Home
News Archive    Translate Traducen
News October 2002
31 october 2002

New Trojans:
NukeProtecter 1.0

CiGiCiGi 1.5

Dipti 5.0

Vulnerabilities & Exploits:
www.securitytracker.com:
phpBB Forum Bug in 'admin_ug_auth.php' Lets Remote Authenticated Users Gain Administrative Privileges on the Forum. Read More

www.securitytracker.com:
Mailread.com POP Mail Software Input Validation Bugs Let Remote Users Read Files and Execute Commands on the System. Read More

www.securitytracker.com:
Cisco Universal Gateway Can Be Crashed By Remote Users Conducting Port Scans. Read More

www.securitytracker.com:
Forum Du Dobermann Web Forum Include File Error Lets Remote Users Execute Arbitrary Commands. Read More

www.securitytracker.com:
Alt-N MDaemon POP Mail Server Lets Remote Authenticated Users Crash the Mail Services. Read More

News:
Microsoft Security Bulletin MS02-062
Cumulative Patch for Internet Information Service (Q327696). Read More

Microsoft Security Bulletin MS02-063
Unchecked Buffer in PPTP Implementation Could Enable Denial of Service Attacks (Q329834).

Microsoft Security Bulletin MS02-064
Windows 2000 Default Permissions Could Allow Trojan Horse Program (Q327522). Read More

www.pcworld.com:
Do Bug-Hunting Security Firms Put Users at Risk? Read More

online.securityfocus.com:
The Day the Net Nearly Choked. Read More

www.canada.com:
Blow struck at Net's heart. Read More

www.hacktivismo.com:
No More Hacker Cease-Fire: Now Its War.... Again. Read More

www.vnunet.com:
CIA identifies cyber terror groups. Read More

www.hindustantimes.com:
Orissa cops to check cyber crime. Read More

www.2600.com:
E-MAIL AND WEB SITES ARE COMPUTER-BASED ATTACKS, SAYS GOV. Read More

techupdate.zdnet.com:
Smart security: network scanners. Read More

zdnet.com.com:
Can open source compete with Microsoft? Read More

www.vnunet.com:
Questions + Answers: Kevin Mitnick. Read More

news.bbc.co.uk:
State of the wireless nation. Read More

www.newsfactor.com:
Daily CyberCrime and Security Report for October 30, 2002. Read More

30 october 2002

New Trojans:
Computer Spy

Dripper 0.1

TheRipperz IP Mail Notifier

Vulnerabilities & Exploits:
Debian Security Advisory
DSA-183-1 krb5 -- buffer overflow. Read More

www.securitytracker.com:
Microsoft Outlook Express May Fail to Delete E-mail Messages from Local Storage. Read More

News:
www.forbes.com:
RPT-Pro-Islamic hackers gear up for cyber war-experts. Read More

www.itweb.co.za:
Fears of pro-Islamic cyber war escalate. Read More

news.com.com:
CIA warns of Net terror threat. Read More

www.islandpacket.com:
Pentagon computers getting tougher for hackers to crack. Read More

news.com.com:
Thumbs-up on security for Windows 2000. Read More

www.hindustantimes.com:
Windows 2000 passes security check: Microsoft. Read More

ItWeb:
Wireless LAN security: Time to take action. Read More

www.freep.com:
Firewall puts a barrier between trouble, your PC. Read More

www.theregister.co.uk:
Kournikova virus author loses appeal. Read More

www.gcn.com:
FIPS testing finds lots of mistakes in crypto IT. Read More

www.theregister.co.uk:
Trustix clinches China Secure Linux deal. Read More

www.idg.net:
Commerce Department unveils security guidelines for U.S. agencies. Read More

www.newsfactor.com:
Daily CyberCrime and Security Report for October 29, 2002. Read More

29 october 2002

New Trojans:
Plateau Trojan 0.1

Neverwinter Nights 0.1.0

Prado

Vulnerabilities & Exploits:
Debian Security Advisory
DSA-182-1 kdegraphics -- buffer overflow. Read More

www.securitytracker.com:
Apple LaserWriter 12/640 PS Printer Default Configuration Allows Remote Users to Access the Telnet Management Port. Read More

www.securiteam.com:
AN HTTPD Cross-Site Scripting Vulnerability. Read More

News:
slashdot.org:
Saddam's Inbox Hacked. Read More

www.theregister.co.uk:
Reuters hacks accused of hacking. Read More

www.itweb.co.za:
Hacker continues trail of malice. Read More

www.pcworld.com:
Virus Writer's Conviction Upheld. Read More

techupdate.zdnet.co.uk:
Is that a virus, or a malfunction? Read More

www.theregister.co.uk:
E-card slimeware delivers pr0n. Read More

www.theregister.co.uk:
Closing spyware loopholes. Read More

www.boston.com:
Talking security. Read More

www.theaustralian.news.com.au:
Terrorists hijacking websites. Read More

www.theregister.co.uk:
Of mad snipers and cyber- terrorists. Read More

www.theregister.co.uk:
Dawn raids target software pirates. Read More

www.theregister.co.uk:
'We are the worst security risk' - sys admins confess. Read More

www.theregister.co.uk:
Porn censorship at work shock. Read More

www.newsfactor.com:
Daily CyberCrime and Security Report for October 28, 2002. Read More

28 october 2002

New Trojans:
FloodNet

ICQ Password Sniffer

Evilsocks

Vulnerabilities & Exploits:
www.securitytracker.com:
Acuma Acusend Portal Access Control Bug Lets Remote Authenticated Users Obtain Reports of Other Users. Read More

www.securitytracker.com:
Ipswitch WS_FTP Server Allows Remote Users to Hijack Connections And Conduct Bounce Attacks Via the FTP Server. Read More

www.securitytracker.com:
IBM Infoprint Printer Can Be Crashed By Remote Users. Read More

www.securitytracker.com:
Linksys WET11 Wireless Ethernet Bridge Can Be Crashed By Remote Users. Read More

News:
www.theaustralian.news.com.au:
Terrorists hijacking websites. Read More

www.pcmag.com:
Keep Hackers Out: Part One, Personal Edition. Read More

www.pcmag.com:
Keep Hackers Out: Part Two, Professional Edition. Read More

Porn worm hides in e-card. Read More

27 october 2002

New Trojans:
LANfiltrator Beta 9

Silent Spy 2.09

Wollf 1.6

Vulnerabilities & Exploits:
online.securityfocus.com:
MyMarket Form_Header.PHP Cross-Site Scripting Vulnerability. Read More

online.securityfocus.com:
IBM Websphere Edge Server Cross Site Scripting Vulnerability. Read More

online.securityfocus.com:
IBM Websphere Caching Proxy Denial Of Service Vulnerability. Read More

online.securityfocus.com:
Bradford Barrett Webalizer Reverse DNS Buffer Overflow Vulnerability. Read More

www.securitytracker.com:
vpopmail-CGIApps Input Validation Flaws Let Remote Users Execute Arbitrary Commands on the Server. Read More

www.securitytracker.com:
SolarWind.net TFTP Server Input Validation Weakness Lets Remote Users Obtain Files. Read More

www.securitytracker.com:
Mojo Mail Input Validation Flaw in Sign-Up Form Lets Remote Users Conduct Cross-Site Scripting Attacks. Read More

www.securitytracker.com:
BRS WebWeaver May Disclose Certain Password-Protected Files to Remote Users. Read More

www.securitytracker.com:
Perception's LiteServe Web Server May Disclose Password-Protected Files to Remote Users. Read More

www.securitytracker.com:
BadBlue Web Server May Disclose Password-Protected Files to Remote Users. Read More

www.securitytracker.com:
SolarWinds.net TFTP Server Can Be Crashed By Remote Users. Read More

www.securitytracker.com:
Norton Anti-Virus Corporate Edition Help Menu Allows Local Users to Execute Code With Local System Privileges. Read More

www.securiteam.com:
TCP/IP Printer Configuration Utility for Apple LaserWriter Security Issue. Read More

www.securiteam.com:
Symantec Firewall/VPN Appliance Internal LAN Sniffing Issue. Read More

www.securiteam.com:
AIM Remote File Execution Vulnerability. Read More

News:
Curious Yellow: The First Coordinated Worm Design. Read More

slashdot.org:
First Worm with a EULA? Read More

www.eweek.com:
Crack in OpenHack. Read More

techupdate.zdnet.com:
Passwords: poor excuse for security. Read More

zdnet.com.com:
A Net meltdown is inevitable. Read More

www.pcmag.com:
Kerberos Bug Compromises Networks Worldwide. Read More

www.idg.net:
PayPal users targeted by e-mail scam -- again. Read More

www.iol.co.za:
Internet bounty hunters close in on hacker. Read More

www.news24.com:
Hacker attacks .co.za. Read More

www.hacktivismo.com:
Cybercrime Fighters Soon Coming For You? Read More

quote.bloomberg.com:
Intentia Accuses Reuters of Hacking Computer System (Update1). Read More

26 october 2002

New Trojans:
Nuschekrischtoff 1.0

Cool Remote Control 1.1

Predator

Vulnerabilities & Exploits:
www.securitytracker.com:
MyMarket Shopping Cart Input Validation Error Lets Remote Users Conduct Cross-Site Scripting Attacks. Read More

www.securitytracker.com:
IBM Web Traffic Express Caching Proxy Server Allows Cross-Site Scripting Attacks. Read More

www.securitytracker.com:
IBM Web Traffic Express Caching Proxy Server Can Be Crashed By Remote Users. Read More

www.securitytracker.com:
WebServer 4 Everyone Bounds Checking Error Lets Remote Users Crash the Server With a Long Host Field. Read More

www.securiteam.com:
Possible Illegal File Access in Acuma's Acusend. Read More

www.securiteam.com:
Linksys WET11 DoS (MAC address). Read More

www.securiteam.com:
IBM Infoprint Remote Management DoS. Read More

www.securiteam.com:
IPSwitch WS_FTP Server PASV Session Hijacking and PASV Port Scan. Read More

www.securiteam.com:
Norton Antivirus Corporate Edition Privilege Escalation. Read More

www.securiteam.com:
Liteserve Web Server Authorization Bypass Vulnerability. Read More

www.securiteam.com:
BadBlue Web Server Protected File Access Vulnerability. Read More

www.securiteam.com:
BRS WebWeaver Web Server Protected File Access Vulnerability. Read More

www.securiteam.com:
XSS Vulnerability in Mojo Mail Sign-Up Form. Read More

www.securiteam.com:
vpopmail CGIApps Arbitrary Command Execution (vadddomain, vpasswd). Read More

News:
news.com.com:
Week in Review: Defending the Net. Read More

www.mytown.co.nz:
Hacker runs up $10,000 phone bill. Read More

news.com.com:
P2P hacking bill may be amended. Read More

news.com.com:
Blog site back up after hack attack. Read More

www.wirelessnewsfactor.com:
Why Hackers Don't Care About Wi-Fi. Read More

www.newsfactor.com:
Daily CyberCrime and Security Report for October 25, 2002. Read More

25 october 2002

New Trojans:
Apophis Spy 1.0

Anti-Denial

Stealth Proxy Kane

Vulnerabilities & Exploits:
online.securityfocus.com:
Radiobird Software WebServer 4 All Host Field Header Buffer Overflow Vulnerability. Read More

iDEFENSE Security Advisory
Directory Traversal in SolarWinds TFTP Server. Read More

www.securityoffice.net:
BRS WebWeaver Web Server v1.01 Protected File Access Vulnerability. Read More

www.securityoffice.net:
BadBlue Web Server v1.7 Protected File Access Vulnerability. Read More

www.securitytracker.com:
Virgil CGI Scanner Input Validation Error Lets Remote Users Execute Commands on the System. Read More

www.securitytracker.com:
FlashFXP May Disclose Passwords to Local Users. Read More

www.securitytracker.com:
Microsoft Internet Explorer Cached Object Flaw Lets Remote Users Execute Arbitrary Programs on the Target User's Computer. Read More

www.securitytracker.com:
Big Faceless PDF Library Bug in Processing Digital Signatures May Fail to Detect Document Modifications. Read More

www.securiteam.com:
TFTP Server 2002 Standard Edition DoS. Read More

News:
The Complete Windows Trojans Paper by Dancho Danchev (pdf).
The Complete Trojans Text is a paper about Windows Trojans, how they work, their variations and, of course, strategies to minimise the risk of infection. Links to special detection software are included as well as many other topics never discussed before. This paper is not only intended to be for the average Internet/Windows user who wants to know how to protect his/her machine from Trojan Horses or just want to know about their usage, variations, prevention and future, but will also be interesting for the advanced user, to read another point of view. Read More

online.securityfocus.com:
A Trojan horse program created by an Internet adult entertainment company routes surfers to racy sites. Read More

itmanagement.earthweb.com:
Viruses, Worms Up The Ante. Read More

www.phrack.com:
Defeating Forensic Analysis on Unix. Read More

www.nsa.gov:
The Inevitability of Failure: The Flawed Assumption of Security in Modern Computing Environments. Read More

www.internetwk.com:
Readers Rate Microsoft's Security Progress. Read More

www.idg.net:
'The Golden Age of Hacking rolls on'. Read More

www.mytown.co.nz:
Hacker runs up $10,000 phone bill. Read More

www.msnbc.com:
Hackers target wireless networks. Read More

news.com.com:
P2P hacking bill may be amended. Read More

www.washingtonpost.com:
More Than One Internet Attack Occurred Monday. Read More

news.com.com:
Net attack flops, but threat persists. Read More

www.smh.com.au:
More aggressive Net attacks feared. Read More

news.com.au:
FBI to trace internet attack. Read More

www.smh.com.au:
Hidden hackers' blitz paralyses internet. Read More

www.newsfactor.com:
Daily CyberCrime and Security Report for October 24, 2002. Read More

24 october 2002

New Trojans:
CmjSpy 1.1

Sigatarius_Spy 5.04

FileShareC

Vulnerabilities & Exploits:
online.securityfocus.com:
SCO UnixWare/OpenUnix Proc File System RCP Denial Of Service Vulnerability. Read More

online.securityfocus.com:
AOL Instant Messenger Local File Execution Vulnerability. Read More

online.securityfocus.com:
Multiple Microsoft Internet Explorer Cached Objects Zone Bypass Vulnerability. Read More

online.securityfocus.com:
Mod_SSL Wildcard DNS Cross Site Scripting Vulnerability. Read More

online.securityfocus.com:
Microsoft Windows 2000 SNMP Printer Query Denial of Service Vulnerability. Read More

www.rapid7.com:
IBM WebSphere Edge Server Caching Proxy Denial of Service. Read More

www.securityoffice.net:
Web Server 4 Everyone v1.28 Host Field Denial of Service Vulnerability. Read More

www.securitytracker.com:
kmMail Input Validation Weakness Lets Remote Users Conduct Cross-Site Scripting Attacks. Read More

www.securitytracker.com:
Caldera/SCO UnixWare/Open UNIX Drivers May Cause Denial of Service Conditions. Read More

www.securitytracker.com:
Heimdal Kerberos 'kadmind' Buffer Overflow Lets Remote Users Execute Arbitrary Code With Root Privileges. Read More

www.securitytracker.com:
paFileDB Input Validation Flaw Lets Remote Users Conduct Cross-Site Scripting Attacks. Read More

www.securitytracker.com:
AN HTTPD Buffer Overflow in Processing SOCKS4 Requests Allows Remote Code Execution. Read More

www.securiteam.com:
Multiple IPSEC Implementations Do Not Adequately Validate Authentication Data (DoS). Read More

www.securiteam.com:
Web Server 4 Everyone Denial of Service Vulnerability (Host Field). Read More

www.securiteam.com:
FlashFXP Local Password Disclosure Vulnerability. Read More

www.securiteam.com:
IBM WebSphere Edge Server Caching Proxy Denial of Service. Read More

www.securiteam.com:
IBM WebSphere Edge Server Caching Proxy Cross-Site Scripting Issues. Read More

www.securiteam.com:
Buffer Overflow in kadmind4. Read More

www.securiteam.com:
XSS Vulnerability in MyMarket. Read More

News:
news.com.au:
FBI to trace internet attack. Read More

online.securityfocus.com:
Reverse Engineering Hostile Code. Read More

www.smh.com.au:
More aggressive Net attacks feared. Read More

www.extremetech.com:
Security Alert: DNS Root Servers Survive Attack... Barely. Read More

www.newscientist.com:
Internet's foundations shaken by attack. Read More

www.washingtonpost.com:
More Than One Internet Attack Occurred Monday. Read Morte

www.smh.com.au:
Hidden hackers' blitz paralyses internet. Read More

www.washingtonpost.com:
Attack On Internet Called Largest Ever. Read More

www.theregister.co.uk:
IE hopelessly bug ridden. Read More

www.prnewswire.com:
Shavlik Presents Free Seminar on How to Prevent Hacker Attacks. Read More

www.bday.co.za:
Brazilian hacks into 20 SA websites. Read More

japantoday.com:
Hacker intrudes into DoCoMo's web site. Read More

www.extremetech.com:
TCP-IP Manipulations Leave Networks Vulnerable. Read More

articles.linuxguru.net:
WINE: A new place for KLEZ to play. Read More

www.theregister.co.uk:
Claranet drops virus outbreak blocker. Read More

www.newsfactor.com:
Daily CyberCrime and Security Report for October 23, 2002. Read More

23 october 2002

New Trojans:
Remote Server Trojan 1.0

SC-KeyLog 2.0

Kuang2 Web Updater 1.1

Vulnerabilities & Exploits:
GreyMagic Security Advisory GM#012-IE
Vulnerable cached objects in IE (9 advisories in 1). Read More

online.securityfocus.com:
AN HTTPD Malformed SOCKS4 Request Buffer Overflow Vulnerability. Read More

online.securityfocus.com:
KMMail E-Mail HTML Injection Vulnerability. Read More

online.securityfocus.com:
D-Link DWL-900AP+ TFTP Server Arbitrary File Retrieval Vulnerability. Read More

online.securityfocus.com:
YPServ Remote Network Information Leakage Vulnerability. Read More

online.securityfocus.com:
Microsoft Internet Explorer Document.Write() Zone Bypass Vulnerability. Read More

www.secunia.com:
AOL Instant Messenger file execution. Read More

www.secunia.com:
Internet Explorer without latest Service Packs remotely exploitable. Read More

www.securiteam.com:
Windows RPC DoS Exploit Code (from SPIKE to C). Read More

www.securiteam.com:
Sendmail Local Exploit Code (GDB support). Read More

www.securiteam.com:
Microsoft Windows 2000 SNMP Memory Utilization DoS. Read More

www.securiteam.com:
Vulnerable Cached Objects in IE (9 advisories in 1). Read More

www.securiteam.com:
DBCC SHOWTABLEAFFINITY Buffer Overflow in Microsoft SQL Server Explained. Read More

www.securiteam.com:
Virgil CGI Scanner Vulnerability. Read More

News:
www.washingtonpost.com:
Attack On Internet Called Largest Ever. Read More

news.com.com:
IE holes open up Web booby traps. Read More

www.pcworld.com:
Could a Worm Take Over the Net in Minutes? Read More

www.blackhat.com:
Call For Papers Black Hat Windows Security 2003 Briefings. Read More

ntbugtraq.ntadvice.com:
The 5th Annual NTBugtraq Retreat. Read More

www.iso17799-web.com:
ISO 17799 News - Issue 4. Read More

www.eweek.com:
OpenHack 4: The Hacking Has Begun. Read More

www.billingsgazette.com:
Bugbear virus a really bugger. Read More

www.ctv.ca:
Powerful hacker knocks out key Internet servers. Read More

www.pcworld.com:
New Cybersecurity Efforts Considered. Read More

news.independent.co.uk:
Comeback of the hacker king. Read More

techupdate.zdnet.com:
Software security--a matter of trust. Read More

www.newsfactor.com:
Daily CyberCrime and Security Report for October 22, 2002. Read More

22 october 2002

New Trojans:
Hackerz Backdoor 2.0

SmallTrojan 0.1

Jannet Remote Keylogger 3.0

Tool:
www.securitystorm.net:
Pulse is a network stress tool which is capable of creating spoofed denial of service packets and sending them at a computer, router, or other network device to test for their reaction. Read More

Vulnerabilities & Exploits:
online.securityfocus.com:
IPFilter FTP Proxy Unauthorized Access Vulnerability. Read More

online.securityfocus.com:
Multiple Vendor IPSec Implementation Denial of Service Vulnerabilities. Read More

www.securiteam.com:
D-Link Access Point DWL-900AP+ TFTP Vulnerability. Read More

www.securiteam.com:
Ambiguities in TCP/IP May Allow Firewall Bypassing. Read More

www.securiteam.com:
Full Zone Information Disclosure on Top Level Domain Name Servers. Read More

www.securiteam.com:
MondoSearch Show Source of Arbitrary Files. Read More

www.securiteam.com:
SaveRef Breaks Internet Explorer's Security Architecture. Read More

www.securiteam.com:
AN HTTPD SOCKS4 Username Buffer Overflow Vulnerability. Read More

www.securiteam.com:
YaBB Security Vulnerabilities (CSS in Login, Insecure Password Handling). Read More

www.securiteam.com:
XSS Vulnerabilites in paFileDB. Read More

www.securiteam.com:
kmMail Cross Site Scripting. Read More

www.securiteam.com:
NOCC Contains Cross Site Scripting Vulnerabilities. Read More

News:
Researchers predict worm that eats the Internet in 15 minutes.
How to 0wn the Internet in Your Spare Time. Read More

Detecting Backdoors. Read More

www.internet-magazine.com:
E-greetings Trojan causes concern. Read More

www.nwfusion.com:
Researchers predict worm that eats the Internet in 15 minutes. Read More

www.vnunet.com:
You are the weakest link. Read More

news.independent.co.uk:
Comeback of the hacker king. Read More

www.time.com:
Beating the Snoops. Read More

www.linuxsecurity.com:
Fragrouter Trojaned, anzen.com Hacked. Read More

ItWeb:
SA sites hit by hacker. Read More

www.ecommercetimes.com:
Daily CyberCrime and Security Report for October 21, 2002. Read More

21 october 2002

New Trojans:
ShadowNet Remote Spy 2.0

DftpSERVER

Prior 1.0 server

Vulnerabilities & Exploits:
www.securitytracker.com:
vBulletin Forum Input Validation Bug in 'global.php' Lets Remote Users Conduct Cross-Site Scripting Attacks. Read More

www.securitytracker.com:
Microsoft Windows Remote Procedure Call (RPC) Service Null Pointer Dereference Allows Remote Users to Crash the Service. Read More

www.securitytracker.com:
Microsoft Windows Media Player for Solaris Uses Unsafe Default Permissions. Read More

www.securitytracker.com:
Molly Internet Relay Chat (IRC) Bot Input Filtering Flaw Lets Remote Users Execute Arbitrary Shell Commands. Read More

www.securitytracker.com:
Madhatter 'perlbot.pl' Internet Relay Chat (IRC) Bot Input Filtering Bugs Allow Remote Commands to Be Executed. Read More

www.securitytracker.com:
Perlbot Internet Relay Chat (IRC) Bot Input Filtering Flaw Allows Remote Users to Execute Arbitrary Commands. Read More

News:
www.startribune.com:
Hackers, government join in fight for Internet freedom. Read More

www.vnunet.com:
Bug Watch: Redefining the antivirus landscape. Read More

www.wired.com:
Professor's Case: Unlock Crypto. Read More

www.silicon.com:
Dmitri case postponed in visa row. Read More

www.vnunet.com:
Microsoft at it again, say rivals. Read More

www.vnunet.com:
Computer scientist rubbishes e-voting. Read More

20 october 2002

New Trojans:
Optix Lite 5.0

QQCat 1.1

TightVNC 1.2.2

Tool:
www.securitybugware.org:
Packet Excalibur is a multi-platform graphical and scriptable network packet engine with extensible text based protocol descriptions. In short this is a network tool to built and receive custom packets. Read More

Vulnerabilities & Exploits:
online.securityfocus.com:
Multiple VBulletin Cross Site Scripting Vulnerabilities. Read More

online.securityfocus.com:
Perlbot Remote Command Execution Vulnerability. Read More

online.securityfocus.com:
Perlbot Email Sending Remote Command Execution Vulnerability. Read More

online.securityfocus.com:
Windows Media Player For Solaris Default World Writeable Permissions Vulnerability. Read More

www.securitytracker.com:
Several IPSec Implementations Can Be Crashed By Remote Users Sending Specially Crafted Packets. Read More

www.securitytracker.com:
Click2Learn's Ingenium Learning Management System Discloses the Administrator Password to Remote Users. Read More

www.securitytracker.com:
Linux Kernel 2.2 and 2.4 Bugs May Allow Local Users to Gain Root Privileges. Read More

www.securitytracker.com:
Pluggable Authentication Modules (PAM) Bug May Grant Remote Users Access to Accounts With Disabled Passwords. Read More

www.securitytracker.com:
HP OnLineJFS Management Software for Journaled File System Does Not Recognize File Permissions in Some Cases. Read More

www.securitytracker.com:
IP Filter Linux Firewall Software FTP Proxy Bug Lets Remote Users Bypass the Rule Set. Read More

www.securitytracker.com:
Avay Cajun Switches Feature Undocumented Maintenance Accounts That Allow Remote Users to Gain Privileged Access. Read More

www.securitytracker.com:
Sun Solaris NFS Bug Lets Remote Users Deny Service to NFS Clients By Killing the 'lockd' Daemon . Read More

www.securitytracker.com:
PlanetDNS Server Software Buffer Overflow Allows Remote Users to Execute Arbitrary Code. Read More

News:
www.idg.net:
Feds planning early-warning system for Internet. Read More

online.securityfocus.com:
New Internet marketing tool combines both leading annoyances. Read More

www.wired.com:
Can a Hacker Outfox Microsoft? Read More

www.idg.net:
Yahoo users hit with e-mail scam. Read More

19 october 2002

New Trojans:
Kavar 2.0

DKangel 2.3

Dripper 2.0

Vulnerabilities & Exploits:
www.securitytracker.com:
Microsoft Data Engine/Desktop Engine (MSDE) Bugs Let Remote Authenticated Users Create/Delete/Execute Web Tasks With SQL Server Agent Privileges. Read More

www.securitytracker.com:
Microsoft SQL Server Bugs Let Remote Authenticated Users Create/Delete/Execute Web Tasks With SQL Server Agent Privileges. Read More

Debian Security Advisory
DSA-179-1 gnome-gv -- buffer overflow. Read More

online.securityfocus.com:
Multiple Linux Kernel 2.4.18 Security Vulnerabilities. Read More

online.securityfocus.com:
Multiple Linux Kernel 2.2 Security Vulnerabilities. Read More

online.securityfocus.com:
Linux IXJ Telephony Card Driver 2.4 Kernel Privilege Elevation Vulnerability. Read More

online.securityfocus.com:
Solaris NFS lockd Remote Denial of Service Vulnerability. Read More

online.securityfocus.com:
Linux PCILynx FireWire Driver 2.4 Kernel Privilege Elevation Vulnerability. Read More

online.securityfocus.com:
Linux BTTV Video Capture Card Driver 2.4 Kernel Privilege Elevation Vulnerability. Read More

www.securitytracker.com:
myPHPNuke 'phptonuke.php' Script Access Control Bug Discloses Files to Remote Users. Read More

www.securitytracker.com:
SkyStream Networks Edge Media Router (EMR-5000) Lets Remote Users Crash the Device. Read More

www.securitytracker.com:
Mondosoft MondoSearch Software Discloses Script Source Code to Remote Users. Read More

www.securitytracker.com:
ZoneAlarm Pro Can Be Hung By Remote Users Sending TCP SYN Packets. Read More

www.securitytracker.com:
Cisco Catalyst CatOS Embedded Web Server Buffer Overflow Lets Remote Users Reset the Switch. Read More

www.securitytracker.com:
Sabre Desktop Reservation Client Can Be Crashed By Remote Users. Read More

www.securiteam.com:
Windows RPC Service DoS (SPIKE). Read More

www.securiteam.com:
Default Installation Insecurity in MS WMP for Sparc/Solaris. Read More

www.securiteam.com:
Molly IRC Bot Command Execution. Read More

www.securiteam.com:
Perlbot File Disclosure and Remote Command Execution Vulnerabilities. Read More

www.securiteam.com:
Madhater Perlbot Remote Command Execution. Read More

News:
digitalmass.boston.com:
Hackers break into Microsoft server hosting beta site. Read More

www.boston.com:
Cyber chief speaks on Data network security. Read More

www.vnunet.com:
Tif to take hackers to task. Read More

www.zdnet.com.au:
Windows XP, Office and SQL Server open to new attacks. Read More

www.theregister.co.uk:
MS patches insecurity trio. Read More

www.vnunet.com:
The end of passwords is nigh ...Read More

www.vnunet.com:
Comment: Hackers go with the overflow. Read More

www.cornellsun.com:
Student Remembers Hacking Experience. Read More

www.unstrung.com:
Backdoor LAN. Read More

www.law.com:
Small Firms Can Outwit Hackers. Read More

www.ecommercetimes.com:
Daily CyberCrime and Security Report for October 18, 2002. Read More

18 october 2002

New Trojans:
DTr 1.4.4

DuRPC 0.2

XLog 2.2

Vulnerabilities & Exploits:
sh0dan.org:
Hacking Citrix. Read More

online.securityfocus.com:
Sabre Desktop Reservation Software Client Denial Of Service Vulnerability. Read More

online.securityfocus.com:
Zone Labs ZoneAlarm Syn Flood Denial Of Service Vulnerability. Read More

online.securityfocus.com:
Cisco CatOS CiscoView HTTP Server Buffer Overflow Vulnerability. Read More

www.nextgenss.com:
Microsoft SQL Server Webtasks privilege elevation. Read More

Debian Security Advisory:
DSA-177-1 pam -- serious security violation. Read More

Debian Security Advisory:
DSA-178-1 heimdal -- remote command execution. Read More

www.securiteam.com:
GetAd, NetDDE Exploit Code (WM_COPYDATA). Read More

www.securitytracker.com:
Microsoft Internet Explorer Flaw in WebBrowser Control Document Property Lets Remote Users Run Code in the My Computer Security Zone. Read More

www.securitytracker.com:
Linux-HA Project Heartbeat Failover Software Format String Bug Lets Remote Users Execute Arbitrary Commands With Root Privileges. Read More

www.securitytracker.com:
teTex 'dvips' DVI-to-PostScript Translator Unsafe System() Call Lets Users Execute Arbitrary Commands. Read More

www.securitytracker.com:
BEA WebLogic URL Parsing Bug May Let Remote Users Gain Unauthorized Access to Web Applications and Content. Read More

www.securitytracker.com:
Web Server 4 Everyone Can Be Crashed By Remote Users Sending Long HTTP GET Requests. Read More

www.securitytracker.com:
Symantec Enterprise Firewall (Raptor Firewall) Secure Web Proxy Lets Remote Users Cause Denial of Service Conditions. Read More

www.securitytracker.com:
Polycom ViaVideo Conferencing System Buffer Overflow Permits Remote Denial of Service Attacks. Read More

www.securitytracker.com:
Symantec Enterprise Firewall (Raptor Firewall) May Disclose Internal IP Address Information to Remote Users. Read More

News:
www.zdnet.com.au:
Windows XP, Office and SQL Server open to new attacks. Read More

www.internetweek.com:
Security Vendor Reports Microsoft IE Hole. Read More

news.com.com:
Beta hack rattles Microsoft. Read More

www.theregus.com:
MS beta site cracked. Read More

online.securityfocus.com:
Polymorphic Macro Viruses, Part One. Read More

news.com.com:
Spammers slipping ads through Windows. Read More

www.wired.com:
Spam Masquerades as Admin Alerts. Read More

www.theregus.com:
If I tell you that I'll have to kill you: Red Hat fights the DMCA. Read More

www.theregus.com:
US Net users worried by lack of trust. Read More

Itweb:
Hacker denied US visa. Read More

www.ecommercetimes.com:
Daily CyberCrime and Security Report for October 17, 2002. Read More

17 october 2002

New Trojans:
Clogger 1.0

WormTrojan 1.0b

QQCat 1.0

Vulnerabilities & Exploits:
online.securityfocus.com:
Microsoft Internet Explorer Unauthorized Document Object Model Access Vulnerability. Read More

www.secunia.com:
Windows XP arbitrary file deletion. Read More

www.secunia.com:
Microsoft Word allows attackers to steal documents. Read More

www.idefense.com:
Denial of Service in Sabre Desktop Reservation Client for Windows. Read More

www.debian.org:
DSA-176-1 gv -- buffer overflow. Read More

online.securityfocus.com:
ghttpd Log() Function Buffer Overflow Vulnerability. Read More

online.securityfocus.com:
TelCondex SimpleWebServer Denial Of Service Vulnerability. Read More

online.securityfocus.com:
Polycom ViaVideo Denial Of Service Vulnerability. Read More

online.securityfocus.com:
Polycom ViaVideo Buffer Overflow Vulnerability. Read More

online.securityfocus.com:
Avaya Cajun Firmware Undocumented Default Accounts Vulnerability. Read More

www.securiteam.com:
SkyStream EMR5000 DVB Router DoS. Read More

www.securiteam.com:
Undocumented Account Vulnerability in Avaya P550/P550R/P580/P880/P882 Switches. Read More

www.securiteam.com:
Cisco CatOS Embedded HTTP Server Buffer Overflow. Read More

www.securiteam.com:
Elevation of Privilege in SQL Server Web Tasks. Read More

www.securiteam.com:
Flaw in Word Fields and Excel External Updates Could Lead to Information Disclosure. Read More

www.securiteam.com:
Flaw in Windows XP Help and Support Center Could Enable File Deletion. Read More

www.securiteam.com:
A Full Event Log Does Not Send Administrative Alerts. Read More

www.securiteam.com:
Windows Version of Pirch and RusPirch NICK AUX Attack (DoS). Read More

www.securiteam.com:
ZoneAlarm Pro Denial of Service Vulnerability. Read More

www.securiteam.com:
Denial of Service in Sabre Desktop Reservation Client for Windows. Read More

www.securiteam.com:
PHPNuke AddOn PHPToNuke Allows Remote File Retrieving. Read More

News:
Microsoft Security Bulletin MS02-059
Flaw in Word Fields and Excel External Updates Could Lead to Information Disclosure (Q330008). Read More

Microsoft Security Bulletin MS02-060
Flaw in Windows XP Help and Support Center Could Enable File Deletion (Q328940). Read More

Microsoft Security Bulletin MS02-061
Elevation of Privilege in SQL Server Web Tasks (Q316333). Read More

techupdate.zdnet.co.uk:
The truth about viruses, worms and trojans. Read More

www.net-security.org:
New worm pretends to be a BugBear antidote. Read More

www.cw360.com:
Prevention is the only cure for e-mail viruses. Read More

www.pcworld.com:
Security Hole Found in Symantec Firewalls. Read More

www.cnn.com:
World cybercrime experts see need for laws, ties. Read More

www.networknews.co.uk:
Freed hacker Mitnick debunks myths. Read More

www.networknews.co.uk:
Tif to take hackers to task. Read More

www.ecommercetimes.com:
Daily CyberCrime and Security Report for October 16, 2002. Read More

16 october 2002

New Trojans:
Teleaxxor 1.0

KeySave

DeskCam

Tools:
Packet Excalibur v1.0 (Vivienne release)
A multi-platform graphical and scriptable network packet engine with extensible text based protocol descriptions. Read More

freshmeat.net:
SOFFIC is a Linux kernel patch that provides file integrity control integrated into the normal system operation (on-the-fly). Read More

Vulnerabilities & Exploits:
GreyMagic Security Advisory GM#011-IE
Internet Explorer : The D-Day. Read More

Debian Security Advisory
DSA-175-1 syslog-ng -- buffer overflow. Read More

iDEFENSE Security Advisory 10.15.02
DoS and Directory Traversal Vulnerabilities in WebServer 4 Everyone. Read More

www.secunia.com:
Ingenium admin password public accessible. Read More

online.securityfocus.com:
Linux-HA Heartbeat Remote Buffer Overflow Vulnerability. Read More

www.counterpane.com:
Dangers of Port 80. Read More

www.securitytracker.com:
OpenOffice.org Office Suite Race Condition May Let Local Users Gain Elevated Privileges. Read More

www.securitytracker.com:
Apache Tomcat Java Servlet Engine Can Be Crashed Via Multiple Requests for DOS Device Names. Read More

www.securiteam.com:
DoS and Directory Traversal Vulnerabilities in WebServer 4 Everyone. Read More

News:
www.theregister.co.uk:
Stupid Bugbear tricks. Read More

www.nwc.com:
New Worm Targets Apache on Linux. Read More

www.bangkokpost.com:
The growing virus threat. Read More

www.net-security.org:
Security Online - Some basic IT hygiene tips. Read More

www.counterpane.com:
Cyberterrorism and Cyberhooliganism. Read More

www.counterpane.com:
Semantic Attacks: The Third Wave of Network Attacks. Read More

www.eetimes.com:
Embedding security into servers. Read More

star-techcentral.com:
Highlighting an 'ethical hacker'. Read More

www.computerworld.com:
Study: Amount of spam, virus-infected e-mails rising. Read More

www.smh.com.au:
The code makers get cracking. Read More

www.vnunet.com:
Chip plan angers civil liberties groups. Read More

media.guardian.co.uk:
Celebrity 'phone hacking' on the increase. Read More

www.phrack.org:
PHRACK MAGAZINE CALL FOR PAPERS. Read More

www.ecommercetimes.com:
Daily CyberCrime and Security Report for October 15, 2002. Read More

15 october 2002

New Trojans:
KPSULE Downloader 1.0

PC Acme 5.0.1

zGET 0.3

Tool:
razor.bindview.com:
Fenris is a multipurpose tracer, GUI debugger, stateful analyzer and partial decompiler intended to simplify bug tracking, security audits, code, algorithm, protocol analysis and computer forensics - providing a structural program trace, interactive debugging capabilities, general information about internal constructions, execution path, memory operations, I/O, conditional expressions and much more. Read More

Vulnerabilities & Exploits:
online.securityfocus.com:
Microsoft TSAC ActiveX Control Cross Site Scripting Vulnerability. Read More

Debian Security Advisory
DSA-174-1 heartbeat -- buffer overflow. Read More

www.securiteam.com:
Mod_SSL Off-By-One Exploit Code (htaccess). Read More

www.securiteam.com:
Linux Traceroute Exploit Code Released (GDB). Read More

www.secunia.com:
Mini Server directory traversal bug. Read More

www.securiteam.com:
Oracle 8i/9i Listener SERVICE_CURLOAD Denial of Service. Read More

www.securiteam.com:
Symantec Enterprise Firewall Secure Webserver Information Leak. Read More

www.securiteam.com:
Multiple Symantec Firewall Secure Webserver Timeout DoS. Read More

www.securiteam.com:
Security Vulnerabilities in Polycom ViaVideo Web Component. Read More

www.securiteam.com:
Malformed HOST Header Causes IIS DoS. Read More

www.securiteam.com:
Long URL causes TelCondex SimpleWebServer to crash. Read More

www.securiteam.com:
Long URL Crashes My Web Server. Read More

www.securiteam.com:
Directory Traversal and Log Hogging in Daniel Arenz' Mini Server. Read More

www.securiteam.com:
GazTek HTTP Daemon Buffer Overflow. Read More

www.securiteam.com:
J2EE EJB Privacy Leak and DoS. Read More

www.securiteam.com:
Meunity Community System Script Injection Vulnerability. Read More

www.securiteam.com:
ATP HTTP Daemon Buffer Overflow. Read More

News:
www.theage.com.au:
Microsoft: 58th security advisory and counting. Read More

news.com.com:
A mortal Microsoft. Read More

seattletimes.nwsource.com:
Firewall in Windows XP may not be strong enough. Read More

www.boston.com:
Net security chief leaves too many questions unanswered. Read More

www.fcw.com:
NASA cyber program bears fruit. Read More

www.vnunet.com:
German IT security expert robs ATMs. Read More

www.thisislondon.com:
Hiring hacker backfires on Murdoch. Read More

news.com.com:
Former FBI chief takes on encryption. Read More

neasia.nikkeibp.com:
Female Internet Users Fear 'Information Leaks' and 'Viruses': Survey. Read More

www.cnn.com:
Cybercrime costs world billions. Read More

www.cw360.com:
Thought for the day: Hacked to death? Read More

www.stuff.co.nz:
Passwords a risky business. Read More

www.vnunet.com:
More licensing misery for Microsoft users. Read More

www.newsfactor.com:
Daily CyberCrime and Security Report for October 14, 2002. Read More

14 october 2002

New Trojans:
H2000

DarkSky 2.6

RemoteHome2000 1.2b

Vulnerabilities & Exploits:
www.techie.hopto.org:
PHP 4.2.3 Debugging Function Script Injection Vulnerability. Read More

News:
www.computeruser.com:
Cyber terror threat overrated. Read More

www.washingtonpost.com:
Hacktivists Against Censorship. Read More

www.washingtonpost.com:
A Security Nightmare. Read More

news.bbc.co.uk:
China bars under-16s from cybercafes. Read More

13 october 2002

New Trojans:
Remote Revise 1.6 Beta

Uprising 1.1b

Super Mail Trojan 1.0

Vulnerabilities & Exploits:
www.firstmonday.dk:
The TCP/IP protocol suite has a number of weaknesses that allow an attacker to leverage techniques in the form of covert channels to surreptitiously pass data in otherwise benign packets. This paper attempts to illustrate these weaknesses in both theoretical and practical examples. Read More

online.securityfocus.com:
SquirrelMail Options.PHP Web Root Path Disclosure Vulnerability. Read More

online.securityfocus.com:
OpenOffice Installation Insecure Temporary File Symbolic Link Vulnerability. Read More

www.securitytracker.com:
Microsoft Outlook Express Buffer Overflow in Parsing S/MIME Messages Lets Remote Users Execute Arbitrary Code. Read More

www.securitytracker.com:
Syslog-ng Buffer Overflow in Macro Expansion of Template Names May Let Remote Users Execute Arbitrary Code. Read More

www.securitytracker.com:
PHP-Nuke Multiple Input Validation Flaws Let Remote Users Conduct Cross-Site Scripting Attacks. Read More

www.securiteam.com:
Multiple Vendor PC Firewall Remote Denial of Services Vulnerability. Read More

www.securiteam.com:
Syslog-NG Buffer Overflow. Read More

www.securiteam.com:
OpenOffice Race Condition during Installation. Read More

www.securiteam.com:
kpf Directory Traversal. Read More

www.securiteam.com:
KGhostView Arbitrary Code Execution. Read More

News:
zdnet.com.com:
Henpeck worm nags MSN Messenger. Read More

www.theregister.co.uk:
Messenger users get Henpecked. Read More

www.computeruser.com:
Microsoft outlines security strategy. Read More

zdnet.com.com:
Microsoft's singing in C#. Read More

seattletimes.nwsource.com:
Shop wisely on Internet to protect your credit. Read More

money.guardian.co.uk:
To catch a thief. Read More

zdnet.com.com:
Wi-Fi "wartrappers" nab drive-by hackers. Read More

www.computeruser.com:
Researchers say Internet encourages voyeurism. Read More

12 october 2002

New Trojans:
WAY 2002

RAD 1.2.3

IRC BDoor 1.0

Tool:
Stealth DLL Injection by Aphex. Read More

Vulnerabilities & Exploits:
online.securityfocus.com:
Syslog-ng Remote Buffer Overflow Vulnerability. Read More

online.securityfocus.com:
Nylon Proxy Receive Function Denial Of Service Vulnerability. Read More

www.securitytracker.com:
SurfControl SuperScout E-mail Filter Bugs Allow Remote Denial of Service and Cross-Site Scripting Attacks and Discloses Passwords to Remote Authenticated Users. Read More

www.securitytracker.com:
Authoria HR Suite Input Validation Flaw Allows Cross-Site Scripting Attacks. Read More

www.securitytracker.com:
VBZooM Bulletin Board Lets Remote Users Upload and Execute Files. Read More

www.securitytracker.com:
phpBB Bulletin Board Avatars Disclose User IP Addresses to Remote Users. Read More

www.securitytracker.com:
IBM AIX Operating System Can Be Hung By Remote Users Sending a Flood of Malformed TCP Packets. Read More

www.securitytracker.com:
CooolSoft PowerFTP Server Can Be Shut Down By Remote Users. Read More

www.securitytracker.com:
Microsoft Content Management Server Input Validation Bug in 'ManualLogin.asp' Allows Cross-Site Scripting Attacks. Read More

www.securiteam.com:
TCP Flood and Authentication Cracking Causes NETGEAR FM114P to Hang. Read More

www.securiteam.com:
Plain Text DDNS Password in NETGEAR FM114P Backups. Read More

www.securiteam.com:
Unchecked Buffer in Outlook Express S/MIME Parsing Could Enable System Compromise (Patch). Read More

www.securiteam.com:
TSAC Web package/IIS 5.1 connect.asp Cross-site Scripting Vulnerability. Read More

News:
www.pcworld.com:
MSN Messenger Worm Steals Game Keys. Read More

www.computeruser.com:
Microsoft Warns on E-Mail Security. Read More

zdnet.com.com:
Outlook Express flaw speeds hacking. Read More

www.theregister.co.uk:
Introducing the latest hacker exploit: War Phoning. Read More

www.osopinion.com:
Is Linux Really More Secure Than Windows? Read More

www.spacedaily.com:
Detecting Cyberattacks By Profiling "Normal" Computer Habits. Read More

www.theregister.co.uk:
Sendmail Trojan looks familiar. Read More

www.internetwk.com:
Week In Review: Security's Upside; Microsoft In Focus. Read More

www.newsfactor.com:
Daily CyberCrime and Security Report for October 11, 2002. Read More

11 october 2002

New Trojans:
VP Remote control 3.0

Specrem 5.1

Lyb 1.1

Tool:
www.hping.org:
hping is a command-line oriented TCP/IP packet assembler/analyzer. The interface is inspired to the ping(8) unix command, but hping isn't only able to send ICMP echo requests. It supports TCP, UDP, ICMP and RAW-IP protocols. Read More

www.securiteinfo.com:
WinDNSSpoof, A Windows Based DNS Spoofer. Read More (French language)

Vulnerabilities & Exploits:
www.securiteam.com:
Outlook Remote Code Execution in Preview Pane (S/MIME). Read More

www.sans.org:
The Top Twenty Internet Security Vulnerabilities for 2002. (pdf) Read More

www.kb.cert.org:
Vulnerability Note VU#538033
ypxfrd daemon fails to properly validate user supplied arguments in "getdbm" procedure. Read More

www.phenoelit.de:
A remote Cisco IOS exploit. Read More

online.securityfocus.com:
Microsoft Content Management Server 2001 Cross-Site Scripting Vulnerability. Read More

online.securityfocus.com:
Microsoft Windows 2000 NetDDE Privilege Escalation Vulnerability. Read More

online.securityfocus.com:
IBM AIX Remote Empty TCP Flag Flood Denial Of Service Vulnerability. Read More

www.securitytracker.com:
WatchGuard Firebox Vclass and SOHO Firewa Devices and Legacy RSSA Firewall Devices Let Remote Users Bypass the Rule Set. Read More

www.securitytracker.com:
Internet Security Systems BlackICE Firewall Lets Remote Users Cause the Firewall to Block Valid Packets. Read More

www.securitytracker.com:
Symantec's Norton Personal Firewall Lets Remote Users Cause the Firewall to Block Valid Packets. Read More

www.securitytracker.com:
HP 'ypserv' Daemon Flaw in Tru64 UNIX and HP-UX May Disclose Files to Remote Users. Read More

www.securitytracker.com:
VBZooM Bulletin Board Bug in 'register.php' Lets Remote Users Reset Other User Passwords. Read More

www.securitytracker.com:
SS Guest Book Input Validation Flaw in Image Tags Allows Cross-Site Scripting Attacks. Read More

www.securitytracker.com:
TkMail Insecure File Handling May Let Local Users Gain Elevated Privileges. Read More

www.securitytracker.com:
HP Tru64 UNIX Operating System Flaw in 'routed' May Let Remote Users Access Files on the System. Read More

News:
Microsoft Security Bulletin MS02-058
Unchecked Buffer in Outlook Express S/MIME Parsing Could Enable System Compromise (Q328676). Read More

www.phenoelit.de:
not listening remote UN*X shell (packet coded backdoor). Read More

cmn.listprojects.darklab.org:
SAdoor (Stealth Admin door) is a non listening remote execution server for UNIX systems. The idea is to set up a listener in non-promiscuos mode to look for TCP packets with the correct flag(s) arriving to a set of ports in a defined order. Read More

news.com.com:
Henpeck worm cons MSN chat crowd. Read More

asia.internet.com:
Nearly All Computers Infected by Viruses. Read More

online.securityfocus.com:
Clues, Vandalism, Litter Sendmail Trojan Trail. Read More

techupdate.zdnet.com:
Bugbear worm tries to steal credit cards and passwords. Read More

www.wired.com:
Report: Net Not Getting Any Safer. Read More

www.siliconvalley.com:
Microsoft discloses security flaw in e-mail program. Read More

news.zdnet.co.uk:
Spy software targets employee downloads. Read More

news.zdnet.co.uk:
Bluetooth may leave PDAs wide open. Read More

www.thisislondon.com:
Hiring hacker backfires on Murdoch. Read More

www.vnunet.com:
New threat forces cryptography rethink. Read More

www.businessweek.com:
Cybercrime Victims Hit Back -- Online. Read More

www.newsfactor.com:
Daily CyberCrime and Security Report for October 10, 2002. Read More

10 october 2002

New Trojans:
Streaming Audio Trojan 1.0

ComAnywhere 2.1

SuperMM 1.0 (a)

Vulnerabilities & Exploits:
online.securityfocus.com:
NetBSD talkd Buffer Overflow Vulnerability. Read More

www.securitytracker.com:
BIND Domain Name Resolver Libraries Have Another Buffer Overflow That May Cause Denial of Service Conditions. Read More

www.securitytracker.com:
Talkd Buffer Overflow May Let Remote Execute Arbitrary Code. Read More

www.securitytracker.com:
Microsoft MSN Hotmail/Passport Login Page May Permit Cookie Stealing Via Cross-Site Scripting Attacks. Read More

www.securitytracker.com:
Killer Protection PHP Script Discloses Usersnames and Passwords to Remote Users. Read More

www.securitytracker.com:
Oracle Net Services Has Unspecified Flaw That Lets Remote Users Deny Service. Read More

www.securitytracker.com:
Books Module for PostNuke Input Validation Bug Permits Cross-Site Scripting Attacks. Read More

www.securitytracker.com:
Unisys ClearPath Mainframe Servers Can Be Crashed By Remote Users Conducting Port Scans. Read More

www.securitytracker.com:
phpSecurePages Include Error In 'checklogin.php' Lets Remote Users Access The System. Read More

www.securitytracker.com:
Oracle 9i Application Server Web Cache Administration Interface Can Be Crashed By Remote Users. Read More

www.securitytracker.com:
Oracle E-Business Suite Unspecified Flaw in 'AolSecurityPrivate.class' Lets Remote Users Bypass the Authentication Process. Read More

www.securitytracker.com:
ArGoSoft Mail Server Web Interface Input Filtering Bug Lets Remote Users Steal E-mail Passwords. Read More

www.securitytracker.com:
Macromedia Flash Player Lets Remote Code from SMB Shares Access Local Files. Read More

www.securiteam.com:
CERT advisory: Trojan Horse Sendmail Distribution. Read More

ww.securiteam.com:
Multiple Firewalls Ruleset Bypass through FTP Revisited. Read More

News:
www.itworld.com:
MS eschews reports it will charge for added security. Read More

online.securityfocus.com:
Pentagon gives university $35.5 million to combat cyberterrorism. Read More

www.hindustantimes.com:
Viruses infect 80 percent of China's computers. Read More

www.computeruser.com:
Heavy criticism of IT security. Read More

www.net-security.org:
Wireless Security Threats. Read More

news.com.com:
Hackers send Sendmail a message. Read More

www.extremetech.com:
Security Alert: Sendmail Trojan Horse on the Loose. Read More

www.msnbc.com:
A hacker creates headaches for security-card company. Read More

www.kingsbayperiscope.com:
Trouble in your inbox
Attachments can cause severe damage. Read More

zdnet.com.com:
Wi-Fi "wartrappers" nab drive-by hackers. Read More

www.newsfactor.com:
Daily CyberCrime and Security Report for October 9, 2002. Read More

09 october 2002

New Trojans:
Matite 1.0

Xayo

Screen Control 1.0

Vulnerabilities & Exploits:
CERT« Advisory CA-2002-28
Trojan Horse Sendmail Distribution. Read More

Debian Security Advisory
DSA-172-1 tkmail -- insecure temporary files. Read More

Debian Security Advisory
DSA-171-1 fetchmail -- buffer overflows. Read More

online.securityfocus.com:
Zope Failed Login Information Disclosure Vulnerability. Read More

www.securitytracker.com:
phpRank Script Has Multiple Flaws That Allow Remote Users to Modify the Database and Also Conduct Cross-Site Scripting Attacks. Read More

online.securityfocus.com:
Macromedia Flash Player File Access Vulnerability. Read More

online.securityfocus.com:
Killer Protection Information Disclosure Vulnerability. Read More

online.securityfocus.com:
Oracle E-Business Suite Authentication Bypassing Vulnerability. Read More

News:
www.smh.com.au:
Trojan horse in Sendmail source code. Read More

www.vnunet.com:
Bugbear side effect hits printers. Read More

news.bbc.co.uk:
Fake bank website cons victims. Read More

www.net-security.org:
Microsoft CTO talks about security and open source. What security? Read More

news.zdnet.co.uk:
Microsoft: Users may have to pay for security. Read More

newsobserver.com:
University to study combating cyberterror. Read More

www.vnunet.com:
Heavy criticism of IT security. Read More

www.silicon.com:
Mitnick on Mitnick: Why I'm going legit. Read More

www.newsfactor.com:
Daily CyberCrime and Security Report for October 8, 2002. Read More

08 october 2002

New Trojans:
Zenmaster 1.02

KBL Uploader 1.0 beta1

Xena

Vulnerabilities & Exploits:
www.securitytracker.com:
phpLinkat Input Validation Bug Lets Remote Users Conduct Cross-Site Scripting Attacks. Read More

www.securitytracker.com:
PowerFTP Server Buffer Overflow in Processing the USER Command Lets Remote Users Crash the System. Read More

www.securiteam.com:
Windows Help Buffer Overflow PoC. Read More

www.securiteam.com:
FreeBSD File Descriptors Bug (Iosmash2). Read More

News:
www.smh.com.au:
Another Linux worm surfaces. Read More

www.ciol.com:
Malaysia refutes origin of Bugbear virus. Read More

www.smh.com.au:
Email hoax gets fresh leash of life, thanks to Bugbear. Read More

www.siliconvalley.com:
Bugbear Internet worm slowing down, researcher says. Read More

news.bbc.co.uk:
Bugbear e-mail virus causing havoc. Read More

zdnet.com.com:
Russian hackers deface US government site. Read More

www.lasvegassun.com:
Feds Probe Digital TV Piracy Furor. Read More

www.infoworld.com:
National security needs more IT, defined powers. Read More

www.networkmagazine.com:
Hackers and Terrorists, or Presidents and CEOs? Read More

www.jsonline.com:
'Hacker' is too cutesy a word to describe what's really going on. Read More

www.nst.com.my:
Resolving dark side of the Internet. Read More

www.wired.com:
Codebusters Crack Encryption Key. Read More

www.fcw.com:
DOD's wireless safety net. Read More

www.guardian.co.uk:
New York man admits internet scam to defraud celebrities of $80m. Read More

www.newsfactor.com:
Daily CyberCrime and Security Report for October 7, 2002. Read More

07 october 2002

New Trojans:
Reverse Trojan 2.11

Retribution 2.6

Beast 1.7

Vulnerabilities & Exploits:
www.securitytracker.com:
Logsurfer Log File Analysis Tool Buffer Overflow May Let Remote Users Crash the Application. Read More

www.securitytracker.com:
BearShare File Sharing Input Validation Bug Lets Remote Users Access Files on the System. Read More

www.securitytracker.com:
Cisco Unity Default Configuration Allows Remote Users to Conduct Toll Fraud. Read More

www.securiteam.com:
phpRank Multiple Security Vulnerabilities. Read More

www.securiteam.com:
phpWebSite XSS Vulnerability. Read More

www.securiteam.com:
The Books Module for the PostNuke CMS XSS Vulnerability. Read More

www.securiteam.com:
phpMyNewsletter Include Security Vulnerability. Read More

News:
online.securityfocus.com:
E-mail worm Bugbear seen in dozens of countries. Read More

www.guardian.co.uk:
Dire warnings over email virus. Read More

www.computeruser.com:
ISS Ranks Worms as Biggest Net Threat. Read More

www.therecord.com:
Stealthy e-mail worm Bugbear is infecting computers worldwide. Read More

06 october 2002

New Trojans:
VB Troyen

GreenScreen 1.0

PC Remote 4.0 beta

Vulnerabilities & Exploits:
online.securityfocus.com:
Microsoft Windows XP System Restore Folder Permissions Weakness. Read More

www.securitytracker.com:
Xerox DocuShare May Disclose the Server's Internal IP Address to Remote Users. Read More

www.securitytracker.com:
Ximian Evolution Certificate Validation Flaw Allows Man-in-the-Middle Attacks. Read More

www.securitytracker.com:
CommonName Toolbar for Internet Explorer May Disclose Intranet Host Names to the Vendor. Read More

www.securitytracker.com:
Apache Web Server (1.3.x) Shared Memory Scoreboard Bug Lets Certain Local Users Issue Signals With Root Privileges. Read More

www.securitytracker.com:
IBM HTTP Server (IHS) Input Validation Bug Lets Remote Users Conduct Cross-Site Scripting Attacks. Read More

www.securitytracker.com:
Bugzilla Bug Tracking Input Validation Errors Let Remote Users Execute SQL Commands on the System. Read More

www.securitytracker.com:
Jetty Java Server Bug in CGI Servlet Lets Remote Users Execute Specified Binaries. Read More

www.securitytracker.com:
Compaq Insight Manager Input Validation Flaw Lets Remote Users Conduct Cross-Site Scripting Attacks. Read More

www.securiteam.com:
Telnet/SSH Command Injection via PTrace. Read More

www.securiteam.com:
Cisco Secure Content Accelerator Vulnerable to SSL Worm. Read More

www.securiteam.com:
Predefined Restriction Tables Allow Calls to International Operator. Read More

www.securiteam.com:
FoxPro ODBC Driver Buffer Overflow via SQL OpenDataSource(). Read More

www.securiteam.com:
Unchecked Buffer in Windows Help Facility Could Enable Code Execution. Read More

www.securiteam.com:
SSL Certificate Validation Problems in Ximian Evolution. Read More

www.securiteam.com:
phpLinkat XSS Security Bug. Read More

www.securiteam.com:
Multiple Vulnerabilities in LogSurfer. Read More

www.dtmf.com.ar:
WindowsNT Buffer Overflow's From Start to Finish. Read More

News:
www.idg.net:
New worm, Opasoft, targets Windows systems. Read More

slashdot.org:
Bugbear Windows Virus Making the Rounds. Read More

www.extremetech.com:
Virus Update: Bugbear Worm Continues to Spread. Read More

www3.gartner.com:
Fixing the FBI's 'Top 20' Security Flaws Isn't Enough. Read More

www.theregister.co.uk:
Nigerian freight forwarding scam hits UK. Read More

www.theregister.co.uk:
Gosling: Microsoft's Java threat is financial, not technical. Read More

05 october 2002

New Trojans:
Remote Administrator 2.1

Net Control2 2.93

TelnetPro 2.0

Vulnerabilities & Exploits:
Debian Security Advisory
DSA-170-1 tomcat4 -- source code disclosure. Read More

online.securityfocus.com:
CommonName Toolbar Potential Information Leakage Weakness. Read More

www.securitytracker.com:
Microsoft Windows Help System Bug in Processing Compiled HTML Help Files Lets Remote Users Execute Arbitrary Commands in the Local Computer Security Zone. Read More

www.securitytracker.com:
Microsoft Services for Unix Interix SDK Bugs May Allow Denial of Service Conditions or May Execute Arbitrary Code. Read More

www.securitytracker.com:
Microsoft Data/Desktop Engine (MSDE) Buffer Overflow Lets Remote Users Execute Arbitrary Code. Read More

www.securitytracker.com:
MySQL Buffer Overflow Lets Local Users Gain System Privileges on Windows NT. Read More

www.securitytracker.com:
Microsoft SQL Server Buffer Overflow Lets Remote Users Execute Arbitrary Code. Read More

www.securitytracker.com:
Microsoft Windows Operating System Compressed Folders Allow Arbitrary Files to Be Created. Read More

www.securitytracker.com:
Microsoft Windows Operating System Compressed Folders Allow Arbitrary Code to Be Executed. Read More

www.securitytracker.com:
Microsoft Windows Help System Buffer Overflow in 'hhctrl.ocx' Lets Remote Users Execute Arbitrary Code. Read More

www.securiteam.com:
Windows Help Buffer Overflow (Additional details). Read More

www.securitytracker.com:
SurfControl SuperScout Bug in Web Reports Server Lets Remote Users Gain Control of the Application. Read More

www.securitytracker.com:
OpenBSD Kernel Bug in 'setitimer' May Allow A Local User to Write to Kernel Memory. Read More

www.securitytracker.com:
Verity KeyView SDK Buffer Overflow May Let Remote Users Execute Arbitrary Code. Read More

www.securitytracker.com:
Lotus Notes Attachment Viewer Buffer Overflow May Let Remote Users Execute Arbitrary Code. Read More

www.securitytracker.com:
Net-snmp Null Pointer Dereferencing Flaw Lets Remote Users Crash the Daemon. Read More

www.securitytracker.com:
Aladdin StuffIt Archive Expander Buffer Overflow May Let Remote Users Execute Arbitrary Code. Read More

www.securitytracker.com:
Apache Web Server (2.x) SSI Server Signature Filtering Hole Lets Remote Users Conduct Cross-Site Scripting Attacks. Read More

www.securitytracker.com:
IBM SecureWay Firewall Can Be Hung By Remote Users Sending a Flood of Malformed TCP Packet. Read More

www.securiteam.com:
Another Cumulative Patch for SQL Server Released. Read More

News:
news.bbc.co.uk:
Bugbear e-mail virus causing havoc. Read More

zdnet.com.com:
Virus writers get Slapper happy. Read More

www.infoworld.com:
Worm, Opasoft, targets Windows systems. Read More

zdnet.com.com:
Malaysians see no trace of Bugbear author. Read More

www.newsfactor.com:
Microsoft Discloses Security Flaws. Read More

www.news.com.au:
US Government site hacked. Read More

www.ctnow.com:
Russian Hacker Sentenced to 3 Years. Read More

techupdate.zdnet.com:
Kevin Mitnick wants to help you stop hackers. Read More

www.fcw.com:
Security patch award due soon. Read More

www.newsfactor.com:
Daily CyberCrime and Security Report for October 4, 2002. Read More

04 october 2002

New Trojans:
Peeper 1.5

Pest Remote Keylogger

K.B.L. WebdownLoader 1.2

Vulnerabilities & Exploits:
Thor Larholm security advisory TL#004
Windows Help buffer overflow. Read More

online.securityfocus.com:
Apache Server Side Include Cross Site Scripting Vulnerability. Read More

www.securitytracker.com:
Sendmail Restricted Shell (smrsh) May Let Local Users Bypass Restrictions to Execute Code. Read More

www.securitytracker.com:
HP OpenVMS TCP/IP Services POP Mail Daemon May Give Local Users Elevated Privileges. Read More

www.securitytracker.com:
IBM AIX Operating System 'errpt' Command Buffer Overflow Can Give Root Privileges to Local Users. Read More

www.securitytracker.com:
HP LDAP-UX Integration Software Bug in 'pam_authz' May Let Remote Authenticated Users Gain Elevated Privileges. Read More

www.securiteam.com:
Multiple Vendor Long ZIP Entry Filename Processing Issues. Read More

www.securiteam.com:
Apache 1.3.x Shared Memory Scoreboard Vulnerabilities. Read More

www.securiteam.com:
Insecure XML-RPC Handling in Zope Reveals the Distribution Physical Location. Read More

www.securiteam.com:
GV Execution of Arbitrary Shell Commands (Additional details). Read More

News:
Internet Security Systems Security Alert
Bugbear Hybrid Threat Propagation. Read More

www3.gartner.com:
FrontPage Flaw Shows Security Still Challenges Microsoft. Read More

iris.lcs.mit.edu:
IRIS: Infrastructure for Resilient Internet Systems. Read More

www.theage.com.au:
Bugbear hits hard Down Under. Read More

quote.bloomberg.com:
Bugbear Virus Infects Thousands of Computers in 118 Countries. Read More

www.reuters.com:
Malaysia Questions Origin of Bugbear Computer Virus. Read More

quote.bloomberg.com:
Bugbear E-Mail Virus Infects Millions of Computers Worldwide. Read More

rtnews.globetechnology.com:
Microsoft posts four security alerts. Read More

www.idg.net:
New alerts have analysts doubting Microsoft security. Read More

online.securityfocus.com:
Report: Satellites at Risk of Hacks. Read More

online.securityfocus.com:
Defense Agency Leaves Shopping List Online. Read More

www.washingtonpost.com:
Ex-Hacker Preaches Unique Security Message. Read More

www.jpost.com:
Pro-Islamic militant hacker groups boost attacks security company says. Read More

www.jpost.com:
Hackers vandalize US government website. Read More

www.silicon.com:
BT says: Protect your network from professional hackers. Read More

www.globalwirelessnews.com:
World Bank study says GSM susceptible to hackers. Read More

www.fcw.com:
Security benchmark tools available. Read More

news.zdnet.co.uk:
Scientists find key to water-tight encryption. Read More

www.newsfactor.com:
Daily CyberCrime and Security Report for October 3, 2002. Read More

03 october 2002

New Trojans:
Ulysses 1.73

Fake 0.2

Wanadoo

Vulnerabilities & Exploits:
Westpoint Security Advisory:
Carello 1.3 Remote File Execution. Read More

Westpoint Security Advisory:
Jetty CGIServlet Arbitrary Command Execution. Read More

Westpoint Security Advisory:
MySQL Locally Exploitable Buffer Overflow. Read More

online.securityfocus.com:
Microsoft Internet Explorer Document Reference Zone Bypass Vulnerability. Read More

online.securityfocus.com:
GV GZip Archive Malicious File Name Command Execution Vulnerability. Read More

www.securitytracker.com:
Trolltech Qt/Desktop Bug Lets Remote Users Make the Target User's Qt Assistant Open Local HTML Files. Read More

www.securitytracker.com:
Winamp Media Player Buffer Overflow in Parsing Skin Files Lets Remote Users Execute Arbitrary Code. Read More

www.securitytracker.com:
WN Server Buffer Overflow in Processing GET Requests Lets Remote Users Execute Arbitrary Code. Read More

www.securitytracker.com:
SafeTP Secure FTP Server Discloses Internal IP Addresses to Remote Users. Read More

www.securitytracker.com:
MyNewsGroups :) Input Validation Holes Let Remote Users Conduct Cross-Site Scripting Attacks. Read More

www.securiteam.com:
Multiple Vulnerabilities in SuperScout Web Reports Server. Read More

www.securiteam.com:
Jetty CGIServlet Arbitrary Command Execution. Read More

www.securiteam.com:
MySQL Locally Exploitable Buffer Overflow (Windows). Read More

www.securiteam.com:
Apache 2 Cross-Site Scripting. Read More

www.securiteam.com:
Net-SNMP DoS Vulnerability. Read More

News:
Microsoft Security Bulletin MS02-054
Unchecked Buffer in File Decompression Functions Could Lead to Code Execution (Q329048). Read More

Microsoft Security Bulletin MS02-055
Unchecked Buffer in Windows Help Facility Could Enable Code Execution (Q323255). Read More

Microsoft Security Bulletin MS02-056
Cumulative Patch for SQL Server (Q316333). Read More

Microsoft Security Bulletin MS02-057
Flaw in Services for Unix 3.0 Interix SDK Could Allow Code Execution (Q329209). Read More

www.theregister.co.uk:
Gartner slams MS security after latest flaw. Read More

www.computerworld.com:
Opinion: Secure software? Don't hold your breath. Read More

www.dallascon.com:
DallasCon Wireless Security Conference. Read More

www.forbes.com:
Infamous Hacker's Laptop Up For Auction. Read More

www.eweek.com:
Microsoft Puts Meat Behind Security Push. Read More

zdnet.com.com:
Bugbear virus finds IE hole. Read More

isp-planet.com:
Bugbear/Tanatos E-mail Worm Detected. Read More

www.nzherald.co.nz:
Virus attempts to override computer protection. Read More

www.theregister.co.uk:
Klez-H enjoying its final days on infamy? Read More

news.com.com:
FBI names most wanted security flaws. Read More

www.newsfactor.com:
Daily CyberCrime and Security Report for October 2, 2002. Read More

02 october 2002

New Trojans:
Ducktoy 1.2

Protoss 1.3m

RVC 0.92

Vulnerabilities & Exploits:
online.securityfocus.com:
Security side-effects of Word fields. Read More

www.secadministrator.com:
Buffer Overrun and Denial of Service in Microsoft FrontPage Server Extensions. Read More

online.securityfocus.com:
Eric S. Raymond Fetchmail Multidrop Mode Email Header Parsing Heap Overflow Vulnerability. Read More

online.securityfocus.com:
Sun ONE Starter Kit / ASTAware SearchDisc Search Engine Directory Traversal Vulnerability. Read More

www.securitytracker.com:
GNU Tar Utility Still Lets Malicious Archives Install Trojan Files on the Host in Other Directories When a Local User Extracts the Archive. Read More

www.securitytracker.com:
CGI-Telnet Perl Script for Web Servers Discloses Password File to Remote Users. Read More

www.securitytracker.com:
Allot's NetEnforcer Holes Let Local Users Gain Elevated Privileges on the System. Read More

www.securitytracker.com:
ASTAware SearchDisc Search Engine in SunONE Starter Kit Discloses Files to Remote Users. Read More

www.securitytracker.com:
Netgear ProSafe VPN Firewall Discloses Passwords Via Configuration Backup File. Read More

www.securiteam.com:
Multiple Vulnerabilities in WASD HTTP Server for OpenVMS. Read More

www.securiteam.com:
BearShare Directory Traversal Issue Resurfaces. Read More

www.securiteam.com:
Buffer Overflow in WN Server. Read More

www.securiteam.com:
Sendmail smrsh Bypass Vulnerabilities. Read More

www.securiteam.com:
Flood ACK Packets Cause an IBM SecureWay Firewall to Hang. Read More

News:
www.newscientist.com:
Viruses that also hack computers on the rise. Read More

www.theregister.co.uk:
Porn diallers and Trojans - the new face of malicious code. Read More

techupdate.zdnet.co.uk:
Unix tools track hackers. Read More

www.silicon.com:
Bugbear worm - how it works. Read More

www.theage.com.au:
New email virus making the rounds. Read More

www.theage.com.au:
Windows network worm spreading. Read More

news.com.com:
Bugbear virus targets Internet Explorer. Read More

www.washingtonpost.com:
Firms Respond to White House Cybersecurity Call. Read More

www.theregister.co.uk:
America's National Cybersecurity Strategy. Read More

www.cnn.com:
Security agency increases monitoring. Read More

online.securityfocus.com:
Mobile phone Java risks 'minimal'. Read More

www.business.scotsman.com:
Shutting the door on cyber criminals. Read More

www.jpost.com:
Pro-Islamic militant hacker groups boost attacks security company says. Read More

www.time.com:
What Spies Beneath. Read More

www.aftenposten.no:
Court OKs surfing for child porn. Read More

www.newsfactor.com:
Daily CyberCrime and Security Report for October 1, 2002. Read More

01 october 2002

New Trojans:
XLog 2.1

Remod 1.0

MultiDownloader 3.0 by Qroject

Tool:
prdownloads.sourceforge.net:
Remote Nmap (Rnmap) is a pair of client and server programs which allow for various authorized clients to run their port scans from a centralized server. New version rnmap_0.9.tar.gz. Read More

Vulnerabilities & Exploits:
bvlive01.iss.net:
Internet Security Systems Security Alert Summary AS02-39 September 30, 2002. Read More

www.securitytracker.com:
Jetty Java Server Input Validation Hole Lets Remote Users Conduct Cross-Site Scripting Attacks. Read More

www.securiteam.com:
NETGEAR FVS318 Firewall Router Username/Password Disclosure. Read More

www.securiteam.com:
Software Update Available for Legacy RapidStream Appliances and WatchGuard Firebox Vclass appliances. Read More

www.securiteam.com:
Microsoft PPTP Server and Client Remote Vulnerability. Read More

www.securiteam.com:
Exploitable Buffer Overflow in gv. Read More

www.securiteam.com:
Directory Traversal Vulnerability in Monkey. Read More

www.securiteam.com:
Jetty Cross-Site Scripting Vulnerability. Read More

www.securiteam.com:
SafeTP Reveals Internal Server IP Addresses. Read More

News:
uk.news.yahoo.com:
Bugbear worm opens backdoors. Read More

www.infoworld.com:
Virus poses as Microsoft security patch. Read More

www.itworld.com:
Insiders, not hackers, biggest information theft risk. Read More

news.com.com:
FBI to release computer-security updates. Read More

www.theregister.co.uk:
US P2P Hacking Bill draws support, critics. Read More

www.govexec.com:
Cybersecurity regulations imminent, industry and government warn. Read More

www.pcworld.com:
Web Site Defacements Hit All-Time High. Read More

www.vnunet.com:
The last of the true hackers. Read More

www.pcworld.com:
Internet Pirate Sentenced to Prison Time. Read More


Copyrightę MegaSecurity.org