Fails to Scan All of Multiple Attachments. Read more

securitytracker.com:
Simple Message Board Input Validation Holes Permit Cross-Site Scripting Attacks. Read more

securitytracker.com:
Belkin Wireless Router Grants Administrative Access to Remote Users. Read more

www.spidynamics.com:
Stack-Based Buffer Overflow in Sybase EAServer 4.2.5 to 5.2. Read more

 

News
Microsoft Security Advisory (904797)
Vulnerability in Remote Desktop Protocol (RDP) Could Lead to Denial of Service. Read more

news.zdnet.co.uk:
Opanki worm lives again on AIM. Read more

www.prweb.com:
Spyware.PCWash.com Renews Agreement with TrekBlue's Spyware Nuker Spyware Software and Spyware Remover to Offer Internet Users Effective Anti Spyware Software. Read more

www.theinquirer.net:
Turks set up alternative internet. Read more

. 16 July 2005

Guides, Papers, etc
www.windowsecurity.com:
The Student, the Teacher, and Optix Pro (Part 3). Read more

www.exploitx.com:
Rooting Linux with a floppy. Read more

today.reuters.com:
PluggedIn: White lies help stressed computer users. Read more

users.ece.gatech.edu:
Windows 2000 Root Kit Analysis. Read more

 

Vulnerabilities & Exploits
securitytracker.com:
Clever Copy Input Validation Hole in 'calendar.php' Lets Remote Users Conduct Cross-Site Scripting Attacks. Read more

securitytracker.com:
Macromedia ColdFusion May Generate Duplicate Authentication Tokens in Certain Cases. Read more

securitytracker.com:
Macromedia JRun May Generate Duplicate Authentication Tokens in Certain Cases. Read more

securitytracker.com:
Sophos Anti-Virus Engine Infinite Loop in Processing BZIP2 Archives Lets Remote Users Deny Service. Read more

securitytracker.com:
MooseGallery 'display.php' Include File Bug Lets Remote Users Execute Arbitrary Commands. Read more

securitytracker.com:
class-1 Forum Software Lets Remote Users Conduct Cross-Site Scripting and SQL Injection Attacks. Read more

securitytracker.com:
Clever Copy Lets Remote Users Conduct Cross-Site Scripting and SQL Injection Attacks. Read more

securitytracker.com:
Winamp MP3 ID3v2 Tag Buffer Overflow Lets Remote Users Execute Arbitrary Code. Read more

securitytracker.com:
CUPS Case Sensitive Location Directive May Let Remote Users Bypass Access Controls. Read more

 

News
www.theregister.co.uk:
Dell rejects spyware charge. Read more

www.theregister.co.uk:
Hackers attack Mozilla site to spread spam. Read more

www.zdnet.com.au:
Sophos hunts down zombie systems. Read more

www.technewsworld.com:
Trojan Horse Seeks Personal Financial Data. Read more

www.techweb.com:
Phishers Up Ante With 5x Spike In Trojans. Read more

www.terra.net.lb:
Greek police arrest alleged Internet fraudster preying on US bank accounts. Read more

sfgate.com:
Privacy is easy to breach. Read more

www.informationweek.com:
Trial Begins Against Accused Hacker. Read more

www.theinquirer.net:
Criminal caught by computer game. Read more

www.theinquirer.net:
Man campaigns for end to immoral games. Read more

www.technewsworld.com:
Hacker Tells of Bungle That May Have Cost $1 Million. Read more

www.eweek.com:
Maybe They Should Call It MS Pro-Spyware. Read more

software.silicon.com:
Critical flaws mar authentication tech. Read more

. 15 July 2005

Guides, Papers, etc
www.microsoft.com:
Setup and Maintenance Tips. Read more

 

Vulnerabilities & Exploits
xforce.iss.net:
Cisco VoIP Call Manager Remote Compromise. Read more

www.coresecurity.com:
MailEnable Buffer Overflow Vulnerability. Read more

securitytracker.com:
PHPsFTPd Grants Administrative Access to Remote Users. Read more

securitytracker.com:
Web-Portal-System 'wps_shop.cgi' Remote Command Execution. Read more

securitytracker.com:
NetPanzer Lets Remote Users Cause the Server to Enter and Endless Loop. Read more

securitytracker.com:
PHPCounter Input Validation Hole in EpochPrefix Parameter Permits Cross-Site Scripting Attacks. Read more

securitytracker.com:
Hosting Controller Input Validation Hole in 'listreason.asp' Lets Remote Authenticated Users Injection SQL Commands. Read more

securitytracker.com:
Cisco Security Agent IP Packet Processing Bug Lets Remote Users Deny Service. Read more

securitytracker.com:
Cisco ONS 15216 OADM Telnet Processing Error Lets Remote Deny Service. Read more

securitytracker.com:
Darwin Streaming Server Web Admin Interface Lets Remote Users Deny Service. Read more

www.fr33d0m.net:
ZoneAlarm remote exploit. Read more

 

News
www.smh.com.au:
UN wants to reduce US net dominance. Read more

www.theregister.co.uk:
Another pitch to Parliament for Denial of Service law. Read more

seattlepi.nwsource.com:
In smarts, she's a perfect 10
'Pakistan's girl wonder' is likely the youngest certified Microsoft expert. Read more

www.pcworld.com:
Trend Micro Bug Proves Costly. Read more

www.theregister.co.uk:
Flaws in BT chat sites expose users. Read more

insight.zdnet.co.uk:
The NASA hacker: Scapegoat or public enemy? Read more

news.zdnet.co.uk:
British hacker shines light on poor IT security. Read more

software.silicon.com:
Nasa hacker "frightened" by ease of entry. Read more

www.securitypark.co.uk:
Sender ID is Not an Anti-Spam Solution. Read more

www.technewsworld.com:
Hacker Tells of Bungle That May Have Cost $1 Million. Read more

www.theregister.co.uk:
Oz music hyperlinker guilty of copyright infringement. Read more

. 14 July 2005

Guides, Papers, etc
www.securityfocus.com:
Desktop port proliferation a security risk? Read more

www.securityfocus.com:
Microsoft and Claria, together at last? Read more

www.eweek.com:
Strive for Authentication, But Don't Count on It. Read more

 

Tools:
www.knowledgecave.com:
KCPentrix is liveCD design to be a standalone Penetration testing toolkit for pentesters and security analysts. Read more

 

Vulnerabilities & Exploits
www.rgod.altervista.org:
UPB Gold 1.9.6 XSS poc exploit. Read more

www.rgod.altervista.org:
UPB Gold 1.9.6 various XSS vulnerability. Read more

www.rgod.altervista.org:
Mambo 4.5.2.3 Cross Site Scripting poc exploit. Read more

www.rgod.altervista.org:
PHPSiteSearch 1.7.7d Cross Site Scripting poc exploit. Read more

www.debian.org:
DSA-756-1 squirrelmail -- several vulnerabilities. Read more

www.debian.org:
DSA-755-1 tiff -- buffer overflow. Read more

www.debian.org:
DSA-754-1 centericq -- insecure temporary file. Read more

www.cisco.com:
Cisco ONS 15216 OADM Telnet Denial-of-Service Vulnerability. Read more

securitytracker.com:
Check Point SecuRemote NG May Disclose Password Information to Local Users. Read more

securitytracker.com:
Mozilla Firefox Shared Object Access Control Bug May Let Remote Users Execute Arbitrary Code. Read more

securitytracker.com:
Mozilla Firefox Standalone Application Support May Let Remote Users Execute Arbitrary Code. Read more

securitytracker.com:
Hosting Controller Input Validation Hole in Search Box Lets Remote Users Injection SQL Commands. Read more

securitytracker.com:
oaboard Discloses Installation Path to Remote Users. Read more

 

News
www.informationweek.com:
Trial Begins Against Accused Hacker. Read more

www.theregister.co.uk:
Phlooding attack could leave enterprises high and dry. Read more

www.theregister.co.uk:
Could blogging spread computer worms? Read more

www.theregister.co.uk:
Leave hacker scum to rot, says MP. Read more

www.detnews.com:
VoIP study, Powell as partner, BitTorrent browser, Banking security. Read more

www.theregister.co.uk:
Three critical fixes in MS July security update. Read more

news.com.com:
Flaws could open systems to attack. Read more

news.com.com:
Alleged hacker: U.S. defense sites poorly secured. Read more

www.theregister.co.uk:
Firefox update completes busy patching day. Read more

www.techweb.com:
Word Bug Shows Trend In File Format Hacks. Read more

news.com.com:
Death penalty for virus writers? Read more

news.zdnet.com:
VeriSign buys iDefense for $40 million. Read more

. 13 July 2005

Guides, Papers, etc
www.microsoft.com:
What to do if you're a victim of credit card fraud. Read more

www.icann.org:
DOMAIN NAME HIJACKING: INCIDENTS, THREATS, RISKS, AND REMEDIAL ACTIONS. Read more

pacsec.jp:
World Security Pros To Converge on Japan. Read more

Analysis of a win32 userland rootkit by Kdm. Read more

informationweek.com:
Five Network Security Secrets. Read more

news.com.com:
Microsoft on ID theft watch. Read more

 

Vulnerabilities & Exploits
www.idefense.com:
Microsoft Word 2000 and Word 2002 Font Parsing Buffer Overflow Vulnerability. Read more

xforce.iss.net:
Microsoft ICM Image Compromise. Read more

www.cisco.com:
Cisco CallManager Memory Handling Vulnerabilities. Read more

www.debian.org:
DSA-753-1 gedit -- format string. Read more

www.rgod.altervista.org:
phpbb2root by rgod (version 2.0.15). Read more

securitytracker.com:
Oracle Database Has Multiple Flaws That May Let Remote Users Access the Database. Read more

securitytracker.com:
Apple Mac OS X TCP/IP Processing Bug Lets Remote Users Deny Service. Read more

securitytracker.com:
Kerberos krb5_recvauth() Double-Free Error May Let Remote Users Execute Arbitrary Code. Read more

securitytracker.com:
MIT krb5 KDC Buffer Overflow in 'do_as_req' and 'do_tgs_req' May Let Remote Users Execute Arbitrary Code. Read more

securitytracker.com:
Microsoft Office Buffer Overflow in Parsing Fonts Lets Remote Users Cause Arbitrary Code to Be Executed. Read more

securitytracker.com:
Microsoft Microsoft Color Management Module Lets Remote Users Execute Arbitrary Code. Read more

securitytracker.com:
MIMEsweeper for Web May Let Remote Code Bypass the Portable Code Manager. Read more

securitytracker.com:
Cisco CallManager Memory Management Bugs Let Remote Users Deny Service and Execute Arbitrary Code. Read more

securitytracker.com:
SGI arrayd arshell May Grant a Root Shell to Remote Authenticated Users or Local Users. Read more

securitytracker.com:
Moodle Has Unspecified Security Bugs. Read more

securitytracker.com:
F5 BIG-IP Unspecified SSL Authentication Bug May Let Remote Users Deny Service. Read more

securitytracker.com:
Dragonfly Commerce Lets Remote Users Modify Pricess and Inject SQL Commands. Read more

securitytracker.com:
wMailServer Can Be Crashed By Remote Users and Discloses Passwords to Local Users. Read more

securitytracker.com:
Blog Torrent May Disclose Hashed Password to Remote Users. Read more

securitytracker.com:
iPhotoAlbum Include File Bug Lets Remote Users Execute Arbitrary Commands. Read more

securitytracker.com:
Squito Gallery Include File Bug Lets Remote Users Execute Arbitrary Commands. Read more

securitytracker.com:
Hosting Controller 'addsubsite_online.asp' Lets Remote Authenticated Users Create New Accounts. Read more

 

News
www.microsoft.com:
Microsoft Security Bulletin Summary for July, 2005. Read more

www.theregister.co.uk:
Sophos glitch leaves PCs hanging. Read more

www.wired.com:
Giving New Meaning to 'Spyware'. Read more

www.theregister.co.uk:
ICANN warns world of domain hijacking. Read more

www.theinquirer.net:
Acxiom hacker trial opens. Read more

www.zdnet.com.au:
Spammers use anti-spam protocols to bypass filters. Read more

www.silicon.com:
Cyber cops investigate Manchester police DoS attack. Read more

news.com.com:
Document security? Tell me another joke. Read more

www.thecouriermail.news.com.au:
Trojan horror virus. Read more

www.theregister.co.uk:
Dutch file-swapper case collapses. Read more

. 12 July 2005

Guides, Papers, etc
www.slate.com:
The Filtered Future. China's bid to divide the Internet. Read more

www.defcon.org:
DefCon 13 will be held at the Alexis Park in Las Vegas, Nevada, July 29-31, 2005. Read more

www.securityfocus.com:
The Price is Right. Read more

www.windowsecurity.com:
Treating Infected Systems. Read more

www.webappsec.org:
DOM Based Cross Site Scripting or XSS of the Third Kind. Read more

i.i.com.com:
Hook, Line and Sinker: Phishing Attacks Going “Professional”. Read more

 

Vulnerabilities & Exploits
www.debian.org:
DSA-752-1 gzip -- several vulnerabilities. Read more

www.debian.org:
DSA-751-1 squid -- IP spoofing. Read more

www.debian.org:
DSA-750-1 dhcpcd -- out-of-bound memory access. Read more

securitytracker.com:
MSN Messenger Protocol '.pif' Group Conversation Bug Lets Remote Users Deny Service. Read more

securitytracker.com:
Hosting Controller 'AccountActions.asp' Access Control Bug Lets Remote Authenticated Users Modify Their Credit Limit. Read more

securitytracker.com:
Linux Kernel Race Condition in ia32 Compatability Code Yields Root Privileges to Local Users. Read more

securitytracker.com:
Lotus Notes HTML Attachment Processing Lets Remote Users Conduct Cross-Site Scripting Attacks. Read more

securitytracker.com:
Novell NetMail HTML Attachment Processing Lets Remote Users Conduct Cross-Site Scripting Attacks. Read more

securitytracker.com:
Id Board 'tbl_suff' Input Validation Hole Lets Remote Users Injection SQL Commands. Read more

securitytracker.com:
SPiD Include File Bug Lets Remote Users Execute Arbitrary Commands. Read more

securitytracker.com:
PPA Include File Bug Lets Remote Users Execute Arbitrary Commands. Read more

www.securiteam.com:
Notify Message Spoofing Vulnerability With VoIP Phones (Exploit). Read more

 

News
www.theregister.co.uk:
Zombie bots fuel spyware boom. Read more

software.silicon.com:
Zombies: There are too many of them, say McAfee. Read more

news.zdnet.com:
Report: Computer hijacking on the rise. Read more

www.theinquirer.net:
Microsoft's hacker says he deserves a job in Redmond. Read more

blogs.zdnet.com:
Spyware a national security threat? Read more

www.theregister.co.uk:
Pentagon über-hacker rap sheet spills attack details. Read more

news.zdnet.com:
Microsoft denies its antispyware favors Claria. Read more

www.theregister.co.uk:
Longhorn following Unix on security? Read more

news.zdnet.com:
Microsoft learns to live with open source. Read more

www.wired.com:
Google Squashes 'Typosquatting'. Read more

software.silicon.com:
Hacker mag closure spells bad news for security. Read more

www.theregister.co.uk:
Hacker magazine shuts up shop. Read more

www.technewsworld.com:
Punishment Inconsistent for Convicted Hackers. Read more

www.vnunet.com:
Soft Sasser sentence slammed. Read more

www.computerworld.com:
Internet Banking Security: Separating Fact From Fiction. Read more

news.com.com:
Antispam spec sets off on path to standard. Read more

news.com.com:
Group delivers definition of spyware. Read more

www.technewsworld.com:
Floridian Faces Wireless Trespassing Charges. Read more

news.com.com:
Feds blacklist 'illegal' Cuban Web sites. Read more

. 11 July 2005

Guides, Papers, etc
www.usenix.org:
14th USENIX Security Symposium. Read more

www.toorcon.org:
ToorCon 2005 Call For Papers. Read more

msevents.microsoft.com:
TechNet Webcast: Information about Microsoft July Security Bulletins (Level 100). Read more

kerneltrap.org:
OpenBSD Hackathon 2005, Part III. Read more

 

Vulnerabilities & Exploits
www.debian.org:
DSA-749-1 ettercap -- format string error. Read more

www.debian.org:
DSA-747-1 egroupware -- input validation error. Read more

www.debian.org:
DSA-745-1 drupal -- input validation errors. Read more

secunia.com:
zlib "inftrees.c" Buffer Overflow Vulnerability. Read more

 

News
www.net4now.com:
Hacking magazine closes. Read more

www.arnnet.com.au:
IT security 'worse than root canal'. Read more

www.vnunet.com:
Trojan capitalises on London bombings. Read more

seattlepi.nwsource.com:
Microsoft Notebook: Gates hints at sharing Xbox secrets. Read more

news.zdnet.co.uk:
Microsoft: Identity challenge will have many solutions. Read more

insight.zdnet.co.uk:
The public face of Microsoft privacy. Read more

www.arnnet.com.au:
Microsoft encroaching on storage territories. Read more

www.theregister.co.uk:
Microsoft's Ballmer tells lurvely partners to stick it to IBM. Read more

www.nytimes.com:
In Video Game, a Download Unlocks Hidden Sex Scenes. Read more

www.vnunet.com:
Yahoo launches SMS search. Read more

www.wired.com:
Cops Watched Sex Offender's Blog. Read more

www.sophos.com:
Suspected gang who stole from online game players arrested in Korea, Sophos reports. Read more

www.nytimes.com:
Flaw Is Found in Software Used to Accredit Hospitals. Read more

www.globes.co.il:
2 indictments against 9 PIs in Trojan Horse affair. Read more

www.ciol.com:
Offshoring security? India still hot. Read more

www.ciol.com:
New wireless broadband uses radio waves. Read more

. 10 July 2005

Guides, Papers, etc
www.windowsecurity.com:
The Student, the Teacher, and Optix Pro (Part 1). Read more

www.windowsecurity.com:
The Student, the Teacher, and Optix Pro (Part 2). Read more

www.windowsecurity.com:
NAT Traversal (NAT-T) Security Issues. Read more

www.emsisoft.com:
The Dialer-Problem in Detail. Read more

www.pcworld.com:
Your Privacy? It's Toast. Read more

www.pcworld.com:
Can You Trust Your Spyware Protection? Read more

mdn.mainichi-msn.co.jp:
Chinese hacker steals info on 160,000 travel agency customers. Read more

 

Vulnerabilities & Exploits
securitytracker.com:
CA eTrust SiteMinder Input Validation Bug in 'smpwservicescgi.exe' Permits Cross-Site Scripting Attacks. Read more

securitytracker.com:
phpWishList Grants Administrative Access to Remote Users. Read more

securitytracker.com:
Xerox WorkCentre Pro Web Service Lets Remote Users Bypass Authentication, Obtain Files, Modify Web Pages, or Deny Service. Read more

securitytracker.com:
Bugzilla Lets Remote Users Modify Flags and May Disclose Private Bug Summaries to Remote Users. Read more

securitytracker.com:
MailEnable Professional Flaw in HTTPMail Service May Let Remote Users Execute Arbitrary Code. Read more

securitytracker.com:
pngren 'kaiseki.cgi' Input Validation Hole Lets Remote Users Execute Arbitrary Commands. Read more

 

News
www.internetnews.com:
No Jail Time For Sasser, Netsky Author. Read more

today.reuters.com:
Microsoft rewards Sasser worm informants. Read more

software.silicon.com:
Sasser writer free to return to his job. Read more

www.computerworld.com:
Lawyers disagree over punishment in Sasser trial. Read more

software.silicon.com:
Sick virus writer exploits London bomb blast. Read more

www.theregister.co.uk:
VXers release 'London bombing' Trojan. Read more

www.computerworld.com:
Microsoft preps disk-based recovery system. Read more

www.rednova.com:
Hacker Gets into USC Data Base. Read more

www.kobtv.com:
USC tells 270,000 applicants a hacker may have accessed their records. Read more

www.antiphishing.org:
Phishing Alert: NCUA- '*** WARNING: Security Issues ***'. Read more

. 09 July 2005

Guides, Papers, etc
www.toorcon.org:
ToorCon 2005 Call for Papers. Read more

www.securityfocus.com:
Who owns the information? Read more

 

Vulnerabilities & Exploits
securitytracker.com:
Tivoli Management Framework Endpoint Service (lcfd) Lets Remote Users Deny Service. Read more

securitytracker.com:
phpAuction Bugs Let Remote Users Conduct Cross-Site Scripting and SQL Injection Attacks and Bypass Authentication. Read more

securitytracker.com:
McAfee Security Management System Lets Remote Authenticated Users Gain Elevated Privileges. Read more

securitytracker.com:
IBM AIX ftpd Port Timeout Bug Lets Remote Users Deny Service. Read more

securitytracker.com:
PunBB Input Validation Hole in 'profile.php' Permits SQL Injection and pun_include Flaw May Permit PHP Code Execution. Read more

securitytracker.com:
Comersus Input Validation Flaws in 'email', 'idProduct', 'name', and 'message' Parameters Permit SQL Injection and Cross-Site Scripting Attacks. Read more

securitytracker.com:
CartWIZ Input Validation Holes in 'id', 'idProduct', 'sortType', and 'message' Parameters Permit SQL Injection and Cross-Site Scripting Attacks. Read more

securitytracker.com:
Microsoft Windows Named Pipe NULL Session Bugs in svcctl and eventlog RPC Interfaces Disclose Information to Remote Users. Read more

securitytracker.com:
phpSlash Access Control Bug in saveProfile() Lets Remote Authenticated Users Hijack Accounts. Read more

securitytracker.com:
phpPgAdmin Input Validation Hole in 'formLanguage' Discloses Files to Remote Users. Read more

www.debian.org:
DSA-744-1 fuse -- programming error. Read more

www.debian.org:
DSA-743-1 ht -- buffer overflows, integer overflows. Read more

www.debian.org:
DSA-742-1 cvs -- buffer overflow. Read more

 

News
www.securityfocus.com:
Microsoft to reward informants after Sasser conviction. Read more

www.terra.net.lb:
Creator of Sasser Internet worm gets suspended sentence. Read more

www.computerworld.com.au:
MessageLabs Warns: Two New Strains of Trojan Downloader on the Loose. Read more

www.vnunet.com:
'Spam report' Trojan spreading fast. Read more

news.zdnet.co.uk:
Library flaw puts applications at risk. Read more

news.zdnet.co.uk:
Microsoft: Identity challenge will have many solutions. Read more

news.zdnet.co.uk:
Exploit published for old Firefox flaw. Read more

news.zdnet.co.uk:
On-the-run spammer caught and canned. Read more

www.terra.net.lb:
South Koreans develop new high-speed computer circuit board. Read more

. 08 July 2005

Tools:
afick.sourceforge.net:
AFICK (Another File Integrity CHecker). Read more

 

Vulnerabilities & Exploits
securitytracker.com:
oftpd Buffer Overflow in USER Command May Let Remote Users Execute Arbitrary Code. Read more

securitytracker.com:
PrivaShare Lets Remote Users Deny Service. Read more

securitytracker.com:
MakeBid Auction Deluxe Input Validation Hole Permits Remote Command Execution. Read more

securitytracker.com:
phpSecurePages Include File Bug in 'secure.php' Lets Remote Users Execute Arbitrary Commands. Read more

securitytracker.com:
Capturix ScanShare Discloses Password to Local Users. Read more

securitytracker.com:
FSBoard Input Validation Hole Discloses Files to Remote Users. Read more

securitytracker.com:
BudgeTone SIP Phone Lets Remote Users Spoof SIP-Notify-Messages Packets. Read more

securitytracker.com:
Cisco 7940/7960 Lets Remote Users Spoof SIP-Notify-Messages Packets. Read more

securitytracker.com:
Internet Download Manager Buffer Overflow in Processing Long URLs Lets Remote Users Execute Arbitrary Code. Read more

securitytracker.com:
Zlib Buffer Overflow in inflate_table() May Let Remote Users Execute Arbitrary Code. Read more

www.debian.org:
DSA-742-1 cvs -- buffer overflow. Read more

www.debian.org:
DSA-741-1 bzip2 -- infinite loop. Read more

 

News
news.com.com:
Trojan horses gallop into networks. Read more

www.theregister.co.uk:
Spyware fears prompt changing net habits. Read more

www.theregister.co.uk:
MS UK defaced in hacking attack. Read more

www.theregister.co.uk:
MS downgrades Claria adware detection. Read more

www.broadbandreports.com:
MS Downgrades Claria Detections. Read more

www.globes.co.il:
2 indictments against 9 PIs in Trojan Horse affair. Read more

money.cnn.com:
Man charged with wireless trespassing. Read more

www.networkingpipeline.com:
Florida Man Charged With Stealing Wi-Fi Signal. Read more

www.eweek.com:
Law and Order on the Internet by Larry Seltzer. Read more

www.technewsworld.com:
Sasser Creator Expected to Get Suspended Sentence. Read more

www.technewsworld.com:
Is It Spyware or Adware? Read more

www.theglobeandmail.com:
Keystroke logging a no-no in Alberta. Read more

www.vnunet.com:
Windows and Office patches ahead. Read more

www.computerworld.com.au:
Hackers for hire. Read more

news.com.com:
Wide-ranging flaw crashes programs. Read more

www.net4now.com:
Computer users turning into DIY security experts. Read more

www.technewsworld.com:
IM Becoming More Popular Malware Target, Study Finds. Read more

news.com.com:
Microsoft's personnel puzzle. Read more

news.bbc.co.uk:
Man convicted for chipping Xbox. Read more

www.washingtonpost.com:
Thanks for Listening. Read more

www.vnunet.com:
Microsoft and France Telecom get into VoIP. Read more

. 07 July 2005

Guides, Papers, etc
RAID 2005
Eighth International Symposium on Recent Advances in Intrusion Detection. Read more

www.cgisecurity.com:
Anatomy of the web application worm. Read more

 

Tools:
www.microsoft.com:
Microsoft Shared Computer Toolkit for Windows XP (Beta). Read more

Detect Hidden Connections
This is a little program to detect if a rootkit is hiding a port. Read more

www.eeye.com:
eEye Digital Security Announces Availability of Blink® 2.0. Read more

 

Vulnerabilities & Exploits
securitytracker.com:
PhotoGal Include File Bug Lets Remote Users Execute Arbitrary Commands. Read more

securitytracker.com:
Dansie Shopping Cart Discloses Variables File to Remote Users. Read more

securitytracker.com:
Jaws 'BlogModel.php' Include File Bug Lets Remote Users Execute Arbitrary Commands. Read more

securitytracker.com:
'probe.cgi' Input Validation Hole in 'olddat' Parameter Lets Remote Users Execute Arbitrary Commands. Read more

securitytracker.com:
Adobe Reader Incorrect Temporary File Permissions May Disclose PDF Files to Local Users. Read more

securitytracker.com:
Adobe Reader Buffer Overflow in UnixAppOpenFilePerform() May Let Remote Users Execute Arbitrary Code. Read more

securitytracker.com:
Popper May Let Local Users Gain Elevated Privileges. Read more

securitytracker.com:
Mark Kronsbein's MyGuestbook Include File Flaw Lets Remote Users Execute Arbitrary Commands. Read more

securitytracker.com:
QuickBlogger Input Validation Hole Permits Cross-Site Scripting Attacks. Read more

securitytracker.com:
ASPWebMail Discloses Database to Remote Users. Read more

securitytracker.com:
ASPKnowledgeBase Discloses Database to Remote Users. Read more

securitytracker.com:
FileMan Discloses Database to Remote Users. Read more

www.securiteam.com:
Internet Download Manager URL Stack Overflow (Exploit). Read more

www.securiteam.com:
Mozilla Platform's Code Execution Vulnerabilities (Exploit). Read more

www.securiteam.com:
TCP Chat(TCPX) DoS (Exploit). Read more

www.securiteam.com:
Drupal Code Injection (SA-2005-002, Exploit). Read more

www.securiteam.com:
phpBB Remote PHP Code Execution (viewtopic.php, Perl). Read more

www.securiteam.com:
Access Remote PC Password Disclosure (Exploit). Read more

www.securiteam.com:
XMLRPC Remote Commands Execution (Exploit). Read more

 

News
www.vnunet.com:
Longhorn locked down to fight hackers. Read more

www.vnunet.com:
Microsoft offers temporary fix for 'extremely critical' flaw. Read more

news.com.com:
Suspected spam king to appear in court. Read more

news.com.com:
Americans changing tack to shake off spyware. Read more

news.com.com:
Exploit heightens risk from old Firefox flaw. Read more

today.reuters.com:
Net users change habits to avoid spyware-survey. Read more

mdn.mainichi-msn.co.jp:
Chinese hacker steals info on 160,000 travel agency customers. Read more

news.zdnet.co.u:
Integration needed to shore up security holes. Read more

news.zdnet.co.u:
Microsoft: 'We won't charge to fix vulnerabilities'. Read more

news.com.com:
Hacking for dollars. Read more

. 06 July 2005

Vulnerabilities & Exploits
Eksperymentalny Klient Gadu-Gadu (EKG) Unsafe Temporary File May Let Local Users Gain Elevated Privileges. Read more

securitytracker.com:
Geeklog Input Validation Hole When Retrieving Article Comments Permits SQL Injection Attacks. Read more

securitytracker.com:
PPxP Privileged Log File Access May Let Local Users Gain Root Privileges. Read more

securitytracker.com:
ASPjar GuestBook Input Validation Hole Permits SQL Injection. Read more

securitytracker.com:
ListPics Discloses Database to Remote Users. Read more

securitytracker.com:
Access Remote PC Discloses Password to Local Users. Read more

securitytracker.com:
Quick Dirty PHP Source Printer Input Validation Hole Discloses Files to Remote Users. Read more

securitytracker.com:
GlobalNoteScript Input Validation Hole Lets Remote Users Execute Arbitrary Commands. Read more

securitytracker.com:
Log4sh Unsafe Temporary File May Let Local Users Gain Elevated Privileges. Read more

www.zataz.net:
ekg insecure temporary file creation and arbitrary code execution. Read more

www.zataz.net:
kpopper insecure temporary file creation. Read more

www.idefense.com:
Adobe Acrobat Reader UnixAppOpenFilePerform() Buffer Overflow Vulnerability. Read more

 

News
www.vnunet.com:
Virus writer confesses guilt. Read more

www.vnunet.com:
Hackers turn to root kits for web attacks. Read more

constitutionalcode.blogspot.com:
DNS Poisoning Requested From Providers by Rights Organisation. Read more

www.asahi.com:
Spyware suspected in illegal money transfers. Read more

www.securityfocus.com:
Flawed USC admissions site allowed access to applicant data. Read more

www.theregister.co.uk:
China opens net addiction clinic. Read more

www.techworld.com:
Microsoft to offer fix for another IE vulnerability. Read more

imlogic.com:
IMlogic Threat Center Reports Significant Rise in Targeted Attacks on Instant Messaging Networks in Q2 2005. Read more

www.vnunet.com:
IT directors 'unaware' of email threat. Read more

www.theregister.co.uk:
Brit nicked for hacking Xbox. Read more

. 05 July 2005

Guides, Papers, etc
www.computerworld.com.au:
Open source vs. Windows: security debate rages. Read more

Hall Of Shame.
This wiki page is dedicated to the thousands of applications that break when run as non-admin. Read more

VX Reversing I, the basics by Eduardo Labir. Read more

 

Vulnerabilities & Exploits
seclists.org:
[Full-disclosure] alert: the 111111 bug. Read more

securitytracker.com:
osTicket Lets Remote Users Include Local Files and Inject SQL Commands. Read more

securitytracker.com:
K-Meleon Error in Processing Empty Javascript Functions Lets Remote Users Deny Service. Read more

securitytracker.com:
TCP Chat Lets Remote Users Crash the Service. Read more

securitytracker.com:
JBoss jBPM Lets Remote Users Execute Arbitrary Applications and Obtain System Information Disclosure. Read more

www.illegalaccess.org:
Security Advisory: JBOSS 3.2.2-3.2.7 / 4.0.2 installation path disclosure / config disclosure / version fingerprinting. Read more

www.zataz.net:
log4sh insecure temporary file creation. Read more

 

News
www.vnunet.com:
Hackers crack two-factor security. Read more

www.theregister.co.uk:
Symbian Trojan drains the life from phones. Read more

www.geekzone.co.nz:
New Symbian trojan Doomboot.A prevents phone from booting. Read more

www.theregister.co.uk:
Warning over unpatched IE bug. Read more

news.zdnet.co.uk:
Criminals send malware levels soaring. Read more

www.techworld.com:
Web apps compromised by security hole. Read more

news.com.com:
The coming Web security woes. Read more

www.theregister.co.uk:
Pop-up smut tops spyware chart. Read more

news.bbc.co.uk:
Sasser worm suspect goes on trial. Read more

www.theregister.co.uk:
Silicon beats carbon in chess battle. Read more

www.theregister.co.uk:
China signs anti-spam pact. Read more

www.channelregister.co.uk:
CA boss charges detailed. Read more

www.itnews.com.au:
US feds revise case against Sanjay Kumar. Read more

www.cxotoday.com:
Phishing Attacks Up By More Than 200%. Read more

. 04 July 2005

Guides, Papers, etc
www.eweek.com:
RSS in Longhorn: The Security Question. Read more

 

Vulnerabilities & Exploits
securitytracker.com:
SunONE Web Server May Allow Remote Users to Conduct HTTP Response Smuggling Attacks. Read more

securitytracker.com:
Oracle Application Server Web Server May Allow Remote Users to Conduct HTTP Response Smuggling Attacks. Read more

securitytracker.com:
IBM WebSphere May Allow Remote Users to Conduct HTTP Response Smuggling Attacks. Read more

securitytracker.com:
BEA WebLogic May Allow Remote Users to Conduct HTTP Response Smuggling Attacks. Read more

securitytracker.com:
Tomcat May Allow Remote Users to Conduct HTTP Response Smuggling Attacks. Read more

securitytracker.com:
Microsoft Internet Information Server May Allow Remote Users to Conduct HTTP Response Smuggling Attacks. Read more

 

News
australianit.news.com.au:
Security our biggest concern: Gates. Read more

www.itnews.com.au:
Trojan filters packets to isolate users. Read more

www.technewsworld.com:
Zombies on the Rise, Stalking the Internet. Read more

www.eweek.com:
Today's Hackers Code for Cash, Not Chaos. Read more

www.technewsworld.com:
Malware for Money: Zafi, Sober, Netsky Still Haunting Net. Read more

www.technewsworld.com:
Banks Try to Make Online Account Access More Secure. Read more

www.technewsworld.com:
Threat From Mobile Device Viruses a Sleeping Giant. Read more

www.nytimes.com:
Once Again, Microsoft Faces Antitrust Suit. Read more

www.itnews.com.au:
Microsoft confirms IE security flaw. Read more

www.rednova.com:
Hacker Hits Airport Web Site. Read more

www.vnunet.com:
Trojan attacks double in June. Read more

www.zdnet.com.au:
RSA and CA accused of sending 'stupid' e-mails. Read more

www.businessweek.com:
Swedes undeterred by online piracy ban. Read more

www.itnews.com.au:
Phishing up by 226 percent. Read more

news.bbc.co.uk:
Google maps shows the way forward. Read more

. 03 July 2005

Guides, Papers, etc
Shoot the Messenger: IM Worms by infectionvectors.com. Read more

 

New Trojans June

 

Vulnerabilities & Exploits
securitytracker.com:
Cacti Input Validation Holes Let Remote Users Inject SQL Commands, Bypass Authentication, and Execute Arbitrary Commands. Read more

securitytracker.com:
Oracle Application Server Web Cache Lets Remote Users Conduct HTTP Request Smuggling Attacks. Read more

securitytracker.com:
Sun Java System Web Proxy Server Lets Remote Users Conduct HTTP Request Smuggling Attacks. Read more

securitytracker.com:
Check Point FireWall-1 HTTP Request Smuggling May Let Remote Users Bypass Web Intelligence Features. Read more

securitytracker.com:
Microsoft ISA Server May Accept HTTP Authentication Even When SSL Is Required. Read more

securitytracker.com:
Nabopoll Include File Flaw Lets Remote Users Execute Arbitrary Code. Read more

securitytracker.com:
Golden FTP Server Discloses Files and the Installation Path to Remote Authenticated Users. Read more

securitytracker.com:
Microsoft Front Page May Crash When Editing a Specially Crafted Web Page. Read more

securitytracker.com:
Simple Machines Forum Input Validation Hole in 'msg' Parameter Lets Remote Users Inject SQL Commands. Read more

securitytracker.com:
Squid HTTP Header Processing Lets Remote Users Smuggle HTTP Requests. Read more

 

News
www.siliconvalley.com:
U.S. decision on Internet's key computers raises concerns. Read more

wired-vig.wired.com:
Map Hacks on Crack. Read more

www.itp.net:
Firms ‘overhyping’ virus dangers, claims Gartner. Read more

www.itp.net:
Hackers attack Mashreqbank. Read more

www.newscientist.com:
Computer viruses become hacker informants. Read more

. 02 July 2005

New Trojans June

 

Guides, Papers, etc
www.securityfocus.com:
Reverse engineering patches making disclosure a moot choice? Read more

www.securityfocus.com:
Open-source projects get free checkup by automated tools. Read more

www.eweek.com:
A Brand New Internet? Read more

slate.msn.com:
Internet2. It's better, it's faster. You can't use it. Read more

 

Tools:
www.microsoft.com:
Microsoft Baseline Security Analyzer v2.0 (for IT Professionals). Read more

 

Vulnerabilities & Exploits
securitytracker.com:
Netscape Error in Processing Empty Javascript Functions Lets Remote Users Deny Service. Read more

securitytracker.com:
NetBSD Audio Subsystem Lets Local Users Deny Service. Read more

securitytracker.com:
Prevx Pro Lets Local Users Modify Files and Spoof Driver Messages. Read more

securitytracker.com:
Community Link Pro Input Validation Hole in 'file' Parameter Lets Remote Users Execute Arbitrary Commands. Read more

securitytracker.com:
SSH Secure Shell Server Discloses Host Key to Local Users and Remote Authenticated Users. Read more

securitytracker.com:
SSH Tectia Server Discloses Host Key to Local Users and Remote Authenticated Users. Read more

www.debian.org:
DSA-736-1 spamassassin -- remote DOS. Read more

www.debian.org:
DSA-735-1 sudo -- pathname validation race. Read more

 

News
www.theregister.co.uk:
Malware authors up the ante. Read more

www.computerworld.com:
IE bug can crash browser. Read more

www.computerworld.com:
U.S. makes about-face on Internet directories. Read more

www.wired.com:
Net Pioneer Wants New Internet. Read more

news.zdnet.co.uk:
Corporate anti-spyware spending tipped to boom. Read more

www.theregister.co.uk:
Feds deploy massive anti-piracy dragnet. Read more

www.khaleejtimes.com:
Warning against e-mail virus. Read more

www.cio-today.com:
Exploit Circulates for Veritas Backup Exec Software. Read more

www.computerworld.com:
Update: Microsoft to pay IBM $775M in antitrust settlement. Read more

www.surfcontrol.com:
Male Workers Help Spread the Spyware Surge. Read more

. 01 July 2005

New Trojans June

 

Guides, Papers, etc
www.benedelman.org:
Microsoft to Buy Claria? Read more

www.securityfocus.com:
Rats in the security world. Read more

www.biosmagazine.co.uk:
Announcing Ethical Hacking 101 course in London and Brussels. Read more

www.infoworld.com:
German tech university offers summer hacking course. Read more

 

Vulnerabilities & Exploits
securitytracker.com:
FreeBSD ipfw Packet Lookup Error May Let Packets Bypass the Firewall. Read more

securitytracker.com:
FreeBSD TCP PAWS Timestamp and TCP Options Bugs Let Remote Users Deny Service. Read more

securitytracker.com:
Clam AntiVirus cli_scanszdd() and ENSURE_BITS() Errors Let Remote Users Deny Service. Read more

securitytracker.com:
Cisco IOS RADIUS Fallback 'None' Authentication Error Lets Remote Users Bypass Authentication. Read more

www.securiteam.com:
phpBB Remote PHP Code Execution (viewtopic.php 2). Read more

www.securiteam.com:
PHP-Fusion Accessible Database Backups Download (Exploit). Read more

www.securiteam.com:
Vulnerability in Message Queuing Allows Code Execution (MS05-017, Exploit 2). Read more

www.securityfocus.com:
Microsoft Windows NTFS Information Disclosure. Read more

www.debian.org:
DSA-733-1 crip -- insecure temporary files. Read more

 

News
news.zdnet.co.uk:
Trojans from China attacking UK. Read more

news.zdnet.co.uk:
Spam postcard delivers nasty surprise. Read more

www.theregister.co.uk:
Anti-spam success drives malware authors downmarket. Read more

www.theregister.co.uk:
Men blamed for spyware surge. Read more

www.theregister.co.uk:
Google slapped with click fraud class action. Read more

www.rednova.com:
Hacker Posts Crack for Google Software. Read more


Copyright© MegaSecurity.org