Home    News Archive    Translate Traducen

News March 2005

31 March 2005 Guides, Papers, etc www.securityfocus.com: Web Browser Forensics, Part 1. Read more seattlepi.nwsource.com: Role Comparison Report � Web Server Role. Read more insight.zdnet.co.uk: Best practices for network security. Read more www.honeynet.ie: Internet Worms. Read more   Vulnerabilities & Exploits lists.grok.org.uk: Linux kernel local root vulnerability (pdf). Read more www.frsirt.com: Kerio Personal Firewall Local Network Rules Bypass Issue. Read more www.frsirt.com: Squirrelcart PHP Shopping Cart SQL Injection Vulnerability. Read more www.frsirt.com: Multiple Telnet Clients Buffer Overflow Vulnerabilities. Read more www.frsirt.com: Symantec Norton Antivirus Two Denial of Service Vulnerabilities. Read more www.frsirt.com: E-Store Kit-2 PayPal Edition XSS and PHP File Inclusion Vulnerability. Read more www.frsirt.com: Horde Application Framework Cross Site Scripting Vulnerability. Read more www.securitytracker.com: mtftpd Format String Bug in 'log.c' Lets Remote Authenticated Users Execute Arbitrary Code. Read more www.securitytracker.com: Invision Power Board Input Validation Flaw in User Signature Permits Cross-Site Scripting Attacks. Read more www.securitytracker.com: Chatness Input Validation Bugs Permit Cross-Site Scripting Attacks. Read more www.securitytracker.com: Ublog Reload Discloses Database to Remote Users and Permits Cross-Site Scripting Attacks. Read more www.securitytracker.com: Linux Kernel Bug in load_elf_library Lets Local Users Deny Service. Read more www.securitytracker.com: cdrtools DEBUG Mode Uses Unsafe Temporary Files That May Let Local Users Gain Elevated Privileges. Read more www.securitytracker.com: WackoWiki Input Validation Holes Permit Cross-Site Scripting Attacks. Read more www.securitytracker.com: WebAPP Discloses 'dat' Files to Remote Users. Read more www.securitytracker.com: FastStone 4in1 Browser Discloses Files to Remote Users. Read more www.securitytracker.com: Horde Application Framework Input Validation in Page Title Lets Remote Users Conduct Cross-Site Scripting Attacks. Read more www.debian.org: DSA-700-1 mailreader -- missing input sanitising. Read more   News news.com.com: China becoming haven for phishers. Read more news.com.com: Cops get cybercrime help from Microsoft. Read more afr.com: Microsoft upgrades server security. Read more news.com.com: Microsoft drops MSBlast writer's $500,000 penalty. Read more www.virusbtn.com: Blaster author avoids restitution. Read more www.itweb.co.za: Fingerprinting to track viruses. Read more www.theregister.co.uk: Analysts slam hacker law changes. Read more www.vnunet.com: Phishers spread net for smaller prey. Readv more news.zdnet.co.uk: Lost: Data from 270,000 bank accounts. Read more news.com.com: Mytob e-mail worm proliferating quickly. Read more

30 March 2005 Guides, Papers, etc cc.uoregon.edu: Web Browser Hijacking: What Is It and How Can You Protect Yourself? Read more msevents.microsoft.com: TechNet Webcast: Phishers, Spammers and Scammers: Criminals of the Internet. Read more Towards Evil Honeypots ?! When they bite back...Read more   Tools: sourceforge.net: SAM is a Real-Time Snort alert monitor. SAM provides many ways to indicate that you may be experiencing an intrusion attempt on your network including audio/visual warnings, email warnings, etc. SAM is written in Java for maximum portability. Read more   Vulnerabilities & Exploits www.securitytracker.com: phpCOIN Lets Remote Users Inject SQL Commands and Execute Arbitrary Files on the Target System. Read more www.securitytracker.com: PortalApp Input Validation Flaws in 'ad_click.asp' and 'content.asp' Permit SQL Injection and Cross-Site Scripting. Read more www.securitytracker.com: E-Data Missing Input Validation Lets Remote Users Conduct Cross-Site Scripting Attacks. Read more www.securitytracker.com: Adventia Chat Default Configuration Permits Cross-Site Scripting Attacks. Read more www.securitytracker.com: Symantec Norton AntiVirus AutoProtect Errors May Let Local or Remote Users Deny Service. Read more www.securitytracker.com: Symantec Norton Internet Security AutoProtect Errors May Let Local or Remote Users Deny Service. Read more www.securitytracker.com: Symantec Norton System Works AutoProtect Errors May Let Local or Remote Users Deny Service. Read more www.securitytracker.com: ACS Blog Input Validation Errors in 'Comments' Tags Let Remote Users Conduct Cross-Site Scripting Attacks. Read more www.securitytracker.com: Microsoft Outlook Connector for IBM Lotus Domino Lets Users Bypass Password Storage Policy. Read more www.securitytracker.com: TKai's Shoutbox Input Validation Error Permits Cross-Site Scripting Attacks. Read more www.securitytracker.com: PhotoPost PHP Pro 'showgallery.php', 'showmembers.php', 'showphoto.php', and 'slideshow.php' Input Validation Holes Permit SQL Injection and Cross-Site Scripting Attacks. Read more www.securitytracker.com: Telnet Client Buffer Overflow in slc_add_reply() and env_opt_add() Lets Remote Servers Execute Arbitrary Code. Read more www.securiteam.com: Smail preparse_address_1() Heap Overflow. Read more www.securiteam.com: Tincat Buffer Overflow. Read more www.securiteam.com: LimeWire File Disclosure Exploit. Read more   News www.arbornetworks.com: Leading Organizations Worldwide Join Together to Stop Internet Attacks. Read more www.arbornetworks.com: Global Alliance Forms to Thwart Internet Attacks. Read more www.theregister.co.uk: Silent tech majority invites Mickey Mouse to poison P2P. Read more www.theregister.co.uk: Mitnick sequel fails to hack it. Read more www.theregister.co.uk: Cops warn of internet fraud. Read more www.thecouriermail.news.com.au: Phone hackers tap into hospital. Read more

29 March 2005 Guides, Papers, etc www1.cs.columbia.edu: A NetworkWorm Vaccine Architecture. Read more   Vulnerabilities & Exploits secunia.com: Smarty "regex_replace" Modifier Template Security Bypass. Read more secunia.com: E-Data Personal Information Script Insertion Vulnerability. Read more www.securitytracker.com TinCat Buffer Overflow Lets Remote Users Execute Arbitrary Code. Read more www.securitytracker.com CPG Dragonfly Input Validation Errors Let Remote Users Conduct Cross-Site Scripting Attacks. Read more www.securitytracker.com Nuke Bookmarks Input Validation Flaws Permit SQL Injection, Cross-Site Scripting, and Path Disclosure. Read more www.securitytracker.com AS/400 LDAP Server Default Configuration Discloses User Account Names to Remote Authenticated Users. Read more www.securitytracker.com WD Guestbook Authentication Error Lets Remote Users Add Administrative User Accounts or Suppress Messages. Read more www.securitytracker.com EncapsBB Include File Error Lets Remote Users Execute Arbitrary Commands. Read more www.securitytracker.com E-Store Kit-2 PayPal Edition Input Validation Bug Lets Remote Users Execute Arbitrary HTML Code on the Target System. Read more   News www.theinquirer.net: Vendors 'fingerprint' hackers. Read more www.eweek.com: Vendors Join Forces to 'Fingerprint' Hacker Attacks. Read more www.itweb.co.za: Humans still the weak security link. Read more www.techworld.com: Mac virus-writing contest cancelled. Read more www.computerworld.com.au: Dumb security. Read more www.businessweek.com: Why McAfee Looks Like a Secure Play. Read more

28 March 2005 Guides, Papers, etc unixwiz.net: SQL Injection Attacks by Example. Read more msdn.microsoft.com: The Trustworthy Computing Security Development Lifecycle. Read more   Vulnerabilities & Exploits www.securitytracker.com: Linux bluez_sock_create() Integer Underflow Lets Local Users Execute Arbitrary Code. Read more www.securitytracker.com: exoops Input Validation Flaws Permit SQL Injection and Cross-Site Scripting Attacks. Read more www.securitytracker.com: Valdersoft Shopping Cart Input Validation Holes Permit SQL Injection and Cross-Site Scripting Attacks. Read more www.securitytracker.com: Smail Heap Overflow Lets Remote Users Gain Root Privileges. Read more   News seattlepi.nwsource.com: Microsoft funding of security report decried. Read more www.reuters.com: Foreign hackers "phishing" for Chinese victims. Read more www.heraldnet.com: Money is now a prime motivator for hackers. Read more english.peopledaily.com.cn: Top hacker arrested for manipulating 100,000 computers. Read more www.post-gazette.com: Hot spots for hackers: Wireless networks. Read more www.crn.com: Six Years After Melissa, Mass-Mailed Malware Has Peaked. Read more www.technewsworld.com: Skybox Security Introduces Worm Prediction Software. Read more

27 March 2005 Guides, Papers, etc www.pcworld.com: It's Time to Update Your Internet Security Arsenal. Read more bcheck.scanit.be: Browser Security Test. Read more security.linux.com: Tips for when hackers strike. Read more www.egr.msu.edu: Analyzing the Spread of Active Worms over VANET. Read more   Vulnerabilities & Exploits www.securitytracker.com: ESMI PayPal Storefront Input Validation Bugs Let Remote Users Inject SQL Commands and Conduct Cross-Site Scripting Attacks. Read more   News www.usdoj.gov: Pleasant Hill, California Computer Hacker from "Deceptive Duo" Guilty of Intrusions into Government Computers and Defacing Websites. Read more searchsecurity.techtarget.com: Security no match for theater lovers. Read more www.pcworld.com: New Federal Rules Dictate Bank ID Theft Notifications. Read more www.techweb.com: Six Years After Melissa, Mass-Mailed Malware Has Peaked. Read more

26 March 2005 Guides, Papers, etc www.theregister.co.uk: 'Doomsday nerds' defend cyberspace. Read more www.securityfocus.com: Owning A New Phone. Read more www.cs.wisc.edu: Internet Intrusions: Global Characteristics and Prevalence. Read more   Vulnerabilities & Exploits www.securitytracker.com: Oracle Reports Server Example Script Permits Cross-Site Scripting Attacks. Read more www.securitytracker.com: Double Choco Latte Lets Remote Users Execute Arbitrary Commands and Conduct Cross-Site Scripting Attacks. Read more www.securitytracker.com: Koobi Input Validation Holes Let Remote Users Inject SQL Commands and Conduct Cross-Site Scripting Attacks. Read more www.securitytracker.com: Trillian Buffer Overflow in Processing HTTP Response Headers May Let Remote Users Execute Arbitrary Code. Read more   News www.detnews.com: Hackers are going for gold. Read more www.internetnews.com: Phishing Attacks Jump 26%. Read more www.smh.com.au: 'Safe' CD solution for online banking. Read more news.zdnet.co.uk: Bank customers 'becoming more phishing-savvy'. Read more www.theregister.co.uk: How shall I own your mobile phone today? Read more informationweek.com: Phishing Attack Targets Yahoo Messenger. Read more

25 March 2005 Guides, Papers, etc www.aavar.org: Broadband Network Virus Detection System Based on Bypass Monitor. Read more www.pcworld.com: Hide Your Internet Ports From Snooping Hackers. Read more   Vulnerabilities & Exploits www.securitytracker.com: Topic Calendar Mod for phpBB Permits Cross-Site Scripting Attacks and Discloses Path to Remote Users. Read more www.securitytracker.com: SOGo May Disclose Private Information to Remote Authenticated Users. Read more www.securitytracker.com: Microsoft Windows Remote Desktop 'TSShutdn.exe' Lets Remote Authenticated Users Shutdown the System. Read more www.securitytracker.com: ImageMagick TIFF, PSD, and SGI Image File Processing Bugs Let Remote Users Deny Service or Execute Arbitrary Code. Read more www.securitytracker.com: MercuryBoard Input Validation Flaw in Private Message 'title' Field Lets Remote Users Conduct Cross-Site Scripting Attacks. Read more www.securitytracker.com: Topic Calendar Mod for phpBB Permits Cross-Site Scripting Attacks and Discloses Path to Remote Users. Read more www.securitytracker.com: SOGo May Disclose Private Information to Remote Authenticated Users. Read more www.securitytracker.com: Microsoft Windows Remote Desktop 'TSShutdn.exe' Lets Remote Authenticated Users Shutdown the System. Read more www.securitytracker.com: ImageMagick Format String Flaw in Processing Filenames May Let Remote Users Execute Arbitrary Code. Read more www.securitytracker.com: ImageMagick TIFF, PSD, and SGI Image File Processing Bugs Let Remote Users Deny Service or Execute Arbitrary Code. Read more www.securitytracker.com: MercuryBoard Input Validation Flaw in Private Message 'title' Field Lets Remote Users Conduct Cross-Site Scripting Attacks. Read more www.securitytracker.com: BirdBlog Input Validation Error in 'admincore.php' Permits SQL Injection. Read more www.securitytracker.com: Mathopd internal_dump() Temporary File Lets Local Users Corrupt Files on the Target System. Read more www.securitytracker.com: Vortex Portal Lets Remote Users Include and Execute Arbitrary PHP Code. Read more www.securitytracker.com: Interspire ArticleLive 2005 Input Validation Error in 'ArticleId' Permits Cross-Site Scripting Attacks. Read more www.securitytracker.com: ZipGenius Input Validation Flaw Lets Remote Users Write Files to Alternate Locations. Read more www.securitytracker.com: Download Center Lite Lets Remote Users Include and Execute Arbitrary PHP Code. Read more www.securitytracker.com: phpSysInfo Input Validation Holes Permit Cross-Site Scripting Attacks. Read more www.securitytracker.com: KDE dcopidlng Unsafe Temporary Files May Let Local Users Gain Elevated Privileges. Read more www.securiteam.com: Microsoft Windows WAB DoS. Read more www.securiteam.com: Linux sys_uselib Local Root Exploit. Read more www.securiteam.com: MCPWS Personal DoS Exploit. Read more www.securiteam.com: Apple Core Foundation Library "CF_CHARSET_PATH" Local Root Exploit. Read more www.securiteam.com: Linux Kernel sys_epoll_wait Local Integer Overflow Exploit. Read more   News www.techweb.com: Microsoft Begins Beta Of Unified Update. Read more www.pcworld.com: Phone, Infected? Read more www.zdnet.com.au: Should your company turn off instant messaging services (IM)? Read more news.zdnet.com: Banks ordered to tell customers about breaches. Read more news.zdnet.co.uk: Phishers target Yahoo IM users. Read more www.slyck.com: Canada Plans P2P and file-sharing Crackdown. Read more news.zdnet.co.uk: Programmers bypass Red Hat Linux fees. Read more news.zdnet.co.uk: Developers grumble about Microsoft tools pricing. Read more www.pcworld.com: PyMusique Author Hacks Apple's ITunes Fix. Read more

24 March 2005 Guides, Papers, etc www.ngssoftware.com: Anti Brute Force Resource Metering. Read more iptps05.cs.cornell.edu: A First Look at Peer-to-Peer Worms: Threats and Defenses. Read more www.vnunet.com: Kevin Mitnick and the art of intrusion - Part 1. Read more beta.abc3340.com: Review: Programs That Manage Passwords. Read more packetstormsecurity.org: Attacking PC based 5250 terminal emulations from an iSeries server. Read more   Vulnerabilities & Exploits www.securitytracker.com: DigitalHive Lets Remote Users Re-install the Application and Conduct Cross-Site Scripting Attacks. Read more www.securitytracker.com: XMB Forum input Validation Flaw in 'Mood' Parameter Permits Cross-Site Scripting Attacks. Read more www.securitytracker.com: Phorum Input Validation'search.php' HTTP Response Splitting. Read more www.securitytracker.com: FileZilla MS-DOS Device Name and zlib Errors Let Remote Users Deny Service. Read more www.securitytracker.com: Nortel Contivity VPN Client Discloses Passwords to Local Users. Read more www.securitytracker.com: Kayako eSupport Input Validation Bugs in 'i' and 'c' Parameters Lets Remote Users Conduct Cross-Site Scripting Attacks. Read more www.securitytracker.com: betaparticle blog Discloses Database to Remote Users and Lets Remote Users Upload/Delete Arbitrary Files. Read more www.securitytracker.com: Ocean FTP Server Lets Remote Users Deny Service With Multiple Connections. Read more xforce.iss.net: Mozilla Foundation GIF Overflow. Read more www.k-otik.com: Mozilla Suite/Firefox/Thunderbird Code Execution Vulnerabilities. Read more www.k-otik.com: ImageMagick Denial of Service and Heap Overflow Vulnerabilities. Read more www.k-otik.com: Nortel Contivity VPN Client Local Password Disclosure Vulnerability. Read more www.k-otik.com: Kayako ESupport "index.php" Cross Site Scripting Vulnerabilities. Read more www.k-otik.com: ArticleLive "newcomment" Cross Site Scripting Vulnerability. Read more www.k-otik.com: Vortex Portal "act" Remote PHP File Inclusion Vulnerabilities. Read more www.k-otik.com: FileZilla FTP Server Remote Denial Of Service Vulnerabilities. Read more   News www.securityfocus.com: Symbian Trojan attacks anti-virus protection. Read more www.theregister.co.uk: Drive-by Trojans exploit browser flaws. Read more www.vnunet.com: Adware dominates PC malware infections. Read more www.620ktar.com: Hacker Sentenced to Nearly Four Years. Read more www.theregister.co.uk: ID theft is inescapable. Read more www.theregister.co.uk: Apple issues nine bug fixes...Read more www.informationweek.com: Update: IBM Fires Back At Spammers. Read more

23 March 2005 Guides, Papers, etc Black Hat Europe 2005 Briefings and Training. Grand Hotel Krasnapolsky, Amsterdam, the Netherlands. Read more ruxcon.org.au: RUXCON 2005. Call For Papers. Read more www.spywarewarrior.com: Anti-Spyware Family Resemblances. Read more www.spywarewarrior.com: Anti-Spyware Orphans & Outcasts. Read more www.nta-monitor.com: Common VPN Security Flaws. Read more www.astalavista.com: Windows Keylogging and Counter-Measures. Read more www.securityfocus.com: Defeating Honeypots: System Issues, Part 1. Read more www.astalavista.com: Reverse-connected shellcodes. Read more   Vulnerabilities & Exploits www.securitytracker.com: Apple Bluetooth Setup Assistant Lets Remote Users Bypass Access Controls. Read more www.securitytracker.com: Apple Mac OS X Unsafe Directory Permissions May Let Local Users Gain Elevated Privileges. Read more www.securitytracker.com: Apple AFP Server Discloses Drop Box Contents to Remote Users and Lets Remote Users Deny Service. Read more www.securitytracker.com: Mac OS X Core Foundation Buffer Overflow in CF_CHARSET_PATH Lets Local Users Gain Root Privileges. Read more www.securitytracker.com: phpmyfamily Input Validation Holes Let Remote Users Inject SQL Commands. Read more www.k-otik.com: Apple Mac OS X Multiple Vulnerabilities (Security Update 2005-003). Read more www.k-otik.com: FUN labs Games Remote Denial of Service Vulnerabilities. Read more www.k-otik.com: PHPMyFamily Multiple Remote SQL Injection Vulnerabilities. Read more www.k-otik.com: Xzabite "dyndnsupdate" Remote Buffer Overflow vulnerabilities. Read more www.k-otik.com: PHP-Fusion "setuser.php" Cross Site Scripting Vulnerability. Read more www.securiteam.com: FreeCiv Server DoS Exploit. Read more www.securiteam.com: phpBB UID Exploit (Perl Exploit 2). Read more   News www.securityfocus.com: Duo charged over DDoS hire for scam. Read more news.zdnet.co.uk: Worms still hitting businesses hard. Read more news.zdnet.com: Firefox add-on lets surfers tweak sites, but is it safe? Read more reviews.cnet.com: Criminal hackers reach beyond Windows and Internet Explorer. Read more www.vnunet.com: Porn spammers enlist 'desperate housewives'. Read more www.vnunet.com: Sex, drugs and obfuscation. Read more www.cio-today.com: Viruses, Phishing Not Going Away Soon. Read more www.vnunet.com: Huge rise in IM backdoor attacks. Read more comment.zdnet.co.uk: Symantec's self serving warnings. Read more www.theregister.co.uk: iTunes store 'hole' open again. Read more news.zdnet.co.uk: Flaw found in Nortel's VPN client. Read more news.zdnet.co.uk: Apple patches Safari phishing flaw. Read more

22 March 2005 Guides, Papers, etc www.securityfocus.com: Computer Ethics, From the Grandstands. Read more   Tools: www.securityforest.com: SecurityForest Exploitation Framework Beta has been released! Read more   Vulnerabilities & Exploits www.securitytracker.com: FUN labs Games Can Be Crashed By Remote Users. Read more www.securitytracker.com: TRG News Script Include File Hole Lets Remote Users Execute Arbitrary Commands. Read more www.securitytracker.com: CzarNews Include File Hole Lets Remote Users Execute Arbitrary Commands. Read more www.securitytracker.com: exoops Discloses Installation Path and Database Password to Remote Users. Read more www.securitytracker.com: Ciamos Discloses Installation Path and Database Password to Remote Users. Read more www.securitytracker.com: RUNCMS Discloses Installation Path and Database Password to Remote Users. Read more www.idefense.com: Mac OS X CF_CHARSET_PATH Buffer Overflow Vulnerability. Read more www.securiteam.com: Ocean FTP DoS (Exploit). Read more www.securiteam.com: iPool and iSnooker Local Password Disclosure. Read more www.securiteam.com: GoodTech Telnet Server Buffer Overflow Vulnerability (Exploit). Read more www.debian.org: DSA-695-1 xli -- buffer overflow, input sanitising, integer overflow. Read more www.debian.org: DSA-694-1 xloadimage -- missing input sanitising, integer overflow. Read more   News www.theregister.co.uk: Brazilian cops net 'phishing kingpin'. Read more www.theregister.co.uk: Britain tops zombie PC charts. Read more news.zdnet.co.uk: Broadband boom makes UK worst for hacked PCs. Read more www.pcworld.com: What Are the Web's Worst Security Problems? Read more www.pcworld.com: Should IE Stay or Should IE Go? Read more news.zdnet.co.uk: Virus writing: It's a thieves' game. Read more www.vnunet.com: Half of viruses written for criminal gain. Read more www.vnunet.com: Hackers target browsers to dodge firewalls. Read more www.ciol.com: 59,000 affected by hackers: Calif. University. Read more news.zdnet.co.uk: University reports data hack. Read more www.it-observer.com: Sumitomo Matsui Bank sophisticated hacking sends alarm signals. Read more www.it-director.com: Spyware - worse than viruses? Read more www.vnunet.com: US authorities warn of bogus anti-spyware. Read more news.zdnet.co.uk: OSX 'at risk from attack'. Read more www.pcworld.com: Symantec: Hackers Turn Attention to Mozilla Browsers. Read more news.zdnet.co.uk: iTunes Music Store DRM bypassed. Read more

21 March 2005 Added to the Archive: Harvester 2005 0.1   Guides, Papers, etc www.pcworld.com: Do Passwords Provide True Protection? Don't Count on It. Read more   Vulnerabilities & Exploits www.milw0rm.com: phpBB <= 2.0.12 Change User Rights Authentication Bypass. Read more www.securiteam.com: iPool and iSnooker Local Password Disclosure. Read more www.securiteam.com: GoodTech Telnet Server Buffer Overflow Vulnerability (Exploit). Read more   News www.theregister.co.uk: $5m daily fine beckons for bad boy Microsoft. Read more timesofindia.indiatimes.com: AFP sues Google for $17.5 mn. Read more news.zdnet.co.uk: OSX 'at risk from attack'. Read more www.securitypipeline.com: A Third Of IRS Employees Suckered By Auditors Posing As Hackers. Read more www.gazettetimes.com: Outlaws still rule in cyberspace. Read more www.pcworld.com: DVD Jon Breaks ITunes Security--Again. Read more www.pcworld.com: Companies Lining Up to Root Out Rootkits. Read more www.freep.com: Michigan man accused of disabling competing Web sites. Read more

20 March 2005 Pro Agent 2.0   Vulnerabilities & Exploits www.securitytracker.com: OllyDbg Error in Loading Processes With Long Names Lets Users Crash the Debugger. Read more www.securitytracker.com: LTris Buffer Overflow in Processing Highscores File May Let Local Users Gain Elevated Privileges. Read more www.securitytracker.com: Cain Abel Buffer Overflow in PSK Sniffer Lets Remote Users Execute Arbitrary Code. Read more www.securitytracker.com: Icecast XSL Parser Lets Local Users Gain Elevated Privileges and Discloses XSL Files to Remote Users. Read more   News www.internetweek.com: Insider Behind Foiled Hacker Heist. Read more www.techweb.com: Keyloggers Foiled In Attempted $423 Million Bank Heist. Read more money.cnn.com: Internet phones a hacking risk? Read more www.informationweek.com: Firefox Eats More Microsoft Market Share. Read more

19 March 2005 Guides, Papers, etc www.infosecwriters.com: The Art of Rootkits (2nd ed). Read more www.l0t3k.net: Kernel-mode backdoors for Windows NT. Read more www2.townonline.com: Why do hackers hack. Read more   Vulnerabilities & Exploits www.k-otik.com: J2SE Java Web Start Client-Side Argument Injection Vulnerability. Read more www.k-otik.com: Linux Kernel 2.6.x ISO9660 Filesystem Handler Vulnerability. Read more www.k-otik.com: My Firewall Plus Arbitrary File Corruption Vulnerability. Read more www.securitytracker.com: CoolForum Input Validation Flaws Permit SQL Injection and Cross-Site Scripting Attacks. Read more www.securitytracker.com: MailEnable SMTP 'mailto' Format String Flaw Lets Remote Users Deny Service. Read more www.securitytracker.com: ACS Blog Input Validation Hole in 'search.asp' Lets Remote Users Conduct Cross-Site Scripting Attacks. Read more www.securitytracker.com: mcNews 'install.php' Include File Flaw Lets Remote Users Execute Arbitrary Commands. Read more www.securitytracker.com: lshd parse_kexinit() Bug Lets Remote Users Deny Service. Read more www.securitytracker.com: McAfee NetShield Buffer Overflow in Processing LHA Headers Lets Remote Users Execute Arbitrary Code. Read more www.securitytracker.com: McAfee GroupShield Buffer Overflow in Processing LHA Headers Lets Remote Users Execute Arbitrary Code. Read more www.securitytracker.com: McAfee WebShield Buffer Overflow in Processing LHA Headers Lets Remote Users Execute Arbitrary Code. Read more www.securitytracker.com: McAfee VirusScan ASaP Buffer Overflow in Processing LHA Headers Lets Remote Users Execute Arbitrary Code. Read more www.securitytracker.com: McAfee VirusScan Buffer Overflow in Processing LHA Headers Lets Remote Users Execute Arbitrary Code. Read more   News www.techweb.com: Hacker Turf War Will Lead To Large E-crime Gangs. Read more www.vnunet.com: Rootkits leave antivirus systems powerless. Read more news.zdnet.co.uk: Virus writers get stealthy. Read more www.theregister.co.uk: Anti-virus vulnerabilities strike again. Read more www.pcadvisor.co.uk: Hackers control more than a million PCs. Read more www.guardian.co.uk: Experts suspect insider in hackers bid to steal �220m. Read more news.zdnet.co.uk: VoIP could provoke 'electronic Pearl Harbour'. Read more uk.builder.com: Visual Basic protest won't go away. Read more cnn.netscape.cnn.com: Falun Gong denies sending China pirate signals. Read more news.zdnet.com: Hackers build back door into iTunes. Read more software.silicon.com: Sumitomo spyware scare: What have we learned? Read more

18 March 2005 Guides, Papers, etc www.infoworld.com: Holy Father on rootkit writing for fun, profit. Read more www.shocking.com: PGP Man in the Middle Attack. Read more en.wikipedia.org: One-time pad encryption. Read more www.icir.org: A Behavioral Approach to Worm Detection. Read more   Vulnerabilities & Exploits xforce.iss.net: McAfee AntiVirus Library Stack Overflow. Read more www.k-otik.com: McAfee Antivirus Products LHA Archive Stack Overflow Vulnerability. Read more www.k-otik.com: Novell Netware Xsession Server Console Access Vulnerability. Read more www.k-otik.com: KDE Desktop Communication Protocol Denial of Service Vulnerability. Read more www.k-otik.com: MailEnable "SMTP" Request Remote Format String Vulnerability. Read more www.k-otik.com: ACS Blog "Search.asp" Remote Cross Site Scripting Vulnerability. Read more www.securitytracker.com: Sun Solaris newgrp(1) Buffer Overflow Lets Remote Users Gain Root Privileges. Read more www.securitytracker.com: Netware xvesa Redirect Flaw Lets Remote Users Access Xsessions. Read more www.securitytracker.com: iSnooker Discloses Passwords to Local Users. Read more www.securitytracker.com: iPool Discloses Passwords to Local Users. Read more www.securitytracker.com: Citrix MetaFrame Conferencing Manager May Let Remote Users Gain Keyboard and Mouse Control. Read more www.securitytracker.com: ASPjar Tell-a-Friend Input Validation Hole Permits Cross-Site Scripting Attacks. Read more www.securitytracker.com: Servers Alive Help Function Lets Local Users Gain System Privileges. Read more www.securitytracker.com: Microsoft Office InfoPath 2003 May Disclose System and Authentication Information to Remote Users. Read more   News news.zdnet.co.uk: McAfee Antivirus vulnerability published. Read more news.bbc.co.uk: UK police foil massive bank theft. Read more software.silicon.com: �220m spyware bank robbers thwarted. Read more news.bbc.co.uk: Have hackers recruited your PC? Read more www.theregister.co.uk: The strange decline of computer worms. Read more www.networkitweek.co.uk: IT pros lulled into false sense of security. Read more

17 March 2005 Guides, Papers, etc www.securityfocus.com: A Method for Forensic Previews. Read more www.securityfocus.com: Windows Firewalls Lacking. Read more www.securityfocus.com: Linux Kernel Security, Again. Read more   Vulnerabilities & Exploits www.securitytracker.com: KDE DCOP Bug Lets Local Users Deny Service. Read more www.securitytracker.com: Symantec Enterprise Firewall DNSd Proxy Bug Lets Remote Users Poison the DNS Cache. Read more www.securitytracker.com: Symantec VelociRaptor DNSd Proxy Bug Lets Remote Users Poison the DNS Cache. Read more www.securitytracker.com: Symantec Gateway Security DNSd Proxy Bug Lets Remote Users Poison the DNS Cache. Read more www.securitytracker.com: PunBB Input Validation Bugs in 'email' and 'Jabber' Profile Parameters Let Remote Users Conduct Cross-Site Scripting Attacks. Read more www.securitytracker.com: OpenSLP Buffer Overflows Let Remote Users Execute Arbitrary Code. Read more www.securitytracker.com: Linux PPP Driver Lets Remote Users Crash the System. Read more www.securitytracker.com: GoodTech Telnet Server for Windows NT/2000/XP/2003 Buffer Overflow in Administration Port Lets Remote Users Execute Arbitrary Code. Read more www.securitytracker.com: IBM WebSphere Commerce May Disclose Login IDs and Other Information to Remote Users. Read more www.securitytracker.com: PHPOpenChat Include File Flaw Lets Remote Users Execute Arbitrary Commands. Read more   News www.microsoft-watch.com: Microsoft Internet Explorer 7.0 Details Begin to Leak. Read more news.zdnet.co.uk: Botnets use Windows for wicked work. Read more www.theregister.co.uk: Germans form spam-busting alliance. Read more news.com.com: Hardware security sneaks into PCs. Read more news.com.com: Microsoft walks VB tight rope. Read more www.sfgate.com: Auditors Find IRS Workers Prone to Hackers. Read more australianit.news.com.au: Record fine for mobile spam. Read more www.emediawire.com: Spammer Sues Spam Victim, Continues Spamming Him. Read more news.com.com: A 30-year memory problem solved? Read more

16 March 2005 Guides, Papers, etc www.schneier.com: Why random-number fobs can't stop Internet bank fraud. The Failure of Two-Factor Authentication. Read more www.bluecoat.com: Blue Coat Study: Desktop Software Ineffective in Preventing Spyware. Read more www.owasp.org: WebGoat is a full J2EE web application designed to teach web application security lessons. In each lesson, users must demonstrate their understanding by exploiting a real vulnerability on the local system. The system is even clever enough to provide hints and show the user cookies, parameters and the underlying Java code if they choose. Examples of lessons include SQL injection to a fake credit card database, where the user creates the attack and steals the credit card numbers. Read more www.cs.washington.edu: The Effect of Infection Time on Internet Worm Propagation. Read more www.securitydocs.com: Sorting Through the Hype of Ubiquitous Secure Remote Access and SSL VPNs. Read more   Vulnerabilities & Exploits www.k-otik.com: MetaFrame Conferencing Manager keyboard and mouse Control Issue. Read more www.k-otik.com: Citrix MetaFrame Password Manager "reveal password" policy bypass. Read more www.k-otik.com: IBM WebSphere Commerce "cache entry" Information Disclosure Issue. Read more www.securitytracker.com: Racoon Input Validation Error in ISAKMP Generic Header Length Field Lets Remote Users Deny Service. Read more www.securitytracker.com: Tomcat AJP12 Parsing Error Lets Remote Users Deny Service. Read more www.securitytracker.com: VoteBox Include File Error Lets Remote Users Execute Arbitrary Commands. Read more www.securitytracker.com: MaxDB Web Agent Can Be Crashed By Remote Users Sending Invalid DBM Parameters. Read more www.securitytracker.com: phpAdsNew 'adframe.php' Permits Cross-Site Scripting Attacks and Various Scripts Disclose the Installation Path to Remote Users. Read more www.securiteam.com: OpenBSD TCP TIMESTAMP Remote DoS. Read more www.securiteam.com: Ethereal CDMA2000 A11 Stack Overflow (Exploit with Shellcode). Read more www.securiteam.com: AWStats Remote Command Execution. Read more www.securiteam.com: PaX Double-Mirrored VMA Memory Unmapping Local Root Exploit. Read more   News itmanagement.earthweb.com: New Worm Throws 'Smachdown' on Users. Read more www.vnunet.com: MSN TV Trojan hacker sent to jail. Read more www.vnunet.com: Hackers can beat security tokens. Read more software.silicon.com: IT managers adopt 'stay clueless, stay safe' strategy. Read more www.smh.com.au: Internet scam slugs sellers for thousands. Read more www.siliconvalley.com: 140 Kaiser patients' private data put online. Read more www.theregister.co.uk: Dutch hackers sentenced for attack on government sites. Read more

15 March 2005 Guides, Papers, etc www.honeynet.org: Know your Enemy: Tracking Botnets. Read more www.honeynet.org: Know your Enemy: Tracking Botnets - Vendors. Read more www.honeynet.org: Know your Enemy: Tracking Botnets - Source Code. Read more   Tools: www.tomsnetworking.com: How To: Building a BlueSniper Rifle. The gun, which is called the BlueSniper rifle, can scan and attack Bluetooth devices from more than a mile away. The first version of the gun showed up at Defcon 2004, a hacker/computer security convention held annually in Las Vegas. Read more   Vulnerabilities & Exploits www.securitytracker.com: Wine Unsafe Temporary Files Disclose Registry Contents to Local Users. Read more www.securitytracker.com: rxvt-unicode Long Escape Sequence Buffer Overflow May Allow Code Execution. Read more www.securitytracker.com: paFileDB Input Validation Errors in 'viewall.php' and 'category.php' Permit SQL Injection and Cross-Site Scripting Attacks. Read more www.securitytracker.com: paFIleDB Has Flaws in Multiple Files That Disclose the Installation Path to Remote Users. Read more www.securitytracker.com: HolaCMS Input Validation Hole in Vote Module Lets Remote Users Modify Files. Read more www.k-otik.com: KAME Racoon ISAKMP Headers Denial of Service Vulnerability. Read more www.k-otik.com: MySQL MaxDB Web Agent Multiple Denial of Service Vulnerabilities. Read more www.k-otik.com: Apache Tomcat "AJP12" Remote Denial Of Service Vulnerability. Read more www.k-otik.com: VoteBox "votebox.php" Remote PHP File Inclusion Vulnerability. Read more www.k-otik.com: Mozilla Suite/Firefox/Thunderbird Status Bar Spoofing Vulnerability. Read more www.k-otik.com: PHPAdsNew "adframe.php" Cross Site Scripting Vulnerability. Read more www.k-otik.com: Spinworks Application Server Remote Denial Of Service Vulnerability. Read more www.k-otik.com: SimpGB "Guestbook.php" Remote SQL Injection Vulnerability. Read more www.k-otik.com: PABox Post Icon Cross Site Scripting and HTML Injection. Read more www.securiteam.com: SafeNet Sentinel License Manager Stack Overflow Exploit. Read more www.securiteam.com: Ethereal IAPP Remote Buffer Overflow Exploit. Read more www.securiteam.com: MySQL "CREATE FUNCTION" Exploits. Read more www.securiteam.com: Active Webcam WebServer DoS Exploit. Read more www.securiteam.com: phpBB UID Exploit. Read more www.debian.org: DSA-693-1 luxman -- buffer overflow. Read more   News www.securitypark.co.uk: Virus writers turn from making havoc to making money. Read more www.vnunet.com: Microsoft to abandon passwords. Read more www.vnunet.com: Hackers target Bluetooth devices 1km away. Read more www.pcw.co.uk: JAL Computers attacked by hackers. Reda more www.tucsoncitizen.com: Hackers infiltrate DSW shoe store chain's records. Read more www.virusbtn.com: Man sentenced for 911 Trojan. Read more www.theregister.co.uk: Spyware Assassin censured for 'bogus' claims. Read more

14 March 2005 Guides, Papers, etc www.benedelman.org: Advertisers Supporting eXact Advertising. Read more www.summercon.org: CALL FOR PAPERS: Speak at SummerCon 2005. Read more   Vulnerabilities & Exploits www.securitytrap.com: Firefox 1.01 : spoofing status bar without using JavaScript. Read more www.hat-squad.com: Hat-Squad Releases: Computer-Associates, License Client Service Exploit. Read more   News nwc.securitypipeline.com: Cyber-Attackers Want Money, ID Data. Read more www.heraldsun.news.com.au: Internet banking 'not safe'. Read more www.thenewstribune.com: Security patches cue national security concerns. Read more www.pcauthority.com.au: F-Secure takes on hidden malicious code. Read more www.tucsoncitizen.com: Hackers infiltrate DSW shoe store chain's records. Read more www.linuxworld.com.au: Kaspersky unveils host of security products. Read more management.silicon.com: Get tough on DoS-ers says UK MP. Read more www.vitalsecurity.org: Firefox Spyware infects IE? Read more

13 March 2005 Guides, Papers, etc engr.smu.edu: The Evolution of Viruses and Worms. Read more www.spywarewarrior.com: Rogue/Suspect Anti-Spyware Products & Web Sites. Read more www.eweek.com: Ten Not-So-Simple Rules for Using the Internet. Read more www.macnewsworld.com: Why Viruses Have Trouble Penetrating the Mac. Read more   Vulnerabilities & Exploits www.k-otik.com: Xerox Document Centre Web Server Unauthorised Access Vulnerability. Read more www.securitytracker.com: YaBB Input Validation Error in 'usersrecentposts' Lets Remote Users Conduct Cross-Site Scripting Attacks. Read more www.securitytracker.com: Ethereal Buffer Overflows and Other Bugs in Etheric, GPRS-LLC, 3GPP2 A11, IAPP, JXTA, and sFlow Dissectors Let Remote Users Crash the Process or Execute Arbitrary Code. Read more   News www.msnbc.msn.com: Hackers target U.S. power grid. Read more www.eweek.com: FTC Says Anti-Spyware Vendor Shut Down. Read more www.iol.co.za: New Microsoft plan raises a few eyebrows. Read more www.earthtimes.org: Microsoft buyout Groove, founder Ozzie becomes Gates� CTO. Read more www.pcworld.com: Microsoft Skips Media Center Update. Read more

12 March 2005 Guides, Papers, etc www.microsoft.com: 10 Immutable Laws of Security. Read more www.acsac.org: Using Predators to Combat Worms and Viruses: A Simulation-Based Study. Read more   Vulnerabilities & Exploits www.securitytracker.com: MySQL CREATE FUNCTION Lets Authenticated Users Invoke libc Functions to Execute Arbitrary Code. Read more www.securitytracker.com: MySQL udf_init() Path Validation Flaw Lets Authenticated Users Execute Arbitrary Libraries. Read more www.securitytracker.com: MySQL CREATE TEMPORARY TABLE Uses Predictable Temporary Files That May Let Users Gain Elevated Privileges. Read more www.securitytracker.com: WF-Sections Input Validation Hole in 'wfsfiles.php' in 'articleid' Parameter Lets Remote Users Inject SQL Commands. Read more www.securitytracker.com: WEBinsta Limbo Include File Flaw Lets Remote Users Execute Arbitrary Commands. Read more   News software.silicon.com: Kids' websites worst for adware and browser hijackers. Read more www.chinanews.cn: China develops new anti-computer virus technology. Read more www.overclockersclub.com: US Government Gets Microsoft Security Patches First. Read more www.theregister.co.uk: Alternative browser spyware infects IE. Read more www.nwfusion.com: RSA event sets up malware war. Read more www.620ktar.com: Microsoft Security Practice Raises Fears. Read more www.theregister.co.uk: It's time to pick your favourite virus. Read more www.vnunet.com: Police called after hackers crack UK PC dealer. Read more www.vnunet.com: UK clamps down on denial-of-service attacks. Read more www.newsfactor.com: LexisNexis Breach Fuels Data Security Worries. Read more

11 March 2005 Guides, Papers, etc weblogs.asp.net: Rootkit Revealer vs. Hacker Defender - How the miscreants are defeating Rootkit Revealer and how to fight back. Read more www.securityfocus.com: Infection Vectors. Read more cfl.ou.edu: Measurement and Analysis of Worm Propagation on Internet Network Topology. Read more   Tools: www.f-secure.com: F-Secure BlackLight Rootkit Elimination Technology detects objects that are hidden from users and security tools and offers the user an option to remove them. The main purpose is to fight rootkits and all kinds of malware that use rootkits. Read more   Vulnerabilities & Exploits www.securityfocus.com: Windows Server 2003 and XP SP2 LAND attack vulnerability. Read more www.securiteam.com: SocialMPN Arbitrary File Injection Exploit. Read more www.securiteam.com: RealPlayer SMIL File Buffer Overflow. Read more www.securiteam.com: Ethereal 3G Remote Buffer Overflow Exploit. Read more www.securitytracker.com: WEBinsta Website Mailing list manager Include File Flaw Lets Remote Users Execute Arbitrary Commands. Read more   News news.zdnet.co.uk: Virus writers wreak havoc by the hour. Read more news.zdnet.co.uk: Microsoft gets with the Groove. Read more www.theregister.co.uk: French security researcher fined. Read more www.vnunet.com: Global virus epidemics run out of steam. Read more www.scmagazine.com: Swedish police collar hardcore hacker. Read more www.vnunet.com: UK firms haemorrhaging data to drive-by hackers. Read more www.vnunet.com: Credit card flaws fuel online fraud bonanza. Read more www.theregister.co.uk: MP pitches Denial of Service law to Parliament. Read more www.theinquirer.net: Hackers put Bush in power. Read more healthandfitness.sympatico.msn.ca: Hospital Computers Fail to Deliver: study finds they facilitated errors. Read more

10 March 2005 Guides, Papers, etc www.securityfocus.com: WEP: Dead Again, Part 2. Read more www.securityfocus.com: High Profile, Low Security. Read more   Tools: www.eeye.com: The Retina CA Vulnerability Scanner is being made available free of charge by eEye. The tool will scan up to 16 IP addresses at once to determine if any are vulnerable to the Computer Associates License Manager vulnerabilities published in March, 2005. Read more   Vulnerabilities & Exploits www.securitytracker.com: Novell iChain Mini FTP Server Does Not Limit Invalid Authentication Attempts. Read more www.securitytracker.com: Novell iChain Mini FTP Server Discloses Installation Path to Remote Users. Read more www.securitytracker.com: Novell iChain GUI Lets Remote Users Gain Administrative Access. Read more www.securitytracker.com: paFileDB Input Validation Hole in $pageurl Lets Remote Users Conduct Cross-Site Scripting Attacks. Read more www.securitytracker.com: OutStart Participate Discloses Directories to Remote Users and Lets Remote Users Rename and Delete Directory Objects. Read more security.lss.hr: Ethereal remote buffer overflow. Read more www.securiteam.com: Buffer Overflow In Internet Explorer CSS Parsing (mshtml.dll). Read more www.securiteam.com: Computer Associates License Client Service Stack Overflow. Read more www.geocities.com: Multiple AV Vendor Incorrect CRC32 Bypass Vulnerability. Read more   News www.zdnet.com.au: Publishing exploit code ruled illegal in France? Read more news.com.com: France puts a damper on flaw hunting. Read more www.vnunet.com: Hackers 'poison' search engine results. Read more www.computerweekly.com: Worms threat to instant messaging. Read more www.informationweek.com: IM Threats Growing 50% Per Month. Read more economictimes.indiatimes.com: Beware! Your pal's MMS may be a virus! Read more www.vnunet.com: Instant messaging security incidents soar. Read more www.pcworld.com: Hackers Grab LexisNexis Info on 32,000 People. Read more arstechnica.com: Another case of massive consumer data theft. Read more www.pcauthority.com.au: Phone virus poses worldwide threat: Vendors. Read more www.pcworld.com: Harvard Rejects Applicants Who Hacked Site. Read more news.com.com: Phishers using DNS servers to lure victims? Read more

09 March 2005 Guides, Papers, etc engr.smu.edu: Worm Epidemics in High-Speed Networks. Read more   Vulnerabilities & Exploits www.cirt.dk: SafeNet Sentinel License Manager 7.2.0.2 Buffer Overflow. Read more www.idefense.com: KPPP Privileged File Descriptor Leak Vulnerability. Read more rst.void.ru: Windows Server 2003 and XP SP2 remote DoS exploit. Read more www.gentoo.org: mlterm: Integer overflow vulnerability. Read more www.securityreason.com: Multiple vulnerabilities in paFileDB. Read more www.debian.org: DSA-692-1 kdenetwork -- design flaw. Read more www.securitytracker.com: Ethereal Buffer Overflow in 3G-A11 Dissector Lets Remote Users Execute Arbitrary Code. Read more www.securitytracker.com: libexif Buffer Overflow in Processing EXIF Headers May Let Remote Users Crash the Application. Read more www.securitytracker.com: phpWebLog Include File Flaw Lets Remote Users Execute Arbitrary Commands. Read more www.securitytracker.com: mcNews 'header.php' Include File Flaw Lets Remote Users Execute Arbitrary Commands. Read more www.securitytracker.com: Hosting Controller Discloses Hosted Domain Names and Domain Owner E-mail Addresses to Remote Users. Read more www.securitytracker.com: CopperExport for iPhoto 'xp_publish.php' Input Validation Holes Let Remote Authenticated Users Inject SQL Commands. Read more www.securitytracker.com: The Includer Input Validation Hole Lets Remote Users Execute Arbitrary Commands. Read more www.securitytracker.com: Oracle Database Server UTL_FILE Error Discloses Files to Remote Authenticated Users. Read more www.securitytracker.com: Tell a Friend Script Lets Remote Users Include and Execute Arbitrary Code. Read more www.securitytracker.com: Sun AnswerBook2 Input Validation Holes Permit Cross-Site Scripting Attacks. Read more www.securitytracker.com: Xerox WorkCentre Bug in Web Server Lets Remote Users Modify the Configuration. Read more www.securitytracker.com: Aztek Forum Authentication Error Discloses Database Backup File to Remote Users. Read more www.securitytracker.com: Gene6 FTP Server Lets Local Users Execute Commands With Elevated Privileges. Read more www.securitytracker.com: SafeNet Sentinel LM Buffer Overflow Lets Remote Users Execute Arbitrary Code. Read more   News Microsoft Security Bulletin MS05-002 www.microsoft.com: Vulnerability in Cursor and Icon Format Handling Could Allow Remote Code Execution (891711). Read more www.theregister.co.uk: MMS virus discovered. Read more www.vnunet.com: Design flaw limits spread of MMS mobile virus. Read more www.theregister.co.uk: DNS cache poisoning bugs hits Symantec shops. Read more www.pcworld.com: Harvard Rejects Applicants Who Hacked Site. Read more www.boston.com: MIT says it won't admit hackers. Read more www.vnunet.com: Virus authors form unholy alliance. Read more www.vnunet.com: Online blackmail grows. Read more www.theregister.co.uk: UK card fraud hits �505m. Read more

08 March 2005 Guides, Papers, etc www.benedelman.org: Comparison of Unwanted Software Installed by P2P Programs. Read more ftp.research.microsoft.com: Can we contain Internet worms? Read more   Vulnerabilities & Exploits www.argeniss.com: Oracle Database Server Directory transversal. Read more www.cirt.dk: Buffer Overflow in SentinelLM service. Read more www.securitytracker.com: PaX SEGMEXEC and RANDEXEC VMA Error Lets Local Users Gain Elevated Privileges. Read more www.securiteam.com: Buffer Overflow in Knet. Read more www.securiteam.com: Multiple Vulnerabilities in Computer Associates License (Multiple Buffer Overflows, Directory Traversal). Read more www.securiteam.com: Computer Associates License Client Service Stack Overflow. Read more www.milw0rm.com: Aztek Forum <= 4.0 "myadmin.php" Database Dumper Exploit. Read more www.milw0rm.com: The Includer CGI <= 1.0 Remote Command Execution. Read more www.milw0rm.com: phpWebLog <= 0.5.3 Arbitrary File Inclusion. Read more www.milw0rm.com: PHP mcNews <= 1.3 Arbitrary File Inclusion. Read more www.debian.org: DSA-691-1 abuse -- several vulnerabilities. Read more secway.org: Gene6 FTP Server Local Privilege Escalation Vulnerability. Read more   News www.vnunet.com: Mobile phone virus could go global in minutes. Read more www.pcworld.com: Policing the Virus Writers: Good News? Read more www.pcworld.com: Antivirus Companies Report First Mobile Messaging Worm. Read more www.theregister.co.uk: Dampig Trojan menaces Symbian mobiles. Read more www.kaspersky.com: Virus writers exchanging information. Read more www.vnunet.com: Celebrity hacker strikes again. Read more www.telecom.paper.nl: XS4ALL starts wiretapping case against Dutch government. Read more www.nzherald.co.nz: Internet banking quite secure, never been infiltrated. Read more www.microscope.co.uk: Companies forced to reconsider security as SHA-1 code is broken. Read more

07 March 2005 Guides, Papers, etc www.fungible.com: Extortion Worms: Internet Worms that Discourage Disinfection. Read more   Vulnerabilities & Exploits www.securitytracker.com: Nokia Symbian OS Phone Bluetooth Nickame Error Lets Remote Users Restart the Target System. Read more www.securitytracker.com: Form Mail Script Lets Remote Users Include and Execute Arbitrary PHP Code. Read more www.securitytracker.com: phpBB 'oracle.php' Discloses Path to Remote Users. Read more www.securitytracker.com: Sylpheed Buffer Overflow in Processing Message Headers May Let Remote Users Execute Arbitrary Code. Read more www.securitytracker.com: phpBB 'sessions.php' Grants Administrative Access to Remote Authenticated Users. Read more   News www.infoworld.com: Symantec claims new antivirus patent. Read more patft.uspto.gov: Patent: Symantec Patents Multiple File Area Virus Scanning. Read more www.rednova.com: RSA Event Sets Up Malware War. Read more www.telecomasia.net: Cabir virus spreads to France, Japan. Read more nwc.securitypipeline.com: Survey: Patch Management An Ongoing Challenge For Many Companies. Read more nwc.securitypipeline.com: Directory Harvest Attacks Hit Record High. Read more news.zdnet.co.uk: Mitnick warns on dangers of social engineering. Read more nwc.securitypipeline.com: Hacker Helps B-School Applicants. Read more

06 March 2005 Guides, Papers, etc www.bellua.com: Bellua Cyber Security Asia 2005 From 21st - 24th March the largest information security conference in Asia will take place in Jakarta, Indonesia at the Hotel Borobudur. Read more Remote physical device fingerprinting by Yoshi Kohno (pdf). Read more seattletimes.nwsource.com: Learn to expect cracks in the best of firewalls. Read more www.intrusion.com: Intrusion Announces Internet Investigation Tool to Track Down Bad Guys. Read more   Vulnerabilities & Exploits www.securitytracker.com: Form Mail Script Lets Remote Users Include and Execute Arbitrary PHP Code. Read more www.securitytracker.com: phpBB 'oracle.php' Discloses Path to Remote Users. Read more www.securitytracker.com: Sylpheed Buffer Overflow in Processing Message Headers May Let Remote Users Execute Arbitrary Code. Read more www.securitytracker.com: phpBB 'sessions.php' Grants Administrative Access to Remote Authenticated Users. Read more   News www.stuff.co.nz: Hacker takes 3 minutes to get your cash. Read more news.com.com: Tracking PCs anywhere on the Net. Read more www.wired.com: Feds Catching Up With Proxies. Read more www.wired.com: Domain Owners Lose Privacy. Read more www.cbronline.com: Go Daddy slams US on domain privacy. Read more itmanagement.earthweb.com: Taking on Cyber Crime's New Mob Ties. Read more www.scmagazine.com: Anti-virus expert claims spyware does not exist. Read more www.dailystar.com: Web sees increase in 'phishing' scams. Read more

05 March 2005 Guides, Papers, etc isc.sans.org: Global DNS cache poisoning attack?; Update...Read more seattletimes.nwsource.com: Learn to expect cracks in the best of firewalls. Read more "JPEG exploit variant: creation and using" by Andrey Bayora (pdf). Read more ftp.research.microsoft.com: Can we contain Internet worms? Read more tennis.ecs.umass.edu: Internet Worm Propagation Simulator. Read more www.eweek.com: Paying for Flaws Pays Off for iDefense. Read more   Vulnerabilities & Exploits www.securityfocus.com: LOOKNMEET HTML INJECT EXPLOIT. Read more www.securitytracker.com: HTTP Anti Virus Proxy May Not Detect Viruses in Certain Archives. Read more www.securitytracker.com: Zorum Input Validation Holes in 'list' and 'frommethod' and Other Fields Permit Cross-Site Scripting Attacks. Read more www.securitytracker.com: TYPO3 Input Validation Hole in 'category_uid' Permits SQL Injection. Read more www.securitytracker.com: paBox 'text' Variable Lets Remote Users Conduct Cross-Site Scripting Attacks. Read more www.securitytracker.com: phpBB 'usercp_register.php' Error Lets Remote Users Conduct Cross-Site Scripting Attacks. Read more www.k-otik.com: Xerox MicroServer Web Server Unspecified Remote Vulnerability. Read more   News www.pcworld.com: Microsoft Researchers Target Worms, Buffer Overruns. Read more www.theregister.co.uk: Limp Bizkit lead claims hackers stole his sex video. Read more news.zdnet.co.uk: It's official: Spammers are hijacking ISPs. Read more www.theregister.co.uk: Spammers adopt slippery tactics to bypass ISP defences. Read more news.zdnet.co.uk: 'One in four' touched by ID theft. Read more news.zdnet.co.uk: ID theft gang smashed. Read more news.zdnet.co.uk: CA to track employee behaviour. Read more www.cnn.com: Judge dismisses spam conviction. Read more www.theregister.co.uk: Limp Bizkit lead claims hackers stole his sex video. Read more www.securityfocus.com: Companies resist nuclear cyber security rule. Read more

04 March 2005 Guides, Papers, etc www.astalavista.com: Computer Viruses: The Threat Today and The Expected Future. Read more   Vulnerabilities & Exploits www.securitytracker.com: CA Unicenter Asset Management Input Validation Bugs Let Remote Users Inject SQL Commands and Conduct Cross-Site Scripting Attacks. Read more www.securitytracker.com: CProxy Input Validation Hole Discloses Files to Remote Users and Lets Remote Users Crash the Service. Read more www.securitytracker.com: Golden FTP Server Buffer Overflow in USER Command Lets Remote Users Execute Arbitrary Code. Read more www.securitytracker.com: auraCMS Discloses Path to Remote Users and Permits Cross-Site Scripting Attacks. Read more www.securitytracker.com: Foxmail Server Buffer Overflow in USER Command Lets Remote Users Execute Arbitrary Code. Read more www.idefense.com: Computer Associates License Client and Server Invalid Command Buffer Overflow. Read more www.idefense.com: Computer Associates License Client PUTOLF Buffer Overflow. Read more www.idefense.com: Computer Associates License Client PUTOLF Directory Traversal. Read more www.idefense.com: Computer Associates License Client/Server GETCONFIG Buffer Overflow. Read more www.idefense.com: Computer Associates License Client/Server GCR Network Buffer Overflow. Read more www.idefense.com: Computer Associates License Client/Server GCR Checksum Buffer Overflow. Read more   News www.zdnet.com.au: Better security not about tech: Mitnick. Read more www.securityfocus.com: Hacker helps business school applicants get early decision. Read more news.xinhuanet.com: Microsoft unveils new technologies, targeting worms, hackers. Read more www.crime-research.org: Microsoft products fail spyware tests. Read more news.zdnet.com: Fixing a hole in security. Read more www.vnunet.com: Auto download adware carries vicious payload. Read more news.zdnet.com: Windows for supercomputers likely out by fall. Read more news.zdnet.co.uk: Antivirus patent granted. Read more news.zdnet.co.uk: Security firm in email deletion fiasco. Read more news.zdnet.co.uk: SurfControl buys anti-spyware tools. Read more www.securitypipeline.com: Microsoft Plays High-Stakes Poker With Customer Security. Read more

03 March 2005 Guides, Papers, etc www.pcworld.com: Spyware Stoppers. Renegade programs can slip onto your system in an instant-and they can be maddeningly difficult to banish. Read more www.securityfocus.com: Where is Google Headed? Read more ittraining.lse.ac.uk: Guide to Sensitive Information. Read more www.cs.uccs.edu: The 1st International Workshop on Security in Systems and Networks (SSN2005). Read more www.debarry2.com.br: Divide And Conquer - HTTP response Splitting, Web Cache poisoning attacks, And related topics. Read more   Vulnerabilities & Exploits www.k-otik.com: HP OpenVMS 6.x/7.x Local Privilege Escalation Vulnerability. Read more www.k-otik.com: Computer Associates License Software Multiple Vulnerabilities. Read more www.k-otik.com: Foxmail Email Server "USER" Command Remote Buffer Overflow. Read more www.k-otik.com: ProjectBB Cross Site Scripting and SQL Injection Vulnerabilities. Read more www.k-otik.com: auraCMS Cross Site Scripting and HTML Injection Vulnerabilities. Read more www.k-otik.com: Trillian PNG Image File Processing Buffer Overflow Vulnerability. Read more www.securitytracker.com: OpenVMS Unspecified Bug Lets Local Users Access Privileged Files and Resources. Read more www.securitytracker.com: Woltlab Burning Board Missing Input Validation in 'userid' and 'lastvisit' Cookies Permits SQL Injection. Read more www.securitytracker.com: Forumwa Input Validation Errors in 'search.php' Let Remote Users Conduct Cross-Site Scripting Attacks. Read more www.securitytracker.com: D-forum Input Validation Holes Permit Cross-Site Scripting Attacks. Read more www.securitytracker.com: PHPNews 'auth.php' Include File Flaw Lets Remote Users Execute Arbitrary Code. Read more   News seattletimes.nwsource.com: Bill Gates adds role of knight to r�sum�. Read more informationweek.com: Microsoft Wins Reversal On Browser Technology Patent Ruling. Read more www.redherring.com: Symantec�s new patent. Read more www.vnunet.com: Bagle.dldr Trojan runs riot. Read more seattlepi.nwsource.com: Spam filters may lead scientists to AIDS vaccine. Read more arstechnica.com: Microsoft scores victory in Eolas patent case appeal. Read more www.pcworld.com: New Bagle Variant Combines Spam, Trojan Horses. Read more www.theregister.co.uk: BitDefender bug bites GFI. Read more www.pacificatribune.com: Jef Raskin, creator of the Macintosh computer, dies at 61. Read more informationweek.com: Phishers Would Face 5 Years Under New Bill. Read more informationweek.com: 8 More Bugs Found In Firefox And Mozilla. Read more

02 March 2005 Guides, Papers, etc www.webappsec.org: The Insecure Indexing Vulnerability -Attacks Against Local Search Engines. Read more www.webappsec.org: The 80/20 Rule for Web Application Security. Read more www.securityfocus.com: Apache 2 with SSL/TLS: Step-by-Step, Part 3. Read more pages.cpsc.ucalgary.ca: Creating a Secure Computer Virus Laboratory. Read more www.foo.be: A reversed approach to security - Deeper malware analysis (practical session). Read more How secure is your computer? �Honey pot� experiment shows unprotected Windows SP 1 at risk. Read more   Tools www.idefense.com: An internal iDEFENSE Labs tool, IDA Sync, has been released as open source and available for download from the software page. IDA Sync was written to allow multiple analysts to synchronize their reverse engineering efforts with IDA Pro in real time. Read more trifinite.org: Blooover is a tool that is intended to serve as an audit tool that people can use to check whether their phones and phones of friends and employees are vulnerable.   Vulnerabilities & Exploits www.idefense.com: RealNetworks RealPlayer .smil Buffer Overflow Vulnerability. Read more www.securitytracker.com: OpenBSD Validation Error in copy(9) Has Unspecified Impact. Read more www.securitytracker.com: ProjectBB Input Validation Holes Permit SQL Injection and Cross-Site Scripting Attacks. Read more www.securitytracker.com: CuteNews Input Validation Holes in HTTP Header Parameters Let Remote Users Conduct Cross-Site Scripting Attacks. Read more www.securitytracker.com: phpCOIN Input Validation Holes Permit SQL Injection and Cross-Site Scripting Attacks. Read more www.securitytracker.com: Symantec Nexland Router Incorrect SMTP Routing May Send Mail via Untrusted Networks. Read more   News www.theregister.co.uk: Microsoft to end 64-bit Windows endurance test in one month. Read more www.theregister.co.uk: Bagle variants served up with spam. Read more news.com.com: Watchdog-attacking Bagle ramps up. Read more www.vnunet.com: Fourth Bagle variant spotted today. Read more www.thejournalnews.com: Hackers invaded state Web sites 72 times in five years. Read more www.cio-today.com: Patches Likely To Cause Headaches. Read more news.com.com: Microsoft: Activation shift won't be a pain. Read more www.eweek.com: Windows Media Player Update Fails Spyware Infection Test. Read more news.com.com: Analyst: Hidden costs in security breaches. Read more news.com.com: An Oscar surprise: Vulnerable phones. Read more www.vnunet.com: Zafi-D and Netsky top virus charts. Read more www.vnunet.com: Paris Hilton hack highlights security failure. Read more www.vnunet.com: Porn plummets as spammers clean up. Read more www.pcworld.com: New Tool Gives the Scoop on Snoops. Read more

01 March 2005 Guides, Papers, etc www.oreillynet.com: Please stop working on content-based spam filtering. Read more   Vulnerabilities & Exploits www.securitytracker.com: SafeHTML Lets Users Bypass the Filtering With Decimal HTML Entities and \x00 Symbols. Read more www.securitytracker.com: bsmtpd May Let Remote Users Execute Arbitrary Commands. Read more www.k-otik.com: phpBB Administrator Session Handling Critical Security Update. Read more www.k-otik.com: BadBlue "mfcisapicommand" Remote Buffer Overflow Vulnerability. Read more www.k-otik.com: Cmd5checkpw "Poppasswd" Local Privilege Escalation Vulnerability. Read more www.k-otik.com: CIS WebServer Remote Directory Traversal Vulnerability. Read more www.k-otik.com: FreeNX X Server Local Authentication Bypass Vulnerability. Read more seclists.org: FullDisclosure: Badblue HTTP Server, ext.dll buffer overflow. Read more   News www.theregister.co.uk: Webcam Trojan perv gets slapped wrist. Read more news.zdnet.co.uk: SP2 to be forced out. Read more www.theregister.co.uk: eBay provides backdoor for phishers. Read more www.pcworld.idg.com.au: New Bagle Trojan on the loose. Read more www.vnunet.com: Phishers chip away at web security. Read more www.theregister.co.uk: Opera beefs up browser to thwart phishers. Read more www.newsfactor.com: Microsoft Grapples with Internet Security Beast. Read more news.zdnet.co.uk: Microsoft suing Israeli spammer. Read more news.zdnet.co.uk: Spamming tool goes on the run. Read more news.zdnet.co.uk: Australian Cabir infestation reported. Read more

Copyright� MegaSecurity.org