Home    News Archive    Translate Traducen

News april 20004

30 april 2004 New in Archive Magic PS 1.43 FuckTrojan 1.2 Ramirez Trojan 2.0 Guides, Papers, etc www.eeye.com: �Beat the Worm:� A Guide to Mitigating Critical Flaws Part 1: Critical Flaw or Red Herring? Read more Vulnerabilities & Exploits www.securitytracker.com: Sesame Initialization Flaw in SesameServlet.setSessionContext() Lets a Remote User Access Another User's Account. Read more www.securitytracker.com: Sysklogd Memory Allocation Flaw May Let Remote Users Crash the Daemon. Read more www.securitytracker.com: IBM AIX Console Command Temporary Files May Let Local Users Gain Elevated Privileges. Read more www.securitytracker.com: IBM AIX Logical Volume Manager Temporary File Flaws and Buffer Overflows Let Local Users Modify Files and Execute Arbitrary Code. Read more www.securitytracker.com: JForum May Let Remote Authenticated Users Access Restricted Forums. Read more www.securitytracker.com: Phorum Input Validation Holes in Several Message Fields Let Remote Users Conduct Cross-Site Scripting Attacks. Read more www.securitytracker.com: eZ publish Input Validation Hole in 'articleview' Permits Cross-Site Scripting Attacks. Read more www.securitytracker.com: Citrix MetaFrame Presentation Server Lets Remote Authenticated Administrators Access a Target User's Client Drives. Read more www.debian.org: DSA-497-1 mc -- several vulnerabilities. Read more www.debian.org: DSA-496-1 eterm -- missing input sanitising. Read more News: www.crime-research.org: Internet and security. Read more www.theregister.co.uk: UK police arrest copycat phisher. Read more news.zdnet.co.uk: Hidden 'backdoors' worry security firms. Read more www.smh.com.au: Open source group hits out at back-door claims. Read more zdnet.com.com: Worm worries grow with release of Windows hacks. Read more

29 april 2004 New in Archive Witch Control 2004 KaoTan 2.0 Insider 2.3.1 Vulnerabilities & Exploits www.securitytracker.com: Zonet Wireless Router NAT Function Modifies Inbound IP Source Addresses. Read more www.securitytracker.com: paFileDB Input Validation Flaw in 'Category' Function Lets Remote Users Conduct Cross-Site Scripting Attacks. Read more www.securitytracker.com: Linux 2.6 Kernel fb_copy_cmap() Memory Access Flaw Has Unspecified Impact. Read more www.securitytracker.com: HP Web Jetadmin ExecuteFile Function Lets Remote Users Execute Programs With Root/SYSTEM Privileges. Read more www.securitytracker.com: Siemens S55 Phone Lets Remote Users Send Unauthorized SMS Messages. Read more www.securitytracker.com: Kaos news Lets Remote Users Download the Database Containing Passwords. Read more www.securitytracker.com: DiGi WWW Server Can Be Crashed By Remote Users. Read more www.securiteam.com: Metasploit Microsoft IIS SSL PCT Module. Read more News: zdnet.com.com: Worm worries grow with release of Windows hacks. Read more www.internetnews.com: Blaster Redux? SSL Worm Threat Rising. Read more www.internetweek.com: Netsky.x Takes Down Web Sites. Read more www.eweek.com: New Bagle, Netsky Worms on the Loose. Read more www.computerworld.com: Microsoft hole spawns false alarm, real attacks. Read more zdnet.com.com: Washington wakes up to spyware, adware. Read more techdirt.com: Should We Blame Security Victims? Read more www.philly.com: Spam-fighting field grows crowded. Read more

28 april 2004 New in Archive FTP Center 1.2 NeoControlRed 2.2.0 COF Process Ressurection 1.0b Vulnerabilities & Exploits www.securitytracker.com: McAfee VirusScan ActiveX Controls Let Remote Users Access the Target User's System. Read more www.securitytracker.com: Novell eDirectory Role Based Services May Assign Elevated Privileges. Read more www.securitytracker.com: Engorile Video Gallery Insufficient Input Validation in 'clipid' and 'catid' Lets Remote Users Inject SQL Commands. Read more www.debian.org: DSA-495-1 linux-kernel-2.4.16-arm -- several vulnerabilities. Read more News: www.theinquirer.net: New worm attacks Vole hole. Read more www.smh.com.au: Exploit binary released as Symantec finds more code. Read more www.securityfocus.com: Stop Being a Victim. Read more www.nwfusion.com: Worms, consumers drive NAI profit in Q1. Read more www.immunitysec.com: Buy an exploit. Read more

27 april 2004 New in Archive ProRat 1.8 Ramirez 1.0 alfa Iroffer 1.3b05 (1306.h) Guides, Papers, etc www.vnunet.com: The real impact of viruses: Part 1. Read more www.vnunet.com: The real impact of viruses: Part 2. Read more Vulnerabilities & Exploits www.securitytracker.com: phpwsContacts Discloses CSV File to Remote Users. Read more www.securitytracker.com: phpwsBB Search Feature Discloses Message Labels to Remote Users. Read more www.securitytracker.com: Samsung SmartEther Authentication Failure Lets Remote Users Gain Administrative Access. Read more www.securitytracker.com: Sun Solaris TCP/IP Stack NULL Pointer Bug in ip_sioctl_copyin_done() Lets Local Users Panic the System. Read more www.securitytracker.com: IBM HTTP Server Can Be Crashed By Remote Users Sending Specially Crafted SSL Packets. Read more www.securitytracker.com: Microsoft Windows Explorer Buffer Overflow in Processing SMB Share Names Lets Remote Users Execute Arbitrary Code. Read more www.securitytracker.com: Microsoft Internet Explorer Buffer Overflow in Processing SMB Share Names Lets Remote Users Execute Arbitrary Code. Read more www.securitytracker.com: Racoon Can Be Crashed By Remote Users Sending Large ISAKMP Length Values. Read more www.securitytracker.com: Metadot Portal Server Lets Remote Authenticated Users Gain Elevated Privileges. Read more www.securitytracker.com: OpenBB Input Validation Holes Let Remote Users Inject SQL Commands and Conduct Cross-Site Scripting Attacks. Read more www.securitytracker.com: Apache Web Server Has Buffer Overflow in ebcdic2ascii() on Older Processor Architectures. Read more News: news.designtechnica.com: Latest Bagle Worm Variant Includes Poem. Read more www.vnunet.com: Virus alert: Bagle X. Read more www.theregister.co.uk: Would you like a cherry Bagle with your zombie PC? Read more www.theinquirer.net: Big security problem hits Windows, Internet Explorer. Read more www.vnunet.com: 'Burnt out' IT staff losing virus battle. Read more www.theregister.co.uk: Small.biz fails to tackle spam. Read more www.theregister.co.uk: Phishing scams cost UK banks �1m+. Read more

26 april 2004 New in Archive FTP Center 1.1 BlackCore 1.2.1 davps 1.0 Vulnerabilities & Exploits www.securitytracker.com: OpenBB Input Validation Holes Let Remote Users Inject SQL Commands and Conduct Cross-Site Scripting Attacks. Read more www.securitytracker.com: Apache Web Server Has Buffer Overflow in ebcdic2ascii() on Older Processor Architectures. Read more www.securiteam.com: TCP Window Size RST. Read more www.securiteam.com: Netegrity SiteMinder Affiliate Agent Cookie Overflow. Read more www.securiteam.com: EpicGames's Unreal Engine UMOD Vulnerability. Read more www.securiteam.com: Symantec Multiple Firewall TCP Options Denial Of Service Condition. Read more www.securiteam.com: Protector System Multiple Vulnerabilities. Read more www.securiteam.com: Multiple Vulnerabilities In phProfession Module For PostNuke. Read more News: www.crime-research.org: Ukraine: hackers school. Read more www.crime-research.org: Beware: traps on the Net. Read more www.baltimoresun.com: Online criminals using worm to hook accounts. Read more www.ecommercetimes.com: Who Should Keep Out the Hackers? Read more reviews-zdnet.com.com: How your phone could be hacked. Read more

25 april 2004 New in Archive Harvester 2003 (mail) 07 Polyserver 1.0 Deaths Corner 1.2.0 v2 Guides, Papers, etc www.cisco.com: A Comprehensive Review of 802.11 Wireless LAN Security and the Cisco Wireless Security Suite. Read more Vulnerabilities & Exploits www.securitytracker.com: Protector System SQL Protection Mechanism Can Be Bypassed By Remote Users. Read more www.securitytracker.com: Network Query Tool Input Validation Flaw in 'portNum' Lets Remote Users Conduct Cross-Site Scripting Attacks. Read more www.securitytracker.com: Linux Kernel panic() Buffer Overflow Has Unspecified Impact. Read more www.securitytracker.com: artmedic hpmaker Include File Error Lets Remote Users Execute Arbitrary Commands. Read more www.securitytracker.com: Modular Site Management System (MSMS) 'ver.asp' May Disclose System Information to Remote Users. Read more www.securitytracker.com: Advanced Guestbook Input Validation Hole in Password String Permits SQL Injection. Read more www.securitytracker.com: Symantec Client Firewall SYMNDIS.SYS TCP Options Parsing Flaw Lets Remote Users Deny Service. Read more www.securitytracker.com: Symantec Client Security SYMNDIS.SYS TCP Options Parsing Flaw Lets Remote Users Deny Service. Read more www.securitytracker.com: Linux Kernel cpufreq Signed Integer Assignment Flaw Discloses Memory to Local Users. Read more www.securitytracker.com: Unreal Game Engine UMOD '..\' Input Validation Flaw Lets Remote Users Overwrite Files on the Target System. Read more News: www.thehostingnews.com: Web Hosting Company C I Host Monitors Computer Viruses as Pranks Become Malicious. Read more www.theregister.co.uk: US defends cybercrime treaty. Read more www.theregister.co.uk: Network Associates sells Sniffer. Read more www.mb.com.ph: RP joins Microsoft�s gov�t security program. Read more www.newsfactor.com: Cyber-Cops Arrest Trio in Piracy Crackdown. Read more catless.ncl.ac.uk: Risk of automatic updates. Read more www.casperstartribune.net: Online 'phishing' hooks the uwary. Read more news.netcraft.com: More Than 400 Phishing Attacks in March. Read more

24 april 2004 New in Archive 51D 1b Shutdown 1.0 Vulnerabilities & Exploits www.securitytracker.com: Solaris sendfilev(3EXT) Lets Local Users Deny Service. Read more www.securitytracker.com: Netegrity SiteMinder Affiliate Agent Buffer Overflow in SMPROFILE Cookie Lets Remote Users Execute Arbitrary Code. Read more www.securitytracker.com: Fusion News Input Validation Flaw in 'fullnews.php' Lets Remote Users Conduct Cross-Site Scripting Attacks. Read more News: www.crime-research.org: Microsoft joins the fight against Internet paedophilia. Read more slashdot.org: WormRadar Node Volunteers Help Graph Attacks. Read more

23 april 2004 New in Archive evil-vnc 1.0 beta hypnotized_hallucination_rat 3.4 Vulnerabilities & Exploits www.securitytracker.com: Yahoo Messenger 'yinsthelper.dll' Overflow Lets Remote Users Crash the Client. Read more www.securitytracker.com: Ident-2 Buffer Overflow in child_service() May Let Remote Users Execute Arbitrary Code. Read more www.securitytracker.com: NewsTraXer Discloses Database to Remote Users. Read more www.securitytracker.com: Journalness Lets Remote Users Create and Edit Posts. Read more www.securitytracker.com: pisg IRC Statistics Generator Input Validation Flaw in 'nick' Lets Remote Users Conduct Cross-Site Scripting Attacks. Read more www.securitytracker.com: PostNuke Downloads, Web_Links, 'openwindow.php' Input Validation Holes Let Remote Users Conduct Cross-Site Scripting Attacks. Read more www.securitytracker.com: phProfession Input Validation Holes Let Remote Users Inject SQL Commands and Conduct Cross-Site Scripting Attacks. Read more www.debian.org: DSA-494-1 ident2 -- buffer overflow. Read more www.cisco.com: TCP Vulnerabilities in Multiple Non-IOS Cisco Products. Read more News: www.theregister.co.uk: 'New' Internet vuln long ignored. Read more news.netcraft.com: 'Bin Laden Captured' E-mail Downloads Trojan. Read more

22 april 2004 New in Archive Harvester 2003 (mail) 06 X RAT 2.0 Iroffer 1.3b07 Vulnerabilities & Exploits www.securitytracker.com: BEA WebLogic 'config.sh' and 'config.cmd' May Disclose Administrative Password to Local Users. Read more www.securitytracker.com: BEA WebLogic Bug Lets Applications Remove EJB Objects Without Permission. Read more www.securitytracker.com: BEA WebLogic May Stop Protecting URLs When Configured With Certain Illegal Protection Patterns. Read more www.securiteam.com: Buffer Overflow In eXchange POP3 (MAIL FROM). Read more www.securiteam.com: Multiple Vulnerabilities in BitDefender Scan Online (ActiveX). Read more www.debian.org: DSA-493-1 xchat -- buffer overflow. Read more News: www.theage.com.au: More critical flaws found in Symantec products. Read more www.winnetmag.com: Microsoft Presents Antispyware Strategy. Read more www.theregister.co.uk: No need for anti-spyware laws - FTC. Read more www.detnews.com: Tower Records settles government charges over hacker attacks. Read more www.sundaytimes.co.za: New Netsky, Blaster warnings. Read more www.crn.com: Netsky.y Sparks High Threat Level. Read more techdirt.com: Forget Trojan Horses, Why Not Convince Suckers To Spam For You? Read more www.itweb.co.za: New Netsky, Blaster warnings. Read more

21 april 2004 New in Archive BlackCore 1.2 INSAIM 1.0 Iroffer 1.3b05 (1306.g) Vulnerabilities & Exploits Hotmail & Passport (.NET Accounts) Vulnerability. Read more www.securitytracker.com: Symantec Norton Personal Firewall Lets Remote Users Execute Arbitrary Code to Take Full Control of the System. Read more www.securitytracker.com: Symantec Norton Internet Security Lets Remote Users Execute Arbitrary Code to Take Full Control of the System. Read more www.securitytracker.com: Cisco SNMP Bug Lets Remote Users Send SNMP Solicited Operations to Cause the Device to Reload. Read more www.securitytracker.com: Sun Fire Server System Controller Can Be Crashed By Remote Users Sending an IP Packet With TOS Bits. Read more www.securitytracker.com: Multiple Vendor TCP Stack Implementations Let Remote Users Deny Service. Read more www.securitytracker.com: Linux Kernel setsockopt(2) MCAST_MSFILTER Integer Overflow Allows Local Users to Obtain Root Privileges. Read more www.securitytracker.com: sSMTP Unsafe Temporary File Lets Local Users Gain Elevated Privileges. Read more www.securitytracker.com: eXchange POP3 Server SMTP Buffer Overflow Lets Remote Users Execute Arbitrary Code. Read more www.securitytracker.com: RealServer Discloses Usernames and Passwords to Local Users. Read more www.securitytracker.com: Yahoo! Mail Scripting Filter Can Be Bypassed By Remote Users. Read more www.securitytracker.com: utempter Input Validation Errors May Let Local Users Gain Root Privileges. Read more www.securitytracker.com: Serv-U FTP Server LIST '-l:' Buffer Overflow Lets Remote Authenticated Users Crash the FTP Service. Read more www.securitytracker.com: Fastream NETFile Server Lets Remote Users Deny Service With Non-Existent Usernames. Read more www.securiteam.com: Internet Explorer Print without Prompting. Read more www.uniras.gov.uk: Vulnerability Issues in TCP. Read more News: www.baltimoresun.com: Security experts move to fix flaw in Internet. Read more www.detnews.com: Internet technology vulnerable to hackers, researchers say. Read more www.theregister.co.uk: Meet NetSky-X, the Babel Fish worm. Read more www.esj.com: Worst Security Problem: Attachments. Read more www.theregister.co.uk: One third of email now spam. Read more

20 april 2004 New in Archive Hotmail Hacker Log Edition 3.0 Backdoor.VB.aq Iroffer 1.3b05 (1306.c) Guides, Papers, etc. Hackers: Under the hood ZDNet Australia went on the hunt to track down some of the world's most prominent (and notorious) hackers. In this five-part series, we delve into the lives of five prominent hackers who reveal issues close to their heart. Read more www.securityfocus.com: Basic Web Session Impersonation. Read more Vulnerabilities & Exploits www.securitytracker.com: phpBB 'common.php' Lets Remote Users Spoof IP Addresses. Read more www.securitytracker.com: XChat Socks-5 Proxy Buffer Overflow Lets Remote Users Execute Arbitrary Code. Read more www.securitytracker.com: BitDefender Scan Online ActiveX Control Lets Remote Users Install and Execute Arbitrary Code. Read more www.securitytracker.com: PT Advanced Shoppingcart Discloses Shopping Database to Remote Users. Read more www.securitytracker.com: SquirrelMail 'chpasswd' Buffer Overflow Yields Root Privileges to Local Users. Read more www.securitytracker.com: Mille Buffer Overflow Lets Local Users Gain Elevated Privileges. Read more www.securitytracker.com: natrail.pl Input Validation Holes May Let Remote Users Execute Commands. Read more www.securitytracker.com: CVS Server Piped Checkout Input Validation Flaw Discloses RCS Files to Remote Authenticated Users. Read more www.securitytracker.com: PostNuke NS-Polls Input Validation Hole in 'pn_uid' Permits SQL Injection. Read more www.securitytracker.com: Phorum Input Validation Hole in 'phorum_uriauth' Lets Remote Users Execute SQL Commands. Read more www.securiteam.com: Multiple Cisco Exploit Codes. Read more www.securiteam.com: Squirrelmail Change_passwd Buffer Overflow Exploit. Read more www.debian.org: DSA-492-1 iproute -- denial of service. Read more News: www.silicon.com: New Phatbot worm out there? Read more www.technewsworld.com: VeriSign Reports Massive Worm in the Works. Read more news.bbc.co.uk: Passwords revealed by sweet deal. Read more australianit.news.com.au: The Trojan that wasn't. Read more

19 april 2004 New in Archive Phoenix RAT 1.0 Checkesp Litmus 2.02 Tools knockd is a port-knock server. It listens to all traffic on an ethernet interface, looking for special "knock" sequences of port-hits. A client makes these port-hits by sending a TCP (or UDP) packet to a port on the server. This port need not be open -- since knockd listens at the link-layer level, it sees all traffic even if it's destined for a closed port. When the server detects a specific sequence of port-hits, it runs a command defined in its configuration file. This can be used to open up holes in a firewall for quick access. Read more Vulnerabilities & Exploits www.securitytracker.com: UltraApps Portal Discloses Database to Remote Users. Read more www.securitytracker.com: Logcheck Unsafe Temporary Directory Lets Local Users Gain Elevated Privileges. Read more www.securiteam.com: WinZip MIME Parsing Buffer Overflow Exploit. Read more www.securiteam.com: Utility Manager Local Privileges Escalation Exploit. Read more www.securiteam.com: ColdFusion MX Oversize Error Message DoS. Read more www.securiteam.com: ColdFusion MX File Upload DoS. Read more www.securiteam.com: Cisco IPsec VPN Implementation Group Password Usage Vulnerability. Read more www.securiteam.com: RealNetworks Helix Universal Server DoS (GET_PARAMETER, DESCRIBE). Read more www.securiteam.com: DoS Vulnerability in Microsoft Windows SPNEGO Protocol Decoding (MS04-011). Read more www.securiteam.com: Microsoft Windows Utility Manager Vulnerability (MS04-11). Read more www.netwosix.org: LNSA-#2004-0012: Multiple format string vulnerabilities in neon. Read more

18 april 2004 New in Archive EuEx Backdoor.Lamost tdongsdbot 1.03 Vulnerabilities & Exploits www.debian.org: DSA-491-1 linux-kernel-2.4.19-mips -- several vulnerabilities. Read more www.debian.org: DSA-490-1 zope -- arbitrary code execution. Read more www.debian.org: DSA-489-1 linux-kernel-2.4.17-mips+mipsel -- several vulnerabilities. Read more www.debian.org: DSA-488-1 logcheck -- insecure temporary directory. Read more www.debian.org: DSA-487-1 neon -- format string. Read more www.debian.org: DSA-486-1 cvs -- several vulnerabilities. Read more News: www.theregister.co.uk: PC makers win back right to sue Microsoft. Read more scotlandonsunday.scotsman.com: Massive rise in internet banking fraud. Read more www.kbalertz.com: Delete anti-virus and firewall (!?). Read more money.guardian.co.uk: Online accounts face massive rise in 'phishing' scams. Read more www.theregister.co.uk: US proposes rigorous spam sentencing. Read more seattletimes.nwsource.com: 10 years of tech: Look at the way we were, then see how far things may go. Read more www.techworld.com: Netsky.V climbs through upstairs Windows. Read more www.infoworld.com: Supercomputer hacks highlight ed security challenge. Read more

17 april 2004 New in Archive DTr 1.4.4 (d) server Backdoor.Jes.16 Iroffer 1.3b06 (1307) Vulnerabilities & Exploits www.securitytracker.com: ColdFusion MX File Upload Disk Space Management Bug Lets Remote Users Deny Service. Read more www.securitytracker.com: Gemitel Include File Hole in 'affich.php' Lets Remote Users Execute Arbitrary Code. Read more www.securitytracker.com: KPhone Can Be Crashed By Remote Users Sending Malformed STUN Packets. Read more www.securitytracker.com: ZoneAlarm E-mail Security Can Be Bypassed By Remote Users. Read more www.securitytracker.com: phpBugTracker Input Validation Flaws in 'user.php', 'bugs.php', and 'query.php' Let Remote Users Inject SQL Commands. Read more www.securitytracker.com: WinSCP Can Be Crashed By Specially Crafted URLs. Read more www.debian.org: DSA-485-1 ssmtp -- format string. Read more www.debian.org: DSA-484-1 xonix -- failure to drop privileges. Read more News: www.theregister.co.uk: The average PC: spyware hotel. Read more news.xinhuanet.com: Nearly half of junk e-mails contain viruses: survey. Read more www.pcworld.com: Web Braces for Netsky.V's Attack. Read more www.techweb.com: Netsky Worms Just Keep On Coming. Read more www.informationweek.com: Netsky: W And Counting April. Read more news.netcraft.com: Phishing Trojan Grabs Browser Screen Shots. Read more news.bbc.co.uk: Teenager comes to Microsoft's aid. Read more www.pcadvisor.co.uk: Spyware runs rampant, study says. Read more www.crime-research.org: Victims of cyber crime. Read more

16 april 2004 New in Archive Poltergeist 1.2 Klog Serve beta PA HAC 1.0 Beta 2004 Tools FileSystem Investigator is a platform independent file system viewer and data extraction tool. It allows the user to: View the contents of the target file system in a forensicly safe manner, bypassing the normal operating system mechanisms. Read more Guides, Papers, etc. www.schneier.com: Attacking Certificates with Computer Viruses. Read more www.ebcvg.com: Web Application Worms: Myth or Reality? Read more Vulnerabilities & Exploits www.securitytracker.com: Cisco IPsec Implementation Lets Certain Users Conduct Man-in-the-Middle Attacks. Read more www.securitytracker.com: Cisco IPsec VPN Client Discloses Group Password to Certain Local Users. Read more www.securitytracker.com: RealNetworks Helix Universal Server URL Processing Error Lets Remote Users Crash the Service. Read more www.securitytracker.com: SCT Campus Pipeline Javascript Event Input Validation Holes Let Remote Users Execute Arbitrary Commands. Read more www.securitytracker.com: PostNuke Input Validation Flaw in 'NS-Your_Account' Module Lets Remote Users Inject SQL Commands. Read more www.securitytracker.com: Linux Sound Blaster Driver Error Lets Local Users Crash the System. Read more www.securitytracker.com: Linux Kernel Leaks System Memory to JFS Filesystem. Read more www.securitytracker.com: Linux Kernel Leaks System Memory to XFS Filesystem. Read more www.securitytracker.com: Linux Kernel Leaks System Memory to EXT3 Filesystem. Read more www.securitytracker.com: cadaver Format String Flaws Let Remote WebDAV Servers Execute Arbitrary Code on Connected Clients. Read more www.securitytracker.com: neon Format String Flaws Let Remote WebDAV Servers Execute Arbitrary Code on Connected Clients. Read more www.securitytracker.com: Xonix Game High Score Mail Function Lets Local Users Gain Elevated Privileges. Read more www.securitytracker.com: sSMTP Format String Flaws Let Remote Servers Execute Arbitrary Code. Read more www.securitytracker.com: MySQL 'mysqld_multi' Temporary File Flaw Lets Local Users Overwrite Files. Read more www.securitytracker.com: Servers Alive Stores Passwords in a Local Configuration File. Read more www.securiteam.com: Monit Remote Root Proof Of Concept Exploit. Read more www.securiteam.com: Microsoft IIS SSL/TLS Remote DoS. Read more News: www.theregister.co.uk: NetSky-V spreads on auto-pilot. Read more afr.com: New virus warning for home users. Read more www.web-user.co.uk: Netsky variant targets Microsoft holes. Read more www.theregister.co.uk: Windows Update groans under patch load. Read more www.crime-research.org: Spammer business on the rise. Read more

15 april 2004 New in Archive X� WebDL 1.1 El Diablo III Pex Vulnerabilities & Exploits Linux Kernel Buffer Overflow in ISO660 File System Rock Ridge Extension Lets Local Users Execute Arbitrary Code. Read more www.securitytracker.com: CVS Path Validation Flaw in RCS Diff Files Lets Remote Servers Create Arbitrary Files on the Target Client's System. Read more www.securitytracker.com: Zaep AntiSpam Input Validation Flaw Lets Remote Users Conduct Cross-Site Scripting Attacks. Read more www.securitytracker.com: Eudora Can Be Crashed By E-mail With Deeply Nested MIME Content. Read more www.securitytracker.com: Microsoft H.323 Buffer Overflow Lets Remote Users Execute Arbitrary Code. Read more www.securitytracker.com: Microsoft SSL Library Input Validation Error Lets Remote Users Crash the Service. Read more www.securitytracker.com: Microsoft Windows Kernel Local Descriptor Table Flaw Lets Local Users Gain Elevated Privileges. Read more www.securitytracker.com: Microsoft Windows Negotiate Security Software Provider (SSP) Buffer Overflow Lets Remote and Local Users Execute Arbitrary Code. Read more www.securitytracker.com: Microsoft Windows Management Interface Provider Lets Local Users Gain Elevated Privileges. Read more www.securitytracker.com: Microsoft Utility Manager Lets Local Users Run Applications With Elevated Privileges. Read more www.securitytracker.com: Microsoft Winlogon Buffer Overflow Lets Certain Remote Users Execute Arbitrary Code. Read more www.debian.org: DSA-483-1 mysql -- insecure temporary file creation. Read more www.debian.org: DSA-482-1 linux-kernel-2.4.17-apus+s390 -- several vulnerabilities. Read more www.debian.org: DSA-481-1 linux-kernel-2.4.17-ia64 -- several vulnerabilities. Read more www.debian.org: DSA-480-1 linux-kernel-2.4.17+2.4.18-hppa -- several vulnerabilities. Read more www.debian.org: DSA-479-1 linux-kernel-2.4.18-alpha+i386+powerpc -- several vulnerabilities. Read more News: www.theregister.co.uk: MS score card: four patches, 20 vulns, heaps of trouble. Read more www.logisticsit.com: Weekly report on viruses and intrusions. Read more www.theregister.co.uk: SEXUALLY-EXPLICIT: FTC labels porno spam. Read more www.woai.com: Microsoft Patches Ward Off Hackers. Read more www.crime-research.org: Phishing Scams: Statistics from mi2gIntelligence Unit. Read more www.rednova.com: Hackers Attack Research Institutions. Rread more www.securityfocus.com: War of words rages over Internet taps. Read more www.pcworld.com: Security Firm Warns of Spam That Spies. Read more www.tmcnet.com: IIJ Launches Emergency Virus Countermeasure Service; Provided as the First Service in the Series of E-Mail Solutions Enhancement. Read more

14 april 2004 New in Archive Cart�o virtual Backdoor.Shaggy Iroffer 1.3b05 (1306.b) Vulnerabilities & Exploits xforce.iss.net: Microsoft SSL Library Remote Compromise Vulnerability. Read more xforce.iss.net: Microsoft RPC Race Condition Denial of Service. Read more xforce.iss.net: Multiple Vulnerabilities in Microsoft Products. Read more Microsoft Windows 2000 Domain Controller LDAP Flaw May Let Remote Users Restart the Authentication Service. Read more BEA WebLogic May Disclose Administrative Password in Certain Cases. Read more BEA WebLogic Custom Trust Manager Flaw May Let Remote Users Impersonate Target Users or Servers. Read more BEA WebLogic May Disclose Database Password Via 'config.xml' For Untargeted JDBC Connection Pools. Read more BEA WebLogic Authentication Provider May Assign Incorrect Privileges in Certain Cases. Read more Microsoft Windows COM Internet Services and RPC over HTTP Can Be Crashed By Remote Users. Read more Microsoft Windows COM Object Identifier Creation Flaw May Let Remote Users Cause Applications to Open Network Ports. Read more Microsoft Virtual DOS Machine (VDM) Lets Local Users Gain Elevated Privileges. Read more Microsoft Windows RCP Memory Leak Lets Remote Users Deny Service. Read more Microsoft Jet Database Engine 'msjet40.dll' Buffer Overflow Lets Remote Users Execute Arbitrary Code. Read more Microsoft ASN.1 Library (msasn1.dll) Double-Free Memory Allocation Error May Let Remote Users Execute Arbitrary Code. Read more Microsoft SSL Library PCT Buffer Overflow Lets Remote Users Execute Arbitrary Code. Read more Microsoft Help and Support Center Input Validation Flaw Lets Remote Users Execute Arbitrary Code in the My Computer Zone. Read more Microsoft LSASS Service Buffer Overflow Lets Remote Users Execute Arbitrary Code With SYSTEM Privileges. Read more TUTOS Multiple Input Validation Holes Permit Remote SQL Injection, Path Disclosure, and Cross-Site Scripting Attacks. Read more Microsoft Outlook Express Can Be Crashed By Remote Users With Specially Crafted EML File. Read more Microsoft Internet Explorer Javascript OLE Object Lets Remote Users Automatically Print Without Authorization. Read more Yahoo! Messenger Saves Password in Plain Text to Local Temporary File in Certain Cases. Read more Microsoft Internet Explorer Bitmap Memory Allocation Error Lets Remote Users Cause All Available Memory to Be Consumed. Read more Trillian Saves Yahoo! Password in Plain Text to Local Temporary File in Certain Cases. Read more PHP-Nuke 'auth.php' Input Validation Error Lets Remote Users Bypass Authentication and Execute Admin-Level PHP-Nuke Commands. Read more PHP-Nuke 'modules.php' Input Validation Error Lets Remote Users Bypass Authentication and Execute User-Level PHP-Nuke Commands. Read more NewsPHP Authentication Flaw Lets Remote Users Gain Administrative Access. Read more www.securiteam.com: eMule DecodeBase16 Remote Buffer Overflow Exploit Code. Read more www.securiteam.com: Solaris Kernel Module Insertion Exploit. Read more www.securiteam.com: IPFW ECE Firewall Bypassing Exploit. Read more News: www.microsoft.com: How to Tell If a Microsoft Security-Related Message Is Genuine. Read more Microsoft Security Bulletin MS01-041. Malformed RPC Request Can Cause Service Failure. Read more Microsoft Security Bulletin MS02-011 Authentication Flaw Could Allow Unauthorized Users To Authenticate To SMTP Service. Read more Microsoft Security Bulletin MS03-046 Vulnerability in Exchange Server Could Allow Arbitrary Code Execution (829436). Read more Microsoft Security Bulletin (MS00-082) Patch Available for 'Malformed MIME Header' Vulnerability. Read more www.theregister.co.uk: Browser-based attacks on the up. Read more www.overclockersclub.com: "News: Microsoft puts out 4 security patches". Read more www.logisticsit.com: Weekly report on viruses and intrusions. Read more www.silicon.com: Hackers attack Linux supercomputers. Read more www.news-journalonline.com: Why do I get e-mails saying I've sent other people viruses? Read more

13 april 2004 New in Archive Visitor 1.1 manSlut Uploader 1.0 rc7 Backdoor.Winker.b Vulnerabilities & Exploits www.securitytracker.com: SurgeLDAP 'user.cgi' Directory Traversal Flaw Discloses Files to Remote Users. Read more www.securitytracker.com: TikiWiki Multiple Input Validation Holes Let Remote Users Inject SQL Commands, Conduct Cross-Site Scripting Attacks, and Upload Files. Read more www.vnunet.com: Spam reaches new heights. Read more www.petroleumworld.com: The Rise of Complex Terrorism. Read more News:

12 april 2004 New in Archive Recon 2.0 Che CGI Bot 1.0 Build 2 Transistor 1.2 (b) Guides, Papers, etc. www.enterpriseitplanet.com: An Hour with Kevin Mitnick. Read more www.enterpriseitplanet.com: An Hour with Kevin Mitnick, Part 2. Read more orchestra.webhostme.com: Self Reshaping Script Code In Textbox With Add-In Functionality. Read more razor.bindview.com: Comparing binaries with graph isomorphisms. Read more Vulnerabilities & Exploits www.securitytracker.com: X-Micro WLAN 11b Broadband Router Has Built-in Backdoor Administrator Account. Read more www.securiteam.com: McAfee FreeScan ActiveX Buffer Overflow and Information Disclosure. Read more www.securiteam.com: Panda ActiveScan Remote Buffer Overflow and DoS. Read more www.securiteam.com: Multiple Vulnerabilities in Monit. Read more www.securiteam.com: RSniff DoS. Read more News: www.overclockersclub.com: "News: Netsky Worm Variant Attacks P2P Services". Read more www.crime-research.org: Cyber Terrorism : The new kind of Terrorism. Read more www.fcw.com: Nowhere to hide. StealthWatch catches intruders even if they try to cover their tracks. Read more www.buffalonews.com: Online criminals are 'phishing' for your personal financial data. Read more www.vnunet.com: Bugwatch: Foiling phishers. Read more

11 april 2004 New in Archive Hotmail Hacker Log Edition 2.6 Hook universal plus Backdoor.Delf.ew Vulnerabilities & Exploits www.securitytracker.com: Scorched 3D Format String Flaw Lets Remote Users Crash the Server and May Permit Arbitrary Code Execution. Read more www.securitytracker.com: Open WebMail Input Validation Flaw Lets Remote Users Create Arbitrary Directories. Read more www.securitytracker.com: RSniff Connection State Error Lets Remote Users Deny Service. Read more www.securitytracker.com: Sun Cluster Race Condition Lets Remote Users Panic the Cluster. Read more www.securitytracker.com: Crackalaka IRC Server Can Be Crashed By Remote Users. Read more WINDOWS XP software restriction policy [path rule] bypass. Read more News: www.theregister.co.uk: NY Times hacker sentencing delayed. Read more www.theregister.co.uk: Germany moots jail for spammers. Read more www.gridtoday.com: New Marking Process Traces Spammers, Pirates And Hackers. Read more

10 april 2004 New in Archive NetCrack 1.3 beta 1.0 Cab of Filth 1.2b English Stealth Redirector 1.3 Vulnerabilities & Exploits www.securitytracker.com: FirstClass Client Buffer Overflow in Processing PROXYADDR Parameter Lets Local Users Execute Arbitrary Code. Read more www.securitytracker.com: LCDproc Format String and Buffer Overflows Let Remote Users Execute Arbitrary Code. Read more www.securitytracker.com: LCDproc Buffer Overflow in Processing Too Many Arguments Lets Remote Users Execute Arbitrary Code. Read more www.securitytracker.com: NukeCalendar Input Validation Holes Let Remote Users Inject SQL Commands and Conduct Cross-Site Scripting Attacks. Read more www.securitytracker.com: AzDGDatingLite Input Validation Flaw Lets Remote Users Conduct Cross-Site Scripting Attacks. Read more www.securitytracker.com: Cisco IPSec VPN Services Module IKE Bug Lets Remote Users Crash the Affected Switch/Router. Read more www.securitytracker.com: Sun Solaris sshd May Fail to Log SSH Client IP Addresses. Read more www.securiteam.com: REAL One Player R3T File Format Stack Overflow. Read more News: catless.ncl.ac.uk: Yet another version of the Beagle social engineering. Read more www.sundaytimes.co.za: Netsky.Q to launch Easter attack. Read more www.tmcnet.com: GeoTrust Warns Consumers of Rapidly Growing Internet/Web Scams Known as ``Phishing''. Read more www.searchenginejournal.com: Google GMail Targeted by Privacy and Civil Liberty Groups. Read more

09 april 2004 New in Archive Backdoor.Carufax.d Harvester2003 v01 servervb Iroffer 1.2b28 Iroffer 1.3b05 (1306.a) Tools The Metasploit Project. Read more Guides, Papers, etc. www.phrack.org: Phrack-62 call for papers. Read more Vulnerabilities & Exploits www.securitytracker.com: HP OpenView Operations/VantagePoint Authentication Flaw Grants Administrative Access to Remote Users. Read more www.securitytracker.com: Avaya Converged Communication Server Buffer Overflow in Processing SIP Packets Lets Remote Users Execute Arbitrary Code. Read more www.securitytracker.com: 1st Class Mail Server Input Validation Holes Disclose Files to Remote Users and Permit Cross-Site Scripting Attacks. Read more News: news.com.com: Plug-in flaw leaves RealPlayer users open to attack. Read more www.eweek.com: Security Alert: New Bagle.X Worm Variant Detected. Read more news.com.com: Security tool more harmful than helpful? Read more www.intego.com: Intego Announces Protection against the First Mac OS X Trojan Horse: MP3Concept. Read more www.pcworld.com: 'Homeless Hacker' Sentencing Delayed. Read more news.bbc.co.uk: Phishing con hijacks browser bar. Read more slashdot.org: Hidden Messages in Spam. Read more

08 april 2004 New in Archive Toquito Bandito 5h17 BlackCore 1.1 NeoControlRed 2.1.3 Iroffer 1.3b02 (1302.l) Vulnerabilities & Exploits www.securitytracker.com: Gentoo Portage Lockfile Flaw Lets Local Users Truncate Files. Read more www.securitytracker.com: Wireless LAN Solution Engine (WLSE) Hardcoded User Account Grants Full Access to Remote Users. Read more www.securitytracker.com: Cisco Hosting Solution Engine (HSE) Hardcoded User Account Grants Full Access to Remote Users. Read more www.securitytracker.com: KAME Racoon RSA Signature IKE Phase 1 Authentication Flaw Authenticates Remote Users. Read more www.securitytracker.com: GNU Sharutils Buffer Overflow in 'shar' Lets Users Execute Arbitrary Code. Read more www.securitytracker.com: Microsoft Internet Explorer Security Domain Flaw in Accessing CHM Files Lets Remote Users Execute Arbitrary Code. Read more www.securitytracker.com: Intel Server Setup Utilities May Let Remote Users Access Motherboard Utility Functions. Read more www.securitytracker.com: Panda ActiveScan 'ascontrol.dll' Buffer Overflow Lets Remote Users Execute Arbitrary Code. Read more www.securitytracker.com: F-Secure Anti-Virus for MIMEsweeper Fails to Detect Sober.D Worm. Read more www.securitytracker.com: McAfee FreeScan ActiveX Control Buffer Overflow Lets Remote Users Execute Arbitrary Code. Read more www.securitytracker.com: Symantec Security Check ActiveX Buffer Overflow in GetPrivateProfileString() Lets Remote Users Execute Arbitrary Code. Read more www.securitytracker.com: blaxxun3D Scripting Object Buffer Overflow Lets Remote Users Execute Arbitrary Code. Read more www.securitytracker.com: RealOne/RealPlayer Buffer Overflow in Processing R3T Files Lets Remote Users Execute Arbitrary Code. Read more www.securitytracker.com: Apple Mac OS X Mail Has Unspecified Flaw in Processing HTML E-mail. Read more www.securitytracker.com: Apple Mac OS X CUPS Configuration Flaw Has Unspecified Impact. Read more www.securitytracker.com: F-Secure BackWeb (for AntiVirus) Lets Local Users Gain SYSTEM Privileges. Read more www.securitytracker.com: Adobe Photoshop Remote COM Scripting Objects Let Remote Users Deny Service. Read more www.securitytracker.com: Macromedia Flash Null Pointer Assignment in LoadMovie() Lets Remote Users Deny Service. Read more www.securitytracker.com: Microsoft Windows XP 'mswebdvd.dll' Buffer Overflow Lets Remote Users Deny Service. Read more www.cisco.com: Cisco Security Advisory: A Default Username and Password in WLSE and HSE Devices. Read more News: www.theregister.co.uk: KaZaA and eDonkey brace for NetSky-Q onslaught. Read more www.theregister.co.uk: Witty extinction. Read more www.securityfocus.com: Tracking the blackout bug. Read more www.theregister.co.uk: Japanese finger virus for police document leak. Read more www.guardian.co.uk: Locking out viruses. Read more www.crime-research.org: Maxim Kovalchuck wil be out on bail. Read more www.baltimoresun.com: 'Phishing' hooks many a Net surfer. Read more www.globetechnology.com: Growing acceptance of Linux has dark side. Read more www.guardian.co.uk: There's only one thing scarier than a computer virus and that's anti-virus software. Read more www.pitch.com: The Spammer Next Door. Read more

07 april 2004 New in Archive SuperStar 1.0 Remote Dark Trojan 1.0 Iroffer 1.3b05 (1306.d) Iroffer 1.3b05 (1306.e) Iroffer 1.3b05 (1306.f) Vulnerabilities & Exploits www.securitytracker.com: SuSE YaST 'online_update' Temporary File Symlink Flaw Lets Local Users Gain Elevated Privileges. Read more www.securitytracker.com: IGI-2 Covert Strike Game Format String Flaw Lets Remote Users Execute Arbitrary Code. Read more www.securitytracker.com: Microsoft SharePoint Portal Server Input Validation Holes Permit Cross-Site Scripting Attacks. Read more www.securitytracker.com: IBM Director Agent Can Be Crashed By Remote Users. Read more www.securitytracker.com: ActivePerl win32_stat() Buffer Overflow May Let Users Execute Arbitrary Code. Read more www.securitytracker.com: Perl win32_stat() Buffer Overflow May Let Users Execute Arbitrary Code. Read more www.securitytracker.com: Monit Errors in Basic Authentication on the Administration Interface Let Remote Users Execute Arbitrary Code. Read more www.securitytracker.com: TeXUtil Temporary File Symlink Flaw May Let Local Users Gain Elevated Privileges. Read more www.securitytracker.com: Winamp Fasttracker 2 File 'in_mod.dll' Heap Overflow Lets Remote Users Execute Arbitrary Code. Read more www.securitytracker.com: Citrix MetaFrame Password Manager May Disclose Passwords to Local Users. Read more www.uniras.gov.uk: Vulnerability in Internet Explorer. Read more www.debian.org: DSA-477-1 xine-ui -- insecure temporary file creation. Read more www.debian.org: DSA-476-1 heimdal -- cross-realm. Read more News: www.theregister.co.uk: The Joe Job DoS attack. Read more www.crime-research.org: $2M from nothing. Read more www.infoworld.com: New Netsky worms change their stripes. Read more www.techworld.com: Windows to remain security risk for years to come. Read more www.net4nowt.com: There�s something Phishy going on around here. Read more www.informationweek.com: Bugbear's Back. Read more www.techweb.com: New Bugbear Worm Exploits Unpatched IE Vulnerability. Read more April

05 april 2004 New in Archive Intruzzo 1.1 client Tiny RAT Hook universal Iroffer 1.3b05 (k) Vulnerabilities & Exploits www.securitytracker.com: FTE Command Line and Environment Variable Buffer Overflows May Let Local Users Gain Elevated Privileges. Read more www.securitytracker.com: Aborior Encore Web Forum Input Validation Flaw in 'display.cgi' Lets Remote Users Execute Arbitrary Commands. Read more www.securitytracker.com: eMule DecodeBase16() Stack Overflow Lets Remote Users Execute Arbitrary Code. Read more News: www.crime-research.org: The price for security. Read more www.abc.net.au: Keystroke trackers target Internet banking. Read more mdn.mainichi.co.jp: Hackers have some balls to pooh-pooh Winny. Read more reviews-zdnet.com.co: Why I'm not sending you viruses. Read more www.bizjournals.com: 'Worm' cripples C I Host servers. Read more australianit.news.com.au: Virus alerts explode. Read more www.ameinfo.com: Incidents of 'Phishing' or Internet scams involving theft of financial information on the rise. Read more www.theinquirer.net: Windows Server security claims hammered. Read more www.rutlandherald.com: E-mail scams are getting more sophisticated. Read more

04 april 2004 New in Archive NeoControlRed 2.0.2 NeoControlRed 2.1.1 Backdoor.Dumador.f Guides, Papers, etc. www.linuxexposed.com: IP Spoofing: Understanding the basics. Read more Vulnerabilities & Exploits www.securitytracker.com: Macromedia Dreamweaver Test Scripts Disclose DSNs to Remote Users and May Permit SQL Injection. Read more www.securitytracker.com: Heimdal Kerberos Cross-Realm Validation Flaw May Permit User Impersonation. Read more www.securitytracker.com: Interchange Commerce System Discloses SQL Access Information to Remote Users. Read more www.securitytracker.com: HAHTsite Scenario Server Project Name Buffer Overflow Lets Remote Users Execute Arbitrary Code. Read more www.securitytracker.com: MondoSearch 'MsmChgPw.msk' Discloses Valid Administrator Account Names to Remote Users. Read more www.securitytracker.com: MondoSearch 'MsmHigh.exe' Can By Used As a Web Proxy By Remote Users. Read more www.securitytracker.com: MondoSearch 'MsmHigh.exe' and 'MsmLink.exe' Memory Consumption Lets Remote Users Deny Service. Read more News: www.technewsworld.com: The Myth of the Secure Operating System. Read more news.com.com: MSBlast epidemic far larger than believed. Read more www.theregister.co.uk: Google mail is evil - privacy advocates. Read more

03 april 2004 New in Archive System33r Stealth Downloader 0.7.3b (LITE) Iroffer 1.3b04 (1305.h) Iroffer 1.3b04 (1305.i) Cab of Filth 1.2f (h) Vulnerabilities & Exploits www.securitytracker.com: FTGatePro 'Display Name' Input Validation Flaw Permits Cross-Site Scripting Attacks. Read more www.securitytracker.com: Mollensoft FTP Server STOR Command Buffer Overflow Lets Remote Authenticated Users Execute Arbitrary Code. Read more www.debian.or: DSA-471-1 interchange -- missing input sanitising. Read more www.debian.or: DSA-470-1 linux-kernel-2.4.17-hppa -- several vulnerabilities. Read more News: zdnet.com.com: MSBlast epidemic far larger than believed. Read more www.crime-research.org: Computer & Internet Crime 2004. read more www.crime-research.org: Ukrainian system of criminal investigation in the action. Read more thewhir.com: C I Host Replaces BlackIce Firewall. Read more www3.gartner.com: Hacker's 'Toolkit' Shows Security Flaws Not Just in Software. Read more www.antiphishing.org: Paypal - "Please, update your Paypal account". Read more www.sophos.com: Sophos white paper describes how spammers disguise their emails as non-delivery reports. Read more

02 april 2004 New in Archive KaoTan 1.0 MoUsSa's Noobies Trojan 1.0 Vulnerabilities & Exploits OpenLDAP back-ldbm Initialization Error May Let Remote Users Crash the Server. Read more ImgSvr Web Interface Discloses Directory Listings and Files to Remote Users. Read more madBMS Authentication Flaw May Yield Access to Remote Users. Read more Clam AntiVirus Unsafe VirusEvent Directive May Let Local Users Gain Root Privileges. Read more cdp Song Name Buffer Overflow May Execute Arbitrary Code When a Malicious CD is Played. Read more Oracle Single Sign-On Customized Login Page Feature Lets Remote Users Obtain a Target User's Credentials. Read more Microsoft Internet Explorer Does Not Correctly Display Links With Embedded FORM Data. Read more Microsoft Outlook Express Does Not Correctly Display Links With Embedded FORM Data. Read more CactuShop Input Validation Holes in 'mailorder.asp' and 'payonline.asp' Let Remote Users Inject SQL Commands and Execute Operating System Commands. Read more PHPKIT Input Validation Holes in Forum Section Permits Cross-Site Scripting Attacks. Read more News: www.channelnewsasia.com: New 'Bagle' Internet virus spreading fast: experts. Read more www.smh.com.au: Netsky, Bagle worms top malware charts. Read more www.theregister.co.uk: Netsky tops virus charts by a country mile. Read more www.theregister.co.uk: Tech heavyweights explain how to destroy the Internet. Read more www.theregister.co.uk: Bug hunters go open source. Read more

Copyright� MegaSecurity.org