Bookmark or link to: www.kobayashi.cjb.net. All other url`s could change!

News Archive    Translate Traducen

News March 20002

31 March 2002 New trojan(s): HellzAddiction 1.10 Beta Alerter Darksun News: www.intersectalliance.com: Linux Security Configuration Document. Read more online.securityfocus.com: Microsoft Internet Explorer Cookie Based Script Execution Vulnerability. Read more online.securityfocus.com: LibNewt Library Buffer Overflow Vulnerability. Read more www.securitytracker.com: SGI IRIX Operating System HOSTALIASES Environment Variable Flaw Lets Local Users Cause Privileged Processes to Dump Core. Read more www.securitytracker.com: Veridis OpenKeyServer Allows Cross-Site Scripting Attacks. Read more www.securitytracker.com: Microsoft Outlook Web Access With SecurID Authentication May Allow Remote Users to Avoid the SecurID Authentication in Certain Cases. Read more www.securitytracker.com: WWWIsis Search Engine CGI Allows Remote Users to Execute Commands and View Files on the System. Read more www.securitytracker.com: SGI IRIX Operating System RPC Bug Lets Remote Users Deny Service to Some RPC-based Services. Read more www.securitytracker.com: Oracle Database Server TNS Listener Can Be Crashed By Remote Users With a One Byte TCP Packet. Read more www.securitytracker.com: SquirrelMail Lets Remote Users Execute Arbitrary Commands By Appending Cookie-based Commands to the $THEME Variable. Read more www.securitytracker.com: PostNuke 'user.php' Flaw Lets Remote Users Specify a Remote Server Path for the $caselist Variable, Allowing Arbitrary Code to Be Executed on the PostNuke Server. Read more www.securitytracker.com: Microsoft Internet Explorer Browser Security Zone Flaw Lets Remote Users Cause Cookie-based Scripts to Be Executed on Another User's Browser in the Incorrect Security Domain. Read more www.securitytracker.com: ht://Dig Search Engine Bug Lets Remote Users Determine the Configuration File Directory Path. Read more www.securitytracker.com: Citrix NFuse Publishing Server Lets Remote Authenticated Users View Files Located Outside of the Web Root Directory. Read more www.securitytracker.com: Analog Web Log File Analysis Tool Allows Cross-Site Scripting Attacks. Read more www.tech-report.com: Serious security flaws in Windows, IE go public. Read more www.theinquirer.net: Microsoft updates security breach � part III. Read more www.guardcentral.com: User Alert: Three Notable Viruses Detected in the Space of a Week. Read more zdnet.com.com: Judge: FBI must cough up Carnivore info. Read more www.vnunet.com: Cryptome dishes the Dirt. Read more

30 March 2002 New trojan(s): Die Hard Horse Socia NetBoy 1.0 News: www.anticracking.sk: DebPloit uses a hole in the NT/2000 debugging subsystem and allows ANY user with ANY privileges (even Guest and Restricted user) to execute processes in the security context of an administrator or a local system (SYSTEM) account. Read more www.splint.org: Splint is a tool for statically checking C programs for security vulnerabilities and coding mistakes. Read more online.securityfocus.com: PostNuke caselist Arbitrary Module Include Vulnerability. Read more online.securityfocus.com: Citrix Nfuse boilerplate.asp Web Root Disclosure Vulnerability. Read more online.securityfocus.com: SquirrelMail Theme Remote Command Execution Vulnerability. Read more www.securiteam.com: Citrix NFuse Directory Traversal with boilerplate.asp. Read more www.securiteam.com: Root Compromise through LogWatch (Exploit code). Read more www.securiteam.com: Exploiting the Zlib Bug in OpenSSH. Read more www.securiteam.com: Solaris Login Remote Exploit (via telnetd). Read more www.securiteam.com: phpBB2 Remote Execution Command (db.php). Read more www.securiteam.com: SunSolve CD CGI Scripts Allows Remote Command Execution. Read more www.securiteam.com: XTux Arena Vulnerable To a Denial of Service. Read more www.securiteam.com: Citadel/UX Server Remote DoS Attack Vulnerability. Read more www.securitytracker.com: Microsoft Internet Explorer Discloses The Existence of and Details of Local Files to Remote Users. Read more www.securitytracker.com: Xchat '/dns' Command Bug May Let Remote Users Execute Arbitrary Commands on the Client Software. Read more www.securitytracker.com: Cisco CallManager Memory Leak Lets Remote Users Cause the Server to Crash and Reload. Read more www.securitytracker.com: LogWatch Temporary File Race Condtion Lets Local Users Gain Root Access. Read more online.securityfocus.com: Beware the Kindness of Strangers: The Case Against Good Samaritan Hackers. Read more www.extremetech.com: Norton Antivirus misses worms with unusually capitalized headers. Read more www.computing.vnunet.com: Bin Laden steps up holy war via email. Read more zdnet.com.com: A hacker's dreamland: wireless networks. Read more www.eweek.com: Experts Debate Risks to Crypto. Read more www.informationweek.com: Network Associates Renews Bid For McAfee.com. Read more www.gcn.com: Gilmore warns of threat to information systems. Read more

29 March 2002 New trojan(s): Snape 1.0 RedShad 1.01 Dizer Microsoft Security Bulletin MS02-015 28 March 2002 Cumulative Patch for Internet Explorer. Read more www.insecure.org: nmap-2.54BETA31 is released. Read more Winfingerprint v0.4.2 Advanced remote windows OS detection. Runs on Windows NT and 2000. Read more www.debian.org: DSA-125-1 analog -- cross-site scripting. Read more www.debian.org: DSA-124-1 mtr -- buffer overflow. Read more techupdate.zdnet.com: MS vs. open source: Security's the same. Read more packetstormsecurity.nl: RealSecure Network Intrusion Detection (NIDS) Version 6.0. Read more online.securityfocus.com: Microsoft Internet Explorer DYNSRC File Information Disclosure Vulnerability. Read more online.securityfocus.com: Cisco CallManager CTI Memory Leak Denial of Service Vulnerability. Read more online.securityfocus.com: Citrix NFuse Cross-Site Scripting Vulnerability. Read more online.securityfocus.com: ht://Dig Configuration File Path Disclosure Vulnerability. Read more online.securityfocus.com: Linux Kernel d_path() Path Truncation Vulnerability. Read more online.securityfocus.com: Veridis OpenKeyServer Cross Site Scripting Vulnerability. Read more www.securiteam.com: LDAP Connection Leak in CTI when User Authentication Fails. Read more www.securiteam.com: Retrieving Information on Local Files Via Internet Explorer. Read more www.securiteam.com: NFuse Cross Site Scripting Vulnerability. Read more www.securiteam.com: XChat /dns Command Execution Vulnerability. Read more www.securitytracker.com: RCA Cable Modem Denial of Service Error Lets Remote Users Reset the Device. Read more www.securitytracker.com: Posadis DNS Server Format String Flaw May Let Remote Users Execute Arbitrary Code on the Server. Read more www.securitytracker.com: csSearch Perl-based Search Engine Software Lets Remote Users Execute Arbitrary Perl Scripts on the System. Read more www.securitytracker.com: Etnus TotalView Source Debugger File Permission Settings May Let Local Users Obtain Elevated Privileges on the System. Read more www.securitytracker.com: Squid Proxy Caching Server Heap Overflow in Processing Compressed DNS Responses Could Allow Remote DNS Servers to Crash the Service. Read more www.securitytracker.com: SouthWest Talker (Chat) Server Lets Remote Users Crash the Service. Read more www.securitytracker.com: Instant Web Mail PHP-based Mail Client May Let Remote Users Cause Arbitrary POP Commands to Be Executed on Another User's Mail System. Read more www.securitytracker.com: Linux Kernel 'd_path' Truncation Flaw May Allow a Local User to Cause a Privileged Process to Operate on an Arbitrary Directory Path. Read more www.vnunet.com: Bug-beaters seek standards. Read more www.infoworld.com: Microsoft offers fix for two IE security holes. Read more www.pcworld.com: New Windows NT/2000 Security Flaw. Read more www.bizjournals.com: Cyber security: It's all about vigilance. Read more zdnet.com.com: eBay: An invitation to hackers? Read more www.vnunet.com: Exclusive: hackers make chop suey of wireless security. Read more www.vnunet.com: Web security guidelines say technology is not enough. Read more www.mlive.com: Phone hackers stick city for $15,000. Read more

28 March 2002 New trojan(s): Akosch4 BackSocket 5.0 MOTD News: CERT.Uni-Stuttgart.DE: The chsystem program can be used to change permissions of named objects to SYSTEM-only access, if a vendor neglected to set proper permissions. Read more GreyMagic Security Advisory GM#003-IE Retrieving information on local files in IE. Read more Cisco Security Advisory: LDAP Connection Leak in CTI when User Authentication Fails. Read more www.it-checkpoint.net: phpBB 1.4.4 still suffers from Cross Site Scripting Vulnerability. Read more online.securityfocus.com: Squid Compressed DNS Buffer Overflow Vulnerability. Read more online.securityfocus.com: SouthWest Talk Server Denial of Service Vulnerability. Read more online.securityfocus.com: Apache Double-Reverse Lookup Log Entry Spoofing Vulnerability. Read more www.securitytracker.com: WebSight Directory System Allows Remote Users to Conduct Cross-Site Scripting Attacks Against Directory Users. Read more www.securitytracker.com: AlGuest Web-based Guestbook Lets Remote Users Access the Guestbook With Administrator Privileges. Read more www.securitytracker.com: Progress Database Buffer Overflow May Let Local Users Gain Root Privileges. Read more www.securitytracker.com: DCShop Shopping Cart Lets Remote Users Delete the Database Setup File Using a Null-byte Attack. Read more star-techcentral.com: Rampant attacks on home PCs. Read more www.computing.vnunet.com: Boffins fight hackers with the Therminator. Read more www.eweek.com: Experts Debate Risks to Crypto. Read more www.wired.com: Next Virus Exploit: Media Player? Read more www.bizreport.com: Virus Industry's Research Center Runs Out Of Money. Read more www.theregister.co.uk: Drive-by hacking linked to cyberterror. Read more news.bbc.co.uk: Wireless London is wide open. Read more

27 March 2002 New trojan(s): HoneyPot 1.2 Ptsnoop Ders www.debian.org: DSA-123-1 listar -- remote exploit. Read more www.sans.org: A report about a backdoor tool that was found on some of our RedHat 4.x Linux boxes. Read more online.securityfocus.com: WebSight Directory System Cross Site Scripting Vulnerability. Read more online.securityfocus.com: Alguest Cookie Falsification Vulnerability. Read more www.securiteam.com: Keyservers Cross Site Scripting (When CSS Gets Dangerous). Read more www.securiteam.com: SouthWest Telnet Server Vulnerable to a DoS. Read more www.securiteam.com: d_path() Truncating Excessive Long Path Name Vulnerability. Read more ww.securiteam.com: Etnus TotalView Default Ownership Problems. Read more www.securiteam.com: Instant Web Mail Additional POP3 Commands and Mail Headers. Read more www.securiteam.com: WebSight Directory System Vulnerable to Cross Site Scripting Bug. Read more www.securiteam.com: Cookie Vulnerability in AlGuest Guestbook (Administrative rights). Read more www.theregister.co.uk: AV vendors sell 'blunt razor blades'. Read more www.theregister.co.uk: Virus WildList closed 'until further notice'. Read more www.silicon.com: Come on, own up: IT managers leave firewalls open for hackers. Read more www.infoconomy.com: Public encryption keys �are no longer secure�. Read more www.computing.vnunet.com: 1024-bit encryption is 'compromised'. Read more www.theregister.co.uk: Microsoft .NET promo reveals personal info. Read more www.theregister.co.uk: Panel debates Samaritan-hack amnesty. Read more www.msnbc.com: Wireless worries in a 9/11 world, Read more www.zdnet.com: Go away! How to keep hackers out of your wireless network. Read more www.silicon.com: Melissa virus: have we learned anything? Read more

26 March 2002 New trojan(s): Trojan for Pitbul 1.0 Tasmer version a www.ppp-design.de: websight directory system: cross-site-scripting bug in in WebSight Directory System. Read more online.securityfocus.com: Linux Directory Penguin NSLookup Perl Script Arbitrary File Reading Vulnerability. Read more online.securityfocus.com: PostNuke Cross Site Scripting Vulnerability. Read more security-protocols.com: Exploiting the Zlib Bug in OpenSSH. Read more news.com.au: File sharing will drive viruses. Read more online.securityfocus.com: Panel Debates Hacker Amnesty. Read more zdnet.com.com: Hackers attack eBay accounts. Read more www.computing.co.uk: BT publishes private network numbers. Read more www.idgnet.co.nz: Warriors to demo DDoS defence. Read more

25 March 2002 New trojan(s): Joker Zhang www.securitytracker.com: PCI NetSupport Manager Directory Traversal Flaw Lets Remote Users View Files Located Anywhere on the Managed Host. Read more www.securitytracker.com: News-tnk Input Validation Error Lets Remote Users Conduct Cross-Site Scripting Attacks. Read more www.securitytracker.com: Board-tnk Bulletin Board Forum Input Validation Bugs Let Remote Users Conduct Cross-Site Scripting Attacks. Read more www.securitytracker.com: PostNuke Multiple Input Validation Flaws Allow Cross-Site Scripting Attacks. Read more www.securitytracker.com: WorkforceROI's Intellisol Xpede Expense Reporting Software Discloses Passwords to Remote and Local Users. Read more www.securitytracker.com: BG GUESTBOOK Input Validation Flaw Lets Remote Users Conduct Cross-Site Scripting Attacks. Read more www.securitytracker.com: Gravity Software's Service Pack Manager 2000 Default Directory Permissions Let Local Users Modify Operating System Files and Gain Full Control of the System.. Read more www.securitytracker.com: Built-In Guestbook Stand-Alone Module (Big Sam) Lets Remote Users Consume CPU Resources or Determine the Web Root Installation Path. Read more www.securitytracker.com: Penguin Traceroute Perl Script Input Filtering Flaw Lets Remote Users Execute Commands on the System. Read more www.securitytracker.com: HP Webproxy for HP-UX VVOS Operating System May Forward Certain HTTP Requests to the Internal Network Without Fully Processing the Packet Against the Rule Set. Read more ntbugtraq.ntadvice.com: The 4th Annual NTBugtraq Retreat. Read more www.idg.net: Outlook Users Warned to Look Out. Read more www.faz.com: Protecting Against An Army of Hackers. Read more techupdate.zdnet.com: Hired hackers worth the cost. Read more www.philly.com: Drive-by hackers hunt free, easy Web access. Read more zdnet.com.com: Sax-playing Clinton worm stages attack. Read more www.dawn.com: Boy held in first e-mail spamming case. Read more

24 March 2002 New trojan(s): Habiti Daodan 1.24 online.securityfocus.com: WorkforceROI Xpede Re-Authentication Plain Text Password Disclosure Vulnerability. Read more online.securityfocus.com: WorkforceROI Xpede Weak Password Encryption Vulnerability. Read more online.securityfocus.com: HP Praesidium Webproxy Unauthorized Access Vulnerability. Read more online.securityfocus.com: Qualcomm Eudora WebBrowser Control Embedded Media Player File Vulnerability. Read more online.securityfocus.com: Microsoft Outlook IFrame Embedded Media Player File Vulnerability. Read more online.securityfocus.com: Microsoft Outlook Disabled Cookies Setting Bypass Vulnerability. Read more www.securiteam.com: www.myownemail.com Vulnerable to Cross Site Scripting. Read more www.securiteam.com: Web Traversal Vulnerability in PCI NetSupport Manager. Read more www.securiteam.com: Vulnerability in Apache for Win32 Batch File Processing (Remote Command Execution). Read more www.securiteam.com: Norton Antivirus Content Filter and Virus Protection Can By Passed. Read more www.securiteam.com: Questionable Security Policies in Outlook 2002. Read more www.securiteam.com: VBA Workaround for Automatic Execution. Read more www.securiteam.com: How Outlook 2002 Can Still Execute JavaScript in an HTML Email Message. Read more www.securiteam.com: Automatically Opening Internet Explorer and Execution of Attachments (WebBrowser). Read more www.securiteam.com: Intellisol XPede Exposes Passwords. Read more www.securiteam.com: Gravity Storm Service Pack Manager 2000 Share Vulnerability. Read more www.securiteam.com: phpBB Still Suffers From a Cross Site Scripting Vulnerability (Edit). Read more www.securiteam.com: Bypassing Libsafe Format String Protection. Read more www.securiteam.com: Hosting Controller Directory Traversal Madness. Read more www.securiteam.com: Big Sam (Built-In Guestbook Standalone Module) Contains Multiple Vulnerabilities www.securitytracker.com: Apache Web Server for Windows Has Batch File Processing Hole That Lets Remote Users Execute Commands on the System. Read more www.securitytracker.com: Imlib Image Loader malloc() Argument Bug May Let Local Users Execute Arbitrary Code on the System. Read more www.nandotimes.com: Air Force base reports major hacking attempt. Read more www.siliconvalley.com: Foreign hackers tried to enter Air Force Base computer network, officials say. Read more www.ananova.com: Hackers attack US Air Force Base. Read more www.cio.com: The Truth About Cyberterrorism. Read more www.theregister.co.uk: Bill Clinton virus proves user security sucks. Read more www.newsbytes.com: 'Bill Clinton' Worm Gets Around - Experts. Read more www.windowsitsecurity.com: Securing Your Wireless Networks. Read more www.theregister.co.uk: Vendors sharpen tools to thwart DoS attacks. Read more www.msnbc.com: Hackers attack sites in infancy. Read more www.theregister.co.uk: Scientologists gag Google. Read more

23 March 2002 New trojan(s): NOSecure 1.2 by Khaos David www.laurentconstantin.com: Lcrzoex, network testing toolbox. Read more About D.I.R.T by Doc GreyMagic Security Advisory GM#002-IE Automatically opening IE + Executing attachments. Read more www.planetpdf.com: Web site editor illustrates how Mac OS X can circumvent PDF security. Read more online.securityfocus.com: ISS RealSecure for Nokia IDS Devices Default KeyAdministrator Entry Vulnerability. Read more online.securityfocus.com: PHP Nuke Error Message Web Root Disclosure Vulnerability. Read more online.securityfocus.com: Libsafe Format String Unimplemented Specifier Exploitation Vulnerability. Read more online.securityfocus.com: Libsafe Argument Number Format String Check Bypass Vulnerability. Read more online.securityfocus.com: Foundry Networks EdgeIron SNMP Community String Read-Write Vulnerability. Read more online.securityfocus.com: Webmin Insecure Directory Permissions Vulnerability. Read more online.securityfocus.com: Webmin Script Code Input Validation Vulnerability. Read more www.securitytracker.com: Microsoft .NET Unspecified Vulnerabilities May Allow a Remote User to Cause Arbitrary Code to Be Executed on Another User's System. Read more www.securitytracker.com: Foundry Networks EdgeIron Switches Let Remote Users Access SNMP With Any Community Name. Read more www.securitytracker.com: vBulletin Forum Software Lets Remote Users Conduct Cross-Site Scripting Attacks. Read more www.securitytracker.com: Ikonboard Bulletin Board IMG Tag Javascript Filtering Can Be Bypassed By Remote Users, Allowing Cross-Site Scripting Attacks. Read more www.securitytracker.com: Internet Security Systems RealSecure Intrusion Detection System for Nokia Appliances Inadvertently Includes a Built-in KeyManager Account That Could Allow a Remote User to Control the System. Read more www.securitytracker.com: Webmin System Management Tool Lets Local Users Determine the Root User's Webmin Session ID and Gain Webmin Access as the Root User. Read more www.securitytracker.com: Caldera/SCO Calendar Manager Service (rpc.cmsd) Buffer Overflow Lets Remote Users Execute Arbitrary Code on the System With Root Privileges. Read more www.securitytracker.com: Libsafe Libary Security Function Format String Protections Can Be Bypassed. Read more www.securitytracker.com: Macromedia Standalone Flash Player 'fscommand:save' Lets Malicious Flash Media Files Execute Arbitrary Code on the User's Host. Read more www.securiteam.com: Default SNMP Configuration Issue with Foundry Networks EdgeIron 4802F. Read more www.securiteam.com: KeyManager Issue in ISS RealSecure on Nokia Appliances. Read more www.securiteam.com: Local Privilege Escalation Issues with Webmin. Read more www.securiteam.com: Penguin TraceRoute Allows Remote Command Execution. Read more www.pcworld.com: File-Deleting Bill Clinton Virus Reported. Read more rtnews.globetechnology.com: New virus disguised as Clinton screensaver. Read more www.crn.com: Internet Worm Disguised As Clinton Cartoon Spreads. Read more www.wired.com: Just Don't Call It a Hacker Camp. Read more www.vnunet.com: Hackers 'could gain missile secrets'. Read more www.vnunet.com: Prepare for new SNMP-type threats. Read more www.uniontrib.com: Courtroom antics keep tech hacker behind bars. Read more www.osopinion.com: Image Password Potential Doubtful, Say Analysts. Read more www.newsfactor.com: FBI Weighs Fate of Cyber Security Arm. Read more www.vnunet.com: Employees hooked on cyber snooping. Read more

22 March 2002 New trojan(s): Neoturk 1.1 Gibbon version a shh.thathost.com: Client Side Trojans. How attackers may give their victims offers on behalf of a target web site and thereby tricking them into doing something they never intended to do. Read more www.computerbytesman.com: Serious privacy problems in Windows Media Player for Windows XP. Read more www.computerbytesman.com: The Cookie Leak Security Hole in HTML Email messages. Read more www.computerbytesman.com: Internet Explorer SuperCookies bypass P3P and cookie controls. Read more online.securityfocus.com: Macromedia Flash Undocumented Action File Access Vulnerability. Read more online.securityfocus.com: Multiple Vendor JavaScript Interpreter Denial Of Service Vulnerability. Read more online.securityfocus.com: Microsoft MSN Messenger Message Spoofing Vulnerability. Read more online.securityfocus.com: VBulletin Cross-Site Scripting Vulnerability. Read more www.securitytracker.com: ARSC Really Simple Chat Server Discloses Web Root Directory Location to Remote Users. Read more www.securitytracker.com: Microsoft Internet Explorer Can Be Crashed By Malicious 'location.replace' Javascript. Read more www.securitytracker.com: PHP safe_mode Restrictions Can Be Bypassed By Remote Users Via the 'move_uploaded_file' Function. Read more www.securitytracker.com: Hosting Controller Web Hosting Software ASP Script Validation Bugs Let Remote Users Edit and Delete Any Files on the System, Giving the Remote Users Full Control of the System. Read more www.securitytracker.com: FreeBSD, NetBSD, and OpenBSD TCP Implementation Errors Fail to Reject TCP Broadcast Connection Requests from Remote Users. Read more cryptome.org: DIRT and South Africa. Read more CERT� Incident Note IN-2002-03 Social Engineering Attacks via IRC and Instant Messaging. Read more www.computeruser.com: 'Microsoft' e-mail Trojan harvests new victims. Read more www.eweek.com: Microsoft Warns of JVM Vulnerability. Read more timesofindia.indiatimes.com: Microsoft looks to images to enhance security. Read more news.com.com: Microsoft Outlook's so-so security. Read more www.zdnet.com: Stop hackers in their tracks with this personal firewall. Read more news.com.com: Spam flood forces companies to take desperate measures. Read more

21 March 2002 New trojan(s): Remote Operations 2.0 Indexer version a online.securityfocus.com: Linux 2.4 UDP Constant IP Identification Field Fingerprinting Vulnerability. Read more online.securityfocus.com: Multiple Vendor Java Virtual Machine Bytecode Verifier Vulnerability. Read more online.securityfocus.com: Big Sam Web Root Disclosure Vulnerability. Read more online.securityfocus.com: PHPNetToolpack Remote Command Execution Vulnerability. Read more online.securityfocus.com: BSD TCP/IP Broadcast Connection Check Vulnerability. Read more online.securityfocus.com: Hosting Controller Weak Permissions Checking Vulnerability. Read more online.securityfocus.com: Multiple Vendor Java Web Start Unsigned Application Vulnerability. Read more online.securityfocus.com: BitVise WinSSHD Numerous Connections DoS Vulnerability. Read more online.securityfocus.com: PHP Nuke Account Compromise Vulnerability. Read more online.securityfocus.com: PHPNetToolpack Insecure Search Path Vulnerability. Read more www.securitytracker.com: Sun Java Runtime Environment (JRE) Bytecode Verifier Casting Bug Lets Arbitrary Code Execute Outside of the Java Security Sandbox. Read more www.securitytracker.com: Sun Java Web Start Bug in Java Networking Launching Protocol (JNLP) Lets Remote Users Create Unsigned Applets That Can Access Restricted Resources. Read more www.securitytracker.com: PHP Net Toolpack Input Filtering Hole Lets Remote Users Execute Commands on the System. Read more www.securitytracker.com: phpBB Relative Include Path Bug Lets Remote Users Execute Arbitrary PHP on the Server. Read more www.securitytracker.com: Bitvise WinSSHD Protocol State Error Allows Remote Users to Cause the Secure Shell Server to Stop Accepting Incoming Connections. Read more zdnet.com.com: CERT warning: Oldest IM tricks work best. Read more www.newsfactor.com: 'Social Engineering' Spreads New Plague of Web Chat Viruses. Read more www.bizplus.ie: Irish Honeynet Launched To Track Hackers. Read more hoovnews.hoovers.com: SGI warns of Apache-IRIX vulnerability (ZDNet News ZDNN). Read more www.newsbytes.com: 'Microsoft' E-Mail Trojan Harvests New Victims. Read more www.silicon.com: Microsoft admits to another Java security hole. Read more abcnews.go.com: Police Flat-Footed in Cyber Crimes. Read more www.washtech.com: Hackers Deface Thousands Of Domains Parked At Verisign. Read more www.sfgate.com: Hacker suspect sent to jail after hearing. Read more news.zdnet.co.uk: Hackers can come in through the front door. Read more digitalmass.boston.com: FBI considering changes to cyber-security unit. Read more www.theregister.co.uk: Instant message, cracker tricks. Read more

20 March 2002 New trojan(s): NeoCity 1.0 Orig cryptome.org: * DIRT Release Feedback. Read more www.finjan.com: Java Virtual Machine Verifier Exploit. Read more ENCODE Security Paper (ESP0202): An empirical analysis of the RVP-based Instant Messaging (MSN Messenger Service v3.6)(pdf). Read more DSA-121-1 xtell -- buffer overflow, symlink problem, ".." directory traversal, Read more DSA-122-1 zlib -- malloc error (double free). Read more www.security.nnov.ru: Bypassing Content Filtering Software. Read more www.securitytracker.com: Microsoft Internet Explorer (IE) 6 Lets Remote Users Cause Files to Be Downloaded and Executed Without the Knowledge or Consent of the Victim. Read more www.securitytracker.com: Lotus Domino 'bindsock' PATH Buffer Overflow Lets Local Users Execute Arbitrary Code with Root Privileges on the System. Read more www.securitytracker.com: Lotus Domino Notes_ExecDirectory Buffer Overflow Lets Local Users Obtain Root Privileges on the System. Read more www.securitytracker.com: Lotus Domino 'bindsock' Symlink Flaw Lets Local Users Create Files on the System with Root Privileges. Read more www.securiteam.com: PhpBB2 Remote Command Execution. Read more www.securiteam.com: VBScript Handling in IE can Allow Web Pages to Read Local Files. Read more www.securiteam.com: BitVise WinSSH Denial of Service. Read more www.securiteam.com: PHP Nuke Path Disclosure Vulnerability through Modules.php. Read more digitalmass.boston.com: Microsoft Warns of Java Security Hole in Windows. Read more www.zdnet.com: Want to stop viruses? Let script kiddies play in the sandbox. Read more www.computeruser.com: Security bug disclosure standard dead in the water. Read more www.newsbytes.com: US, South Korea Launch Pads For Most Cyber-Attacks. Read more

19 March 2002 New trojan(s): AlphaDog Kenny Microsoft Security Bulletin MS02-013 (Version 2.0). Read more phpbb.sourceforge.net: Potential security problem with all non-CVS versions. Read more www.securiteam.com: PhpBB2 Remote Command Execution. Read more www.securiteam.com: Vulnerability in URI parsing code of Foundry Networks ServerIron Allows to Bypass Rules. Read more www.securiteam.com: Another Buffer Overflow in Talentsoft's Web+. Read more www.securiteam.com: BitVise WinSSH Denial of Service. Read more www.securiteam.com: PHP Nuke Path Disclosure Vulnerability through Modules.php. Read more www.securitytracker.com: Lotus Domino 'bindsock' PATH Buffer Overflow Lets Local Users Execute Arbitrary Code with Root Privileges on the System. Read more www.securitytracker.com: Lotus Domino Notes_ExecDirectory Buffer Overflow Lets Local Users Obtain Root Privileges on the System. Read more www.securitytracker.com: Lotus Domino 'bindsock' Symlink Flaw Lets Local Users Create Files on the System with Root Privileges. Read more www.securitytracker.com: Qualcomm Qpopper E-mail Server Denial of Service Bug Lets Remote Users Crash the POP3 Server. Read more www.securitytracker.com: X Display Manager Control Protocol (XDMCP) Default Configuration Lets Remote Users Determine Valid User Names on the System and Gain Access to a Remote Console Login Screen. Read more www.securitytracker.com: Foundry Networks ServerIron Web Filtering Rules Can Be Bypassed By Remote Users. Read more www.securitytracker.com: PHProjekt Library Path Include Bug Lets Remote Users Execute Arbitrary PHP Scripts on the Server. Read more www.securitytracker.com: Black Tie Project Web Portal Software Discloses Web Document Directory Installation Path to Remote Users. Read more www.securitytracker.com: Sketch Vector Drawing Program May Execute Arbitrary System Commands When Previewing a Malicious Sketch File. Read more www.securitytracker.com: Microsoft Windows 2000 Automatic Log Off Policy Fails to Expire Sessions in Progress. Read more online.securityfocus.com: Heckenkamp Jailed at Court Appearance. Read more online.securityfocus.com: Building an Anti-Virus engine. Read more news.com.com: Security-flaw guidelines hit pothole. Read more www.msnbc.com: Hacking Grows With Internet Use. Read more www.computeruser.com: U.S. military scours Windows systems for hacker back doors. Read more www.computerworld.com: Hacker exposes financial information at Georgia Tech. Read more www.computerworld.com: Virus Alerts Run Amok. Read more zdnet.com.com: Study: Hackers take a trip through Asia. Read more www.nikkeibp.asiabiztech.com: Security Holes in Wireless LANs 'Everywhere'. Read more www.vnunet.com: Security flaws leave Oracle users exposed. Read more www.newsbytes.com: Computer Security Lacking At State DMVs � GAO Report. Read more news.com.com: States aim for tough Microsoft sanctions. Read more

18 March 2002 New trojan(s): KillDientes 1.5 Expir cryptome.org: H.O.P.E.TM is a system to mass distribute D.I.R.T.TM technology via the internet through a variety of surreptitious means. Read more www.securitytracker.com: Qualcomm Qpopper E-mail Server Denial of Service Bug Lets Remote Users Crash the POP3 Server. Read more www.securitytracker.com: X Display Manager Control Protocol (XDMCP) Default Configuration Lets Remote Users Determine Valid User Names on the System and Gain Access to a Remote Console Login Screen. Read more www.securiteam.com: Command execution in phprojekt. Read more www.securiteam.com: PHP FirstPost System Information Path Disclosure Vulnerability. Read more www.silicon.com: Microsoft, security, blunder: Make your own headline. Read more news.independent.co.uk: Hackers could have exploited net's hidden flaw. Read more www.msnbc.com: �It�s Impossible To Build a Completely Secure Network�. Read more www.computeruser.com: U.S. military scours Windows systems for hacker back doors. Read more it.mycareer.com.au: The secret life of hackers. Read more english.peopledaily.com.cn: Chinese Hacker Sentenced to One-Year Imprisonment. Read more www.sundaytimes.news.com.au: Tightening the Net. Read more

17 March 2002 New trojan(s): Armageddon Delf verion u www.digitux.net: A buffer overflow in the ippRead function of CUPS before version 1.1.14 may allow attackers to execute arbitrary code via long attribute names or language values. Read more wildsau.idv.uni-linz.ac.at: The Linux Virus Writing And Detection HOWTO. Read more online.securityfocus.com: Oracle 9iAS Apache PL/SQL Module Web Administration Access Vulnerability. Read more online.securityfocus.com: Oracle 9iAS PL/SQL OWA_UTIL Unauthorized Stored Procedure Access Vulnerability. Read more online.securityfocus.com: Oblix NetPoint Account Lock Bypass Vulnerability. Read more online.securityfocus.com: TalentSoft Web+ Web Markup Language Buffer Overflow Vulnerability. Read more online.securityfocus.com: Foundry Networks ServerIron Encoded URI Load Balancing Bypass Weakness. Read more www.securitytracker.com: Windows NT and 2000 Session Manager Debug Hole Lets Local Users Obtain Handles to Any Process or Thread to Obtain Elevated Privileges on the System. Read more www.securitytracker.com: Oblix NetPoint Web Access Control System Account Lockout Feature Fails to Lockout Repeated Incorrect Authentication Attempts. Read more www.securitytracker.com: X-news PHP News Management System Lets Remote Users Access the Administrator Menu. Read more www.securitytracker.com: X-stat Log File Analysis Tool Has Multiple Vulnerabilities That Allow Remote Users to Obtain Information About the System and Conduct Cross-Site Scripting Attacks Against x-stat Administrators. Read more www.securiteam.com: Microsoft SQL Server: Buffer Overflows in numerous extended stored procedures. Read more www.securiteam.com: Black Tie Project System Information and Path Disclosure Vulnerability. Read more www.securiteam.com: FreeBSD Mod_frontpage Port Contains Exploitable Buffer Overflow. Read more www.securiteam.com: THC-Hydra, a Parallel Login Hacker. Read more www.securiteam.com: mdmchk - detect modem drivers installed on NT systems. Read more bob.firstcodings.com: AuthentProtect is a small ISAPI filter that denies IIS authentication based on given usernames. Read more www.computerworld.com: New e-mail worm can select native language for recipients. Read more www.neowin.net: Australians too smart for new worm. Read more www.computerworld.com: IT security pros learn to beat hackers at their own game. Read more www.computerworld.com: Serious security flaw found in Linux file compression library. Read more zdnet.com.com: Japanese worm on Net rampage. Read more www.vnunet.com: Fbound virus nipped in the bud. Read more www.vnunet.com: Microsoft fear over zlib flaw. Read more www.vnunet.com: Bug Watch: The Engine Room. Read more

16 March 2002 New trojan(s): NetEyes 1.0 CNK 1.0 www.securitytracker.com: Foundry Networks ServerIron Web Filtering Rules Can Be Bypassed By Remote Users. Read more www.securitytracker.com: PHProjekt Library Path Include Bug Lets Remote Users Execute Arbitrary PHP Scripts on the Server. Read more www.securitytracker.com: Black Tie Project Web Portal Software Discloses Web Document Directory Installation Path to Remote Users. Read more www.securitytracker.com: Sketch Vector Drawing Program May Execute Arbitrary System Commands When Previewing a Malicious Sketch File. Read more www.securitytracker.com: Microsoft Windows 2000 Automatic Log Off Policy Fails to Expire Sessions in Progress. Read more www.securitytracker.com: TalentSoft Web+ Application Server Buffer Overflow Gives Remote Users SYSTEM Level Access to the Server. Read more www.securitytracker.com: SurfControl SuperScout E-mail Filter Can Be Crashed By Remote Users. Read more www.securitytracker.com: Pam-pgsql Pluggable Authentication Module (PAM) Input Validation Flaw Lets Remote Users Inject SQL Commands to Be Executed By the Underlying Database Server. Read more www.securitytracker.com: Ecartis (Listar) Mailing List Management Software Has Multiple Vulnerabilities That Allow Remote Users to Execute Arbitrary Code and Gain Root Privileges on the System. Read more www.securiteam.com: Trend Micro InterScan VirusWall HTTP Proxy Content Scanning Circumvention. Read more www.securiteam.com: Ecartis / Listar multiple vulnerabilities. Read more www.securiteam.com: GNU fileutils Recursive Directory Removal Race Condition. Read more www.theregister.co.uk: Back Orifice for Unix flaw emerges from obscurity. Read more new.financialexpress.com: Tracker Gets A Visit From Hacker! Read more www.msnbc.com: Hacking Grows With Internet Use. Read more home.kyodo.co.jp: Koizumi Web site made visitors' data vulnerable to hackers. Read more www.theregister.co.uk: Worm turns Japanese. Read more

15 March 2002 New trojan(s): D.I.R.T. 2.2  Designed for US Law enforcement agencies, US Intelligence agencies and US Military agencies Dobol www.theregister.co.uk: Law-enforcement DIRT Trojan released. Read more Microsoft Security Bulletin MS02-006 (version 5.0) Unchecked Buffer in SNMP Service Could Enable Arbitrary Code to be Run. Read more CERT� Advisory CA-2002-08 Multiple vulnerabilities in Oracle Servers. Read more www.it-checkpoint.net: translation.lycos.com and infoplease.lycos.com allow Cross Site Scripting. Read more www.secadministrator.com: Session Authentication URL Exposed in Ipswitch IMail Server. Read more www.appsecinc.com: Microsoft SQL Server: Buffer Overflows in numerous extended stored procedures. Read more online.securityfocus.com: X-News Insecure User Database Permissions Vulnerability. Read more online.securityfocus.com: X-Stat Path Disclosure Vulnerability. Read more online.securityfocus.com: X-Stat PHPInfo Information Disclosure Vulnerability. Read more online.securityfocus.com: X-Stat Cross-Site Scripting Vulnerability. Read more online.securityfocus.com: TalentSoft Web+ Web Markup Language Buffer Overflow Vulnerability. Read more www.securitytracker.com: PHP FirstPost Weblog Discloses Web Installation Directory to Remote Users. Read more www.securitytracker.com: ZyXEL ZyWALL Security Gateway ARP Processing Bug Lets Users on the Local Network Cause the Security Gateway's Interface to Go Down. Read more www.securitytracker.com: Sunsolve CD Cgi Scripts Have Input Validation Holes That Let Remote Users Execute Arbitrary Code on the Server. Read more www.securitytracker.com: Marcus S. Xenakis 'directory.php' Input Filtering Hole Lets Remote Users Execute Commands on the Server. Read more www.securitytracker.com: Citadel/UX Bulletin Board System SMTP Buffer Overflow Lets Remote Users Crash the Bulletin Board Service. Read more www.securitytracker.com: A Multitude of Microsoft SQL Server Extended Stored Procedures Have Buffer Overflows That Allow Remote Users to Crash the Database Server or Execute Arbitrary Code on the Server to Gain Full Control of the System. Read more www.securitytracker.com: GNU Fileutils Package Race Condition May Allow Local Users to Cause a Root User to Remove the Entire Filesystem. Read more www.securitytracker.com: Php ImgList Image Gallery Script Discloses Files on the System to Remote Users. Read more www.newsbytes.com: New Worm Is 'Turning Japanese' (When Needed). Read more news.com.com: Microsoft's borrowed code may pose risk. Read more www.bday.co.za: Hackers breeding deadlier viruses. Read more new.financialexpress.com: Tracker Gets A Visit From Hacker! Read more online.securityfocus.com: Cable Modem Hacking Tricks Uncapped Online. Read more www.macworld.co.uk: Anti-US hackers hit OS X site. Read more it.mycareer.com.au: Murdoch company accused of dirty dealings in a billion-dollar card game. Read more home.kyodo.co.jp: Koizumi Web site made visitors' data vulnerable to hackers. Read more www.cnn.com: UK study: Passwords often easy to crack. Read more bermudasun.bm: Cryptography: It�s not just about keeping things secret. Read more www.guardian.co.uk: Murdoch security chief linked to TV piracy site. Read more

14 March 2002 New trojan(s): Singularity Barbie Stealth Tools 1.0 by Gobo x42.com: About calculator-in-the-URL. Read more www.cgisecurity.com: Anatomy of the Web Application Worm. Read more d0tslash.def-con.org: java equivilant of a local exploit using command line arguments. Read more www.redhat.com: Vulnerability in zlib library. Read more www.gzip.org: partial list of applications and libraries using zlib. Read more cert.uni-stuttgart.de: scan for zlib tables in compiled code. Read more www.nextgenss.com: NGSSoftware Insight Security Research Advisory. Read more support.microsoft.com: Description of Internet Explorer Security Zones Registry Entries. Read more online.securityfocus.com: Black Tie Project Path Disclosure Vulnerability. Read more online.securityfocus.com: PHP FirstPost Path Disclosure Vulnerability. Read more online.securityfocus.com: PHP ImgList Directory Traversal Vulnerability. Read more online.securityfocus.com: Zyxel Zywall10 Denial Of Service Vulnerability. Read more online.securityfocus.com: Sun Sunsolve CD SSCD_SunCourier.pl CGI Script Arbitrary Command Execution Vulnerability. Read more online.securityfocus.com: CaupoShop User Information Cross Site Scripting Vulnerability. Read more online.securityfocus.com: Trend Micro InterScan VirusWall Content-Length Scan Bypass Vulnerability. Read more online.securityfocus.com: Ecartis/Listar Multiple Local Buffer Overflow Vulnerabilities. Read more www.securitytracker.com: Caldera OpenServer 'dlvr_audit' Buffer Overflow Lets Local Users Gain Root Level Privileges on the System. Read more www.securitytracker.com: XTux Game Server Denial of Service Bug Lets Remote Users Cause the Game Server to Stop Responding. Read more www.securitytracker.com: Linksys Cable/DSL VPN Router Uses Weak IPSec Encryption Keys. Read more www.securitytracker.com: CaupoShop Input Filtering Hole Lets Remote Users Conduct Cross-Site Scripting Attacks to Steal Customer Data (Including Credit Cards) and Manipulate the Items for Sale in the Store. Read more www.securitytracker.com: ALCATech's BPM Studio Pro Audio Mixer Discloses Files Located Anywhere on the System to Remote Users. Read more www.securitytracker.com: SMS Server Tools Format String Bugs Let Local Users Cause Commands to Be Executed By the 'smsd' Process. Read more www.securitytracker.com: Pi3Web Web Server Discloses Protected Files within the System Web Document Directory to Remote Users. Read more www.securitytracker.com: 'zlib' Shared Compression Library Contains 'Double Free()' Buffer Overflow That Lets Remote Users Cause Programs Using zlib to Crash or Execute Arbitrary Code. Read more CERT� Incident Note IN-2002-02 W32/Gibe Malicious Code. Read more www.fcw.com: Army securing wireless LAN. Read more www.eweek.com: New Attack Intercepts Wireless Net Messages. Read more www.networknews.co.uk: Jac virus targets Linux. Read more www.networknews.co.uk: Vendors losing the security war. Read more www.networknews.co.uk: Plug and pray with Windows XP. Read more www.newsbytes.com: Internet Explorer Exploit Gives Windows XP Users The Boot. Read more www.computeruser.com: Backdoor worm disguised as Microsoft security bulletin. Read more www.guardian.co.uk: How codebreakers cracked the secrets of the smart card. Read more www.theregister.co.uk: Murdoch company cracked our smartcard, claims Canal+. Read more www.newsbytes.com: Cable Modem Hacking Tricks Uncapped Online. Read more www.networknews.co.uk: Tighten up or hackers will go free. Read more www.japantimes.co.jp: Japan firms open to hackers: group. Read more newsbytes.com: Teen Hacker's Offer To Help Leads To Felony Charges. Read more www.theregister.co.uk: Factoring gains won't break strong crypto - Schneier. Read more

13 March 2002 New trojan(s): Bigorna 1.0 F-Backdoor 1.3 www.appsecinc.com: Microsoft SQL Server: Buffer Overflows in numerous extended stored procedures. Read more razor.bindview.co: IIS SMTP component allows mail relaying via Null Session. Read more razor.bindview.co: Strategies for Defeating Distributed Attacks. Read more www.digitaloffense.net: zlib Compression Library Corrupts malloc Data Structures via Double Free. Read more www.sys-security.com: Trace-Back. A Concept for Tracing and Profiling Malicious Computer Attackers. (pdf) Read more online.securityfocus.com: GNU Fileutils Directory Removal Race Condition Vulnerability. Read more online.securityfocus.com: GNU zlib Compression Library Heap Corruption Vulnerability. Read more online.securityfocus.com: John Roy Pi3Web Path Disclosure Vulnerability. Read more online.securityfocus.com: John Roy Pi3Web File Disclosure Vulnerability. Read more www.securiteam.com: Checkpoint FW1 SecuRemote/SecureClient "re-authentication" (client side hacks of users.C). Read more www.securiteam.com: mIRC DCC Server Security Flaw. Read more www.securiteam.com: Double Free Bug in zlib Compression Library. Read more www.securiteam.com: Various Vulnerabilities in Norton Anti-Virus 2002. Read more www.securiteam.com: Windows Shell Overflow (Additional Information). Read more www.securitytracker.com: PHP-Nuke Cross-site Scripting Flaw in Private Messages Lets Remote Users Steal PHP-Nuke User Cookies. Read more www.securitytracker.com: Cobalt XTR User Interface Access Control Issue and File Uploading Authentication Bug Let Local Users Write to Files with Root Privileges. Read more www.securitytracker.com: Ipswitch IMail Server Discloses Authentication Tokens to Remote Users Letting Remote Users Access Other User Accounts. Read more www.theregister.co.uk: *Nix security pandemic - major zlib/libz vuln. Read more www.usatoday.com: Air Force seeks better security from Microsoft. Read more www.newsbytes.com: Software Bug Could Threaten Security Of Linux Systems. Read more news.com.au: E-trade at risk with old keys. Read more asia.cnet.com: Grid computing boosts hacker network. Read more www.belfasttelegraph.co.uk: Cracking Computer crime. Read more media.guardian.co.uk: Murdoch company in $1bn TV piracy row. Read more

12 March 2002 New trojan(s): Osiris Insurector 2.0 Microsoft Security Bulletin MS02-006 Unchecked Buffer in SNMP Service Could Enable Arbitrary Code to be Run. Read more www.ppp-design.de: cross-site-scripting bug in CaupoShop (and probably in CaupoShopPro). Read more isec.pl: Race condition in various utilities from fileutils GNU package may cause root user to delete the whole filesystem. Read more isec.pl: Multiple buffer overflow vulnerabilities as well as improper privilege dropping in Ecartis/Listar may lead to root compromise. Read more www.gzip.org: zlib Compression Library Corrupts malloc Data Structures via Double Free. Read more www.debian.org: DSA-120-1 mod_ssl -- buffer overflow. Read more www.debian.org: DSA-119-1 ssh -- local root exploit, remote client exploit. Read more online.securityfocus.com: SurfControl Email Filter for SMTP HELO Denial of Service Vulnerability. Read more online.securityfocus.com: XTux Server Garbage Denial of Service Vulnerability. Read more online.securityfocus.com: Menasoft SPHEREserver .99 Denial of Service Vulnerability. Read more online.securityfocus.com: Linux kernel 2.4.18 iBCS IPC signal handling Vulnerability. Read more www.securiteam.com: Vulnerabilities in Multiple RADIUS Clients and Servers. Read more www.securiteam.com: Java HTTP Proxy Vulnerability (Additional Details). Read more www.securiteam.com: Unchecked Buffer in Windows Shell Could Lead to Code Execution. Read more www.securiteam.com: Pi3Web File-Disclosure/Path Disclosure. Read more www.securiteam.com: The Feasibility of Attacking Windows 2000 Kerberos Passwords. Read more www.securiteam.com: IPv4 Forwarding Doesn't Consult Inbound SPD in KAME-derived IPSec. Read more www.securiteam.com: Directory.php Allows Arbitrary Code Execution. Read more www.securiteam.com: Cobalt Raq XTR Combination Attack (Remote/Local). Read more www.linuxsecurity.com: Significant Vulnerability Afflicts Linux Systems. Read more www.inside-security.de: Trend Micro InterScan VirusWall HTTP proxy content scanning circumvention. Read more mail.gnu.org: rm - recursive directory removal race condition. Read more isec.pl: Developing StrongARM/Linux shellcode. Read more www.philzimmermann.com: Philip Zimmermann, Creator of PGP. Read more www.computerworld.com: SNMP Vulnerability Offers 3,200 Reasons to Worry. Read more zdnet.com.com: Flaw weakens Linux computers. Read more www.idg.net: Virus alerts lack standards. Read more www.businessweek.com: Hacking al Qaeda's Secrets. Read more abcnews.go.com: Hacker Or Security Crusader? Read more www.theregister.co.uk: ICQ hack theories flood into Vulture Central. Read more www.fresnobee.com: Feds step up cybercrime battle in Fresno. Read more www.idg.net: Study: Web Exposes Data on CIA Networks. Read more www.newsbytes.com: 'Eddie Murphy' Hackers Demand Ransom From Rock Band. Read more www.eweek.com: Enron: Security Woes, Too? Read more www.siliconvalley.com: Hackers' next target? Cell phones. Read more www.nandotimes.com: Application service providers urged to ensure security. Read more

11 March 2002 New trojan(s): Elf 1.0 Sean eyeonsecurity.net: IMail Account hijack through the Web Interface. Read more sunsolve.sun.com: SUN Security Bulletin: HttpURLConnection. Read more online.securityfocus.com: Improved mod_frontpage Buffer Overflow Vulnerability. Read more online.securityfocus.com: Linksys BEFVP41 Key Truncation Encryption Weakening Vulnerability. Read more online.securityfocus.com: Xerver Multiple Request Denial Of Service Vulnerability. Read more online.securityfocus.com: Microsoft Windows 2000 Password Policy Bypass Vulnerability. Read more online.securityfocus.com: Cobalt RaQ XTR MultiFileUpload.php Authentication Bypass Vulnerability. Read more online.securityfocus.com: Check Point FW-1 SecuClient/SecuRemote Client Design Vulnerability. Read more online.securityfocus.com: Xerver Directory Traversal Vulnerability. Read more online.securityfocus.com: Symantec Norton AntiVirus Excluded Filetype Email Protection Bypass Vulnerability. Read more online.securityfocus.com: Symantec Norton AntiVirus NULL Characters Incoming Email Protection Bypass Vulnerability. Read more online.securityfocus.com: Microsoft Windows User Shell Buffer Overflow Vulnerability. Read more www.securiteam.com: Buffer Overflows Found in SH39's MailServer. Read more www.securitytracker.com: Check Point FireWall-1 SecuRemote/SecureClient Authentication Timeout Restrictions Can Be Circumvented By Users. Read more www.newsbytes.com: Gator Branded A Trojan Horse Despite Security Fix. Read more techupdate.zdnet.com: The biggest flaw you never saw. Read more www.bday.co.za: New law brings certainty to cyberspace regulation. Read more www.businessweek.com: The Best Way to Make Software Secure: Liability. Read more www.eweek.com: Flaws Leave OpenSSH, Windows Vulnerable. Read more www.canoe.ca: Amateur hackers pose greater security threat than sophisticated ones. Read more www.usatoday.com: Official: U.S. studying Cuba's ability to disrupt Net. Read more www.reuters.co.uk: Beware spying computers, say experts. Read more www.nandotimes.com: No paying customers for encryption software. Read more

10 March 2002 New trojan(s): WinRat 1.3 Dynod www.att.com: Local Area Detection of Incoming War Dial Activity (pdf). Read more home.mminternet.com: Wireless Security. Read more www.newsforge.com: Pringles: the latest wireless cracker tool. Read more online.securityfocus.com: OpenSSH Channel Code Off-By-One Vulnerability. Read more online.securityfocus.com: mIRC DCC Nick Disclosure Vulnerability. Read more online.securityfocus.com: Symantec Norton AntiVirus Conflicting MIME Header Vulnerability. Read more online.securityfocus.com: Symantec Norton AntiVirus Non-RFC Compliant Email Protection Bypass Vulnerability. Read more www.securitytracker.com: Xerver Web Server Input Validation Flaw Lets Remote Users View Files on the Server and Error Handling Bug Lets Remote Users Crash the Web Service. Read more www.securitytracker.com: 'mod_frontpage' Module for Apache Web Server Has Buffer Overlow in 'fpexec.c' That Allows Remote Users to Execute Arbitrary Code on the System with Root Privileges. Read more www.securitytracker.com: Microsoft Windows Operating System Shell URL Handler Bug Lets Remote Users Create HTML That Could Cause Arbitrary Code to Be Executed on Another User's System in Certain Situations. Read more www.securitytracker.com: mIRC Chat Client Discloses User Nickname and Other Information to Remote Users via Direct Client-to-Client Protocol. Read more www.securitytracker.com: OpenSSH Off-by-one 'Channels' Bug May Let Authorized Remote Users Execute Arbitrary Code with Root Privileges. Read more www.securiteam.com: PHP Remote Exploit Code Released (FILEUPLOAD, multipart/form-data). Read more www.securiteam.com: MTR Allows Local Users to Gain Root Privileges. Read more www.securiteam.com: AIM Remote Buffer Overflow. Read more www.securiteam.com: PureTLS Gets a Security Upgrade. Read more www.securiteam.com: Another SQL Server 7 Buffer Overflow (xp_dirtree). Read more www.securiteam.com: NT Users Can Bypass Password Changing Policy via IIS. Read more online.securityfocus.com: Heckenkamp Trial Delayed. Read more online.securityfocus.com: How we can save PGP -- Zimmermann. Read more it.asia1.com.sg: Microsoft to withdraw Windows XP if states win case. Read more www.sfgate.com: Next target for computer viruses: Cell phones. Read more www.net4nowt.com: Zone Labs Release New Feature Packed Firewall Software. Read more

09 March 2002 New trojan(s): Iani Kiss 0.99 www.phreedom.org: onesixtyone: an efficient SNMP scanner. Read more www.pointblanksecurity.com: Subversion of Information Vulnerabilities on Major News Sites. Read more www.digit-labs.org: Combined (Remote/Local root) Cobalt XTR vulnerabilities. Read more www.openpkg.org: OpenPKG Security Advisory. Read more www.digitaloffense.net: Exploit for denial of service vulnerability in the Windows 2000 SMTP component. Read more online.securityfocus.com: Symantec Norton AntiVirus NULL Characters Incoming Email Protection Bypass Vulnerability. Read more online.securityfocus.com: Netscape Navigator Snoops On Web Searches. Read more online.securityfocus.com: OpenSSH Channel Code Off-By-One Vulnerability. Read more www.securitytracker.com: PureTLS Java-based SSL Implementation Has Diffie-Hellman Parameter Bug That May Compromise Security. Read more www.securitytracker.com: Microsoft Internet Information Server 4.0 .HTR Web Application Lets Users Change Their Passwords When the NT Security Policy is Configured to Prohibit Password Changing. Read more www.securitytracker.com: MTR Network Diagnostic Tool Buffer Overflow Lets Local Users Gain Root Privileges. Read more www.securitytracker.com: Efingerd Buffer Overflow May Allow Remote Users to Execute Arbitrary Code on the System. Read more www.securiteam.com: Reverse WWW Tunnel Backdoor. Read more www.securiteam.com: Xerver 2.10 Directory Traversal and DoS . Read more www.securiteam.com: Java Applets Can be Used to Redirect Browser Traffic. Read more www.securiteam.com: MailMan File Disclosure Vulnerability. Read more abcnews.go.com: 'Roughing' Up Hackers. New Software Technique for Spotting Computer Intruders. Read more www.sfgate.com: Bogus Microsoft security update e-mail is actually a virus. Read more www.it-director.com: Online virus generator will return. Read more www.pcworld.com: ZoneAlarm Evolves Into Full Security Tool. Read more news.bbc.co.uk: Hacking with a Pringles tube. Read more www.bday.co.za: New law brings certainty to cyberspace regulation. Read more www.latimes.com: U.S. to Curb Computer Access by Foreigners. Read more

08 March 2002 New trojan(s): Winshell 4.0 Winamp Glich...Your now a Recording Artist by Doc~ Microsoft Security Bulletin MS02-014 Print Unchecked Buffer in Windows Shell Could Lead to Code Execution. Read more www.kismetwireless.net: Kismet is a 802.11b wireless network sniffer. Read more phrack.org: The Frame Pointer Overwrite. Read more www.brd.ie: Feasibility of attacking Windows 2000 Kerberos Passwords. Read more www.linuxsecurity.com: Local vulnerability in OpenSSH's channel code. Read more www.pine.nl: A bug exists in the channel code of OpenSSH versions 2.0 - 3.0.2. Read more www.openbsd.org: OpenSSH Security Advisory (adv.channelalloc). Read more www.geocities.com: TunnelShell, Tunneling Shell Access via TCP/UDP/Fraged/ICMP/RawIP Packets. Read more online.securityfocus.com: Microsoft Windows NT Security Policy Bypass Vulnerability. Read more online.securityfocus.com: Another Sql Server 7 Buffer Overflow. Read more www.securitytracker.com: SH39 MailServer Buffer Overflow Lets Remote Users Crash the SMTP Mail Service. Read more www.securitytracker.com: RealPlayer View Source Bug May Disclose Files to Other Users. Read more www.securitytracker.com: Endymion's Sake Mail Web Mail Java Servet Lets Remote Users View Files on the Server. Read more www.securitytracker.com: Endymion's MailMan Web Mail Server Lets Remote Users View Files on the Server. Read more www.securitytracker.com: Talentsoft Web+ Application Server Lets Remote Users Execute Arbitrary Code with System Level Privileges. Read more www.securitytracker.com: Microsoft SQL Server 'xp_dirtree' Buffer Overflow Lets Users Crash the Database Service. Read more www.interhack.net: PCFriendly Enables DVD Backchannels. Read more www.newsbytes.com: Virus Borrows Internet Pioneer's Server To Spread. Read more www.secadministrator.com: Additional Information About Microsoft Baseline Security Analyzer. Read more www.reuters.com: Al Qaeda Seen Using Web to Regroup, NY Times Says. Read more webcenter.newssearch.netscape.com: U.S. Reviewing Cuba, Cyberattacks. Read more www.trustmatta.com: Internet-based CounterIntelligence (pdf). Yesterday the consultants of the Matta Attack & Penetration Team released a white paper documenting an entirely legal counterintelligence exercise undertaken over 2 days against the CIA's Internet points of presence, using open sources of information.Read more www.computerworld.com: Klez.e worm threat appears to be contained. Read more www.computerworld.com: New worm may be first written in C#. Read more www.cw360.com: Know the dangers of XML. Read more www.newsbytes.com: Gator Branded A Trojan Horse Despite Security Fix. Read more www.computerbuyer.co.uk: Hacks in the city: Pictures. Read more www.philstar.com: Network Security: the new challenge. Read more news.24.com: Cyber inspectors to patrol Web. Read more www.silicon.com: Pretty Good Privacy pretty much dead. Read more www.idg.net: PGP will go on, says its inventor. Read more digitalmass.boston.com: Network Associates discontinues encryption software. Read more

07 March 2002 New trojan(s): wh-crew Spy 1.0 www.trustmatta.com: An Introduction to Internet Attack & Penetration (PDF). Read more www.xs4all.nl: Java HTTP proxy vulnerability. Read more www.securiteam.com: IIS Internal IP Address Disclosure. Read more www.securiteam.com: Considerations for IIS Authentication. Read more online.securityfocus.com: Microsoft SQL Server xp_dirtree Buffer Overflow Vulnerability. Read more online.securityfocus.com: MailServer by SH39 Denial of Service Vulnerability. Read more online.securityfocus.com: Kame-Derived Stack Non-ESP IPV4 Forwarded Packets Policy Bypassing Vulnerability. Read more www.securitytracker.com: Thttpd Web Server Filtering Flaw Lets Remote Users Steal Cookies Via Cross-Site Scripting Attacks. Read more www.securitytracker.com: Concurrent Versions System (CVS) Configuration Control Software Lets Local Users Crash the Server. Read more www.securitytracker.com: Openwall Linux Kernel Patch 'lcall()' Bug Lets Local Users Kill Processes Belonging to Other Users. Read more www.securitytracker.com: Zope Web Application Content Server Proxy Role Error May Let Users Access Unauthorized Objects. Read more www.securitytracker.com: Tomcat Java Server Lets Malicious Java Servlets or JSP Pages Access Any File on the Server. Read more www.securitytracker.com: Norton Anti-Virus Corporate Edition Default Configuration for Windows 2000 Lets 'Power Users' Obtain Elevated 'Administrator' Privileges. Read more www.securitytracker.com: KAME IPSec and IPSec Implementations in FreeBSD and NetBSD Fail to Apply the Security Policy Database to Inbound Forwarded Packets. Read more www.securitytracker.com: Draytek Vigor DSL Router Leaves Undocumented Management Port Open on the External (Internet-side) Interface. Read more www.securitytracker.com: ReBB Image Tag Cross-Site Scripting Hole Lets Remote Users Steal Cookies of ReBB Users. Read more. www.securitytracker.com: Netscape Web Broswer Java Environment Lets Remote Malicious Applets Redirect Web Proxy Connections. Read more www.securitytracker.com: Sun Java Runtime Environment (JRE) Lets Remote Malicious Applets Redirect Web Proxy Connections. Read more www.securitytracker.com: Microsoft Java Virtual Machine in Internet Explorer Lets Remote Malicious Applets Redirect Web Proxy Connections. Read more www.securitytracker.com: Ntop Network Usage Tool Format String Flaw May Let Remote Users Execute Arbitrary Commands on the System. Read more www.reuters.com: Klez Worm Fizzles; 2nd Virus Hits UBS PaineWebber. Read more www.zdnet.com.au: Gibe worm poses as a Microsoft update. Read more www.zdnet.com.au: Klez hasn�t wormed its way to Oz. Read more news.com.com: Worm set for file-eating binge. Read more www.theregister.co.uk: Klez-E worm triggers today. Read more www.cnn.com: Microsoft, Sun, Netscape warn of flaw in Java. Read more www.theregister.co.uk: Poison applet blights browsers. Read more www.theregister.co.uk: Oracle objects to Reg security coverage. Read more www.wired.com: He Hacks by Day, Squats by Night. Read more www.silicon.com: Top 10 tips to stop wireless hackers. Read more www.zdnet.com.au: Security: Convenience = Compromise? Read more www.theregister.co.uk: $100,000 prize in 'unbreakable' crypto challenge. Read more www.reuters.com: Computer Spy Methods Discovered in LED Lights. Read more

06 March 2002 New trojan: Oracle Binder: MultiBinder 1.4.1 MultiBinder 1.1 Source www.openwall.com: Passive Analysis of SSH (Secure Shell) Traffic. Read more www.ciac.org: Understanding the SSH CRC32 Exploit. Read more www.cgisecurity.net: Fingerprinting Port80 Attacks. Read more www.nextgenss.com: Possible to discover internal IP addresses used by IIS Servers. Read more www.debian.org: xsane -- insecure temporary files. Read more www.debian.org: cvs -- improper variable initialization. Read more www.nextgenss.com: Non-Stack Overflows on Windows (pdf). Read more www.nextgenss.com: Assessing IIS Configuration Remotely (pdf). Read more www.nextgenss.com: Considerations for IIS Authentication. Read more www.freefly.com: Endymion sake-mail file-disclosure. Read more www.freefly.com: Endymion mailman file-disclosure. Read more www.talentsoft.com: Buffer Overrun in Talentsoft's Web. Read more listmanager.unipi.it: [Ntop-dev] ntop - format string bug in traceEvent. Read more bob.firstcodings.com: AuthentProtect is a small ISAPI filter that denies IIS authentication based on given usernames. It is mainly intended to block brute force attack against users for which NTFS permissions cannot be revoked (mainly administrators). Read more online.securityfocus.com: ReBB Image Tag Cross-Site Scripting Vulnerability. Read more online.securityfocus.com: Endymion MailMan Alternate Templates File Disclosure Vulnerability. Read more online.securityfocus.com: Endymion Sake Mail Null Character File Disclosure Vulnerability. Read more online.securityfocus.com: Real Networks RealPlayer Directory Traversal Vulnerability. Read more www.securitytracker.com: Apache-SSL for Apache Web Server Has Buffer Overflow That Can Be Triggered By Remote Users. Read more www.securitytracker.com: AeroMail Web Mail System Lets Remote Users Steal the Cookies of AeroMail Users and Lets Valid Remote Users Access Files on the AeroMail Server. Read more www.theregister.co.uk: New RADIUS vulns exposed. Read more www.theregister.co.uk: Poison applet blights browsers. Read more www.techfocus.org: Klez.e virus strikes on Wednesday. Read more www.crn.com: Klez-E Worm Programmed To Munch Files. Read more news.com.com: Seeking signs of Microsoft security push. Read more zdnet.com.com: Microsoft finds, patches Java VM flaw. Read more www.zdnet.com: Wireless networking: It's so easy! And so insecure! Read more www.thetimes.co.uk: Cybercrime and online fraud are showing no signs of slowing down. Read more www.pcadvisor.co.uk: Outlook on phones likely to boost viruses. Read more www.canoe.ca: Web site offers tips on fooling with telecom giants. Read more

05 March 2002 New trojan(s): PtakkS XP Microsoft Security Bulletin MS02-013 Java Applet Can Redirect Browser Traffic. Read more CERT� Advisory CA-2002-06 Vulnerabilities in Various Implementations of the RADIUS Protocol. Read more The Injustice Of Insecure Software Software vendors often profess the importance of security. History, however, suggests otherwise: the software market has failed to produce secure software. This paper reviews the root cause of this market failure, risks this failure exacerbates, myths of today's solution, and @stake's solutions to remedy the crisis. (pdf) Read more www.hackexpo.com: Hack 2002. Read more bob.firstcodings.com: DropContentLengthGet is a small ISAPI filter that block the "Microsoft IIS/5 bogus Content-length" bug. Read more www.securiteam.com: Apache & PHP Proof of Concept Exploit. Read more online.securityfocus.com: CFS Multiple Buffer Overflow Vulnerabilities. Read more online.securityfocus.com: HP ProCurve Switch Denial of Service Vulnerability. Read more www.securitytracker.com: Phorum Bulletin Board Software Discloses the E-mail Addresses of the Ten Most Active Phorum Users to Remote Users. Read more www.securitytracker.com: Phorum Bulletin Board Input Validation Flaw Lets Remote Users Conduct Cross-Site Scripting Attacks and Assume the Identity of Other Phorum Users. Read more www.securitytracker.com: Demarc PureSecure Network Monitoring Software Uses Weak Encryption for Administrator Passwords, Facilitating Remote Brute-Force Password Guessing Attempts. Read more www.securitytracker.com: Cryptographic File System (CFS) Buffer Overflows Let Remote Users Crash the File System. Read more www.securiteam.com: Hotline Client Plaintext Password Vulnerability. Read more www.securiteam.com: Embedded URLs in Spoofed Multimedia Files. Read more www.securiteam.com: Details and Exploitation of a Buffer Overflow in mshtml.dll (SRC). Read more www.securiteam.com: BadBlue Directory Traversal Vulnerability (./ Removal). Read more www.securiteam.com: Remotely Exploitable Format String Vulnerability in Ntop (%s, Web Server). Read more www.securiteam.com: XTellD Multiple Vulnerabilities. Read more www.newsbytes.com: Microsoft Moves Fast To Stop Hacking Rumor. Read more www.theregister.co.uk: Removing IE would kill Win2k, WinXP, MS, says Redmond. Read more www.theregister.co.uk: IE, Outlook run malicious commands without scripting. Read more zdnet.com.com: Experts: Worms will breed in PHP hole. Read more www.theregister.co.uk: Malware by numbers: online virus creation tool spotted. Read more zdnet.com.com: Study: Biz still battling with viruses. Read more www.newsbytes.com: Computer Virus Infections Continue To Climb - Report. Read more www.forbes.com: UPDATE 1-Hacker claims Web worm meant to combat sexism. Read more www.miami.com: Honey pot set up on Web to attract hackers. Read more news.bbc.co.uk: Net monitoring scheme under fire. Read more www.i-street.com: New University of Illinois Center Focuses on Information Security. Read more www.latimes.com: Patching Holes in the Net. Read more www.businessweek.com: Stop Him Before He Hacks Again. Read more news.zdnet.co.uk: Wanted: Evidence of MS security push. Read more www.theregister.co.uk: Curious employees are biggest security risk. Read more www.wired.com: Adobe Copyright Case in Court. Read more

04 March 2002 New trojan(s): Sphere 1.0 www.h07.org: SphereServer Denial of Service Vulnerability. Read more www.apache-ssl.org: Apache-SSL buffer overflow condition (all versions prior to 1.3.22+1.46). Read more www.cisco.com: Fax Passthrough Limitations on ATA 186. Read more www.cisco.com: Cisco 10720 Fan Failure Goes Undetected. Read more www.cisco.com: Cisco 1750-2V and Cisco 1750-4V Were Incorrectly Shipped with PVDM-256K-4 or PVDM-256K-8. Read more www.cisco.com: Cisco VPN 5001 Concentrator End of Life Upgrade Program. Read more www.ciac.org: Microsoft XMLHTTP Control Vulnerability. Read more www.ciac.org: Microsoft Incorrect VBScript Handling in IE. Read more www.ciac.org: Data Leak with Cisco Express Forwarding. Read more online.securityfocus.com: AeroMail JavaScript Execution Vulnerability. Read more www.securitytracker.com: HP Procurve Switch Bug Allows Telnet Management Port to Be Temporarily Blocked for New Management Connections. Read more www.securitytracker.com: AOL Instant Messenger (AIM) Short Message Feature Buffer Overflow Lets Remote Users Crash the AIM Client Software. Read more www.securiteam.com: Cisco Express Forwarding Leaks Packet Information. Read more www.securiteam.com: Novell GroupWise Web Access Path Disclosure Vulnerability. Read more www.securiteam.com: Security Issue with GroupWise and LDAP Authentication in PostOffice (Anonymous bind). Read more www.securiteam.com: BadBlue XSS Vulnerabilities / Filesharing Server Worm. Read more www.securiteam.com: BPM Studio Pro Directory Traversal Vulnerability. Read more www.securiteam.com: Unreal IRCd Format String Vulnerability. Read more www.securiteam.com: Avenger's News System Command Execution Vulnerability. Read more www.computeruser.com: Girl power's point of virus written in Microsoft's C#. Read more www.theregister.co.uk: Britney Spears virus fails to chart. Read more www.canada.com: Police knew hero hacker for years. Read more www.canada.com: B.C. hacker a key figure in porn case against judge. Read more www.theregister.co.uk: WinXP SP1 to combine new goodies with the fixes. Read more www.theregister.co.uk: MS opponents may testify. Read more www.computeruser.com: Judge grants Microsoft rivals limited role in hearings. Read more www.usatoday.com: Congress demands copy protection solution. Read more

03 March 2002 New trojan(s): Propel 1.0 www.debian.org: cfs -- buffer overflow. Read more www.debian.org: php -- broken boundary check and more. Read more online.securityfocus.com: HP ProCurve Switch Denial of Service Vulnerability. Read more www.securitytracker.com: Tiny Personal Firewall Lets Physically Local Users Accept or Deny Connections When a Workstation is Locked. Read more www.securitytracker.com: Xtell Messaging Client Buffer Overflows Let Remote Users Execute Arbitrary Code on the System. Read more www.securitytracker.com: Cobalt RaQ4 System Management Software Lets Remote Users View Files on the System, Conduct Cross-Site Scripting Attacks, and Cause Denial of Service Conditions. Read more www.securitytracker.com: Hotline File Sharing Program Discloses User Password to Local Users. Read more www.securitytracker.com: Snitz Forums Input Filtering Bug Lets Remote Users Conduct Cross-Site Scripting Attacks Against Snitz Forums Users. Read more www.securitytracker.com: Network Associates Gauntlet Firewall Proxy Bug Lets Remote Users Bypass Some Access Controls and Connect to Arbitrary Ports on Internal/Protected Hosts. Read more www.securitytracker.com: KMail E-mail Client Bug Lets Remote Users Send Large Messages to Cause the Client to Crash. Read more www.securiteam.com: AOL/AIM Vulnerability. Read more www.securiteam.com: Zero One Tech (ZOT) P100s PrintServer and SNMP. Read more www.securiteam.com: Weak Password Storage in Demarc (Commercial Snort Front-end). Read more www.securiteam.com: Novell GroupWise Web Access Path Disclosure Vulnerability (HTMLVER). Read more www.securiteam.com: Pforum Cross-Site-Scripting Vulnerability. Read more www.securiteam.com: IRC Connection Tracking Helper Module (Patch Available). Read more www.securiteam.com: Cobalt RaQ Cross Site Scripting, Directory Traversal and DoS Vulnerabilities. Read more www.securiteam.com: Squid Buffer Overflow (FTP). Read more www.nandotimes.com: Computer worm named for Britney Spears seen as low risk. Read more www.vnunet.com: Copy-cat Britney virus fails to excite. Read more www.theregister.co.uk: All quiet on the malware front. Read more www.windowsitsecurity.com: IETF Receives Proposal: Responsible Vulnerability Disclosure Process. Read more www.idg.net: Internet software piracy group head pleads guilty. Read more www.vnunet.com: Top 10 security tips. Read more

02 March 2002 New trojan(s): Kiss 0.9 online.securityfocus.com: Linux Kernel IRC DCC Connection Tracking Module Arbitrary Port Access Vulnerability. Read more online.securityfocus.com: UnrealIRCD InBuf Format String Denial Of Service Vulnerability. Read more online.securityfocus.com: xtell Multiple Remote Buffer Overflow Vulnerabilities. Read more online.securityfocus.com: Multiple Vendor MacOS Browser Arbitrary Program Download Vulnerability. Read more online.securityfocus.com: Net-SNMP Trap And Request Handling Vulnerabilities. Read more online.securityfocus.com: Microsoft Windows SMTP Service Authorization Bypass Vulnerability. Read more online.securityfocus.com: Cisco IOS Cisco Express Forwarding Session Information Leakage Vulnerability. Read more online.securityfocus.com: Snitz Forums 2000 Image Tag Cross-Site Scripting Vulnerability. Read more online.securityfocus.com: xtell Trusted TTY Device Name Remote Vulnerability. Read more online.securityfocus.com: xtell Log File Symbolic Link Attack. Read more online.securityfocus.com: BPM Studio Pro HTTPD Directory Traversal Vulnerability. Read more online.securityfocus.com: Real Networks Realplayer 8 CPU Utilization Denial of Service Vulnerability. Read more www.securitytracker.com: Internet Explorer (IE) Web Browser 'innerHTML' Property Hole Lets Remote Users Execute Programs on the Browser's Host, Even With ActiveX and Active Scripting Disabled. Read more www.securitytracker.com: Microsoft Exchange Server 2000 Command Processing Bug Lets Remote Users Cause the SMTP Service to Crash. Read more www.securitytracker.com: Microsoft Windows 2000 and Windows XP SMTP Service Command Processing Bug Lets Remote Users Cause the SMTP Service to Crash. Read more www.securitytracker.com: Microsoft Windows 2000 SMTP Service Lets Remote Users Send or Relay Unauthorized Mail (including SPAM) Via the Server. Read more www.securitytracker.com: Microsoft Exchange Server Lets Remote Users Send or Relay Unauthorized Mail (including SPAM) Via the Server. Read more www.securitytracker.com: Novell GroupWise Server Discloses Web Installation Path to Remote Users. Read more www.securitytracker.com: ALCATech's BPM Studio Pro Audio Mixer Can Be Crashed By Remote Users. Read more www.securitytracker.com: Worldgroup Software (FTP and Web Server) Buffer Overflows Let Remote Users Crash the FTP and Web Services and May Allow for Remote Code Execution. Read more www.securitytracker.com: Linux Kernel 'Netfilter' Firewall Software Has an IRC DCC Protocol Connection Tracker Bug That May Let Remote Users Access Protected Hosts in Certain Situations. Read more www.securitytracker.com: The Bat! E-mail Client MS-DOS Device Access Flaw Lets Remote Users Send Special E-mail to Cause the Recipient's E-mail Client to Crash. Read more www.securitytracker.com: Cisco IOS-based Devices That Use Cisco Express Forwarding (CEF) May Leak Data from One Packet into Another Packet in Certain Situations. Read more www.securitytracker.com: PHP File Upload Bugs Let Remote Users Execute Arbitrary Code on a PHP-enabled Web Server. Read more www.securitytracker.com: Oracle 9iAS Application Server Discloses CGI-BIN Script Source Code to Remote Users. Read more ntbugtraq.ntadvice.com: The 4th Annual NTBugtraq Retreat. Read more www.informationweek.com: Britney Virus May Drive You Crazy. Read more news.com.com: Sharpei virus hits C# note. Read more zdnet.com.com: Week in review: Diet of worms. Read more europe.cnn.com: Oops! It's the 'Britney' e-mail worm. Read more www.newsbytes.com: Court Decision Could Gag French Security Site Kitetoa. Read more news.com.com: Flaw weakens Linux security software. Read more www.theregister.co.uk: Staying on top of Oracle's holes. Read more www.wired.com: Have iPod, Will Secretly Bootleg. Read more www.canoe.ca: New technology enables forensic accounting investigators to probe deeper. Read more www5.law.com: Hackers Not Welcome in South Florida. Read more zdnet.com.com: Looping e-mails: Scourge of the Net? Read more www.cw360.com: Government forces Microsoft into new licence deal. Read more

01 March 2002 New trojan(s): DataSpy Network X 0.3 beta www.finjan.com: Embedded URLs in Spoofed Multimedia Files. Read more www.safehack.com: Messages That Start with the Word "begin 666 filename.exe or filename.whatever" Are Received as Attachments. Read more www.bursztein.net: Using Environment for returning into Lib C. Read more online.securityfocus.com: Galacticomm Worldgroup Remote FTP Denial of Service Vulnerability. Read more online.securityfocus.com: Linux Kernel IRC DCC Connection Tracking Module Arbitrary Port Access Vulnerability. Read more online.securityfocus.com: Apache Mod_SSL Buffer Overflow Vulnerability. Read more online.securityfocus.com: Galacticomm Worldgroup Remote Web Server Denial of Service Vulnerability. Read more online.securityfocus.com: Rit Research Labs The Bat! MS DOS Device Name Denial Of Service Vulnerability. Read more online.securityfocus.com: Symantec Ghost Corporate Edition 7.0 Plain Text Credentials Vulnerability. Read more www.securitytracker.com: Deerfield D2Gfx File Sharing System Lets Remote Users Traverse the Directory and View Files Located Anywhere on the System. Read more www.securitytracker.com: BadBlue Web Server Lets Remote Users Traverse the Directory and View Files Located Anywhere on the System. Read more www.securitytracker.com: Deerfield's D2Gfx File Sharing System Allows Remote Users to Conduct Cross Site Scripting Attacks and Run (and Propagate) Arbitrary Code on D2Gfx File Sharing Servers. Read more www.securitytracker.com: BadBlue Web Server Allows Remote Users to Conduct Cross Site Scripting Attacks and Run (and Propagate) Arbitrary Code on BadBlue File Sharing Servers. Read more www.securiteam.com: Executing Arbitrary Commands without Active Scripting or ActiveX. Read more CERT� Advisory CA-2002-05 Multiple Vulnerabilities in PHP fileupload. Read more www.securityoffice.net: Novell GroupWise Web Access Path Disclosure Vulnerability. Read more robertgraham.com: TRONS is an independent IDS subsystem in BlackICE that reads in Snort-like signatures. Read more www.securiteam.com: Authentication Flaw Allows Unauthorized Users to Authenticate SMTP Service. Read more www.securiteam.com: Malformed Data Transfer Request Causes Windows SMTP Service to Fail. Read more www.securiteam.com: DoS Attack Against FreeRADIUS (Other RADIUS Servers Affected). Read more www.securiteam.com: Multiple Remote Vulnerabilities in PHP's Fileupload Code. Read more grc.com: Distributed Reflection Denial of Service Description and analysis of a potent, increasingly prevalent, and worrisome Internet attack. Read more www.ecommercetimes.com: French Group Claims DoubleClick Hacked for Two Years. Read more www.newsbytes.com: Webmasters Urged To Plug PHP Security Hole. Read more www.infoworld.com: CERT warns of PHP security holes. Read more zdnet.com.com: Linux flaw opens door in firewalls. Read more www.theregister.co.uk: Anti-Virus's control fetish. Read more techupdate.zdnet.com: Don't squash bug disclosure. Read more news.com.com: Software "time bomber" goes to prison. Read more www.cw360.com: UK must lock down the law to stop the hackers. Read more www.chron.com: Hacker saw plenty in files of N.Y. Times. Read more www.themercury.news.com.au: F1 on hacker alert. Read more www.vnunet.com: US hackers could face life sentences. Read more www.theregister.co.uk: New York Times internal network hacked. Read more www.heise.de: Encryption in Company Networks Foiled. Read more

Copyright� MegaSecurity.org