Home
News Archive    Translate Traducen
News November 2002
30 november 2002

New Trojans:
Y3K_Rat pro 0.2

Boss Eye 1.0

Hanuman

Vulnerabilities & Exploits:
online.securityfocus.com:
AOL Instant Messenger Forced File Download Vulnerability. Read More

online.securityfocus.com:
RealPlayer RealFlash Source Loading Buffer Overflow Vulnerability. Read More

online.securityfocus.com:
RealPlayer Long File Name Now Playing Buffer Overflow Vulnerability. Read More

online.securityfocus.com:
RealOne Player SMIL File Heap Corruption Vulnerability. Read More

www.securitytracker.com:
libcgi (TuxBR) Buffer Overflows May Allow Users to Execute Arbitrary Code. Read More

www.securitytracker.com:
OpenWindows mailtool(1) Client for Sun Solaris Can Be Crashed By Remote Users. Read More

www.securitytracker.com:
Sybase Adaptive Server Buffer Overflows Let Local or Remote Authenticated Users Gain Root Privileges. Read More

www.securitytracker.com:
Solaris priocntl() System Call Lets Local Users Grab Root Privileges. Read More

www.securiteam.com:
Cross-site Scripting Vulnerability in ImageFolio Image Gallery Software. Read More

News:
www.vnunet.com:
Islamic group plans three-day e-jihad. Read More

www.internet-magazine.com:
Jewish group tells of 'electronic Jihad' plan. Read More

www.net-security.org:
Variant of the Harmful CIH Virus Found. Read More

www.vnunet.com:
Bush allocates $900m for cyber security. Read More

www.vnunet.com:
Fines for porn-surfing politicians. Read More

29 november 2002

New Trojans:
Digital Hand 1.1

Fuck Lamers Backdoor 2.6

Remote Desktop

Vulnerabilities & Exploits:
www.securitytracker.com:
Bugzilla Input Validation Hole in 'quips' Feature Lets Remote Users Conduct Cross-Site Scripting Attacks. Read More

www.securitytracker.com:
News Evolution Forum Software Include File Bug Lets Remote Users Execute Arbitrary Commands on the System. Read More

www.securitytracker.com:
Freenews Forum Software Include File Bug Lets Remote Users Execute Arbitrary Commands on the System. Read More

www.securitytracker.com:
IBM Performance Tools Access Control Bug May Let Local Users Gain Elevated Privileges. Read More

www.securitytracker.com:
Netscape Browser Java Buffer Overflow in canCovert() Method Allows Malicious Applets to Execute Arbitrary Code. Read More

www.securitytracker.com:
phpBB2 Input Validation Flaw Lets Remote Users Insert Scripting Code into Certain HTML Tags to Conduct Cross-Site Scripting Attacks. Read More

www.securitytracker.com:
Web Server Creator Include File Error Enables Remote Users to Execute Arbitrary Commands. Read More

www.securiteam.com:
pWins Perl Web Server Directory Transversal Vulnerability. Read More

www.securiteam.com:
Sybase DBCC CHECKVERIFY Buffer Overflow. Read More

www.securiteam.com:
Sybase DROP DATABASE Buffer Overflow. Read More

www.securiteam.com:
Sybase xp_freedll Buffer Overflow. Read More

www.securiteam.com:
Remote Multiple Buffer Overflow Vulnerability in Libcgi-tuxbr. Read More

News:
www.theregister.co.uk:
Winevar worm sets sites on Symantec. Read More

www.theregister.co.uk:
Nasty virus Winevar insults infected users. Read More

www.internet-magazine.com:
A new virus and a possible solution. Read More

www.infosecuritymag.com:
The 5 past attacks that haunt us, the 5 fears that trouble us. Read More

www.internet-magazine.com:
China detains Internet users. Read More

www.vnunet.com:
China criticised for jailing surfers. Read More

www.net-security.org:
Cracking OpenVMS Passwords with John the Ripper. Read More

www.net-security.org:
Challenge: How Did These Processes Get Here? Read More

mdn.mainichi.co.jp:
Seething student hacks woman's Hotmail for porno attack. Read More

28 november 2002

New Trojans:
AntiLamer Light 2.0

DTr 1.2

666 de Troie 1.0

Vulnerabilities & Exploits:
www.securitytracker.com:
NetScreen 'Malicious-URL' Feature Can By Bypassed By Remote Users Via IP Fragmentation. Read More

www.securitytracker.com:
NetScreen Predictable TCP Sequence Numbers Let Remote Users Bypass Security Rules. Read More

www.securitytracker.com:
NetScreen H.323 Session State Bug Lets Remote Users Deny Service. Read More

www.securitytracker.com:
Sun X Font Server (XFS) Buffer Overflow Lets Remote Users Execute Arbitrary Code. Read More

www.securitytracker.com:
WSMP3 Web_server Buffer Overflows and malloc()/free() Bug Allow Remote Users to Execute Arbitrary Code. Read More

www.securitytracker.com:
pico Server (pServ) Buffer Overlow in Processing POST Requests Lets Remote Users Crash the Service. Read More

www.securitytracker.com:
SSH Communications SSH Secure Shell Client Buffer Overflow in Processing URLs May Let Remote Users Execute Arbitrary Code. Read More

www.securitytracker.com:
SSH Communications SSH Secure Shell Process Grouping Flaw in setsid() May Let Authenticated Users Gain Elevated Privileges. Read More

News:
www.pcworld.com:
New E-Mail Worm Causing Severe Damage. Read More

www.silicon.com:
Virus warning: Watch out for the WINEVAR worm. Read More

www.informationweek.com:
New Worm Adds Insult To Injury. Read More

zdnet.com.com:
E-mail virus insults its victims. Read More

www.vnunet.com:
Email limits can slow virus spread. Read More

www.informationweek.com:
Sun Solaris Security Hole Leaves Users Vulnerable. Read More

www.theregister.co.uk:
RealPlayer security fix is faulty. Read More

www.itweb.co.za:
Hackers deface SA sites for fun. Read More

english.joins.com:
Overseas hackers on the rise. Read More

www.theregister.co.uk:
First hackers sighted in high speed mobile phone arena. Read More

www.vnunet.com:
Microsoft alters alerts. Read More

news.bbc.co.uk:
Risk of internet collapse rising. Read More

www.theregister.co.uk:
DDOS attack 'really, really tested' UltraDNS. Read More

zdnet.com.com:
Feds, firms unveil test for security pros. Read More

www.theregister.co.uk:
Feds break massive identity fraud. Read More

www.theregister.co.uk:
Web Bugs - Here Are the Rules. Read More

www.vnunet.com:
Sklyarov allowed into US. Read More

www.pcworld.com:
Feds Fail to Pass Child Porn Laws. Read More

www.newsfactor.com:
Daily CyberCrime and Security Report for November 27, 2002. Read More

27 november 2002

New Trojans:
LANfiltrator 1.0

Remote AOL Password Cracker 2.0

Depth Charge 1.1

Vulnerabilities & Exploits:
online.securityfocus.com:
Multiple Linksys Devices Password Field Buffer Overflow Vulnerability. Read More

online.securityfocus.com:
Macromedia JRun IIS ISAPI Filter GET Request Buffer Overrun Vulnerability. Read More

online.securityfocus.com:
Open WebMail User Name Information Disclosure Vulnerability. Read More

www.securitytracker.com:
Netscape Communicator Java Bytecode Verifier Analysis Flaw Lets Remote Users Bypass Many Java Security Restrictions. Read More

www.securitytracker.com:
Sun Java Runtime Environment (JRE) Bytecode Verifier Analysis Flaw Lets Remote Users Bypass Many Java Security Restrictions. Read More

www.securitytracker.com:
Calisto Internet Talker Bug Lets Remote Users Crash the Service. Read More

www.securitytracker.com:
Microsoft Internet Explorer (IE) Java Class Loader Security Flaw Lets Remote Users Bypass Java Security Restrictions. Read More

www.securitytracker.com:
Microsoft Java Virtual Machine (VM) Class Loader Security Flaw Lets Remote Users Bypass Java Security Restrictions. Read More

www.securitytracker.com:
Netscape Communicator Java Native Code Generation Bug Lets Remote Users Bypass Java Security Controls. Read More

www.securitytracker.com:
Symantec Java! JustInTime (JIT) Compiler Native Code Generation Bug Lets Remote Users Bypass Java Security Controls. Read More

www.securitytracker.com:
AOL Instant Messenger (AIM) File Sharing Bug May Let Remote Users Silently Force Downloads. Read More

www.securitytracker.com:
Allied Telesyn Switch Management Ports Allow Remote Users to Deny Service to Those Ports. Read More

www.securitytracker.com:
BadBlue Server Flaws Disclose System Information, Including Database Passwords, to Remote Users and Also Allow Cross-Site Scripting Attacks. Read More

www.securitytracker.com:
PHP-Nuke Input Validation Holes in Search Module and Other Modules Allow Cross-Site Scripting Attacks. Read More

www.securitytracker.com:
BIND Domain Name Software Allows Remote Users to Spoof the DNS. Read More

www.securiteam.com:
Apache Scoreboard Shared Memory. Read More

www.securiteam.com:
Oracle TNS SEH Exploit. Read More

www.securiteam.com:
Calisto Internet Talker DoS. Read More

www.securiteam.com:
'Malicious-URL' Feature may be Circumvented Using IP Fragmentation in NetScreen. Read More

www.securiteam.com:
Predictable TCP Initial Sequence Numbers in NetScreen. Read More

www.securiteam.com:
Potential H.323 Denial of Service in NetScreen. Read More

www.securiteam.com:
Solaris fs.auto Remote Compromise Vulnerability. Read More

News:
www.vnunet.com:
Government fights off 6,000 online attacks. Read More

www.internet-magazine.com:
Hackers target government and companies. Read More

www.silicon.com:
Mystery attacker swamps .info domain system. Read More

www.newsfactor.com:
E-Commerce in the Shadow of the Hackers. Read More

www.washingtonpost.com:
Microsoft Warns of Windows, Explorer Security Hole. Read More

www.hacktivismo.com:
'Hackers Fight Censorship, Human Rights Violations'. Read More

www.newsfactor.com:
Daily CyberCrime and Security Report for November 26, 2002. Read More

26 november 2002

New Trojans:
ItADeM 3.0

HDoor 4.0

Stealth Port 1.1

Vulnerabilities & Exploits:
Internet Security Systems Security Alert Summary AS02-47. Read More

ISS X-Force Security Advisory
Solaris fs.auto Remote Compromise Vulnerability. Read More

online.securityfocus.com:
RealPlayer RealFlash Source Loading Buffer Overflow Vulnerability. Read More

online.securityfocus.com:
MailEnable Email Server Buffer Overflow Vulnerability. Read More

online.securityfocus.com:
RealPlayer Long File Name Now Playing Buffer Overflow Vulnerability. Read More

online.securityfocus.com:
Rational ClearCase Portscan Denial Of Service Vulnerability. Read More

online.securityfocus.com:
RealOne Player SMIL File Heap Corruption Vulnerability. Read More

online.securityfocus.com:
PHP SafeMode Arbitrary File Execution Vulnerability. Read More

online.securityfocus.com:
VBulletin Memberlist.PHP Cross Site Scripting Vulnerability. Read More

online.securityfocus.com:
Sendmail SMRSH Double Pipe Access Validation Vulnerability. Read More

online.securityfocus.com:
KDE Network RESLISA Buffer Overflow Vulnerability. Read More

online.securityfocus.com:
KDE KIO Subsystem Network Protocol Implementation Arbitrary Command Execution Vulnerability. Read More

www.securitytracker.com:
acFreeProxy Server Input Validation Flaw Allows Remote Users to Conduct Cross-Site Scripting Attacks Against Proxy Server Users. Read More

www.securitytracker.com:
acFTP Server Authentication Flaw May Give Remote Users Access Without Requiring Valid Authentication. Read More

www.securitytracker.com:
Open WebMail Discloses User and Group Account ID Information to Remote Users. Read More

News:
www.vnunet.com:
Government fights off 6,000 online attacks. Read More

online.securityfocus.com:
'Hacking Challenge' Winners Allege $43,000 Contest Rip-Off. Read More

www.smh.com.au:
New email worm detected. Read More

www.news.com.au:
Wireless hacking threat grows. Read More

news.com.com:
Feds charge 3 men with identity theft. Read More

www.newsfactor.com:
Winning the Cybersecurity War. Read More

www.content-wire.com:
Brazil exports Cyber-crime worldwide. Read More

www.newsfactor.com:
Daily CyberCrime and Security Report for November 25, 2002. Read More

25 november 2002

New Trojans:
HRVG2

NetBull 1.1

Huey 3.7.1

Vulnerabilities & Exploits:
online.securityfocus.com:
Microsoft Data Access Components RDS Buffer Overflow Vulnerability. Read More

online.securityfocus.com:
NetBSD ftpd Firewall State Table Corruption Vulnerability. Read More

online.securityfocus.com:
Sun/Netscape Java Virtual Machine Bytecode Verifier Vulnerability. Read More

online.securityfocus.com:
Symantec Java! JustInTime Compiler Command Execution Vulnerability. Read More

online.securityfocus.com:
Netscape Java Virtual Machine Insecure Call Vulnerability. Read More

online.securityfocus.com:
Microsoft Java Virtual Machine Bytecode Verifier Vulnerability. Read More

www.securitytracker.com:
vBulletin Input Validation Flaws in 'memberlist' and 'member2' Allow Cross-Site Scripting Attacks. Read More

www.securitytracker.com:
QNX Photon Discloses Clipboard Content to Local Users. Read More

www.securitytracker.com:
Rational ClearCase Can Be Crashed By Remote Users Conducting Port Scans. Read More

www.securiteam.com:
Multiple phpNuke Modules Vulnerable to Cross-Site Scripting. Read More

www.securiteam.com:
Buffer Overflow in iSMTP Gateway. Read More

www.securiteam.com:
Clipboard in QNX Photon. Read More

www.securiteam.com:
BadBlue XSS/Information Disclosure Vulnerabilities. Read More

www.securiteam.com:
Multiple Vulnerabilities in Macromedia Flash ActiveX. Read More

www.securiteam.com:
Multiple Incorrect Permissions in QNX. Read More

www.securiteam.com:
Open WebMail "background" Magic Info. Read More

News:
www.msnbc.com:
Pentagon drops Internet ID plan. Read More

www.vnunet.com:
Doubts raised over Microsoft patches. Read More

online.securityfocus.com:
Sex, Text, Revenge, Hacking and Friends Reunited. Read More

www.vnunet.com:
Antivirus firms block Friend Greetings. Read More

www.europemedia.net:
Blueprint hacker duped. Read More

www.themoscowtimes.com:
'Hacker' Looks at Hussein's E-Mail, Finds Spam. Read More

www.theinquirer.net:
Chaintech site hacked. Read More

www.theage.com.au:
Security flaws in RealPlayer. Read More

www.sltrib.com:
Think Your Privacy Is Safe on the Internet? Think Again. Read More

www.eedesign.com:
Securing proprietary information in data networks. Read More

24 november 2002

New Trojans:
Institution Open 0.1.2

AIM Pws 2.0

Ulysses 1.4

Vulnerabilities & Exploits:
online.securityfocus.com:
Microsoft Internet Explorer Object Tag Temporary Internet File Folder Vulnerability. Read More

online.securityfocus.com:
Multiple Microsoft Internet Explorer Cached Objects Zone Bypass Vulnerability. Read More

online.securityfocus.com:
Microsoft Internet Explorer IFrame/Frame Cross-Site/Zone Script Execution Vulnerability. Read More

online.securityfocus.com:
Microsoft Internet Explorer HTML Same Origin Policy Violation Vulnerability. Read More

online.securityfocus.com:
Microsoft Internet Explorer PNG Remote Buffer Overflow Vulnerability. Read More

Debian Security Advisory
DSA-200-1 samba -- remote exploit. Read More

www.securitytracker.com:
ImageFolio Input Validation Flaw Allows Remote Users to Conduct Cross-Site Scripting Attacks. Read More

www.securitytracker.com:
Zeroo Web Server Discloses Files on the System to Remote Users. Read More

www.securiteam.com:
acFTP Authentication Issue. Read More

www.securiteam.com:
acFreeProxy Cross-Site Scripting Vulnerability. Read More

www.securiteam.com:
XSS in PostNuke Rogue. Read More

News:
www3.gartner.com:
U.S. Government Fails Its Own Security Test Again. Read More

www.theregister.co.uk:
On the Microsoft FTP server leak. Read More

www.eweek.com:
RealPlayer Patch Fails to Fix Flaws. Read More

www.eweek.com:
Open-Source Security Comes Under Fire. Read More

23 november 2002

New Trojans:
Ehks 2.1

K.B.L. Uploader FWB 2.01

AntiLamer Backdoor 1.0

Vulnerabilities & Exploits:
online.securityfocus.com:
Microsoft Internet Explorer IFRAME dialogArguments Cross-Zone Access Vulnerability. Read More

online.securityfocus.com:
Courier SqWebMail File Disclosure Vulnerability. Read More

www.securitytracker.com"
Samba Buffer Overflow in User Input Routine May Let Remote Users Execute Arbitrary Code with Root Privileges. Read More

www.securitytracker.com"
Microsoft Internet Explorer Buffer Overflow in Processing PNG Images Allows Denial of Service Attacks. Read More

www.securitytracker.com"
RealOne Player Buffer Overflow and Other Bugs May Allow Remote Users to Execute Arbitrary Code. Read More

www.securitytracker.com"
Microsoft Internet Explorer MDAC Component Buffer Overflow Allows Remote Users to Execute Arbitrary Code. Read More

www.securitytracker.com"
Microsoft Data Access Components (MDAC) Buffer Overflow Allows Remote Users to Execute Arbitrary Code. Read More

www.securitytracker.com"
Alcatel OmniSwitch May Include Inadvertent Telnet Server Backdoor in Certain Versions. Read More

www.securitytracker.com"
Cisco PIX Firewall VPN Session Management Bug Allows Man-in-the-Middle Attacks and Buffer Overflow Lets Remote Users Crash the Firewall. Read More

www.securitytracker.com"
Libresolv BIND Resolver Library Buffer Overflows in getnetbyname() and getnetbyaddr() Allow Remote Users to Execute Arbitrary Code. Read More

www.securitytracker.com"
MailEnable POP Mail Server Can Be Crashed By Remote Users Sending Long Strings to the Server. Read More

www.securitytracker.com"
Linksys Cable/DSL Routers Can Be Crashed By Remote Users Sending Long Password Strings. Read More

www.securiteam.com:
ClearCase Remote DoS. Read More

www.securiteam.com:
Zeroo Folder Traversal Vulnerability. Read More

www.securiteam.com:
Multiple Buffer Overruns RealOne / RealPlayer / RealOne Enterprise. Read More

www.securiteam.com:
Multiple Vulnerabilities in Tiny HTTPd. Read More

News:
remus.softimage.net:
Internal Microsoft documents out on the Web. Read More

www.theinquirer.net:
How the Microsoft Network Operation Centre was hacked. Read More

www.ispworld.com:
Microsoft Warns of Wind., Expl. Security Hole. Read More

news.zdnet.co.uk:
Microsoft warns of security hole. Read More

www.eweek.com:
RealPlayer Patch Fails to Fix Flaws. Read More

linuxtoday.com:
InternetWeek: Report Rekindles Open Source vs. Microsoft Security Debate. Read More

www.newsfactor.com:
Daily CyberCrime and Security Report for November 22, 2002. Read More

22 november 2002

New Trojans:
Silent Spy 2.10

Lizards Tail 1.1

The Revenge Pack 5.21

Vulnerabilities & Exploits:
Internet Security Systems Security Alert
Microsoft MDAC Remote Compromise Vulnerability. Read More

www.securitytracker.com:
QNX Operating System Unsafe File Permissions May Let Local Users Gain Elevated Privileges. Read More

www.securitytracker.com:
Netscape Communicator May Disclose Preferences File to Remote Users. Read More

www.securitytracker.com:
Eudora E-mail Client May Execute Remotely Supplied Scripting Code in the Local Computer Zone. Read More

www.securiteam.com:
Linksys Router Bypass Vulnerability (XML). Read More

www.securiteam.com:
iPlanet WebServer Vulnerable to Remote Root Compromise. Read More

www.securiteam.com:
Remote Buffer Overflow Vulnerability in Zeroo HTTP Server. Read More

www.securiteam.com:
Cisco PIX Multiple Vulnerabilities. Read More

www.securiteam.com:
Denial of Service Vulnerability in Linksys Cable/DSL Routers. Read More

www.securiteam.com:
Buffer Overrun in Microsoft Data Access Components Could Lead to Code Execution. Read More

www.securiteam.com:
MailEase POP3 Denial of Service. Read More

www.securiteam.com:
PlanetWeb Web Server Buffer Overflow in Processing GET Requests. Read More

www.securiteam.com:
vBulletin XSS Injection Vulnerability (perpage). Read More

www.securiteam.com:
XSS Vulnerability Found in phpBB (Highlight). Read More

News:
www.networknews.co.uk:
Software tool gives hacker countdown. Read More

www.newsfactor.com:
The Cult of Hackers. Read More

www.newsfactor.com:
MS Patches Windows Flaw, But IE Hole Still Gapes. Read More

arstechnica.infopop.net:
Microsoft security flaw opens big hole for hackers, foot. Read More

money.cnn.com:
Hole in Windows lets hackers in. Read More

news.com.com:
Patch slipup raises security questions. Read More

www.networknews.co.uk:
Forensic skill needed to bring hackers to justice. Read More

www.networknews.co.uk:
Bugwatch: A security policy built on sand? Read More

online.securityfocus.com:
Trust us, Microsoft asks in secure computing push. Read More

www.theage.com.au:
Security Through Soundbyte: The 'Cybersecurity Intelligence' Game. Read More

www.internet-magazine.com:
Friends Reunited hacker gets five months. Read More

www.newsfactor.com:
Daily CyberCrime and Security Report for November 21, 2002. Read More

21 november 2002

New Trojans:
Institution OPEN 0.1.1

Advertiser Bot 1.0 Beta

Ultimate Spy Pro 1.4

Vulnerabilities & Exploits:
www.foundstone.com:
Remotely Exploitable Buffer Overflow in Microsoft MDAC. Read More

www.securitytracker.com:
Sun iPlanet Web Server Cross-Site Scripting and Unsafe Perl Script open() Calls Let Remote Users Execute Commands on the Server. Read More

www.securitytracker.com:
Linksys Router Web Management Access Flaw Gives Remote Users Administrative Access to the Device. Read More

www.securitytracker.com:
nullmailer Bug Lets Remote Users Crash the Service. Read More

www.securitytracker.com:
Gordano GMS Mail (NTMail) 'JUCE' Mail Filter Fails to Properly Block Mail. Read More

www.securitytracker.com:
Macromedia ActiveX Flash Player Heap Overflow Will Execute Arbitrary Code in Malicious Flash Content. Read More

News:
Microsoft Security Bulletin MS02-050
Certificate Validation Flaw Could Enable Identity Spoofing (Q329115). Read More

Microsoft Security Bulletin MS02-066
Cumulative Patch for Internet Explorer (Q328970). Read More

zdnet.com.com:
MS bug exposes millions to attack. Read More

quote.bloomberg.com:
Microsoft Says Security Flaw Exists in Most Windows (Update3). Read More

www.informationweek.com:
Microsoft Customers Cope With More Security Vulnerabilities. Read More

zdnet.com.com:
Security holes aren't being filled. Read More

www.pcworld.com:
Pro-Iraq Hacker Threatens Virus Outbreak. Read More

www.idg.net:
War with Iraq will mean virus outbreak, hacker says. Read More

zdnet.com.com:
Stop wasting money on security. Read More

www.vnunet.com:
Next virus could cost UK £2.1bn. Read More

www.nwfusion.com:
COMDEX: Panel: Accept the Net is vulnerable to attack. Read More

zdnet.com.com:
How Homeland Security impacts tech. Read More

www.newsfactor.com:
Daily CyberCrime and Security Report for November 20, 2002. Read More

20 november 2002

New Trojans:
CiGiCiGi 1.7

Eclipse2000 1.27

SpyProgram

Vulnerabilities & Exploits:
Macromedia ColdFusion/JRun Remote SYSTEM Buffer Overflow. Read More

iDEFENSE Security Advisory 11.19.02c:
Predictable Directory Structure Allows Theft of Netscape Preferences File. Read More

iDEFENSE Security Advisory 11.19.02b:
Eudora Script Execution Vulnerability. Read More

Debian Security Advisory
DSA-199-1 mhonarc -- cross site scripting. Read More

online.securityfocus.com:
Squid Proxy Authentication Credential Forwarding Information Disclosure Vulnerability. Read More

online.securityfocus.com:
Squid MSNT Auth Helper Buffer Overflow Vulnerability. Read More

online.securityfocus.com:
Squid FTP Directory Parsing Buffer Overflow Vulnerability. Read More

online.securityfocus.com:
NeoSoft NeoBook 4 ActiveX Control Arbitrary File Type Inclusion Vulnerability. Read More

online.securityfocus.com:
Lonerunner Zeroo HTTP Server Remote Buffer Overflow Vulnerability. Read More

online.securityfocus.com:
KDE Konqueror Sub-Frames Script Execution Vulnerability. Read More

www.securitytracker.com:
Perception LiteServe Input Validation Flaw in Processing Encoded URLs Lets Remote Users Crash the Web Server. Read More

www.securitytracker.com:
TFTPD32 Input Validation Flaw Lets Remote Users Read and Write Files on the System. Read More

www.securitytracker.com:
TFTPD32 Buffer Overflow in Processing Filenames Allows Remote Users to Execute Arbitrary Code. Read More

News:
www.newsfactor.com:
Latest IE Flaw Exposes Hard Drives via Web. Read More

zdnet.com.com:
Security holes aren't being filled. Read More

www.theregister.co.uk:
Accused Pentagon Hacker's Online Life. Read More

star-techcentral.com:
Microsoft to simplify security alerts. Read More

www.itworld.com:
Microsoft adds security service for novice end-users. Read More

www.infowarrior.org:
Security Through Soundbyte: The 'Cybersecurity Intelligence' Game. Read More

computerworld.com:
Experts: Don't dismiss cyberattack warning. Read More

www.wired.com:
How Much Hack Info Is Too Much? Read More

www.silicon.com:
Antivirus vendors' worm alert email carries worm. Read More

www.newsfactor.com:
Daily CyberCrime and Security Report for November 19, 2002. Read More

19 november 2002

New Trojans:
Telserver 3.0

Manipulator Light

CmjSpy 0.5

Vulnerabilities & Exploits:
online.securityfocus.com:
OpenSSH Visible Password Vulnerability. Read More

online.securityfocus.com:
ISC BIND DNS Resolver Buffer Overflow Vulnerability. Read More

online.securityfocus.com:
Cobalt RaQ authenticate Local Privilege Escalation Vulnerability. Read More

online.securityfocus.com:
Courier SqWebMail File Disclosure Vulnerability. Read More

Debian Security Advisory
DSA-198-1 nullmailer -- denial of service. Read More

www.ngsec.com:
iPlanet WebServer, remote root compromise. Read More

www.securitytracker.com:
Zeroo HTTP Server Buffer Overflow Lets Remote Users Execute Arbitrary Code on the Server. Read More

www.securitytracker.com:
NeoSoft NeoBook Content Authoring System Allows Remote Users to Execute Code When Malicious Content is Viewed. Read More

News:
www.gopbi.com:
Hackers mobilizing forces. Read More

www.smh.com.au:
Hackers go public with prizes and glory, and jobs, on the line. Read More

linuxtoday.com:
LinuxWorld: The Worst Security Problems? We Can't Tell From the FBI's Top 20 List. Read More

www.aftenposten.no:
Crackers steal 52,000 university passwords. Read More

www.commweb.com:
Virus-Trapper Prevents Worm Spread. Read More

zdnet.com.com:
Homeland Security--Big Brother is here? Read More

asia.cnn.com:
Indonesians take protests to the net. Read More

www.commweb.com:
Microsoft: Upgrade Windows For Better Security. Read More

www.fcw.com:
GSA awards patch system contract. Read More

www.vnunet.com:
BT offers filter tool for parents. Read More

www.newsfactor.com:
Daily CyberCrime and Security Report for November 18, 2002. Read More

18 november 2002

New Trojans:
MoSucker 3.0

GhostVoice

SlimFTPd 2.2

Vulnerabilities & Exploits:
www.securiteam.com:
Linux Rsync Remote Exploit Code. Read More

www.securiteam.com:
Local Root Exploit for cifslogin on HP-UX. Read More

www.securiteam.com:
i386 Linux Kernel DoS (Local). Read More

www.securiteam.com:
vBulletin Calendar Improved Exploit Code. Read More

online.securityfocus.com:
Python os.py Predictable Temporary Filename Command Execution Vulnerability. Read More

online.securityfocus.com:
Perception LiteServe CGI Source Disclosure Vulnerability. Read More

online.securityfocus.com:
Multiple Unspecified Opera 7 Vulnerabilities. Read more

online.securityfocus.com:
Syslog-ng Macro Expansion Remote Buffer Overflow Vulnerability. Read More

online.securityfocus.com:
IBM AIX Selective ACK Denial of Service Vulnerability. Read More

www.securitytracker.com:
phpBB 'Advanced Quick Reply' Hack Input Validation Flaw Lets Remote Users Execute Commands on the Server. Read More

www.securitytracker.com:
Buffalo Technology AirStation Wireless Access Point Can Be Crashed By Remote Users Conducting Port Scans. Read More

www.securitytracker.com:
Courier SqWebMail Privilege Dropping Bug Lets Local Users View Files on the System. Read More

online.securityfocus.com:
Perception LiteServe DNS Wildcard Cross Site Scripting Vulnerability. Read More

online.securityfocus.com:
Perception LiteServe Directory Query String Cross Site Scripting Vulnerability. Read More

online.securityfocus.com:
IISPop Remote Buffer Overflow Denial of Service Vulnerability. Read More

online.securityfocus.com:
KDE Network RESLISA Buffer Overflow Vulnerability. Read More

online.securityfocus.com:
KDE KIO Subsystem Network Protocol Implementation Arbitrary Command Execution Vulnerability. Read More

www.securiteam.com:
Default SNMP Community in Surecom Broadband Router. Read More

www.securiteam.com:
Buffalo AP Denial of Service. Read More

www.securiteam.com:
LiteServe URL Decoding DoS. Read More

www.securiteam.com:
TFTPD32 Directory Traversal Vulnerability. Read More

www.securiteam.com:
TFTPD32 Buffer Overflow Vulnerability (Long filename). Read More

www.securiteam.com:
IISPop Remote DoS. Read More

www.securiteam.com:
Perception LiteServe HTTP CGI Disclosure Vulnerability. Read More

www.securiteam.com:
Netscape/Mozilla Contains an Exploitable Heap Corruption via JAR URI Handler. Read More

News:
www.rtfm.com:
Security holes... Who cares?(pdf). Read More

www.internet-magazine.com:
Welsh hacker charged with spreading viruses. Read More

www.islandpacket.com:
Free-lance journalist hacks into Saddam's e-mail. Read More

news.com.com:
Judge rules cops' hacker went too far. Read More

www.vnunet.com:
Chat room perverts could face jail. Read More

17 november 2002

New Trojans:
Silent Spy 2.07

DDoS Trojan

B-S Spy 1.8.0

Vulnerabilities & Exploits:
online.securityfocus.com:
IBM HTTP Server Information Disclosure Vulnerability. Read More

online.securityfocus.com:
KeyFocus KF Web Server Directory Traversal Vulnerability. Read More

online.securityfocus.com:
PHP SafeMode Arbitrary File Execution Vulnerability. Read More

online.securityfocus.com:
PHP Post File Upload Buffer Overflow Vulnerabilities. Read More

online.securityfocus.com:
PHP Function CRLF Injection Vulnerability. Read More

online.securityfocus.com:
Cart32 Hidden Form Field Manipulation Vulnerability. Read More

online.securityfocus.com:
JustAddCommerce Hidden Form Field Manipulation Vulnerability. Read More

online.securityfocus.com:
Qualcomm Eudora File Attachment Spoofing Vulnerability. Read More

online.securityfocus.com:
Buffalo AirStation Pro Intelligent Access Point Port 80 Denial Of Service Vulnerability. Read More

online.securityfocus.com:
Surecom Router SNMP Default Community Strings Vulnerability. Read More

online.securityfocus.com:
HP Tru64 IGMP Denial Of Service Vulnerability. Read More

online.securityfocus.com:
HP Tru64/TruCluster OSIS V5.4 LDAP Module Unauthorized File Access Vulnerability. Read More

online.securityfocus.com:
PHPBB Advanced Quick Reply Hack Remote File Include Vulnerability. Read More

online.securityfocus.com:
LibHTTPD POST Buffer Overflow Vulnerability. Read More

online.securityfocus.com:
Multiple Vendor libc DNS Resolver Information Leakage Vulnerability. Read More

online.securityfocus.com:
Apache Server Side Include Cross Site Scripting Vulnerability. Read More

online.securityfocus.com:
Apache Web Server Scoreboard Memory Segment Overwriting SIGUSR1 Sending Vulnerability. Read More

online.securityfocus.com:
Apache HTPasswd Insecure Temporary File Vulnerability. Read More

online.securityfocus.com:
Apache HTDigest Insecure Temporary File Vulnerability. Read More

online.securityfocus.com:
Apache AB.C Web Benchmarking Read_Connection() Buffer Overflow Vulnerability. Read More

www.securitytracker.com:
LiteServe Web Server Input Validation Flaw in Processing CGI Filenames May Disclose CGI Source Code to Remote Users. Read More

www.securitytracker.com:
Opera 7 Undisclosed Vulnerabilities Let Remote Users View Files on the System and Execute Scripting Code in the Context of Other Domains. Read More

www.securitytracker.com:
Mozilla Browser Heap Overflow in Processing 'jar:' URIs Allows Remote Users to Execute Arbitrary Code on the Browser. Read More

News:
www.linuxvoodoo.com:
Japan may drop Windows to boost security. Read More

www.wired.com:
Kids Get Safe Internet Haven. Read More

techupdate.zdnet.co.uk:
Security tightened after 'Needlepoint' virus. Read More

www.vnunet.com:
Comment: The perfect online crime. Read More

16 november 2002

New Trojans:
Manipulator 1.2

KPSULE KeyLogger 1.0

JustJoke 2.6 version 2

Vulnerabilities & Exploits:
online.securityfocus.com:
W3Mail File Disclosure Vulnerability. Read More

online.securityfocus.com:
Multiple Vendor lpd Vulnerabilities. Read More

Debian Security Advisory
DSA-197-1 courier -- buffer overflow. Read More

www.securitytracker.com:
XOOPS Quizz Module Input Filtering Bug Allows Remote Users to Conduct Cross-Site Scripting Attacks. Read More

www.securitytracker.com:
XOOPS WebChat Module Input Validation Flaw Lets Remote Users Inject and Execute SQL Commands on the Underlying Database Server. Read More

www.securitytracker.com:
IISPop EMail Server Can Be Crashed By Remote Users. Read More

www.securitytracker.com:
Tcpdump and Libpcap Distributions May Include Trojan Horse Code. Read More

www.securitytracker.com:
LibHTTPd Buffer Overflow Lets Remote Users Execute Arbitrary Code. Read More

www.securitytracker.com:
SURECOM Broadband Router (EP-4501) Default Configuration Gives Remote Users Read/Write SNMP Access. Read More

www.securitytracker.com:
KeyFocus KF Web Server Discloses Files on the System to Remote Users. Read More

www.securitytracker.com:
Cart32 Shopping Cart Server Trusts User-supplied Pricing Data. Read More

www.securitytracker.com:
JustAddCommerce Server Trusts User-supplied Pricing Data. Read More

News:
www.wired.com:
Study Makes Less of Hack Threat. Read More

www.vnunet.com:
Snooping kit excites network managers. Read More

www.wired.com:
Dot-Mil Hacker's Download Mistake. Read More

zdnet.com.com:
Ruling: Cybercops need a hack warrant. Read More

news.zdnet.co.uk:
Hackers drop spyware into popular tool. Read More

www.pcpro.co.uk:
Popular packet sniffing packages contaminated by Trojan. Read More

www.vnunet.com:
Bugwatch: Personal protection. Read More

zdnet.com.com:
Week in review: Life to hackers! Read More

www.newsfactor.com:
Daily CyberCrime and Security Report for November 15, 2002. Read More

15 november 2002

New Trojans:
LANfiltrator Beta 10

ZUD 1.0

IRC BDoor 2.0

Vulnerabilities & Exploits:
online.securityfocus.com:
PXE Server DHCP Packet Denial Of Service Vulnerability. Read More

online.securityfocus.com:
PHP Mail Function ASCII Control Character Header Spoofing Vulnerability. Read More

online.securityfocus.com:
Hotfoon Dialer Buffer Overflow Vulnerability. Read More

online.securityfocus.com:
Hotfoon Dialer Plain Text Password Storage Vulnerability. Read More

online.securityfocus.com:
Novell Netware eMFrame iManage Buffer Overflow Vulnerability. Read More

online.securityfocus.com:
Cisco PIX Firewall Telnet/SSH Subnet Handling Denial Of Service Vulnerability. Read More

online.securityfocus.com:
EZ Systems HTTPBench Information Disclosure Vulnerability. Read More

online.securityfocus.com:
KGPG Key Generation Empty Passphrase Vulnerability. Read More

online.securityfocus.com:
SquirrelMail Options.PHP Web Root Path Disclosure Vulnerability. Read More

online.securityfocus.com:
SquirrelMail Multiple Cross Site Scripting Vulnerablities. Read More

online.securityfocus.com:
Incognito Systems ISMTP Gateway Buffer Overflow Vulnerability. Read More

Debian Security Advisory
DSA-196-1 bind -- several. Read More

www.securitytracker.com:
MasqMail Server Buffer Overflows Let Local Users Grab Root Privileges. Read More

www.securitytracker.com:
APBoard PHP-based Forum Lets Remote Users Post Messages in Protected Forums and Obtain Other User Passwords. Read More

www.securitytracker.com:
INweb Mail Server Can Be Crashed By Remote Users. Read More

www.securitytracker.com:
Hyperion FTP Server Input Validation Flaw Discloses Files on the Server to Remote Authenticated Users. Read More

www.securitytracker.com:
W3Mail Input Validation Flaw in viewAttachment.cgi Lets Remote Authenticated Users View Files on the System. Read More

www.securitytracker.com:
KDE KIO Protocol Subsystem Bugs May Let Remote Users Execute Arbitrary Commands. Read More

www.securitytracker.com:
Novell eDirectory Flaw May Give Remote Users Access to Accounts With Expired Passwords. Read More

www.securitytracker.com:
BIND4 and BIND8 Multiple Bugs Let Remote Users Crash the Service or Execute Arbitrary Code. Read More

www.securiteam.com:
Exploit Code for IP Smart Spoofing. Read More

www.securiteam.com:
XSS Vulnerability in Major Websites (Hotmail, Yahoo and Excite). Read More

www.securiteam.com:
Macromedia ColdFusion/JRun Remote SYSTEM Buffer Overflow Vulnerabilities. Read More

www.securiteam.com:
KeyFocus KF Web Server File Disclosure Vulnerability. Read More

www.securiteam.com:
XOOPS RC3 WebChat Module SQL Injection. Read More

www.securiteam.com:
Remote Buffer Overflow Vulnerability in Light HTTPd. Read More

www.securiteam.com:
Vulnerability Found in Benchmark Tool for HTTP Pages. Read More

www.securiteam.com:
rlogin.protocol and telnet.protocol URL KIO Vulnerability. Read More

News:
news.zdnet.co.uk:
Russians wage cyber war on Chechen Web sites. Read More

news.com.com:
Hackers drop spyware into popular tool. Read More

zdnet.com.com:
Linux utility site hacked, infected. Read More

online.securityfocus.com:
Alien Autopsy: Reverse Engineering Win32 Trojans on Linux. Read More

news.com.com:
Judge rules cops' hacker went too far. Read More

news.bbc.co.uk:
UK 'hacker' to fight US extradition. Read More

www.news.com.au:
Alleged hacker to fight extradition. Read More

www.newsfactor.com:
Daily CyberCrime and Security Report for November 14, 2002. Read More

14 november 2002

New Trojans:
Pinkle 1.0

Ghost Server binder 2.2

FloodNet 2.0

Vulnerabilities & Exploits:
Debian Security Advisory
DSA-195-1 apache-perl -- several. Read More

online.securityfocus.com:
CVSup-Mirror Insecure Temporary Files Vulnerability. Read More

online.securityfocus.com:
MailScanner Attachment Filename Validation Vulnerability. Read More

www.securitytracker.com:
IBM AIX Operating System TCP Selective Acknowledgement Feature May Let Remote Users Crash the System. Read More

www.securitytracker.com:
Hotfoon.com Telelphone Dialer Security Flaws Let Remote Users Execute Arbitrary Code. Read More

www.securitytracker.com:
Light HTTPd (lhttpd) Buffer Overflow Lets Remote Users Execute Arbitrary Code to Gain Shell Access on the System. Read More

www.securitytracker.com:
eZ httpbench Tool Discloses Files on the System to Remote Users. Read More

www.securitytracker.com:
Tiny HTTPd Input Validation Bug Discloses Files on the Server to Remote Users and Also Lets Users Execute Commands. Read More

www.securitytracker.com:
KDE LISa 'resLISa' Buffer Overflow Lets Local Users Gain Access to Network Sockets. Read More

News:
online.securityfocus.com:
Accused Pentagon Hacker's Online Life. Read More

news.com.com:
House considers jailing hackers for life. Read More

rootprompt.org:
Trojan Found in libpcap and tcpdump. Read More

www.vnunet.com:
Domain name servers flawed again. Read More

zdnet.com.com:
British hacker indicted for break-ins. Read More

www.govexec.com:
Hackers could be planning major attack, says White House. Read More

www.vnunet.com:
Hacker must wait to know his fate. Read More

www.idg.net:
The worst security problems? We can't tell from the FBI's top 20 list. Read More

www.idg.net:
Internet users to buy online despite security fears. Read More

www.newsfactor.com:
Daily CyberCrime and Security Report for November 13, 2002. Read More

13 november 2002

New Trojans:
QQ Murderer 3.97

RFM 1.3

Retrieve 1.1

Vulnerabilities & Exploits:
Internet Security Systems Security Advisory
Multiple Remote Vulnerabilities in BIND4 and BIND8. Read More

Debian Security Advisory
DSA-194-1 masqmail -- buffer overflows. Read More

online.securityfocus.com:
CVSup-Mirror Insecure Temporary Files Vulnerability. Read More

online.securityfocus.com:
MailScanner Attachment Filename Validation Vulnerability. Read More

online.securityfocus.com:
Pine From: Field Heap Corruption Vulnerability. Read More

online.securityfocus.com:
Multiple Vendor IPSec Implementation Denial of Service Vulnerabilities. Read More

online.securityfocus.com:
Sun Solaris Network Interface Denial Of Service Vulnerability. Read More

online.securityfocus.com:
Lotus Domino Non-existent NSF Database Banner Information Disclosure Vulnerability. Read More

online.securityfocus.com:
QNX RTOS Application Packager Non-Explicit Path Execution Vulnerability. Read More

www.securitytracker.com:
Incognito Software iSMTP Gateway for Banyan VINES Lets Remote Users Crash the Server. Read More

www.securitytracker.com:
KGPG Key Generation Bug Discloses Unencrypted Keys to Local Users. Read More

www.securiteam.com:
Buffer Overflow in KDE resLISa. Read More

News:
www.theregister.co.uk:
Oracle in buffer overflow brown alert. Read More

www.internetweek.com:
Popular Small Office Router Has Security Hole. Read More

news.com.com:
New flaws could spawn more Net attacks. Read More

news.com.com:
Greeting card virus licensed to spread. Read More

www.infoworld.com:
U.S. charges U.K. hacker caused $900,000 in damage. Read More

www.chron.com:
Briton charged with hacking U.S. military networks. Read More

www.cnn.com:
British national indicted in military hacking case. Read More

www.theregister.co.uk:
FT site defaced to promote Russian DJ. Read More

www.theregister.co.uk:
US military zeros in on Brit cracker. Read More

www.hacktivismo.com:
Crackers Over Hackers. Read More

www.newsfactor.com:
Daily CyberCrime and Security Report for November 12, 2002. Read More

12 november 2002

New Trojans:
Magic Link 2.0

Hack99 KeyLogger

NETObserve 2.9

Tool:
www.insecure.org:
Nmap version 3.10ALPHA4 is now available. Read More

www.greyhats.org:
SMTPScan, Remote SMTP Server Version Detector. Read More

Vulnerabilities & Exploits:
iDEFENSE Security Advisory 11.11.02:
Buffer Overflow in KDE resLISa. Read More

online.securityfocus.com:
Simple Web Server File Disclosure Vulnerability. Read More

online.securityfocus.com:
Zeus Web Server Admin Interface Cross Site Scripting Vulnerability. Read More

online.securityfocus.com:
Perception LiteServe Directory Query String Cross Site Scripting Vulnerability. Read More

online.securityfocus.com:
LPRNG html2ps Remote Command Execution Vulnerability. Read More

www.securitytracker.com:
Zeus Admin Server Input Validation Flaw Permits Cross-Site Scripting Attacks Against Administrators. Read More

www.securitytracker.com:
RhinoSoft Serv-U FTP Server Can Be Crashed By Remote Authenticated Users Sending Repeated 'MKD' Commands. Read More

News:
White Paper Exploring Host Discovery (pdf). Read More

SMTPScan, Remote SMTP Server Version Detection (pdf). Read More

www.pcworld.com:
Friendly Greeting Hides Worm. Read More

www.infoworld.com:
BrideX worm bites Kasperky Labs. Read More

www.informationweek.com:
Study: E-Mail Viruses Up, Spam Down. Read More

www.smh.com.au:
New trojan spotted. Read More

digitalmass.boston.com:
U.S. cracks case of British hacker who broke into military networks. Read More

seattletimes.nwsource.com:
Bad guys win, hacker's book seems to gloat. Read More

www.sbpost.ie:
IT bunglers a bigger threat than hackers. Read More

www.businessweek.com:
Computer Break-Ins: Your Right to Know. Read More

www.eetimes.com:
Hackers beware: quantum encryption is coming. Read More

www.newscientist.com:
'Rewiring' file-sharing networks may stop attacks. Read More

www.newsfactor.com:
Daily CyberCrime and Security Report for November 11, 2002. Read More

11 november 2002

New Trojans:
Zimenok 0.6

Fuckdoor 1.0

KeySpy 7.30

Vulnerabilities & Exploits:
online.securityfocus.com:
PADL Software nss_ldap DNS Query Response Denial of Service Vulnerability. Read More

online.securityfocus.com:
PADL Software nss_ldap DNS Buffer Overflow Vulnerability. Read More

online.securityfocus.com:
PAM_LDAP And Squid_Auth_LDAP Logging Format String Vulnerabilities. Read More

www.securitytracker.com:
Cisco PIX Firewall Can Be Crashed By Remote Users When In a Certain Configuration. Read More

www.securitytracker.com:
Magic Notebook Can Be Crashed By Remote Users. Read More

www.securitytracker.com:
QNX Neutrino Operating System Relative Path Bug Lets Local Users Grab Root Privileges. Read More

www.securitytracker.com:
Simple Web Server Lets Remote Users Bypass File Access Controls. Read More

www.securitytracker.com:
PostNuke Input Filtering Error in 'modules.php' Facilitates Remote Cross-Site Scripting Attacks. Read More

www.securiteam.com:
Technical Information on Un-patched MS Java Vulnerabilities. Read More

News:
www.popsci.com:
All Eyes are on you
Tollbooths, ATMs, doctors' offices, online chat: You leave critical personal data behind wherever you go. Let's follow one American as he scatters his digital DNA. Read More

techupdate.zdnet.co.uk:
Microsoft earns security badge. Read More

www.businessweek.com:
Computer Break-Ins: Your Right to Know. Read More

www.hardwarezone.com:
McAfee Security Protects More Than 100 Million Customers Worldwide Through Third-Party Email Delivery. Read More

www.theinquirer.net:
SETI email database hacked? Read More

www.vnunet.com:
CD copy protection 'a waste of time'. Read More

10 november 2002

New Trojans:
BioNet 4.00.04 BE

Ulysses 1.1

SchoolBus 1.5

Vulnerabilities & Exploits:
online.securityfocus.com:
Microsoft Internet Explorer Document Reference Zone Bypass Vulnerability. Read More

www.securitytracker.com:
Yahoo! Messenger Invisible User Function Can Be Circumvented. Read More

www.securitytracker.com:
linuxconf Default Configuration on Conectiva Linux Lets Remote Users Send Open Relay Mail. Read More

www.securitytracker.com:
CuteCast Forum Discloses Passwords to Remote Users. Read More

www.securitytracker.com:
LiteServe Web Server Input Validation Errors Let Remote Users Conduct Cross-Site Scripting Attacks. Read More

www.securitytracker.com:
IBM Lotus Notes Domino Server Discloses Server Banner to Remote Users When Configured Not To. Read More

www.securitytracker.com:
MailScanner Input Validation Flaws in Processing Attachment File Names May Let Remote Users Bypass Security. Read More

www.securitytracker.com:
'nss_ldap' Buffer Overflow in DNS Code May Allow Remote Users to Execute Arbitrary Code. Read More

www.securitytracker.com:
Macromedia ColdFusion Source Code May Be Disclosed to Remote Users. Read More

www.securitytracker.com:
Pine E-mail Client Input Validation Bug Lets Remote Users Crash the Client. Read More

www.securitytracker.com:
Window Maker Window Manager Buffer Overflow May Let Remote Users Execute Arbitrary Code. Read More

News:
www.computerworld.com:
Microsoft calls 'foul' on OS vulnerability data. Read More

www.theregister.co.uk:
Kaspersky mailing list hijacked! Read More

www.computerworld.com:
Study: Government IT workers closing skills gap. Read More

www.theregister.co.uk:
Verisign moves DNS root servers in defensive ploy. Read More

www.newsfactor.com:
Beware the Toothless Antitrust Lawsuit. Read More

www.aftenposten.no:
Cordless keyboard woes continue. Read More

www.japantimes.co.jp:
NPA reports hackers attacking its computers. Read More

www.theregister.co.uk:
Accused eBay hacker out on bond. Read More

09 november 2002

New Trojans:
Silent Spy 2.06

SubSari 1.4.5

Joiner 1.5

Vulnerabilities & Exploits:
online.securityfocus.com:
Microsoft IIS Administrative Pages Cross Site Scripting Vulnerabilities. Read More

online.securityfocus.com:
Networking_Utils Remote Command Execution Vulnerability. Read More

online.securityfocus.com:
Apache Server Side Include Cross Site Scripting Vulnerability. Read More

online.securityfocus.com:
Apache Web Server Scoreboard Memory Segment Overwriting SIGUSR1 Sending Vulnerability. Read More

online.securityfocus.com:
Apache HTPasswd Insecure Temporary File Vulnerability. Read More

online.securityfocus.com:
Apache HTDigest Insecure Temporary File Vulnerability. Read More

online.securityfocus.com:
Apache AB.C Web Benchmarking Buffer Overflow Vulnerability. Read More

online.securityfocus.com:
Apache AB.C Web Benchmarking Read_Connection() Buffer Overflow Vulnerability. Read More

online.securityfocus.com:
Apache /tmp File Race Vulnerability. Read More

online.securityfocus.com:
Astrocam Remote Command Execution Vulnerability. Read More

online.securityfocus.com:
The Magic Notebook Invalid Username Denial Of Service Vulnerability. Read More

online.securityfocus.com:
Cisco PIX Firewall Telnet/SSH Subnet Handling Denial Of Service Vulnerability. Read More

online.securityfocus.com:
SnortCenter Insecure Temporary Filename Vulnerability. Read More

online.securityfocus.com:
IPFilter FTP Proxy Unauthorized Access Vulnerability. Read More

iDEFENSE Security Advisory 11.08.02b:
Non-Explicit Path Vulnerability in QNX Neutrino RTOS. Read More

iDEFENSE Security Advisory 11.08.02b:
File Disclosure Vulnerability in Simple Web Server. Read More

www.techie.hopto.org:
LiteServe Directory Index Script Injection Vulnerability. Read More

www.securitytracker.com:
OpenBSD Kernel Bug in gertrlimit() Function May Let Local Users Crash the System. Read More

www.securitytracker.com:
Apache mod_php Module May Allow Local Users to Gain Control of the Web Port. Read More

www.securitytracker.com:
QNX Operating System Timer Implementation Bug Lets Local Users Crash the System. Read More

www.securitytracker.com:
LuxMan Game Software File Path Bug May Let Local Users Gain Root Access on the System. Read More

www.securitytracker.com:
Macromedia JRun Server Contains a Buffer Overflow and May Also Disclose Log File Contents to Remote Users. Read More

News:
www.net-security.org:
Oror Worm - Highest Threat Levels Since Bugbear. Read More

news.com.com:
E-mail virus alert carries own worm. Read More

rtnews.globetechnology.com:
Virus or spyware slows computer. Read More

www.redherring.com:
Up Against the Firewall. Read More

news.com.com:
Microsoft to offer peek at new tools. Read More

www.newsfactor.com:
Daily CyberCrime and Security Report for November 8, 2002. Read More

08 november 2002

New Trojans:
Postic

Shah 1.0 version 2

Remote Server Trojan 2.0

Vulnerabilities & Exploits:
online.securityfocus.com:
Microsoft IIS Out Of Process Privilege Escalation Vulnerability. Read More

Debian Security Advisory
DSA-191-1 squirrelmail -- cross site scripting. Read More

Debian Security Advisory
DSA-190-1 wmaker -- buffer overflow. Read More

www.securitytracker.com:
Perl Safe Module May Allow Sandbox Compartment Access Restrictions to Be Bypassed. Read More

www.securitytracker.com:
networking_utils PHP Script Input Validation Flaw Allows Remote Users to View Files and Execute Commands on the System. Read More

www.securitytracker.com:
SnortCenter Temporary File Access Control Bug. Read More

www.securitytracker.com:
Iatek PortalApp Access Control Bug Lets Remote Authenticated Users Gain Administrator Privileges on the Portal. Read More

www.securitytracker.com:
perl-MailTools Input Validation Hole in Mail::Mailer Package May Let Remote Users Execute Arbitrary Commands. Read More

www.securiteam.com:
QNX Timer Implementation Vulnerable to DoS. Read More

www.securiteam.com:
Xsun (Sparc) Local Exploit (RGB_DB). Read More

www.securiteam.com:
Com21 Cable Modem Configuration File Feeding Vulnerability. Read More

www.securiteam.com:
Bug in Monkey Webserver Causes DoS (POST). Read More

News:
www.smh.com.au:
New worm threat upgraded. Read More

www.net-security.org:
The Value of Honeypots (pdf). Read More

www.vnunet.com:
Bugwatch: The perils of small print. Read More

www.newsfactor.com:
The FBI's Cybercrime Crackdown. Read More

www.japantimes.co.jp:
NPA reports hackers attacking its computers. Read More

news.bbc.co.uk:
Hack attacks on rise in Asia. Read More

www.thesun.co.uk:
Hackers' bid to fix poll. Read More

www.smh.com.au:
Wormholes in hacker case. Read More

www.newscientist.com:
Key internet server relocated. Read More

www.canada.com:
Technology experts make defensive change to key Internet computers. Read More

www.informationweek.com:
Piecing Together Huge Security Network. Read More

www.newsfactor.com:
Daily CyberCrime and Security Report for November 7, 2002. Read More

07 november 2002

New Trojans:
Win-Spy 5.6.1

Socks4 Proxy 1.0

Beast 1.8

Vulnerabilities & Exploits:
Georgi Guninski security advisory #58, 2002
Fun with mod_php/Apache 1.3, yet Apache much better than II$. Read More

iDEFENSE Security Advisory 11.06.02:
Non-Explicit Path Vulnerability in LuxMan. Read More

Debian Security Advisory
DSA-189-1 luxman -- local root exploit. Read More

www.securitytracker.com:
pp_powerSwitch Access Control Bug May Let Remote Authenticated Users Control Any Port. Read More

www.securitytracker.com:
HP Tru64 UNIX TruCluster Server Interconnect Has an Unspecified Flaw That May Let Remote Users Crash the Server. Read More

www.securitytracker.com:
Wisecom Wireless Access Point Discloses Encryption Keys and Passwords to Remote Users. Read More

www.securitytracker.com:
Various libc Implementations Have a Denial of Service Bug That Lets Remote Users Crash Affected RPC Services. Read More

www.securitytracker.com:
Macromedia Dreamweaver Weak Encoding Lets Local Users Retrieve FTP Site Passwords. Read More

www.securiteam.com:
Lycos Mail and Lycos HTMLGear XSS/Cookie Problems Advisory. Read More

www.securiteam.com:
Accesspoints Disclose WEP Keys, Password and MAC Filters. Read More

www.securiteam.com:
SnortCenter Temporary File Vulnerability. Read More

www.securiteam.com:
Networking Utils PHP Allows Execution of Arbitrary code. Read More

www.securiteam.com:
Non-Explicit Path Vulnerability in LuxMan. Read More

News:
online.securityfocus.com:
Complete Snort-based IDS Architecture, Part One. Read More

news.com.com:
Russian firm warns of Roron virus. Read More

www.net-security.org:
Honeypots: Tracking Hackers. Read More

www.msnbc.com:
Hackers may get U.S. funds to fight China’s Web curbs. Read More

www.bellevueleader.com:
Internet monitoring on the rise. Read More

www.wired.com:
Mitnick's 'Lost Chapter' Found. Read More

www.informationweek.com:
Piecing Together Huge Security Network. Read More

www.canada.com:
Technology experts make defensive change to key Internet computers. Read More

www.wired.com:
Navy Sites Spring Security Leaks. Read More

news.com.com:
Notre Dame math guru cracks code. Read More

www.newsfactor.com:
Daily CyberCrime and Security Report for November 6, 2002. Read More

06 november 2002

New Trojans:
FuckLamers Backdoor 2.5

ftppw 0.1

iOpus STARR PRO

Vulnerabilities & Exploits:
Debian Security Advisory
DSA-188-1 apache-ssl -- several. Read More

Debian Security Advisory
DSA-187-1 apache -- several. Read More

online.securityfocus.com:
Microsoft SQL Server Login Weak Authentication Mechanism. Read More

online.securityfocus.com:
Monkey HTTP Server Invalid POST Request Denial Of Service Vulnerability. Read More

www.securitytracker.com:
Xeneo PHP Web Server Input Validation Bug Lets Remote Users Crash the Web Service. Read More

www.securitytracker.com:
XGroove Xlib Library Bugs May Allow Remote Users to Deny Service to Other Systems. Read More

www.securitytracker.com:
Com21 DOXport Cable Modems Let Remote Users on the Local Network Load an Alternate Configuration File. Read More

www.securiteam.com:
Oracle iSQL*Plus Buffer Overflow (Long User ID). Read More

www.securiteam.com:
Pablo FTP Server DoS Vulnerability (%n). Read More

www.securiteam.com:
Denial of Service Vulnerability in Xeneo Web Server. Read More

www.securiteam.com:
Microsoft IIS Local Cross-site Scripting Vulnerability. Read More

News:
news.zdnet.co.uk:
Braid virus winds its way through email. Read More

zdnet.com.com:
Braid virus shows Klez similiarities. Read More

online.securityfocus.com:
Polymorphic Macro Viruses, Part Two. Read More

boston.internet.com:
As the Bridex Worm Turns. Read More

www.rockymountainnews.com:
Types of hackers. Read More

www.computerworld.com:
Hacking syndicates threaten banking. Read More

www.newsfactor.com:
SBC Creates Anti-Hacker Lab. Read More

www.startribune.com:
Hacker turncoat opines on computer security. Read More

www.wired.com:
Navy Sites Spring Security Leaks. Read More

www.theregister.co.uk:
Mozilla riddled with security holes. Read More

www.startribune.com:
Hackers stick California city with $30,000 phone bill. Read More

www.eweek.com:
eEye Tool Helps Find, Fix Vulnerabilities. Read More

news.zdnet.co.uk:
Teleworking hits security barriers. Read More

www.theregister.co.uk:
SAN security under the spotlight. Read More

www.desktoplinux.com:
How to avoid security problems, Linux vs. Windows security [NewsForge]. Read More

www.linuxdevices.com:
U.S. National Security Agency develops 'Security-Enhanced Linux'. Read More

news.com.com:
New Web services tools look to security. Read More

thestar.com.my:
New law to punish firms which leak data on clients. Read More

news.zdnet.co.uk:
'WirelessUSB' could beat Bluetooth on the PC. Read More

zdnet.com.com:
Switch may send wireless four miles. Read More

www.newsfactor.com:
Daily CyberCrime and Security Report for November 5, 2002. Read More

05 november 2002

New Trojans:
New NeoTurk will soon be released.

Stealth Eye 1.0

Specrem 4.0

Snake's Proxy Server 1.03

Vulnerabilities & Exploits:
online.securityfocus.com:
ION Script Remote File Disclosure Vulnerability. Read More

bvlive01.iss.ne:
Internet Security Systems Security Alert Summary AS02-44. Read More

NGSSoftware Insight Security Research Advisory
Oracle iSQL*Plus buffer overflow. Read More

iDEFENSE Security Advisory 11.04.02b:
Denial of Service Vulnerability in Xeneo Web Server. Read More

iDEFENSE Security Advisory 11.04.02a:
Pablo FTP Server DoS Vulnerability. Read More

www.securitytracker.com:
AstroCam Webcam Management Software Input Validation Flaw Lets Remote Users Execute Arbitrary Programs. Read More

www.securitytracker.com:
Abuse Video Game Buffer Overflow Allows Local Users to Gain Root Privileges. Read More

www.securitytracker.com:
Motorola SURFboard Cable Modem Can Be Crashed By Remote Users Conducting Port Scans. Read More

News:
www.pcworld.com:
FunLove Virus Spawns New Pest. Read More

www.idg.net:
Bride of Funlove virus getting around. Read More

www.smh.com.au:
New virus spotted. Read More

www.theregister.co.uk:
Email deletion bug bites Norton Internet Security. Read More

sci.newsfactor.com:
Future Hacking: How Vulnerable Is the Net? Read More

www.smh.com.au:
Less is more when it comes to keeping out the hackers and viruses. Read More

news.bbc.co.uk:
Suspected hacker attacked with axe. Read More

www.mlive.com:
Critics: 'Trusted computing' threatens consumer freedom. Read More

www.cleveland.com:
Combating cybercrime. Read More

www.fcw.com:
FBI asks companies to fight cybercrime. Read More

www.europemedia.net:
Hacker takes advantage of dialer billing system. Read More

www.theage.com.au:
Wormholes in hacker case. Read More

www.theregister.co.uk:
Scary movie 2.0. Read More

04 november 2002

New Trojans:
NetSlayer 1.0

OwnedFTP 1.0

Tourniquet 1.0

Tool:
www.hping.org:
hping is a command-line oriented TCP/IP packet assembler/analyzer. Read More

www.packetfactory.net:
nemesis is a command-line UNIX network packet injection suite. Read More

Vulnerabilities & Exploits:
online.securityfocus.com:
Multiple Browser Zero Width GIF Image Memory Corruption Vulnerability. Read More

www.securitytracker.com:
Log2mail Script Buffer Overflow May Let Remote Users Execute Arbitrary Code With Root Privileges. Read More

www.securitytracker.com:
EventSave/EventSave+ File Access Error May Cause Events to Be Lost in Certain Cases. Read More

www.securitytracker.com:
Oracle iSQL*Plus Buffer Overflow in Oracle9i Database Server May Let Remote Users Execute Arbitrary Code. Read More

www.securitytracker.com:
VSNL Integrated Dialer Weak Encoding Discloses Passwords to Local Users. Read More

www.securitytracker.com:
ION Script Input Validation Flaw Lets Remote Users View Files on the Server. Read More

www.securitytracker.com:
Iomega NAS A300u Network Storage Device May Disclose Passwords to Remote Users. Read More

www.securitytracker.com:
NetScreen Firewalls Can Be Crashed By Remote Users When SSH is Enabled for Remote Management. Read More

www.securiteam.com:
Denial of Service Vulnerability in Linksys BEFSR41 EtherFast Cable/DSL Router. Read More

www.securiteam.com:
Prometheus Application Framework Code Injection. Read More

www.securiteam.com:
PHP-Nuke SQL Injection Vulnerability. Read More

www.securiteam.com:
Buffer Overflow Vulnerability in Abuse. Read More

News:
www.theregister.co.uk:
MS settlement rotten with loopholes. Read More

03 november 2002

New Trojans:
AIM-SPY 1.0

Troyano de Malpayo 1.1

Fuck MZN Troyan 3.0

Vulnerabilities & Exploits:
online.securityfocus.com:
Microsoft Windows 2000 / NT Path Precedence Vulnerability. Read More

online.securityfocus.com:
Multiple Microsoft IIS Vulnerabilities. Read More

online.securityfocus.com:
Microsoft PPTP Buffer Overrun Vulnerability. Read More

www.nextgenss.com:
Threat Profiling Microsoft SQL Server (pdf). Read More

www.securitytracker.com:
Prometheus Web Application Framework Include Path Bug Lets Remote Users Execute Arbitrary PHP Commands. Read More

www.securitytracker.com:
PHP-Nuke SQL Injection Bug in 'modules.php' in the 'bio' Field Lets Remote Users Execute SQL Commands. Read More

www.securitytracker.com:
Linksys BEFSR41 EtherFast Cable/DSL Router Can Be Crashed By Remote Users Via the Web Management Port. Read More

www.securitytracker.com:
Cisco ONS Optional Networking Software Flaws May Let Remote Users Gain Full Control of the ONS Platform. Read More

www.securitytracker.com:
Monkey Web Server Can Be Crashed By Remote Users Sending Certain POST Requests. Read More

www.securitytracker.com:
SmartMail Server E-Mail Server Can Be Crashed By Remote Users. Read More

News:
www.securityfocus.com:
Top Attacks for the 1st Quarter 2002. Read More

www.newsfactor.com:
Don't Buy the Windows 98 Forced Upgrade. Read More

www.ntsecurity.net:
Common Criteria Configuration Guides for Win2K. Read More

www.theregister.co.uk:
Proof Win2K is still insecure by design. Read More

www.pcworld.com:
Did Microsoft Get Off Easy? Read More

www.siliconvalley.com:
Hacker reveals secrets of success. Read More

02 november 2002

New Trojans:
Rosy Bartosy 1.0

Sub7 Tool Webdl

Trail Of Destruction 1.0

Vulnerabilities & Exploits:
online.securityfocus.com:
GTetrinet Multiple Remote Buffer Overflow Vulnerabilities. Read More

iDEFENSE Security Advisory 11.01.02:
Buffer Overflow Vulnerability in Abuse. Read More

www.securitytracker.com:
Microsoft Internet Information Server (IIS) Script Access Control Bug May Let Remote Authenticated Users Upload Unauthorized Executable Files. Read More

www.securitytracker.com:
Microsoft Internet Information Server (IIS) WebDAV Memory Allocation Flaw Lets Remote Users Crash the Server. Read More

www.securitytracker.com:
Microsoft Internet Information Server (IIS) Administrative Pages Allow Cross-Site Scripting Attacks. Read More

Microsoft Internet Information Server (IIS) Out-of-Process Access Control Bug Lets Certain Authenticated Users Gain Full Control of the Server. Read More

News:
www.washingtonpost.com:
Root-Server Attack Traced to South Korea, U.S. Read More

digitalmass.boston.com:
Law enforcement officials pledge to keep secret names of hacking victims. Read More

www.idg.com.sg:
Mac OS among least prone to attack. Read More

www.pcworld.com:
Proposed Antitrust Deal Accepted. Read More

www.vnunet.com:
Economic warfare enters the cyber-age. Read More

www.pcworld.com:
FBI Struggling to Stop Cybercrime. Read More

www.aftenposten.no:
Cordless keyboard wrote on neighbor's computer. Read More

www.newsfactor.com:
Daily CyberCrime and Security Report for November 1, 2002. Read More

01 november 2002

New Trojans:
Silent Spy 2.05 by HaTcHeT

Nova 1.0

Lithium 1.03 by Olympus

Vulnerabilities & Exploits:
iDEFENSE Security Advisory 10.31.02c:
PHP-Nuke SQL Injection Vulnerability. Read More

iDEFENSE Security Advisory 10.31.02b:
Prometheus Application Framework Code Injection. Read More

iDEFENSE Security Advisory 10.31.02a:
Denial of Service Vulnerability in Linksys BEFSR41 EtherFast Cable/DSL Router. Read More

Debian Security Advisory
DSA-185-1 heimdal -- buffer overflow. Read More

www.securitytracker.com:
Apache Web Server (2.0.42) May Disclose CGI Source Code to Remote Users When Used With WebDAV. Read More

www.securitytracker.com:
Sun Web-Based Enterprise Management (WBEM) Default Installation Error May Let Local Users Grab Root Privileges. Read More

www.securitytracker.com:
GTetrinet Game Client Buffer Overflows Let Remote Users Execute Arbitrary Code. Read More

www.securitytracker.com:
Solaris 8 Kernel 'kmem_flags' Bug Lets Local Users Cause a System Panic. Read More

www.securiteam.com:
MDaemon SMTP/POP/IMAP Server DoS (Invalid UIDL, DELE). Read More

www.securiteam.com:
XXE (Xml eXternal Entity) Attack. Read More

www.securiteam.com:
Windows 2000 Default Permissions Could Allow Trojan Horse Program. Read More

www.securiteam.com:
Unchecked Buffer in PPTP Implementation Could Enable Denial of Service Attacks. Read More

www.securiteam.com:
Oracle9iAS Web Cache Denial of Service. Read More

www.securiteam.com:
Apache Discloses Source Code via POST Requests to a Location with WebDAV and CGI enabled. Read More

www.securiteam.com:
Privilege Escalation Vulnerability on phpBB. Read More

www.securiteam.com:
Multiple Vulnerabilities in mailreader.com. Read More

www.securiteam.com:
GIMP Can Print Erased Sections of Images. Read More

News:
news.com.com:
Microsoft flags three security holes. Read More

online.securityfocus.com:
BugBear tops virus charts as Klez refuses to die. Read More

biz.thestar.com.my:
Hire hackers to find loopholes in IT system, firms advised. Read More

www.newsfactor.com:
Why Can't Hackers Be Stopped? Read More

online.securityfocus.com:
How to get certified security for Win2k, by Microsoft. Read More

star-techcentral.com:
Demand for ethical hackers. Read More

news.com.com:
Security guide aims to lock up agencies. Read More

www.hackinglinuxexposed.com:
Use illegal networks when discussing your systems. Read More

news.com.com:
Software heals systems while they work. Read More

www.vnunet.com:
Islamic groups attack western networks. Read More

www.secadministrator.com:
Protect Your Contact List: Read the EULA! Read More

www.hindustantimes.com:
Orissa cops to check cyber crime. Read More

online.securityfocus.com:
Don't Touch that Dial. Read More

www.newsfactor.com:
Daily CyberCrime and Security Report for October 31, 2002. Read More


Copyright© MegaSecurity.org