Home
News Archive    Translate Traducen
News december 2003
31 december 2003

New in Archive
SAdoor 1.1

Cucumber 0.7

Zetronic

Dude

Backdoor.VB.et

Guides, Papers, etc.
www.securityfocus.com:
Checklist for Deploying an IDS. Read more

Vulnerabilities & Exploits
www.securitytracker.com:
Xsok Lets Local Users Gain 'games' Group Privileges. Read more

www.securitytracker.com:
NETObserve Authentication Hole Lets Remote Users Execute OS Commands. Read more

www.securitytracker.com:
PHPCatalog 'id' Input Validation Flaw Permits Remote SQL Injection. Read more

www.securitytracker.com:
MDaemon FORM2RAW Buffer Overflow Lets Remote Users Execute Arbitrary Code. Read more

www.securitytracker.com:
phpBB Input Validation Flaw in 'groupcp.php' Permits Moderators to Inject SQL Commands. Read more

News
www.theregister.co.uk:
Microsoft settles $60 million video patent dispute. Read more

www.guardian.co.uk:
Bank of England hit by email hoax. Read more

news.com.com:
Hoaxes Befall Banks In England, Singapore. Read more

msnbc.msn.com:
E-voting firm reports computer break-in. Read more

zdnet.com.com:
FBI investigates hack at e-voting software company. Read more

news.com.com:
Malaysian e-mail virus exploits terrorism fears. Read more

30 december 2003

New in Archive
Bill FTP

RAT Control Center 1.0

Hackarmy (g)

Alicia (a)

Alicia (c)

Vulnerabilities & Exploits
www.securitytracker.com:
Jordan Stojanovski Windows Telnet Server 'username' Buffer Overflow Lets Remote Users Execute Arbitrary Code. Read more

www.securitytracker.com:
CVS pserver 'passwd' File May Let Local Users Run Code with Root Privileges. Read more

www.securitytracker.com:
miniBB Input Validation Hole in bb_edit_prf.php Permits Cross-Site Scripting Attacks. Read more

www.securitytracker.com:
PHP-Ping Input Validation Flaw in $count Variable Allows Remote OS Command Execution. Read more

News
www.signonsandiego.com:
Cyber blackmail wave targets office workers. Read more

msnbc.msn.com:
E-voting firm reports computer break-in. Read more

rss.com.com:
Malaysian e-mail virus exploits terrorism fears. Read more

www.iht.com:
Technology may put Big Brother in driver's seat. Read more

www.familybadge.org:
Pop-Ups Plague Patrol Car Computers. Read more

www.jamaicaobserver.com:
In Whom We Trust. Read more

29 december 2003

New in Archive
Amitis 1.4

Broser

Hayrik

Vulnerabilities & Exploits
www.securitytracker.com:
Private Message System (PMSys) 'page' Parameter Input Validation Flaw Permits Cross-Site Scripting Attacks. Read more

www.securitytracker.com:
GKrellM Discloses User E-Mail Passwords to Local Users. Read more

www.securitytracker.com:
Microsoft IIS Fails to Log HTTP TRACK Requests. Read more

www.securiteam.com:
Multiple Vulnerabilities in Psychoblogger CMS Package. Read more

www.securiteam.com:
Knowledge Builder Remote Code Execution. Read more

News
www.vnunet.com:
2003 Review of the Year: Security. Read more

www.detnews.com:
Internet scams are on the rise. Read more

www.washtimes.com:
Romania becoming hub for cyber-crime. Read more

28 december 2003

New in Archive
Bluntman 4.20

Burbulatorheads (a)

Lamers Death 1.8 server

Guides, Papers, etc.
www.asianlaws.org:
Port Scanning and its Legal Implications. Read more

grove.ufl.edu:
FINDING FENCES IN CYBERSPACE: PRIVACY AND OPEN ACCESS ON THE INTERNET. Read more

Vulnerabilities & Exploits
www.securitytracker.com:
Microsoft Internet Explorer Trusted Domain Default Settings Facilitate Silent Installation of Executables. Read more

www.securitytracker.com:
PHP-Nuke Surveys Module Input Validation Flaw Permits SQL Injection. Read more

www.securitytracker.com:
LANDesk Management Suite 'IRCRBOOT.DLL' Buffer Overflow Lets Remote Users Execute Arbitrary Code. Read more

www.securitytracker.com:
Apache mod_php File Descriptor Leak May Let Local Users Hijack the https Service. Read more

www.securitytracker.com:
KnowledgeBuilder Include File Flaw Lets Remote Users Execute Arbitrary OS Commands. Read more

www.securitytracker.com:
PsychoBlogger Input Validation Flaws Permit Cross-Site Scripting and SQL Injection Attacks. Read more

www.securitytracker.com:
OpenBB 'CID' Input Validation Flaw Permits SQL Injection. Read more

www.securitytracker.com:
Microsoft IE for Mac May Disclose Sensitive Information in Secure URLs to Remote Sites via HTTP Referer Field. Read more

www.securitytracker.com:
pServ Double Slash '//' Input Validation Flaw Discloses Files to Remote Users. Read more

www.securitytracker.com:
Serv-U FTP Server File Configuration Flaw May Let Local Users Gain Elevated Privileges. Read more

www.securitytracker.com:
L-Soft LISTSERV Input Validation Flaw in WA.EXE Management Interface May Permit Cross-Site Scripting Attacks Against List Administrators. Read more

www.securitytracker.com:
indent Buffer Overflow Lets Users Execute Arbitrary Code. Read more

27 december 2003

New in Archive
A-FTP 1.0

Ramtha 1.1

Dua ti choi 1.0 client

GForce

Vulnerabilities & Exploits
www.securitytracker.com:
Surfboard httpd Buffer Overflow May Allow a Remote User to Execute Arbitrary Code. Read more

News
star-techcentral.com:
Virus masquerades as terror alert. Read more

26 december 2003

New in Archive
Theef 2.00 Beta 0.5

SaTaN 1.0 Lite

Stinky

Vulnerabilities & Exploits
www.securiteam.com:
Command Injection Issue in Squirrelmail's G/PGP Encryption Plugin. Read more

www.securiteam.com:
Cyrus IMSP Remote Root Exploit. Read more

News
www.channelnewsasia.com:
More IT enthusiasts taking up 'self-defence' hacking courses. Read more

www.mytelus.com:
Canada Post money order scam targets Americans. Read more

www.wdaftv4.com:
AG Warns of E-mail Scam. Read more

www.2theadvocate.com:
Woman sentenced in credit card scam. Read more

www.zwire.com:
The Douglas County Sheriff's Office has received several complaints in the past few months about a scam circulating on the Internet that recently ensnared a Parker man. Read more

25 december 2003

New in Archive
ProRat 1.0 Complete

Lamers Death 2.4(d) server

LegendMir 2.0 (a)

Backdoor.VB.fa server

Backdoor.Delf.jk

Fruitcake 0.9.7

Vulnerabilities & Exploits
www.securitytracker.com:
SquirrelMail May Execute Arbitrary Commands When Encrypting Mail to Specially Crafted Addresses. Read more

www.securiteam.com:
PHP-Nuke 'cid' SQL Injection. Read more

www.securiteam.com:
DCAM WebCam Server Directory Traversal Vulnerability. Read more

www.securiteam.com:
Opera Arbitrary File Delete Vulnerability. Read more

www.securiteam.com:
PlatinumFTPserver Format String Vulnerabilities. Read more

www.securiteam.com:
CesarFTP Denial of Service (dotted CWD). Read more

www.securiteam.com:
Multiple Vulnerabilities in Mambo Server. Read more

www.securiteam.com:
XOOPS myheader.php Cross Site Scripting Vulnerability. Read more

www.securiteam.com:
bMachine Cross Site Scripting Vulnerability. Read more

www.securiteam.com:
My Little Forum XSS Vulnerability. Read more

News
www.securityfocus.com:
Online crime up in 2003. Read more

www.securitypipeline.com:
Phishing Attacks Increase Fourfold. Read more

www.winnetmag.com:
Open Source Patch for Internet Explorer? Read more

www.securitypipeline.com:
Researchers Outline Microsoft's Top 10 Challenges For 2004. Read more

24 december 2003

New in Archive
Kwak 1.2

Lamers Death 2.1(b) server

Backdoor.Delf.dg

Tools
SAdoor. A non listening remote shell and execution server.
Released winserver 1.1 (first release) and client 1.1. Read more

Vulnerabilities & Exploits
www.securitytracker.com:
Sun Solaris tcsh(1) Argument Expansion Flaw Lets Local Users Gain Elevated Privileges. Read more

www.securitytracker.com:
QuikStore Shopping Cart Input Validation Flaw Discloses Files to Remote Users. Read more

www.securitytracker.com:
my little forum Input Validation Flaws Permit Cross-Site Scripting Attacks. Read more

www.securitytracker.com:
Xlight FTP Server Buffer Overflow in PASS Command May Let Remote Authenticated Users Execute Arbitrary Code. Read more

www.securitytracker.com:
PlatinumFTPserver Format String Flaw May Allow Remote Code Execution. Read more

www.securitytracker.com:
CesarFTP Server Can Be Crashed by Remote Authenticated Users With a Long CWD Command. Read more

News
www.net-security.org:
A Look Into The Viruses That Caused Havoc In 2003. Read more

www.theregister.co.uk:
Am I Patched Or Not? Read more

greenvilleonline.com:
Computer sleuths ply Internet. Read more

23 december 2003

New in Archive
Insidious WebDL 1.0

Denial 1.0

Slackbot 1.0 (c)

Backdoor.Delf.l

DragonIRC 3.5

Ping Bomber

Masters Paradise Beta 8

Vulnerabilities & Exploits
www.elitehaven.net:
ProjectForum Multiple Vulnerabilities. Read more

www.securitytracker.com:
DCAM WebCam Server Input Validation Flaw Discloses Files to Remote Users. Read more

www.securitytracker.com:
XOOPS Input Filtering Flaw in Weblinks 'myheader.php' Permits Cross-Site Scripting Attacks. Read more

www.securitytracker.com:
CourseForum Can Be Crashed By a Remote User Sending a Long 'find' Request. Read more

www.securiteam.com:
phpBB SQL Injection Exploit Code (search_id). Read more

www.securiteam.com:
DameWare Mini Remote Control Server Overflow Exploit. Read more

www.securiteam.com:
Security Vulnerability in Xerox Document Centre (Directory Traversal). Read more

www.securiteam.com:
Xlight FTP Server PASS Buffer Overflow. Read more

www.securiteam.com:
Multiple Vulnerabilities in ASPapp Products. Read more

www.securiteam.com:
BES-CMS File Inclusion Vulnerability. Read more

www.securiteam.com:
AutoRank PHP SQL Injection Vulnerabilities. Read more

www.securiteam.com:
osCommerce Malformed Session ID XSS. Read more

www.securiteam.com:
Subscribe Me Pro/Enterprise Command Execution. Read more

News
www.theage.com.au:
Security fears over 'spyware'. Read more

www.net-security.org:
An In-Depth Look Into Windows Security in 2003. Read more

www.internetweek.com:
The 2004 Security Survivor's Guide. Read more

www.globetechnology.com:
Cyberattacks on rise after Hussein capture. Read more

www.pcworld.com:
Windows ATMs Raise Security Concerns. Read more

22 december 2003

New in Archive
ZOOM 1.0

Veritas 1.0

ICS FTP

Backdoor.VB.e

Guides, Papers, etc.
www.phrite.net:
Sniffing Network Traffic- Switches. Read more

Vulnerabilities & Exploits
www.securitytracker.com:
bes-cms Include File Flaws Let Remote Users Execute Arbitary Commands. Read more

www.securitytracker.com:
AppleFileServer Does Not Properly Handle Malformed Requests. Read more

www.securitytracker.com:
unix2tcp Command Line Buffer Overflow May Let Local Users Gain Elevated Privileges. Read more

www.securitytracker.com:
Mac OS X USB keyboard 'init' Flaw Yields Root Access to Physically Local Users. Read more

www.security-corporation.com:
BES-CMS including file vulnerability. Read more

News
news.xinhuanet.com:
Expert warns of computer viruses around Christmas. Read more

www.timesofoman.com:
VIRUSWATCH – Solutions for virus-infected e-mails. Read more

www.theregister.co.uk:
Chats led to Acxiom hacker bust. Read more

21 december 2003

New in Archive
ControlTotal 0.11.3

Podonok 1.0

IP Messenger PLUS

Backdoor.Delf.ci

Vulnerabilities & Exploits
www.security-corporation.com:
BES-CMS including file vulnerability. Read more

www.securitytracker.com:
CyberGuard Firewall Proxy Error Page Input Validation Flaw May Permit Cross-Site Scripting Attacks. Read more

www.securitytracker.com:
Active WebCam Input Validation Flaws Disclose Files on the System and Permit Cross-Site Scripting. Read more

www.securitytracker.com:
Subscribe Me Input Validation Flaw in 'setup.pl' Lets Remote Users Execute Arbitrary Commands. Read more

www.securitytracker.com:
Xerox Document Centre Lets Remote Users View Files and Add Users. Read more

News
www.zwire.com:
Beware of Internet 'Phishing' scam. Read more

www.sun-sentinel.com:
Caution is key to Web buys. Read more

www.dailysentinel.com:
Fraud takes on many identities. Read more

20 december 2003

New in Archive
Dzyckz 1.0

Orbit 1.0

Hackarmy (f)

Backdoor.Delf.q

Vulnerabilities & Exploits
www.securitytracker.com:
ECW-Shop Input Validation Flaw in 'cat' Permits Remote Cross-Site Scripting Attacks. Read more

www.securitytracker.com:
Dada Mail Lets Remote Users Login in Certain Cases and Also Bypass Subscription Confirmation. Read more

xforce.iss.net:
Microsoft Internet Explorer URL Spoofing Vulnerability. Read more

www.securitytracker.com:
Kerio Personal Firewall Can Be Crashed By Remote Users Conducting TCP Stealth Scans. Read more

www.securitytracker.com:
Avotus CDR Software May Disclose Files to Remote Users. Read more

www.securitytracker.com:
IBM AIX 'enq' Format String Flaw Lets Local Users Gain Root Privileges. Read more

www.securitytracker.com:
IBM AIX 'diag' Command Yields Root Privileges to Local Users. Read more

www.securitytracker.com:
ProjectApp Authentication Flaw Lets Remote Users Gain Administrative Access. Read more

www.securitytracker.com:
IntranetApp Access Control Flaw Lets Remote Authenticated Users Reset Passwords for Arbitrary Accounts. Read more

www.securitytracker.com:
PortalApp Authentication Flaw Lets Remote Users Gain Administrative Access. Read more

www.securitytracker.com:
Openwares.org 'Microsoft IE Security Patch' URL Buffer Overflow Lets Remote Users Execute Arbitrary Code. Read more

www.securitytracker.com:
AutoRank PHP Input Validation Flaw in 'accounts.php' Permits Remote SQL Injection. Read more

News
www.securityfocus.com:
Chats led to Acxiom hacker bust. Read more

www.securityfocus.com:
Fears, abuse accompany proliferation of Internet maps. Read more

www.theregister.co.uk:
Open source outfit releases vulnerability for IE vulnerability. Read more

www.theregister.co.uk:
'Open source' IE patch withdrawn for further patching. Read more

news.zdnet.co.uk:
Mitnick calls for hackers' war stories. Read more

US demands compensation from hacker. Read more

19 december 2003

New in Archive
GoldenEye 1.0

Lamers Death 2.4(b) server

Backdoor.Delf.n server

Backdoor.Delf.p server

LegendMir 1.0 (a)

Guides, Papers, etc.
www.zone-h.org:
Fyodor's Interview. Read more

Vulnerabilities & Exploits
www.securitytracker.com:
Ethereal Bugs in SMB and Q.931 Dissectors Let Remote Users Crash the System. Read more

www.securitytracker.com:
Security Auditor's Research Assistant (SARA) Input Validation Flaw in Scanned Banners Permits Remote Cross-Site Scripting. Read more

www.securitytracker.com:
osCommerce 'osCsid' Input Validation Flaw Allows Remote Users to Conduct Cross-Site Scripting Attacks. Read more

www.securiteam.com:
HP-UX libc NLSPATH Environment Variable Privilege Elevation (Exploit). Read more

www.securiteam.com:
eZ Package Stack Overflow Vulnerability. Read more

www.securiteam.com:
Buffer Overflow Allows Privileges Escalation in MacOS X. Read more

www.securiteam.com:
Cisco PIX Vulnerabilities (SNMP, VPNC). Read more

www.securiteam.com:
Cisco FWSM Multiple Vulnerabilities. Read more

www.securiteam.com:
Flash Player Local Shared Object Vulnerability (Patch). Read more

www.securiteam.com:
Multiple DUWare Vulnerabilities. Read more

www.securiteam.com:
Xlight FTP Server Directory Traversal and DoS. Read more

www.securiteam.com:
Doro Allows Gaining Administrative Privileges. Read more

www.securiteam.com:
Invision Power Top Site List SQL Injection. Read more

News
www.internetweek.com:
Cayam Worm Angles For eBay Account Info. Read more

www.theregister.co.uk:
Police in paedo porn sting. Read more

www.securityfocus.com:
Fears, abuse accompany proliferation of Internet maps. Read more

www.signonsandiego.com:
Ohio computer hacker pleads guilty to stealing data. Read more

18 december 2003

New in Archive
Monk 1.0

Lamers Death 2.5 (d) Server

BirdSpy (b)

Backdoor.Delf.o server

Guides, Papers, etc.
www.packetwatch.net:
Packet Sniffing on Layer 2 Switched Local Area Networks. (pdf) Read more

www.appsecinc.com:
Hack-proofing DB2 Presentation. (pdf) Read more

Vulnerabilities & Exploits
www.securitytracker.com:
WS_FTP Server Can Be Crashed By Remote Authenticated Users Sending Certain CWD Commands. Read more

www.securiteam.com:
J2EE Database Component Remote Code Execution. Read more

www.securiteam.com:
Windows Messenger Exploit Code (MS03-043). Read more

News
www.computerworld.com:
NASA sites hacked, Zone-H says. Read more

www.pcpro.co.uk:
Microsoft warns: your new PC is already out of date. Read more

www.hardwarezone.com:
Trend Micro Mends Virus-Infected Computers At 22nd SEA Games. Read more

news.bbc.co.uk:
Cyber threats risk net's future. Read more

timesofindia.indiatimes.com:
Govt to probe hacking of CM’s server. Read more

star-techcentral.com:
Ukrainian hacker to be extradited. Read more

17 december 2003

New in Archive
Satan Cam View 1.0

System33r Tiny Webdownloader fwb 0.1

Cam2Ftp 1.0

NetSnake 2.0

Guides, Papers, etc.
www.microsoft.com:
Steps that you can take to help identify and to help protect yourself from deceptive (spoofed) Web sites. Read more

www.microsoft.com:
Take Steps to Avoid Getting Tricked by Spoof Websites. Read more

www.securityfocus.com:
Nessus, Part 2: Scanning. Read more

Vulnerabilities & Exploits
www.securitytracker.com:
Java J2EE PointBase Configuration Flaw Lets Remote Users Execute Arbitrary Binaries. Read more

www.securitytracker.com:
Invision Power Board 'sort_key' Input Validation Flaw May Let Remote Users Inject SQL Commands. Read more

www.securitytracker.com:
Invision Power Top Site List 'offset' Input Validation Flaw May Let Remote Users Inject SQL Commands. Read more

www.securitytracker.com:
Aardvark Topsites PHP Input Validation Flaw Permits Remote SQL Injection. Read more

News
www.smh.com.au:
IE users beware, says virus researcher. Read more

www.usatoday.com:
Microsoft studies browser flaw that may aid ID theft. Read more

Microsoft Probes Flaw That Could Help Fraudsters Create Fake Web Sites. Read more

timesofindia.indiatimes.com:
Govt to probe hacking of CM’s server. Read more

16 december 2003

New in Archive
Elkcro Orifice 1.0

Little-Wirc 1.0

The Torment Remote 1.02

Backdoor.Delf.i server

Tools
www.klcconsulting.net:
With SMAC, you can modify the MAC address of almost any Network Interface Card (NIC) on Windows 2000 & XP systems, regardless of whether manufacturers allow this option or not. Read more

Guides, Papers, etc.
www.schneier.com:
The Fallacy of Cracking Contests. Read more

Vulnerabilities & Exploits
www.securitytracker.com:
DameWare Mini Remote Control Buffer Overflow Lets Remote Users Execute Arbitrary Code. Read more

www.securitytracker.com:
Mac OS X 'cd9660.util' Buffer Overflow Yields Root Privileges to Local Users. Read more

www.securitytracker.com:
W-Agora PHP Input Validation Flaws Let Remote Users Include and Execute Arbitrary PHP Code and Commands. Read more

www.securitytracker.com:
CGIForum Discloses Passwords to Local Users. Read more

www.securitytracker.com:
CGINews Discloses Passwords to Local Users and Log Files to Remote Users. Read more

www.securitytracker.com:
osCommerce Input Validation Flaw in 'create_account_process.php' Permits Remote SQL Injection. Read more

www.securitytracker.com:
Cyrus IMSPd abook_dbname() Buffer Overflow Lets Remote Users Execute Arbitrary Code with Root Privileges. Read more

www.securitytracker.com:
Cisco Firewall Services Module (FWSM) Buffer Overflow in Cut-Through Proxy Authentication Lets Remote Users Crash the FWSM. Read more

www.securitytracker.com:
Cisco Firewall Services Module Can Be Crashed By Remote Users Sending SNMPv3 Messages. Read more

www.securitytracker.com:
Cisco PIX Firewall VPNC Tunnels May Be Dropped Due to Remote Users. Read more

www.securitytracker.com:
Cisco PIX Firewall Can Be Crashed By Remote Users Sending SNMPv3 Messages. Read more

www.securitytracker.com:
Sun Solaris lpstat Buffer Overflow Yields Root Access to Local Users. Read more

www.securitytracker.com:
Doro PDF Writer Lets Local Users Gain System Privileges. Read more

www.securitytracker.com:
mvdsv Quake Server Download Buffer Overflow Allows Remote Code Execution. Read more

www.securitytracker.com:
Computer Associates Unicenter Remote Control Lets Local Users Gain System Privileges. Read more

www.securitytracker.com:
Computer Associates 'Control IT' Lets Local Users Gain System Privileges. Read more

www.securitytracker.com:
Xlight FTP Server '..\' Directory Traversal Flaw Discloses Files to Remote Users. Read more

News
zdnet.com.com:
Finance sector fears 'phishing' season in 2004. Read more

news.com.com:
Did MSBlast cause the Aug. 14 blackout? The official analysis says "no," but I'm not so sure. Read more

news.com.com:
SCO attacks keep coming back. Read more

www.mirror.co.uk:
HACKERS' £85MILLION SHOPPING SPREE. Read more

msnbc.msn.com:
Hacking for Dollars. Read more

15 december 2003

New in Archive
Iroffer 1.2b23

UpKiller's RootKit 0.55

NetSnake 4.4

Backdoor.Delf.j server

Vulnerabilities & Exploits
www.kb.cert.org:
Multiple web-based email services fail to filter malicious characters when the message contains cascading style sheet character escaping. Read more

www.securitytracker.com:
LFTP Buffer Overflow in Processing HTTP Responses May Allow Remote Code Execution. Read more

www.securitytracker.com:
Opera Web Browser Download Dialog Lets Remote Users Delete Arbitrary Files. Read more

www.securitytracker.com:
NeoStats May Give UnrealIRCd Remote Users Additional '+T' Usermode Privileges. Read more

www.securiteam.com:
Multiple Vulnerabilities in Adaptive Server Anywhere Network Server. Read more

News
www.nytimes.com:
Hackers Steal From Pirates, to No Good End. Read more

star-techcentral.com:
New security flaw in IE. Read more

14 december 2003

New in Archive
System33r Tiny Webdownloader 0.1

RedShell 1.0

Backdoor.Delf.el server

Backdoor.Delf.bd

News
www.itbusiness.ca:
Social engineering holds clue to security leaks: expert. Read more

www.eweek.com:
Security Experts Warn of New Way to Attack Windows. Read more

www.onlineathens.com:
Virus targets junk mail fighters. Read more

www.computerworld.com:
No Christmas patches from Microsoft. Read more

www.theregister.co.uk:
Windows Longhaul? Longhorn could be 2008, says Gartner. Read more

13 december 2003

New in Archive
Waar-Daat 1.0

MSN dakait 1.0 beta

Tiny stupid dloader

Backdoor.Delf.c server

Vulnerabilities & Exploits
[Opera 7] Arbitrary File Delete Vulnerability. Read more

www.securitytracker.com:
Opera Web Browser Download Dialog Lets Remote Users Delete Arbitrary Files. Read more

www.securitytracker.com:
NeoStats May Give UnrealIRCd Remote Users Additional '+T' Usermode Privileges. Read more

News
www.betanews.com:
IE Security Flaw Upsets Microsoft Patch Schedule. Read more

www.theregister.co.uk:
Anti-spam law will tie up UK firms up in red tape. Read more

www.hindustantimes.com:
CBI helps nail French hacker. Read more

www.wirelessweek.com:
China's new encryption rules upset U.S. firms. Read more

www.computerworld.com:
Criticism of electronic voting machines’ security is mounting. Read more

12 december 2003

New in Archive
Harvester 2003 (mail) 02

Portless Backdoor 1.2

Inspiration 1.2SE

Vulnerabilities & Exploits
www.secunia.com:
Internet Explorer URL Spoofing Vulnerability. Read more

www.coresecurity.com:
DCE RPC Vulnerabilities New Attack Vectors Analysis. Read more

www.securitytracker.com:
RemotelyAnywhere Lets Remote Users Inject Messages on the Login Page. Read more

www.securitytracker.com:
irssi Client Extraneous format_send_to_gui() Function Call Parameter Lets Remote Users Crash the Client. Read more

www.securitytracker.com:
sipd Can Be Crashed By Remote Users. Read more

www.securitytracker.com:
Sun Solaris ed(1) Unsafe Temporary Files May Let Local Users Gain Elevated Privileges. Read more

www.securitytracker.com:
NETGEAR WAB102 Wireless Access Point Lets Remote Users Login Without Authenticating. Read more

www.securitytracker.com:
VisitorBook LE Input Validation Flaw Lets Remote Users Send E-mail Via the System. Read more

www.securitytracker.com:
Mambo Server Input Validation Flaw in $artid in articles.php Permits SQL Injection. Read more

www.securitytracker.com:
FlashGet Stores User Password in Plaintext in the Registry. Read more

www.securitytracker.com:
Mambo Server Authentication Flaws Let Remote Users Change Data and Parameters. Read more

www.securitytracker.com:
Sybase Adaptive Server Anywhere Has Multiple Flaws That Let Remote Authenticated Users Gain Elevated Privileges. Read more

www.securitytracker.com:
Cisco Unity on IBM Servers Contain Default Accounts and Settings Used During Testing. Read more

www.securitytracker.com:
Cisco Application and Content Networking Software (ACNS) Buffer Overflow in Authentication Module Lets Remote Users Execute Arbitrary Code. Read more

www.securiteam.com:
Ebola Username and Password Remote Exploit. Read more

www.securiteam.com:
Unity Vulnerabilities on IBM-based Servers. Read more

www.securiteam.com:
Vulnerability in Authentication Library for ACNS. Read more

www.securiteam.com:
SHELL32.DLL Denial of Service. Read more

News
www.theregister.co.uk:
Phishmongers target Lloyds TSB customers. Read more

www.computerworld.com:
'Zero-day' attacks seen as growing threat. Read more

www.atnewyork.com:
Microsoft's Patching Conundrum. Read more

www.theregister.co.uk:
Yahoo! fixes Web mail vuln. Read more

www.theregister.co.uk:
Wanna complain about spam? You must be joking. Read more

www.thestar.com:
Encryption rules alarm Americans. Read more

11 december 2003

New in Archive
Beast 2.05

Nethief 5.3

Snow 3.2

NetSnake 2.02

Guides, Papers, etc.
www.securityfocus.com:
A Comparison Study of Three Worm Families and Their Propagation in a Network. Read more

www.nextgenss.com:
Variations in Exploit Methods Between Linux and Windows. (pdf) Read more

Vulnerabilities & Exploits
Cisco Security Advisory:
Unity Vulnerabilities on IBM-based Servers. Read more

www.securitytracker.com:
Macromedia JRun XML Parsing Lets Remote Users Consume CPU Resources With SOAP Requests. Read more

www.securitytracker.com:
Macromedia ColdFusion XML Parsing Lets Remote Users Consume CPU Resources With SOAP Requests. Read more

www.securitytracker.com:
Microsoft ASP.NET Web Services XML Parsing Lets Remote Users Consume CPU Resources With SOAP Requests. Read more

www.securitytracker.com:
IBM WebSphere XML Parsing Lets Remote Users Consume CPU Resources With SOAP Requests. Read more

www.securitytracker.com:
Microsoft IE Does Not Properly Display Some URLs. Read more

www.securitytracker.com:
BNCweb Input Validation Flaw Discloses Files to Remote Users. Read more

www.securitytracker.com:
Ben Barnett Guestbook Input Validation Flaw Permits Cross-Site Scripting Attacks. Read more

www.securitytracker.com:
Linux 2.4 Kernel TCP/IP Fragment Reassembly Flaw May Let Remote Users Deny Service. Read more

News
zdnet.com.com:
IE bug lets fake sites look real. Read more

www.oreillynet.com:
What the Heck is Going On (Another IE Security Hole, Among Other Things). Read more

www.its.caltech.edu:
Windows Messenger Vulnerabilities and What to Do. Read more

Microsoft Security Bulletin MS03-051
Buffer Overrun in Microsoft FrontPage Server Extensions Could Allow Code Execution (813360). Read more

www.detnews.com:
Computer virus uses scrambled code to resist removal. Read more

www.blackhat.com:
Black Hat Asia 2003 Briefings and Training. Read more

www.theregister.co.uk:
UK anti-spam law goes live. Read more

www.e4engineering.com:
War games online. Read more

www.boston.com:
SCO Group Web site hacked again. Read more

www.securitypipeline.com:
Microsoft Preps Windows XP Service Pack 2 Beta. Read more

10 december 2003

New in Archive
Windows Remote Shell

Live-Wire G3 1.0.0 Beta

Backdoor.Delf.g server

Guides, Papers, etc.
www.securityfocus.com:
Home User Security: Personal Firewalls. Read more

Vulnerabilities & Exploits
Internet Explorer URL parsing vulnerability. Read more

www.securitytracker.com:
@Mail Input Validation Flaws Let Remote Users Inject SQL to Access Other User Accounts. Read more

www.securitytracker.com:
CVS Input Validation Flaw May Let Remote Users Send Malformed Module Requests to Create Root Directories and Files. Read more

www.securitytracker.com:
Web Eye Video Servers Disclose Usernames and Passwords. Read more

www.securitytracker.com:
Land Down Under (LDU) SQL Injection Hole Lets Remote Users Access User Accounts. Read more

www.securitytracker.com:
Ben's Guestbook Cross Site Scripting Vulnerability. Read more

www.securitytracker.com:
Snif Script Cross Site Scripting Vulnerability. Read more

News
www.theregister.co.uk:
Mafia recruiting spammers, crackers, AV chief warns. Read more

www.theregister.co.uk:
NatWest warns of dodgy email. Read more

rss.com.com:
Worm hits Windows-based ATMs. Read more

www.securityfocus.com:
FTC investigates PetCo.com security hole. Read more

www.computerworld.com:
Security experts form patch support group. Read more

www.e4engineering.com:
War games online. Read more

www.theregister.co.uk:
Congress passes anti-spam bill. Read more

www.news.com.au:
Students fight for pop-up ads. Read more

09 december 2003

New in Archive
Nuclear RAT 1.0 Public Beta 4.03

NetSnake 4.9 server

Remote Server Trojan 3.0

Guides, Papers, etc.
www.lurhq.com:
Sinit P2P Trojan Analysis. Read more

www.securityfocus.com:
Home User Security: Personal Firewalls. Read more

Vulnerabilities & Exploits
www.securitytracker.com:
cdwrite Temporary File Flaw Lets Local Users Overwrite Files. Read more

www.securitytracker.com:
Abyss Web Server Directory Password Protection Can Be Bypassed. Read more

www.securitytracker.com:
eZ 'eZnet.exe' Stack Overflow Lets Remote Users Execute Arbitrary Code. Read more

www.securiteam.com:
Dell BIOS DoS (Invalid Characters in BIOS Password). Read more

www.securiteam.com:
AppleShare IP FTP Server Denial of Service (/). Read more

www.securiteam.com:
WebEye User Disclosure Vulnerability (Exploit). Read more

www.securiteam.com:
Land Down Under auth.php SQL Injection. Read more

News
www.billingsgazette.com:
Bug with byte: New computer virus isn't a disaster -- yet. Read more

www.overclockersclub.com:
"News: Experts Worried After Worm Hits Windows-Based ATMs". Read more

rss.com.com:
Good guys versus bad guys--who's ahead? Read more

www.abc.net.au:
Cybercops and robbers growing trickier on World Wide Web. Read more

news.bbc.co.uk:
'Miserable failure' links to Bush. Read more

08 december 2003

New in Archive
BirdWatcher

BirdSpy (a) server

Jack-t-ripper

Vulnerabilities & Exploits
www.securitytracker.com:
Apple Safari Web Browser Cookie Processing Bug May Let Remote Web Sites Steal a User's Cookies for Any Domain. Read more

www.securiteam.com:
PLDaniels Ebola Remote Buffer Overflow. Read more

www.securiteam.com:
Linux Kernel do_brk() Vulnerablility (Explained). Read more

www.securiteam.com:
Linux Kernel Do_brk(), Another Proof-of-Concept Code For I386. Read more

News

07 december 2003

New in Archive
Stealth Redirector 2.0

Port mapper v1.40b

Under7pro 1.01

Vulnerabilities & Exploits
www.securitytracker.com:
Xoops Multiple Input Validation Flaws Let Remote Users Inject SQL Commands. Read more

www.securitytracker.com:
Jason Maloney Guestbook Input Validation Flaw Permits Remote Cross-Site Scripting Attacks. Read more

www.securitytracker.com:
Appleshare IP FTP Server Can Be Crashed By Remote Authenticated Users. Read more

www.securitytracker.com:
VP-ASP shopdisplayproducts.asp Input Validation Flaw Permits Cross-Site Scripting Attacks. Read more

06 december 2003

New in Archive
Injector 1.0

HoneyPot 2004

iA WebDL 1.0

Vulnerabilities & Exploits
www.securitytracker.com:
Novell NetWare NFS (XNFS.NLM) Trusted Host Bug May Let Remote Users Access Restricted Shares. Read more

www.securitytracker.com:
Ebola Buffer Overflow in handle_PASS() Lets Remote Users Execute Arbitrary Code. Read more

www.securitytracker.com:
4inarow Buffer Overflow May Let Local Users Gain Elevated Privileges. Read more

News
www.blackhat.com:
Black Hat Briefings Amsterdam Call for Papers. Read more

www.informationweek.com:
Spam-Virus Marriage Seen As Leading Internet Threat Next Year. Read more

www.infoworld.com:
Microsoft's patchwork security blanket. Read more

www.globetechnology.com:
No holiday from hackers over Thanksgiving. Read more

05 december 2003

New in Archive
NetCrack 1.3 alpha 3.5

The TIc.K 2003 v0.1

Trojan Killer 2.2

Vulnerabilities & Exploits
www.securitytracker.com:
Rsync Heap Overflow in Daemon Mode Lets Remote Users Execute Arbitrary Code. Read more

www.securitytracker.com:
XBoard Unsafe Temporary Files May Let Local Users Gain Elevated Privileges. Read more

www.securitytracker.com:
Websense Input Validation Flaw in Blocked Site Error Message Permits Cross-Site Scripting Attacks. Read more

www.securitytracker.com:
GnuPG 'gpgkeys_hkp' Format String Flaw Lets Remote Keyservers Execute Arbitrary Code. Read more

www.securitytracker.com:
eZphotoshare Buffer Overflows Let Remote Users Execute Arbitrary Code. Read more

News
www.theregister.co.uk:
The growing problem of identity theft. Read more

cyberatlas.internet.com:
The Deadly Duo: Spam and Viruses, November 2003. Read more

www.theregister.co.uk:
Spam epidemic gets worse. Read more

www.theregister.co.uk:
eBay 'hacker' challenges PC ban. Read more

www.belfasttelegraph.co.uk:
Hacker penetrates 15 company networks. Read more

www.eweek.com:
Yahoo Patches IM Security Hole. Read more

04 december 2003

New in Archive
Fire Hell 1.0 Beta

Radar 1.0

Glacier 2000

Vulnerabilities & Exploits
www.securitytracker.com:
Sun ONE Web Server Can Be Crashed By Remote Users Due to Unspecified Flaw. Read more

www.securitytracker.com:
Solaris Xsun Direct Graphics Access Mode Insecure Temporary Files May Allow Local Users to Gain Root Privileges. Read more

www.securiteam.com:
Linux Kernel 2.4.22 do_brk() Proof of Concept. Read more

www.securiteam.com:
GnuPG External HKP Interface Format String. Read more

www.securiteam.com:
SNMP Trap Reveals WEP Key in Cisco Aironet Access Point. Read more

www.securiteam.com:
IBM Directory Server Web Admin GUI (ldacgi.exe) XSS Vulnerability. Read more

www.securiteam.com:
Yahoo Instant Messenger YAUTO.DLL Buffer Overflow (YAuto.NSAuto.1). Read more

www.securiteam.com:
Userland Can Access Linux Kernel Memory (do_brk() Argument Bound Checking). Read more

www.securiteam.com:
Surfboard HTTPd Directory Traversal and DoS Vulnerabilities. Read more

www.securiteam.com:
Jason Maloney's CGI Guestbook Remote Command Execution Vulnerability. Read more

www.securiteam.com:
RNN's Guestbook Multiple Vulnerabilities. Read more

News
www.theregister.co.uk:
Heavy squalls of blended worms to hit next year. Read more

www.usatoday.com:
Microsoft official: Web virus authors winning battle. Read more

star-techcentral.com:
Viruses, spam: A depressing year ahead. Read more

www.securityfocus.com:
Heckenkamp Challenges Computer Ban. Read more

www.reuters.co.uk:
U.S. Not Prepared for Cyber Terrorism -Officials. Read more

www.startribune.com:
Police database an easy target, hacker says. Read more

www.vnunet.com:
Firms fight 500 internet attacks a month. Read more

news.bbc.co.uk:
Porn virus targets spam stoppers. Read more

www.detnews.com:
Retail hacker sentenced to 1-1/2 years in prison. Read more

03 december 2003

New in Archive
Cabronator3 kill 1.3

MSN Extreme 2

Specrem 6.0

Vulnerabilities & Exploits
www.cisco.com:
SNMP Trap Reveals WEP Key in Cisco Aironet Access Point. Read more

www.securitytracker.com:
Yahoo! Messenger YAUTO.DLL ActiveX Buffer Overflow Lets Remote Users Execute Arbitrary Code. Read more

www.securitytracker.com:
IBM Tivoli Directory Server Input Validation Flaw Permits Remote Cross-Site Scripting Attacks. Read more

www.securitytracker.com:
Cisco Aironet Access Point Discloses WEP Key Via SNMP Messages. Read more

www.securitytracker.com:
Sun Fire B1600 Blade System Can Be Disrupted By ARP Packets on the Management Port. Read more

www.securitytracker.com:
HP-UX shar(1) Unsafe Temporary Files May Let Local Users Gain Elevated Privileges. Read more

News
www.theregister.co.uk:
Mimail variant attacks anti-spam sites. Again. Read more

www.detnews.com:
Disney Web site among targets of new 'MiMail' worm. Read more

www.theregister.co.uk:
OFT cracks down on dodgy domain sellers. Read more

www.esj.com:
Best Practices: Avoiding Computer Worms. Read more

www.adn.com:
Appeal of young hacker's acquittal opens in Norway. Read more

www.theregister.co.uk:
Hackers used unpatched server to breach Debian. Read more

www.sunherald.com:
Tech Execs Fight Computer Security Regs. Read more

zdnet.com.com:
Biggest security problem--it's human. Read more

www.siliconvalley.com:
Security worries keep many from banking online. Read more

www.theregister.co.uk:
Watching the Net's background radiation. Read more

www.computerworld.com:
Tips on locking down your WLAN. Read more

02 december 2003

New in Archive
Gates of Hell 0.1 server

Area Control 1.0

Yulihubot 1.2

Guides, Papers, etc.
www.securityfocus.com:
Exploiting Cisco Routers: Part 2. Read more

Vulnerabilities & Exploits
www.securitytracker.com:
VP-ASP Input Validation Flaws in 'shopsearch' and 'shopdisplayproducts' Let Remote Users Execute Arbitrary Commands. Read more

www.securitytracker.com:
Jason Maloney Guestbook POST Input Validation Flaw Lets Remote Users Execute Arbitrary Commands. Read more

www.securitytracker.com:
Linux 2.4 Kernel do_brk() Integer Overflow Lets Local Users Grab Root Privileges. Read more

www.securitytracker.com:
Surfboard httpd Input Validation Flaw Lets Remote Users View Arbitrary Files on the System. Read more

www.securiteam.com:
Malicious DHCP Allows Root Compromise of Mac OS X. Read more

www.securiteam.com:
Fortigate Firewall Web Interface Vulnerabilities. Read more

www.securiteam.com:
OpenCA Signature Verification Vulnerabilities. Read more

www.securiteam.com:
Virtual Programming VP-ASP Shopping Cart Multiple SQL Injection Vulnerabilities. Read more

www.securiteam.com:
Snif File Disclosure Vulnerability. Read more

www.securiteam.com:
CuteNews Information Disclosure. Read more

News
www.theregister.co.uk:
.name registry site hacked. Read more

deseretnews.com:
Hacker's life doesn't last forever, dude. Read more

www.vnunet.com:
Crime sometimes pays. Read more

www.globetechnology.com:
Government role in IT security: Free hand or iron fist. Read more

news.xinhuanet.com:
Cyber security force imperative in China: experts. Read more

01 december 2003

New in Archive
LWDownloader 1.0

Cabronator 1.0 (d)

Mona 1.0

Vulnerabilities & Exploits
www.securitytracker.com:
AlaCart Shopping Cart Lets Remote Users Gain Administrative Access. Read more

www.securitytracker.com:
PieterPost Virtual Account May Let Remote Users Send Anonymous E-mail. Read more

www.securitytracker.com:
CuteNews Discloses Web Server Information to Remote Users. Read more

www.securiteam.com:
Multiple Remote Issues in Applied Watch IDS Suite. Read more

www.securiteam.com:
GnuPG's ElGamal Signing Keys Compromised. Read more

News
www.theregister.co.uk:
MS takes $1.1bn 'hostage' to freeze Lindows out of California case. Read more

www.theage.com.au:
Website of .name registry hacked. Read more

www.smh.com.au:Read more

www.theage.com.au:
Mimail variants hog spots on worm chart. Read more

www.sunherald.com:
E-mail scams become slicker. Read more

www.iht.com:
Wireless world gets a new worry: viruses. Read more

business.bostonherald.com:
Known around the world: Private records may be at risk. Read more

01 november 2003

New Trojans
Pilot 1.0.5

Remote Shut 1.1

Taladrator 2.1(b) server

PwlTools with dropper

Vulnerabilities & Exploits
www.securitytracker.com:
LedForums 'Top Message' Input Validation Flaw Permits Cross-Site Scripting Attacks. Read more

www.securitytracker.com:
FlexWATCH Network Video Server Authentication Flaw Grants Administrative Access to Remote Users. Read more

www.securitytracker.com:
iWeb Server '%5C' Input Validation Flaw Discloses Files on the System to Remote Users. Read more

News
www.pcworld.com:
New Worm Steals User Data. Read more

www.chron.com:
Sealed with a kiss, new e-mail virus spreading. Read more

www.theregister.co.uk:
The conspiracy against our in-boxes. Read more

www.timesonline.co.uk:
Founder of Redbus denies hacking. Read more

news.zdnet.co.uk:
Worms and toasters turn up heat on corporate security. Read more


Copyright© MegaSecurity.org