News January 2005

Home News Archive Translate Traducen

News January 2005

31 January 2005
Guides, Papers, etc
www.maxpatrol.com:
Defeating Microsoft Windows XP SP2 Heap protection and DEP bypass. Read more
www.research.ibm.com:
An Environment for Controlled Worm Replication and Analysis. Read more
Time to deny users their rights
www.vnunet.com:
Microsoft undermines its security by giving every Windows user admin rights. Read more

Tools
securityresponse.symantec.com:
Tool to reset shell\open\command registry keys. Read more
www.splint.org:
Splint is a tool for statically checking C programs for security vulnerabilities and coding mistakes. Read more

News:
nwc.securitypipeline.com:
Microsoft Anti-Piracy Plan Sacrifices Security. Read more
news.com.com:
Report: Major Windows security update foiled. Read more
www.pcauthority.com.au:
Hackers target online gamers. Read more
www.theregister.co.uk:
Germany gets tough with spammers. Read more
star-techcentral.com:
Some RFID chips vulnerable to hacking. Read more
www.mytelus.com:
U.S. researchers say they cracked security system used in millions of cars. Read more
www.terra.net.lb:
US teen sentenced to 18 months jail for creating 'Blaster' Internet worm. Read more
www.terra.net.lb:
New 'bot' virus suspected of infecting 2,500 computers in Japan. Read more

30 January 2005
Guides, Papers, etc
www.maxpatrol.com:
Defeating Microsoft Windows XP SP2 Heap protection and DEP bypass. Read more

Tools
www.invircible.com:
Toggle Mode utility. This utility allows the switching of any Win 32 platform from 'normal' startup mode, into a 'safe with command prompt' like mode, and back to normal. The ToggleMode utility is especially usefull for the handling of viruses and malware on Windows 32 platforms, as well as conducting Windows repair tasks. Read more
www.drugphish.ch:
The C Code Analyzer (CCA) is a static analysis tool for detecting potential security problems in C source code. Read more

Vulnerabilities & Exploits
www.k-otik.com:
Squid Proxy Cache WCCP Remote Buffer overflow Vulnerability. Read more
www.securitytracker.com:
WebAdmin useredit_account.wdm Permits Cross-Site Scripting Attacks and Lets Remote Authenticated Users Access Other Accounts. Read more

News:
seattletimes.nwsource.com:
Blaster hacker receives 18-month sentence. Read more
www.newsbug.net:
Teen Sentenced for MS Blaster Virus. Read more
economictimes.indiatimes.com:
New virus suspected of infecting 2,500 PCs in Japan. Read more
www.earthtimes.org:
'MySQL bot' database worm is halted. Read more
www.macworld.com:
MySQL warns users, contemplates changes after worm. Read more
www.theregister.co.uk:
Norwegian student fined for MP3 links. Read more

29 January 2005
Vulnerabilities & Exploits
securitytracker.com:
UW IMAP CRAM-MD5 Authentication Flaw Lets Remote Users Access Arbitrary IMAP Accounts. Read more
securitytracker.com:
WebWasher Classic Lets Remote Users Connect to Localhost Ports. Read more
securitytracker.com:
DokuWiki 'userewrite' Mode Discloses Restricted Pages to Remote Users. Read more
securitytracker.com:
XOOPS Incontent Module Discloses PHP File Contents to Remote Users. Read more
securitytracker.com:
Debian libpam-radius-auth Discloses Configuration File to Local Users. Read more
securitytracker.com:
HP-UX TGA Daemon Lets Remote Users Deny Service. Read more
securitytracker.com:
War FTP Daemon Can Be Crashed By Remote Users. Read more
securitytracker.com:
Ingate Firewall Fails to Disconnect PPTP Connections When a User is Disabled. Read more
securitytracker.com:
SmarterMail Lets Remote Users Upload Arbitrary Scripting Code and Execute Them. Read more
securitytracker.com:
Exponent CMS Discloses Path to Remote Users and Permits Cross-Site Scripting Attacks. Read more
securitytracker.com:
Linux Kernel coda_pioctl Buffer Overflow Lets Local Users Execute Arbitrary Code. Read more

News:
www.computerworld.com:
MySQL installations targeted by Forbot worm variant. Read more
www.theregister.co.uk:
MySQL worm attacks Windows servers. Read more
www.vnunet.com:
Bot infects thousands of MySQL PCs. Read more
news.zdnet.co.uk:
Government concerned about MySpooler worm. Read more
news.zdnet.co.uk:
New varieties of Bagle should be toast. Read more
www.theregister.co.uk:
Unholy trio pose DDoS risk for Cisco kit. Read more
seattlepi.nwsource.com:
Judge takes pity on defendant in Internet worm case, blames parents. Read more
www.startribune.com:
Prosecutors seek 37-month term in Internet worm case. Read more
www.securitypipeline.com:
Directory Harvest Attacks: The "Silent Kill" Of E-Mail Systems. Read more
software.silicon.com:
First phishing conviction across the Channel. Read more
www.theregister.co.uk:
Mobile virus epidemics: don't panic. Read more
www.theregister.co.uk:
Cyber-stalker faces sentencing today. Read more
news.zdnet.co.uk:
Worm hijacks open source database. Read more
news.zdnet.co.uk:
Criminal IT: Should you trust the Internet? Read more

28 January 2005
Vulnerabilities & Exploits
www.k-otik.com:
Novell iChain Mutual Authentication Security Bypass Issue. Read more
www.k-otik.com:
War FTP Daemon Remote Denial of Service vulnerability. Read more
xforce.iss.net:
Multiple Vulnerabilities in Cisco IOS. Read more
www.k-otik.com:
HP-UX TGA daemon Remote Denial of Service Vulnerability. Read more
www.debian.org:
DSA-661-1 f2c -- insecure temporary files. Read more
securitytracker.com:
Magic Winmail Server Input Validation Holes in Webmail and IMAP Services Allow Directory Traversal Attacks. Read more
securitytracker.com:
Cisco IOS Can Be Reloaded By Remote Users Sending Multiple IPv6 Packets. Read more
securitytracker.com:
Cisco IOS MPLS Disabled Interfaces Let Remote Users Deny Service. Read more
securitytracker.com:
Openswan Pluto get_internal_addresses() Remote Buffer Overflow Lets Remote Authenticated Users Execute Arbitrary Code. Read more
securitytracker.com:
Cisco IOS BGP log-neighbor-changes Processing Error Lets Remote Users Deny Service. Read more

News:
www.vnunet.com:
Latest Bagle mutant on the rampage. Read more
www.theregister.co.uk:
Spanish police arrest worm suspect. Read more
news.zdnet.co.uk:
Worm hijacks open source database. Read more
news.zdnet.co.uk:
Trojan masquerades as Windows patch. Read more
www.theregister.co.uk:
MS mulls charging for anti-spyware app. Read more
www.securityfocus.com:
Clear skies for Area 51 hacker. Read more
news.zdnet.co.uk:
Security firm probes reports of car viruses. Read more
www.boingboing.net:
Jailed for using a nonstandard browser. Read more
www.theregister.co.uk:
Crooked Microsoft worker masterminded $7m racket. Read more
www.theregister.co.uk:
Police launch site to tackle net pervs. Read more

27 January 2005
Guides, Papers, etc
www.securityfocus.com:
Blind Buffer Overflows In ISAPI Extensions. Read more
www.it-observer.com:
"Buffer Overflow Attacks: Detect, Exploit, Prevent" Shows How to Keep the Code You Write Today from Headlining Tomorrow. Read more

Vulnerabilities & Exploits
www.idefense.com:
Openswan XAUTH/PAM Buffer Overflow Vulnerability. Read more
www.k-otik.com:
MercuryBoard Cross Site Scripting and Path Disclosure Vulnerabilities. Read more
www.k-otik.com:
RealPlayer/RealOne RA File Handling Denial of Service Vulnerability. Read more
www.debian.org:
DSA-660-1 kdebase -- missing return value check. Read more
www.debian.org:
DSA-659-1 libpam-radius-auth -- information leak, integer underflow. Read more
securitytracker.com:
Cisco IOS BGP log-neighbor-changes Processing Error Lets Remote Users Deny Service. Read more
securitytracker.com:
Comdev eCommerce Input Validation Flaws in index.php Permit Cross-Site Scripting Attacks. Read more
securitytracker.com:
Novell iChain Mutual Authentication Configuration May Let Remote User Authenticate to the System. Read more
securitytracker.com:
Perl DBI::ProxyServer Unsafe Temporary Files May Let Local Users Gain Elevated Privileges. Read more
securitytracker.com:
Mac OS X Mail Discloses Ethernet Address to Remote Users. Read more
securitytracker.com:
Mac OS X ColorSync Heap Overflow Lets Users Execute Arbitrary Code. Read more
securitytracker.com:
Apple Mac OS X 'at' Commands Let Local Users Gain Elevated Privileges. Read more
securitytracker.com:
phpEventCalendar Input Validation Holes in Title and Event Text Lets Remote Users Cross-Site Scripting. Read more
securitytracker.com:
W32Dasm Buffer Overflow in Processing Function Names May Let Remote Users Execute Arbitrary Code. Read more
securitytracker.com:
BIND 8 Buffer Overflow in q_usedns Array Lets Remote Users Deny Service. Read more

News:
www.nytimes.com:
A Virus Writer Tests the Limits in Cellphones. Read more
www.pcauthority.com.au:
Mobile viruses just getting started. Read more
www.chinadaily.com.cn:
Computer viruses contacting handsets. Read more
www.thefeature.com:
The Not Really Viruses Are Spreading To Our Cars... Or Not. Read more
software.silicon.com:
Teen virus writer could pay Microsoft over $600,000. Read more
news.zdnet.com:
Flaw finders go their own way. Read more
seattletimes.nwsource.com:
Length of hacker's prison term debated as sentencing nears. Read more
www.theregister.co.uk:
Lawyers demand hard time for Blaster teen. Read more
www.webuser.co.uk:
Mirsa worm wants justice for dads. Read more
news.zdnet.com:
Trojan piggybacks on Microsoft patching. Read more
www.vnunet.com:
Flaw opens antivirus gate. Read more
os.newsforge.com:
Running Windows viruses with Wine. Read more
www.pcworld.idg.com.au:
Trojan Steals Usernames and Passwords for Fantasy Role-Playing Game, Sophos Report. Read more
www.theregister.co.uk:
MS updates: real Windows users only need apply. Read more
www.theregister.co.uk:
Fathers 4 Justice slams �support� virus. Read more
www.vnunet.com:
Bugwatch: Avoiding hotspot hacks. Read more
www.theregister.co.uk:
China bans The Sims. Read more
www.theregister.co.uk:
Earthlink wins cash from spammers. Read more
www.cellular-news.com:
Mobile phone viruses expose wireless handset software weaknesses. Read more
www.itweb.co.za:
Worm's game: Stealing passwords. Read more
www.vnunet.com:
Online ID fraud fears 'out of proportion'. Read more

26 January 2005
Guides, Papers, etc
www.astalavista.com:
Network Firewall Technologies. Read more

Vulnerabilities & Exploits
www.gecadnet.ro:
ActiveX Object HTML Help Control still exploitable after patch MS05-001. Read more
securitytracker.com:
BIND 9 Validator Assumption Error May Let Remote Users Deny Service. Read more
securitytracker.com:
Video Disk Recorder Lets Remote Users Overwrite Files. Read more
securitytracker.com:
Squid Error in Parsing HTTP Content-Length Headers May Let Remote Users Poison the Cache. Read more
securitytracker.com:
Apple 'quicktime.qts' Error in Parsing 'qtif' Images Lets Remote Users Deny Service. Read more
securitytracker.com:
Funduc Search and Replace Buffer Overflow Lets Local Users Execute Arbitrary Code. Read more
securitytracker.com:
Comersus Grants Administrative Access to Remote Users and Permits SQL Injection and Cross-Site Scripting Attacks. Read more
securitytracker.com:
SquirrelMail Input Validation Flaw in webmail.php May Let Remote Users Execute Arbitrary Commands or Conduct Cross-Site Scripting Attacks. Read more
securitytracker.com:
Sun Solaris DHCP Administration Utilities Let Local Users Gain Root Privileges. Read more
securitytracker.com:
Spectrum Cash Receipting System Discloses Passwords to Local Users. Read more
securitytracker.com:
CoolForum Input Validation Holes Let Remote Users Conduct Cross-Site Scripting Attacks. Read more
securitytracker.com:
MercuryBoard Discloses Path to Remote Users and Permits Cross-Site Scripting Attacks. Read more
securitytracker.com:
Evolution Integer Overflow in camel-lock-helper May Let Local and Remote Users Execute Arbitrary Code. Read more
securitytracker.com:
zhcon May Let Local Users Read Files with Elevated Privileges. Read more
securitytracker.com:
DataRescue IDA Pro PE Buffer Overflow in Import Library Name May Let Remote Users Execute Arbitrary Code. Read more
www.debian.org:
DSA-658-1 libdbi-perl -- insecure temporary file. Read more
www.debian.org:
DSA-657-1 xine-lib -- buffer overflow. Read more
www.debian.org:
DSA-656-1 vdr -- insecure file access. Read more
www.debian.org:
DSA-655-1 zhcon -- missing privilege release. Read more

News:
news.zdnet.com:
Expert: Flaw still dogs Windows patch. Read more
crn.com:
Windows Vulnerability Goes Unpatched. Read more
www.mobilemonday.net:
Gavno.a came from Eastern Europe. Read more
www.mobilemonday.net:
3G dream is becoming a security nightmare. Read more
www.theregister.co.uk:
Watch out for bogus health and safety invoices. Read more
news.zdnet.com:
Microsoft: Legit Windows or no updates. Read more
news.zdnet.co.uk:
Insecure online forms put PayPal users at risk. Read more
www.computerworld.com:
Defense Dept. using new tech tools to investigate child porn. Read more
news.zdnet.co.uk:
AV firms slam 'irresponsible' virus writer. Read more
news.com.com:
Computer viruses and chilling speech. Read more
www.detnews.com:
South Florida teen is co-creator of popular Firefox Web browser. Read more
www.theregister.co.uk:
FBI backs transatlantic anti-spam summit. Read more
itvibe.com:
New virus steals passwords for Lineage game. Read more

25 January 2005
Guides, Papers, etc
www1.cs.columbia.edu:
An Analysis of the Skype Peer-to-Peer Internet Telephony Protocol. Read more
www.ida.liu.se:
The HoneyTank : a scalable approach to collect malicious Internet traffic. Read more
www.dimva.org:
FINAL CALL FOR PAPERS. GI SIG SIDAR Conference on Detection of Intrusions and Malware & Vulnerability Assessment. Read more

Vulnerabilities & Exploits
www.idefense.com:
DataRescue Interactive Disassembler Pro Buffer Overflow Vulnerability. Read more
securitytracker.com:
iSync mRouter Buffer Overflow Yields Root Privileges to Local Users. Read more
securitytracker.com:
Golden FTP Server Buffer Overflow in RNTO Command Lets Remote Users Execute Arbitrary Code. Read more

News:
news.zdnet.co.uk:
Electronic eavesdropping rising. Read more
news.zdnet.co.uk:
Security organisation's Web site hacked. Read more
news.zdnet.co.uk:
'Confidential US security documents' flaunted online. Read more
www.pcauthority.com.au:
Worm poses as tsunami relief fund email. Read more
www.theregister.co.uk:
Hotspot paranoia: try to stay calm. Read more
news.zdnet.co.uk:
Thunderbird gets phishing detection. Read more
news.zdnet.co.uk:
Tsunami charity Web site escapes attack. Read more
www.theregister.co.uk:
German police bust porn invoice scammers. Read more
news.zdnet.co.uk:
Researchers uncover Office encryption flaw. Read more
news.zdnet.co.uk:
Crowt.A virus preys on news junkies. Read more
searchsecurity.techtarget.com:
Extroverts more likely to open virus laden e-mail attachments. Read more
news.zdnet.co.uk:
Spammers' goods go on sale on eBay. Read more

24 January 2005
Guides, Papers, etc
www.phrack.org:
PHRACK #63 CALL FOR PAPERS. Read more

Vulnerabilities & Exploits
www.securiteam.com:
Microsoft Internet Explorer Install Engine Control Buffer Overflow (MS04-038). Read more
www.securiteam.com:
Microsoft NetDDE Service Unauthenticated Remote Buffer Overflow (MS04-031). Read more
www.securiteam.com:
Microsoft Internet Explorer .ANI Files Handling Exploit (MS05-002). Read more
www.securiteam.com:
RealPlayer Arbitrary File Deletion Vulnerability. Read more
www.securiteam.com:
RealPlayer 'ShowPreferences' Buffer Overflow Vulnerability. Read more
www.securiteam.com:
RealPlayer Miscellaneous Vulnerabilities (RMP, RJS). Read more
www.securiteam.com:
MSN Heartbeat Control Buffer Overflow (MS04-038). Read more
www.securiteam.com:
Multiple Vulnerabilities in the AtHoc Toolbar for MSIE. Read more
www.securiteam.com:
DivX Player Skin Directory Traversal. Read vmore
www.securiteam.com:
Multiple Vulnerabilities in Comersus BackOffice Lite. Read more
www.securiteam.com:
Multiple Vulnerabilities in Konversation (Exploit). Read more
www.securiteam.com:
fkey Symblink Vulnerability. Read more
securitytracker.com:
KDE Konversation Bugs May Allow a Remote User to Cause Command Execution on a Target User's System. Read more
www.securityfocus.com:
Internet Explorer URL obfuscation. Read more

News:
www.mobilemonday.net:
Lasco worm�s author is a Nokia fan. Read more
www.mobilemonday.net:
New Symbian virus stops basic phone functions. Read more
news.com.com:
Virus writer tests limits in cell phones. Read more
www.computerweekly.com:
Latest worm targets MSN users. Read more
www.pcauthority.com.au:
Worm steals CNN headlines to stay timely. Read more
www.theinquirer.net:
Hackers tapping into phone calls, emails. Read more
www.cellular-news.com:
Most dangerous Symbian virus yet detected. Read more
icbirmingham.icnetwork.co.uk:
Man blamed net virus for child porn. Read more

23 January 2005
Guides, Papers, etc
chongqed.blogspot.com:
The 2005 Spam Conference
Here are some quick links all about this year's spam conference. Read more
www.techworld.com:
Worm dry run for something more serious. Read more
www.caida.org:
Is P2P dying or just hiding? Read more
antiphishing.org:
Phishing Activity Trends Report. Read more

Tools
www.ethereal.com:
Ethereal 0.10.9 released. Read more

Vulnerabilities & Exploits
www.milw0rm.com:
(MS05-002) Microsoft Internet Explorer .ANI Files Handling Exploit. Read more
www.milw0rm.com:
Golden FTP Server v2.02b and below Remote Buffer Overflow. Read more
www.k-otik.com:
Mac OS X 10.3 iSync "mRouter" Local Privilege Escalation Exploit. Read more

News:
technocrat.net:
Phishing with a News Aggregator Worm. Read more
www.geekzone.co.nz:
First Symbian trojan to disable ability to make call discovered. Read more
www.techworld.com:
New worm spreading via MSN Messenger. Read more
www.vnunet.com:
Virus masquerades as email from security firm. Read more
www.techworld.com:
Internet Explorer continues to lose market share. Read more
www.vnunet.com:
Experts warn of Wi-Fi 'evil twin' scam. Read more
www.theregister.co.uk:
London man cuffed over disaster relief site hack. Read more
www.boston.com:
Harvard fixing data security breaches. Read more
www.theregister.co.uk:
China nabs 600 in online gambling raids. Read more
www.rednova.com:
Mci Buys Tech Security Firm. Read more
www.techworld.com:
Novell and Red Hat launch new Linux servers. Read more

22 January 2005
Vulnerabilities & Exploits
securitytracker.com:
GNU Enscript EPSF and Filename Command Input Validation Errors May Let Remote Users Execute Arbitrary Code in Certain Cases. Read more
securitytracker.com:
Ethereal Bugs in COPS, DLSw, DNP, Gnutella, MIME, and X11 Protocol Dissectors Let Remote Users Crash Ethereal or Execute Arbitrary Code. Read more
securitytracker.com:
3Com OfficeConnect Wireless 11g Access Point Discloses Passwords and Keys to Remote Users. Read more
securitytracker.com:
Playmidi Buffer Overflow in Processing Filename May Let Local Users Obtain Elevated Privileges. Read more
securitytracker.com:
Sword Input Validation Holes in 'diatheke.pl' Let Remote Users Execute Arbitrary Commands. Read more
www.ngssoftware.com:
Microsoft NetDDE Service Unauthenticated Remote Buffer Overflow. Read more
www.debian.org:
DSA-654-1 enscript -- several vulnerabilities. Read more
www.debian.org:
DSA-653-1 ethereal -- buffer overflow. Read more
www.debian.org:
DSA-652-1 unarj -- several vulnerabilities. Read more
www.debian.org:
DSA-651-1 squid -- buffer overflow, integer overflow. Read more

News:
www.securityfocus.com:
Anti-Spyware as Anti-Piracy
Is Microsoft's anti-malware giveaway part of a master plan to flush out software pirates? Read more
www.securityfocus.com:
MS AntiSpyware bites BitDefender. Read more
story.news.yahoo.com:
Review: Microsoft Anti-Spyware Ineffective. Read more
www.newsfactor.com:
Virus Writers Co-opt CNN Headlines in Latest Ruse. Read more
news.zdnet.co.uk:
Crowt.A virus preys on news junkies. Read more
news.com.com:
Cisco finds security flaw in router software. Read more
www.techworld.com:
Worm dry run for something more serious. Read more

21 January 2005
Guides, Papers, etc
www.research.ibm.com:
Anatomy of a Commercial-Grade Immune System. Read more

Vulnerabilities & Exploits
www.securityfocus.com:
Microsoft Internet Explorer HTML Help Control Vulnerability Still Exploitable After Patch. Read more
securitytracker.com:
Playmidi Buffer Overflow in Processing Filename May Let Local Users Obtain Elevated Privileges. Read more
securitytracker.com:
Sword Input Validation Holes in 'diatheke.pl' Let Remote Users Execute Arbitrary Commands. Read more
securitytracker.com:
xtrlock Access Control Lets Local Users Bypass the Screen Lock. Read more
securitytracker.com:
Sun Java Plug-in Javascript Error Lets Remote Users Access Files and Applications. Read more
securitytracker.com:
Siteman Lets Remote Users Create Administrative Accounts. Read more
securitytracker.com:
GForge 'controller.php' and 'controlleroo.php' Disclose Directory Listings to Remote Users. Read more
securitytracker.com:
JSBoard 'session.php' Input Validation Flaw Discloses Files to Remote Users. Read more
securitytracker.com:
MaxDB sapdbwa_GetUserData() and HTTP Header Bugs Lets Remote Users Deny Service. Read more

News:
www.vnunet.com:
Security: What to watch in 2005. Read more
www.crn.com:
Hackers Snatch Data From Bogus Wireless Access Points. Read more
australianit.news.com.au:
Worm poses as CNN update. Read more
www.theregister.co.uk:
The aftermath of a domain name hijack. Read more
www.rednova.com:
Microsoft Scrubs Security Component for Exchange. Read more
www.vnunet.com:
Fraud victims facing cold shoulder. Read more
news.zdnet.com:
Phishers learn new tricks. Read more
news.zdnet.com:
Flaw found in Office encryption. Read more
news.zdnet.com:
Baba worm pretends to purge porn. Read more
www.theregister.co.uk:
Webcam Trojan suspect arrested in Spain. Read more

20 January 2005
Guides, Papers, etc
eprint.iacr.org:
The Misuse of RC4 in Microsoft Word and Excel. Read more

Tools
www.microsoft.com:
Scriptomatic 2.0. Utility that helps you write WMI scripts for system administration. Read more
www.astalavista.com:
32 bit asm code written in AT+T syntax for the x86 processor. It adds an user with root rights and no password from the command line. Read more

Vulnerabilities & Exploits
www.guninski.com:
Some vim problems, yet still vim much better than windows. Read more
www.securiteam.com:
The First VIM Worm. Read more
www.integrigy.com:
Oracle Reports Server APPS Password Disclosure. Read more
www.idefense.com:
MySQL MaxDB Web Agent Multiple Denial of Service Vulnerabilities. Read more
www.ngssoftware.com:
RealPlayer Miscellaneous Vulnerabilities. Read more
www.ngssoftware.com:
RealPlayer Arbitrary File Deletion Vulnerability. Read more
www.ngssoftware.com:
RealPlayer 'ShowPreferences' Buffer Overflow Vulnerability. Read more
www.ngssoftware.com:
Microsoft Internet Explorer Install Engine Control Buffer Overflow. Read more
www.ngssoftware.com:
MSN Heartbeat Control Buffer Overflow. Read more
www.ngssoftware.com:
Multiple Vulnerabilities in the AtHoc Toolbar For MSIE. Read more
www.cisco.com:
Cisco Security Advisory: Vulnerability in Cisco IOS Embedded Call Processing Solutions. Read more
securitytracker.com:
Cisco IOS Error in Processing SCCP Packets Lets Remote Users Deny Service. Read more
securitytracker.com:
Mac OS X Input Validation Flaw in parse_machfile() Lets Local Users Deny Service. Read more
securitytracker.com:
Vim 'tcltags' and 'vimspell.sh' Temporary Files May Let Local Users Gain Elevated Privileges. Read more
securitytracker.com:
Xpdf Buffer Overflow in makeFileKey2() Lets Remote Users Execute Arbitrary Code. Read more
securitytracker.com:
Oracle Database Create Database Link Lets Remote Authenticated Users Crash the Database. Read more
securitytracker.com:
Oracle Database DIRECTORY Object Access Control Flaw May Let Certain Users Access Other Directories. Read more
securitytracker.com:
Oracle Database Server PL/SQL Injection Flaws Let Remote Authenticated Users Gain Database Administrator Privileges. Read more
www.debian.org:
DSA-648-1 xpdf -- buffer overflow. Read more
www.debian.org:
DSA-647-1 mysql -- insecure temporary files. Read more
www.debian.org:
DSA-646-1 imagemagick -- buffer overflow. Read more

News:
www.computerworld.com:
Spanish police nab suspected creator of webcam Trojan. Read more
www.theregister.co.uk:
Tsunami spam scammer cuffed. Read more
www.technologyreview.com:
Is Microsoft's AntiVirus Strategy Secure? Read more
info.sen.ca.gov:
p2p authors at risk. Read more
www.silicon.com:
Spammed man sued by alleged spammer wants cash. Read more
www.computerworld.com:
Internet phishing scams getting more devious. Read more
www.theregister.co.uk:
Panix.com hijack: Aussie firm shoulders blame. Read more
nwc.linuxpipeline.com:
Microsoft Responds To IE Security Concerns. Read more
www.infoworld.com:
Chinese companies join Cisco-led security program. Read more
news.zdnet.co.uk:
Police to give cybercrime-fighting courses. Read more
informationweek.com:
FBI Stops Using Carnivore Wiretap Software. Read more

19 January 2005
Guides, Papers, etc
www.astalavista.com:
An Economic Analysis of Market for Software Vulnerabilities. Read more
vidstrom.net:
Different ways to think about computer security. Read more

Tools
www.theglobeandmail.com:
GFI updates network security scanner. Read more
vidstrom.net:
UndeleteSMS can recover deleted SMS messages from a GSM SIM card.
www.solutix.ch:
The scrutinizer is an OpenSource Project aimed to protect web application from HTTP (D)DoS Attacks.
It's a toolkit consisting out of an analysis engine which analyses webserver access logfiles in almost real time, an Apache module which is able to block wrongdoers on the webserver, an extension to block offenders already on netfilter firewalls and a set of visualization tools. Read more

Vulnerabilities & Exploits
theinsider.deep-ice.com:
Kazaa: multiple vulnerabilities. Read more
www.debian.org:
DSA-645-1 cupsys -- buffer overflow. Read more
www.debian.org:
DSA-644-1 chbg -- buffer overflow. Read more
www.debian.org:
DSA-643-1 queue -- buffer overflows. Read more
www.idefense.com:
Multiple Unix/Linux Vendor Xpdf makeFileKey2 Stack Overflow. Read more
securitytracker.com:
GNU Queue Remote Buffer Overflows May Let Remote Users Execute Arbitrary Code. Read more
securitytracker.com:
Novell GroupWise WebAccess Lets Remote Users Bypass Authentication to Gain Limited Access. Read more
securitytracker.com:
Netegrity SiteMinder 'smpwservicescgi.exe' Lets Remote Users Forward the Target User to an Arbitrary URL. Read more
securitytracker.com:
CMSimple Input Valdation Bug in Search and Guestbook Let Remote Users Conduct Cross-Site Scripting Attacks. Read more
securitytracker.com:
MediaWiki Input Validation Flaw in 'wgLanguageCode' and 'mUserLanguage' Parameters Lets Remote Users Execute Arbitrary Commands. Read more
securitytracker.com:
'sig2dat' Integer Overflow May Let Remote Users Execute Arbitrary Code. Read more
securitytracker.com:
ImageMagick Photoshop Document Buffer Overlow Lets Remote Users Execute Arbitrary Code. Read more
securitytracker.com:
NodeManager SNMP Buffer Overflow Lets Remote Users Execute Arbitrary Code. Read more
securitytracker.com:
MySQL 'mysqlaccess.sh' Unsafe Temporary Files May Let Local Users Gain Elevated Privileges. Read more
securitytracker.com:
NETGEAR FVS318 Lets Remote Users Bypass the URL Filter and Conduct Cross-Site Scripting Attacks Against Administrators. Read more

News:
www.theregister.co.uk:
Worm poses as porn-purging program. Read more
www.vnunet.com:
Hackers use porn worm to take over PCs. Read more
www.newsfactor.com:
Tsunami Virus Probably Hacker Gang Skirmish. Read more
news.zdnet.co.uk:
Tsunami worm hits new virus low. Read more
www.securitypronews.com:
Another Internet Explorer Hole Found? Read more
federaltimes.com:
Computer Security Experts On Alert for Jump in Viruses. Read more
www.vnunet.com:
You lose when you 'win'. Read more
www.vnunet.com:
Viruses plague half of UK Windows users. Read more
www.webuser.co.uk:
Microsoft urges PC users to get secure. Read more
news.zdnet.co.uk:
UK man charged with DDoS attack. Read more
www.eff.org:
Can the FBI Monitor Your Web Browsing Without a Warrant? Read more

17 January 2005
Guides, Papers, etc
www.scs.carleton.ca:
Computer Viruses as Artificial Life. Read more

Vulnerabilities & Exploits
www.debian.org:
DSA-640-1 gatos -- buffer overflow. Read more
securitytracker.com:
SparkleBlog Grants Administrative Access and Permits Cross-Site Scripting Attacks. Read more
securitytracker.com:
AWStats Input Validation Flaws Let Users Execute Arbitrary Commands. Read more
securitytracker.com:
Siteman Input Validation Holes in 'news.php' and 'forum.php' Permit Cross-Site Scripting Attacks. Read more
securitytracker.com:
Exim Buffer Overflow in dns_build_reverse() Lets Local Users Obtain Elevated Privileges. Read more
securitytracker.com:
Midnight Commander Format String, Buffer Overflow, and Memory Allocation Errors May Let Remote Users Deny Service or Execute Arbitrary Code. Read more
www.securiteam.com:
ITA Forum SQL Injection. Read more
www.securiteam.com:
Apple iTunes Playlist Parsing Buffer Overflow (Exploit). Read more
www.securiteam.com:
Linux Kernel i386 SMP Page Fault Handler Privilege Escalation (Exploit). Read more
www.securiteam.com:
Exim dns_build_reverse() Exploit. Read more
www.milw0rm.com:
Peer2Mail Encrypted Password Dumper Exploit. Read more

News:
www.pcworld.idg.com.au:
Experts warn of trick to bypass IE security. Read more
www.bizjournals.com:
VoIP hackers can put spam in your ear. Read more
www.theinquirer.net:
Linux security patches released. Read more

15 January 2005
News:
www.computerworld.com:
Experts warn of trick to bypass IE download warnings. Read more
www.newsfactor.com:
Worm Turns on Symbian Cell Phones. Read more
news.bbc.co.uk:
Rings of steel combat net attacks. Read more
www.redherring.com:
Banking on one password proves risky...Read more
www.linuxinsider.com:
2004 Was Year of Firefox and Trojan Horses for Web Monkeys. Read more
news.com.com:
Securing data from the threat within. Read more

14 January 2005
Movie Trojan (a)

Guides, Papers, etc
www.securityfocus.com:
The Perils of Deep Packet Inspection. Read more

Vulnerabilities & Exploits
securitytracker.com:
Microsoft IE Windows XP SP2 File Download Security Can Be Bypassed With Dynamic IFRAME Tag. Read more
securitytracker.com:
MPM Guesbook Pro 'top.php' Discloses Files and Lets Remote Users Execute Arbitrary Commands. Read more
securitytracker.com:
Linux Kernel Overlapping VMAs May Let Local Users Obtain Root Privileges. Read more
securitytracker.com:
Zeroboard Discloses Files to Remote Users and Lets Remote Users Execute Arbitrary Commands. Read more
securitytracker.com:
Squid gopherToHTML() Buffer Overflow Has Unspecified Impact. Read more
securitytracker.com:
Squid Input Validation Error in Processing WCCP Messages Lets Remote Users Crash Squid. Read more
securitytracker.com:
Hitachi Directory Server LDAP Buffer Overflow Lets Remote Users Execute Arbitrary Code. Read more
securitytracker.com:
Winamp Has Security Bugs in Several DLLs With Unspecified Impact. Read more
securitytracker.com:
SGallery Input Validation Holes Let Remote Users Inject SQL Commands and Potentially Execute Arbitrary Commands. Read more
securitytracker.com:
IlohaMail Unsafe Configuration File Access Controls May Let Remote Users Access the Files. Read more
securitytracker.com:
Squirrelmail Vacation Plugin Lets Local Users Execute Arbitrary Commands With Root Privileges. Read more
securitytracker.com:
OpenBSD httpd mod_include Local Buffer Overflow Has Unspecified Impact. Read more
securitytracker.com:
BiTBOARD Input Validation Hole in BBCODE Tags Permits Cross-Site Scripting Attacks. Read more
www.isec.pl:
Linux kernel i386 SMP page fault handler privilege escalation. Read more
dump.hbx.us:
GMail Messages are Vulnerable to Interception. Read more
www.cirt.dk:
Web application vulnerable to login replay attacks. (pdf) Read more
www.idefense.com:
Apple iTunes Playlist Parsing Buffer Overflow Vulnerability. Read more
www.idefense.com:
MySQL MaxDB WebAgent websql logon Buffer Overflow Vulnerability. Read more
www.idefense.com:
SGI IRIX inpview Design Error Vulnerability. Read more

News:
news.zdnet.com:
Microsoft recruits patch testers. Read more
www.theregister.co.uk:
Trojans exploit Windows DRM loophole. Read more
news.zdnet.com:
Worm plays games with victims. Read more
news.zdnet.co.uk:
Script kiddies learn grown-up hacking techniques. Read more
www.theregister.co.uk:
A new tool In the spam war. Read more
www.internetweek.com:
Stopping Google Hacks Is Simple. Read more
news.zdnet.com:
Five years of Ballmer--the effect on Microsoft. Read more
www.whittierdailynews.com:
More and more scammers are 'phishing' for your identity. Read more

13 January 2005
Vulnerabilities & Exploits
www.debian.org:
DSA-637-1 exim-tls -- buffer overflow. Read more
www.debian.org:
DSA-636-1 glibc -- insecure temporary files. Read more
www.waraxe.us:
Critical Sql Injection in Sgallery module for PhpNuke. Read more
secway.org:
TFTPD32 Long FileName Remote Denial of Service. Read more
securitytracker.com:
Linux Kernel Multiprocessor Page Fault Handler Race Condition Lets Local Users Gain Elevated Privileges. Read more
securitytracker.com:
OpenBSD TCP Timestamp Boundary Error Lets Remote Users Panic the System. Read more
securitytracker.com:
Solaris Management Console (SMC) May Create New Accounts With Blank Passwords in Certain Cases. Read more
securitytracker.com:
Dokeos Input Validation Holes Let Remote Users Conduct Cross-Site Scripting Attacks. Read more
securitytracker.com:
Guestserver Input Validation Error Lets Remote Users Display Arbitrary Content. Read more
securitytracker.com:
TFTPD32 Can Be Crashed By Remote Users Requesting Long Filenames. Read more
securitytracker.com:
eMotion MediaPartner Web Server Discloses BHTML Source Code to Remote Users. Read more
securitytracker.com:
Bottomline WebSeries Discloses Information to Remote Authenticated Users and Lets Users Bypass Password Policy. Read more
securitytracker.com:
Network Assistant Can Be Crashed By Remote Users. Read more
securitytracker.com:
PHPWind Authentication Flaw Lets Remote Users Modify the Administrator's Password. Read more
securitytracker.com:
Helvis elvprsv Default Permissions Let Local Users Delete Arbitrary Files and Recover Some Files. Read more
securitytracker.com:
BMV Viewer Unsafe Temporary Files May Let Local Users Gain Elevated Privileges. Read more
securitytracker.com:
HylaFAX Validation Error Lets Remote Users Gain Access. Read more
securitytracker.com:
poppassd_pam Lets Remote Users Modify Arbitrary Passwords. Read more

News:
www.theregister.co.uk:
Double trouble from Symbian virus. Read more
www.internetnews.com:
Lasco.A Poses New Mobile Threat. Read more
news.zdnet.co.uk:
Cellery worm plays Tetris as it spreads. Read more
www.theregister.co.uk:
Hacker breaches T-Mobile systems, reads US Secret Service email. Read more
news.zdnet.co.uk:
Google hacking tool looks for security gaps. Read more
news.zdnet.co.uk:
Hackers hijack Microsoft DRM. Read more
edition.cnn.com:
Report: Water systems' security lapses. Read more
news.zdnet.co.uk:
Worm spreads Happy Nude Year greeting. Read more
www.smh.com.au:
Phishing scam leader gets detention. Read more

12 January 2005
Guides, Papers, etc
The makers of the (classic) compression package Stuffit have written a program that can compress JPGs by roughly 30%.
StuffIt� Image Compression White Paper. (pdf) Read more
www.kernelpanik.org:
Apache suEXEC Bypass. (pdf) Read more
www.benedelman.org:
Media Files that Spread Spyware. Read more
files.linuxexposed.com:
How Hackers Work and Practical Measures You Can Take to Protect Your Site. (pdf) Read more

Vulnerabilities & Exploits
securitytracker.com:
Microsoft HTML Help Active Control Cross-Domain Error Lets Remote Users Execute Arbitrary Commands. Read more
securitytracker.com:
Microsoft Cursor and Icon Validation Error Lets Remote Users Execute Arbitrary Code. Read more
securitytracker.com:
Windows Indexing Service Buffer Overflow in Processing Queries Lets Remote Users Execute Arbitrary Code. Read more
securitytracker.com:
Apple iTunes m3u/pls Playlist Buffer Overflow Lets Remote Users Execute Arbitrary Code. Read more
securitytracker.com:
eMotion MediaPartner Input Validation Errors Disclose Files and Permit Cross-Site Scripting Attacks. Read more
securitytracker.com:
Woltlab Burning Book Input Validation Bug in 'addentry.php' Lets Remote Users Inject SQL Commands. Read more
securitytracker.com:
Woltlab Burning Board Input Validation Hole in 'formmail.php' Permits Remote Cross-Site Scripting Attacks. Read more
securitytracker.com:
Invision Community Blog Input Validation Error in 'eid' Variable Lets Remote Users Inject SQL Commands. Read more
securitytracker.com:
Apache mod_auth_radius radcpy() Integer Overflow Lets Remote Users Deny Service in Certain Cases. Read more
securitytracker.com:
Virtual Hosting Control System (VHCS) 'sql.php' Include File Error Lets Remote Users Execute Arbitrary Commands. Read more
securitytracker.com:
Amphora Gate May Yield Administrative Access to Remote Users. Read more
www.debian.org:
DSA-635-1 exim -- buffer overflow. Read more
www.debian.org:
DSA-634-1 hylafax -- weak hostname and username validation. Read more
www.debian.org:
DSA-633-1 bmv -- insecure temporary file. Read more

News:
www.microsoft.com:
Microsoft Security Bulletin Summary for January, 2005. Read more
news.com.com:
'Critical' patches released for Windows, IE. Read more
news.com.com:
Researcher faces jail for finding bugs. Read more
news.com.com:
Vulnerability found in open-source audio player. Read more
www.securityfocus.com MS virus clean-up tool sparks controversy. Read more
news.com.com:
Bawdy holiday worm preys on prurience. Read more
www.securityfocus.com Hacker penetrates T-Mobile systems. Read more
www.betanews.com:
Don't Buy (Ad Space) from Spammers. Read more
news.com.com:
FTC sues to stop porn spammers. Read more

11 January 2005
Guides, Papers, etc
www.giac.org:
Vulnerabilities in Bluetooth specification 1.1 And the Sony Ericsson T610. (pdf) Read more

Tools
The first real virus for cellphones.
Two versions:
1) Windows infector - scans all hard disks and infects all .SIS files
2) Cell phone version - the same functionality
Both with full source code. Read more

Vulnerabilities & Exploits
www.mikx.de:
Firespoofing. Read more
www.gentoo.org:
mpg123: Buffer overflow. Read more
securitytracker.com:
Squid NTLM fakeauth_auth Helper Can Be Crashed By Remote Users. Read more
securitytracker.com:
NetWare Running CIFS.NLM Can Be Crashed By Remote Users. Read more
securitytracker.com:
PRADO 'phonebook.php' Include File Flaw Lets Remote Users Execute Arbitrary Commands. Read more
securitytracker.com:
Zeroboard 'zero_vote' Include File Bug Lets Remote Users Execute Ar bitarry Commands. Read more
www.appsecinc.com:
Microsoft Windows LPC heap overflow. Read more
www.appsecinc.com:
Microsoft Windows Improper Token Validation. Read more
www.debian.org:
DSA-632-1 linpopup -- buffer overflow. Read more
www.debian.org:
DSA-631-1 kdelibs -- unsanitised input. Read more
www.debian.org:
DSA-630-1 lintian -- insecure temporary directory. Read more

News:
news.zdnet.co.uk:
Mobile phone virus doubles the danger. Read more
www.theregister.co.uk:
The MS spyware experiment, moving calendars...Read more
www.theregister.co.uk:
Exploit code attacks unpatched IE bug. Read more
arstechnica.com:
More browser vulnerabilities - surfers advised to use Lynx. Read more
australianit.news.com.au:
Jail for software pirate. Read more
www.eweek.com:
Spammers' New Tactic Upends DNS. Read more

10 January 2005
Guides, Papers, etc
www.flexbeta.net:
MS AntiSpyware vs Ad-Aware vs SpyBot. Read more
www.techworld.com:
DoS Attacks - how your ISP can help. Read more

Vulnerabilities & Exploits
ferruh.mavituna.com:
Multiple Firewall Products Bypass Vulnerability. Read more

News:
www.computerworld.com:
Microsoft move sends shivers through antivirus market. Read more
www.informationweek.com:
Microsoft App Aims To Attack Spyware. Read more
www.bizjournals.com:
Microsoft seeks to stop 'phishing' expeditions. Read more
www.editorandpublisher.com:
Baseball Fan/Spam Artist Found Guilty in Attacks on Philly Papers. Read more

09 January 2005
Guides, Papers, etc
www.giac.org:
Mass-Mailing Worms: Prevention, Detection and Response (A Case Study). Read more
www.broadbandreports.com:
WMP Adware: A Case Study in Deception. Read more

Tools
Plash is a Unix shell which lets you run Unix programs with access only to the files and directories they need to run. Programs are given access to files which were passed as command line arguments.

Vulnerabilities & Exploits
www.idefense.com:
Exim auth_spa_server() Buffer Overflow Vulnerability. Read more
www.idefense.com:
Exim host_aton() Buffer Overflow Vulnerability. Read more
www.securitytracker.com:
CUPS Logic Error in Processing '/..' Requests Lets Remote Users Deny Service. Read more

News:
www.securityfocus.com:
Microsoft Anti-Spyware? Read more
english.chosun.com:
Foreign Hackers Attack 430 Korean Websites Per Day. Read more
www.itweb.co.za:
Virus writers worked overtime at Xmas. Read more
australianit.news.com.au:
Net fraud gang recruits students. Read more
www.nuclearelephant.com:
OBEX Contest Unsuccessful. Read more

08 January 2005
Guides, Papers, etc
mvp.unixwiz.net:
Analysis of the Troj/Winser-A Malware. Read more

Vulnerabilities & Exploits
www.geocities.com:
Mozilla XBM Vulnerability. Read more
www.debian.org:
DSA-629-1 krb5 -- buffer overflow. Read more
securitytracker.com:
Linux Kernel uselib() Race Condition Lets Local Users Obtain Root Level Privileges. Read more
securitytracker.com:
Simple PHP Blog Discloses Files to Remote Users and Lets Remote Users Create Directories. Read more
securitytracker.com:
MyBB 'calendar.php' Input Validation Bug Permits Cross-Site Scripting Attacks. Read more
securitytracker.com:
Jakarta Tomact Manager Input Validation Holes Permit Cross-Site Scripting Attacks. Read more
securitytracker.com:
Symantec Norton-Anti Virus 'ccErrDsp' Lets Remote Users Crash the Application. Read more
securitytracker.com:
WinHKI Lets Malicious Archives Create Files in Alternate Locations or Deny Service. Read more
securitytracker.com:
b2evolution Input Validation Bug in 'title' Lets Remote Users Inject SQL Commands. Read more
securitytracker.com:
WinAce ZIP and GZIP Directory Traversal Flaw Lets Malicious Archives Create Files in Alternate Locations. Read more
securitytracker.com:
Jeuce Personal Web Server Discloses Files to and Can Be Crashed by Remote Users. Read more
isec.pl:
Linux kernel uselib() privilege elevation. Read more

News:
www.theregister.co.uk:
Mozilla and Firefox flaws exposed. Read more
news.zdnet.com:
IE flaw threat hits the roof. Read more
news.zdnet.com:
Critical Windows fix on the way. Read more
www.computerworld.com:
Microsoft releases antispyware, malware-removal tools. Read more
wireless.newsfactor.com:
Skulls Virus Re-emerges - Again. Read more
www.theregister.co.uk:
Tsunami relief donors under cyber-attack, says FBI. Read more
www.f-secure.com:
Samples of tsunami email scams. one , two & three
www.securityfocus.com:
Netizens eye Web-enabled surveillance cams. Read more

07 January 2005
Guides, Papers, etc
www.microsoft.com:
Beat Hackers At Their Own Game With A Hackerbasher Site. Read more
www.antiphishing.org:
Phishing Activity Trends Report November, 2004. Read more

Vulnerabilities & Exploits
securitytracker.com:
WinAce ZIP and GZIP Directory Traversal Flaw Lets Malicious Archives Create Files in Alternate Locations. Read more
securitytracker.com:
Jeuce Personal Web Server Discloses Files to and Can Be Crashed by Remote Users. Read more
securitytracker.com:
tiffdump Buffer Overflow May Let Remote Users Execute Arbitrary Code. Read more
securitytracker.com:
Vim modeline Options May Let Users Execute Arbitrary Commands. Read more
aluigi.altervista.org:
Socket unreacheable in Amp II engine. Read more
aluigi.altervista.org:
Socket termination, format string and XSS in Soldner Secret Wars 30830. Read more
www.lovebug.org:
AOL's Online Password Reset feature does not fully validate user information. Read more
www.debian.org:
DSA-628-1 imlib2 -- integer overflows. Read more
www.debian.org:
DSA-627-1 namazu2 -- unsanitised input. Read more
www.debian.org:
DSA-626-1 tiff -- unsanitised input. Read more

News:
www.microsoft.com:
Microsoft Announces Availability of New Solutions to Help Protect Customers Against Spyware and Viruses. Read more
www.computerworld.com:
Microsoft releases antispyware, malware-removal tools. Read more
www.computerworld.com:
Phishers migrating to Trojan horse attacks. Read more
www.theregister.co.uk:
Tsunami relief donors under cyber-attack, says FBI. Read more
www.theregister.co.uk:
eBay aims to thwart phishing. Read more
www.securityfocus.com:
Sims 2 hacks spread like viruses. Read more
itmanagement.earthweb.com:
Is a Job in Security the Cure for Job Insecurity? Read more
www.computerworld.com:
Attacks on Microsoft WINS hole raise alarms. Read more
english.yna.co.kr:
South Korea Sounds Alarm over Massive Web Defacement Attacks. Read more

06 January 2005
Guides, Papers, etc
www.securityfocus.com:
SSH Port Forwarding. Read more
www.cc.gatech.edu:
Advanced Polymorphic Worms: Evading IDS by Blending in with Normal Traffic. Read more
offlinehbpl.hbpl.co.uk:
Passive Information Gathering
The Analysis of Leaked Network Security Information. Read more
offlinehbpl.hbpl.co.uk:
How to 0wn the Internet in Your Spare Time. Read more
www.unixwiz.net:
SQL Injection Attacks by Example. Read more

Tools
www.thc.org:
THC-pptp-bruter: Brute force program against PPTP VPN Gateways (tcp port 1723). Fully standalone. Supports latest MSChapV2 authentication.
Tested against Windows and Cisco Systems. Exploits a weakness in Microsoft's anti brute-force implementation that makes it possible to try 300 passwords per second. Read more

Vulnerabilities & Exploits
securitytracker.com:
Exim Buffer Overflows in host_aton() and spa_base64_to_bits() May Let Local Users Gain Elevated Privileges. Read more
securitytracker.com:
mod_dosevasive Symlink Flaw Lets Local Users Gain Elevated Privileges. Read more
securitytracker.com:
MyBB Input Validation Error Lets Remote Users Inject SQL Commands. Read more
securitytracker.com:
3Com 3CDaemon Format String Flaws and Buffer Overflows May Let Remote Users Execute Arbitrary Code. Read more
securitytracker.com:
QWikiWiki Directory Traversal Flaw Discloses Files to Remote Users. Read more
securitytracker.com:
Mozilla Firefox Download Dialog Source Can Be Spoofed By Remote Users. Read more
www.nextgenss.com:
IBM DB2 db2fmp buffer overflow. Read more
www.nextgenss.com:
IBM DB2 libdb2.so.1 buffer overflow. Read more
www.nextgenss.com:
IBM DB2 call buffer overflow. Read more
www.nextgenss.com:
IBM DB2 JDBC Applet Server buffer overflow. Read more
www.nextgenss.com:
IBM DB2 SATADMIN.SATENCRYPT buffer overflow. Read more
www.nextgenss.com:
IBM DB2 Windows Permission Problem. Read more
www.nextgenss.com:
IBM DB2 to_char and to_date Denial Of Service. Read more
www.nextgenss.com:
IBM DB2 XML functions overflows. Read more
www.nextgenss.com:
IBM DB2 XML functions file creation vulnerabilities. Read more
www.debian.org:
DSA-625-1 pcal -- buffer overflows. Read more
www.debian.org:
DSA-624-1 zip -- buffer overflow. Read more
www.debian.org:
DSA-623-1 nasm -- buffer overflow. Read more

News:
www.theregister.co.uk:
VXers creating 150 zombie programs a week. Read more
news.com.com:
Hackers step up search for unpatched servers. Read more
www.newsfactor.com:
Microsoft To Unveil Anti-Spyware Beta. Read more
news.com.com:
Gates taking a seat in your den. Read more
news.com.com:
Gates touts TiVo deal at CES. Read more

05 January 2005
Guides, Papers, etc
www.qgpop.net:
Real-Time Virus Detection System Using iNetmon Engine. Read more
www.intranetjournal.com:
It's Easy to Secure Windows 2000 Servers, Part 1. Read more

Vulnerabilities & Exploits
lists.debian.org:
New zip packages fix arbitrary code execution. Read more
securitytracker.com:
Mozilla Firefox Download Dialog Source Can Be Spoofed By Remote Users. Read more
securitytracker.com:
Mozilla Browser Download Dialog Source Can Be Spoofed By Remote Users. Read more
securitytracker.com:
PhotoPost Classifieds Input Validation Hole Lets Remote Users Upload Scripting Files. Read more
securitytracker.com:
ReviewPost Pro Input Validation Hole Lets Remote Users Upload Scripting Files. Read more
securitytracker.com:
HtmlHeadLine.sh Unsafe Temporary Files May Let Local Users Gain Elevated Privileges. Read more
securitytracker.com:
GFI MailEssentials MS HTML Parser Bug Lets Remote Users Deny Service. Read more
securitytracker.com:
GNUBoard Case-Sensitive File Extension Validation Lets Remote Users Upload Scripting Files. Read more
securitytracker.com:
PhotoPost Pro 'showgallery.php' Input Validation Holes Permit SQL Injection and Cross-Site Scripting Attacks. Read more
www.securiteam.com:
iWebNegar Configuration Nullification (DoS). Read more
www.securiteam.com:
Internet Explorer FTP Client Directory Traversal. Read more
www.securiteam.com:
Multiple Vulnerabilities in FlatNuke. Read more

News:
news.zdnet.co.uk:
Nigerian scammers 'exploit tsunami tragedy'. Read more
www.microscope.co.uk:
How to solve the patching puzzle. Read more
www.microsoft-watch.com:
Microsoft Readies 'A1' Security Subscription Service. Read more
www.internetweek.com:
The Difference Between Spyware And Viruses. Read more
virusthreatcenter.com:
Trojan horse threatens latest Windows XP. Read more
news.zdnet.co.uk:
eBay takes on phishers with email service. Read more

04 January 2005
Guides, Papers, etc
www.cs.ucsd.edu:
Automated Worm Fingerprinting. Read more
www.honeynet.org.es:
Building a GenII Honeynet Gateway. Read more

Tools
Tor: An anonymous Internet communication system.
Tor is a toolset for a wide range of organizations and people that want to improve their safety and security on the Internet.
Using Tor can help you anonymize web browsing and publishing, instant messaging, IRC, SSH, and more.
Tor also provides a platform on which software developers can build new applications with built-in anonymity, safety, and privacy features.

Vulnerabilities & Exploits
ferruh.mavituna.com:
Multiple Firewall Products Bypass Vulnerability. Read more
www.debian.org:
DSA-622-1 htmlheadline -- insecure temporary files. Read more
securitytracker.com:
GNUBoard Case-Sensitive File Extension Validation Lets Remote Users Upload Scripting Files. Read more
securitytracker.com:
MyCart Discloses Configuration File to Remote Users. Read more
www.securiteam.com:
Mozilla Browser NNTP Heap Overflow. Read more
www.securiteam.com:
GNUBoard Multiple Extensions Vulnerability. Read more
www.securiteam.com:
ArGoSoft FTP Server Reveals Valid Usernames and Allows Brute Forcing Attacks. Read more
www.securiteam.com:
HTTP Response Splitting and Cross Site Scripting in ViewCVS. Read more
www.securiteam.com:
SQL Injection Vulnerability in IBProArcade (Arcade.php). Read more
www.securiteam.com:
vBulletin init.php SQL Injection (specialtemplates). Read more
www.securiteam.com:
KorWeblog PHP Injection Vulnerability. Read more

News:
www.neowin.net:
Exclusive: Microsoft Anti-Spyware Beta Due 6th January. Read more
strategiy.com:
McAfee�s top 10 threats of 2004. Read more
www.miami.com:
Worms, viruses could worsen in 2005. Read more
www.newsday.com:
Phishing, Spyware, Others Plague Internet. Read more
www.thisismoney.co.uk:
Internet security fears for 2005. Read more

03 January 2005
Guides, Papers, etc
www.crhc.uiuc.edu:
2005 Symposium on Measurement, Modeling, and Simulation of Malware.
The emergence of malware such as worms and viruses has generated a widespread response from the research community in methodologies and tools for measuring, modeling, and simulating malware behavior, and proposed systems that detect, react, and prevent it. The 2005 Symposium on Measurement, Modeling and Simulation of Malware aims to bring together researchers in this important area, for the sharing of ideas and development of collaborative efforts. Read more
www.cbsnews.com:
Defining Google. Read more
www.kuro5hin.org:
Xanga, The Ghetto Botnet (Internet). Read more
www.everybodyiscrazy.com:
Why bandwidth should scare Microsoft. Read more
www.research.ibm.com:
Virus Bulletin 2010: A Retrospective. Read more

Vulnerabilities & Exploits
www.securiteam.com:
NetDDE MS04-031 Exploit Code. Read more
www.securiteam.com:
WINS MS04-045 Exploit Code. Read more
www.securiteam.com:
SQL Injection Vulnerability in IBProArcade (Arcade.php). Read more
www.securiteam.com:
vBulletin init.php SQL Injection (specialtemplates). Read more
www.securiteam.com:
Mozilla Browser NNTP Heap Overflow. Read more
www.securiteam.com:
KorWeblog PHP Injection Vulnerability. Read more
securitytracker.com:
Xanga 'sitemessage.aspx' Input Validation Flaw in 'user' Parameter Permits Cross-Site Scripting Attacks. Read more
securitytracker.com:
ViewCVS Input Validation Holes in 'content-type' and 'content-length' Parameters Permits Cross-Site Scripting Attacks. Read more
securitytracker.com:
Gmail 'forgot your password?' Feature Lets Remote Users Flood a User's Secondary E-mail Account. Read more
securitytracker.com:
Jack's FormMail.php 'ar_file' Parameter Lets Remote Users Obtain Files from the System. Read more
securitytracker.com:
Macallan Mail Solution Lets Remote Users Deny Service With a Long '?' URL. Read more
securitytracker.com:
KorWeblog 'install/index.php' Include File Flaw Lets Remote Users Execute Arbitrary Code. Read more

02 January 2005
Tools
Rootkit Hunter scans files and systems for known and unknown rootkits, backdoors, and sniffers. Release 1.1.9 available.

Vulnerabilities & Exploits
securitytracker.com:
ArGoSoft FTP Server Discloses Username Status to Remote Users. Read more

News:
www.pcworld.com:
Protect Yourself From Audio Adware. Read more
www.washingtonpost.com:
Trouble Can Be Downloaded Along With Music. Read more
www.theregister.co.uk:
Trojan Horse Christmas. Read more
www.theregister.co.uk:
Firm gives P2P networks adware infection. Read more
www.earthtimes.org:
Santy worm meets its cousin. Read more

01 January 2005
A Happy and Safe New Year

Tools
trifinite.org:
Blooover is a tool that is intended to serve as an audit tool that people can use to check whether their phones and phones of friends and employees are vulnerable.
GetFree is a script to automatically download and install open source software on Windows.
At this time, GetFree will download and install the following softwares:
Mozilla Firebird 0.7
Mozilla Thunderbird 0.3
OpenOffice.org 1.1
Gaim 0.71

Guides, Papers, etc
trifinite.org:
Hacking Bluetooth enabled mobile phones and beyond. Read more
www.nokia.com:
Bluetooth and Security. Read more

Vulnerabilities & Exploits
www.k-otik.com:
Microsoft Windows NetDDE Remote Buffer Overflow Exploit (MS04-031). Read more
www.k-otik.com:
Microsoft WINS Remote Code Execution Exploit (MS04-045). Read more
www.milw0rm.com:
ZUCWins 0.1 - Wins 2000 remote root exploit. Read more
www.milw0rm.com:
(MS04-031) NetDDE buffer overflow vulnerability PoC. Read more
www.milw0rm.com:
GNU gcc 3.4.3 and below Unchecked Length Fields Local Root Exploit. Read more
www.debian.org:
DSA-621-1 cupsys -- buffer overflow. Read more

News:
www.zdnet.co.uk:
Anti-Santy worm spreads. Read more
www.eweek.com:
New Santy Mutant Offers 'Help'. Read more
p2pnet.net:
Overpeer's latest dirty trick. Read more
www.pcworld.com:
Risk Your PC's Health for a Song? Read more
www.webuser.co.uk:
Be alert for a virus-ridden 2005. Read more
www.internetweek.com:
Netsky Takes The Biggest Worm Of 2004 Award. Read more
informationweek.com:
Antivirus Vendor Ranks Downloader.GK Trojan As Worst Of 2000. Read more
news.zdnet.co.uk:
Netcraft plug-in aims to thwart phishers. Read more
www.techtree.com:
Ask IE For Help, Get a Trojan. Read more
www.shannonknowshpc.com:
HP Puts Worms and Viruses in Slow Lane. Read more
www.newsfactor.com:
2004: The Changing Face of Spam. Read more