Bookmark or link to: www.kobayashi.cjb.net. All other url`s could change!

News Archive    Translate Traducen    Home

News May 20002

31 May 2002 New trojans: EasyServ 1.1 Aphex's WebDownloader 0.2.0 Silent Spy 2.0 News: www.dataspy.net: Packing and Encryption. Read more www.securiteam.com: SQL Injection Walkthrough. Read more online.securityfocus.com: Macromedia JRun Host Header Field Buffer Overflow Vulnerability. Read more online.securityfocus.com: Caldera OpenServer SCOAdmin Symbolic Link Vulnerability. Read more online.securityfocus.com: FreeBSD Accept Filter Denial of Service Vulnerability. Read more online.securityfocus.com: phpTest Test Result Disclosure Vulnerability. Read more online.securityfocus.com: Image Display System Directory Existence Disclosure Vulnerability. Read more online.securityfocus.com: Charities.Cron Insecure Temporary File Creation Vulnerability. Read more www.securitytracker.com: 'Autorun' Utility for Xandros Desktop Linux Beta Discloses a Portion of Any File to Local Users. Read more www.securitytracker.com: Image Display System (IDS) CGI Script Discloses Information About Existing Directories to Remote Users. Read more www.securitytracker.com: Meteor FTP Server Command Processing Bug Lets Remote Authenticated Users Crash the Server. Read more www.securitytracker.com: DataWizard FtpQX Server Buffer Overflow Lets Remote Authenticated Users Crash the Service. Read more www.securitytracker.com: OpenSSH 'BSD_AUTH' Access Control Bug May Allow Unauthorized Remote Users to Authenticated to the System. Read more www.securitytracker.com: WoltLab Burning Board Forum Lets Remote Users Hijack Newly Assigned User Accounts. Read more www.securitytracker.com: Tomcat Multiple Directory Listing and Webroot Location Vulnerabilities. Read more www.computeruser.com: Carnivore responsible for terrorist e-mail mishaps - FBI. Read more www.atnewyork.com: 'Critical' Exploit Detected in Exchange 2000. Read more koreaherald.co.kr: Panel to set up information center to prevent hacking, cyber terrorism. Read more europe.cnn.com: Japan space hackers nabbed for spying. Read more www.ecommercetimes.com: Intrusion Detection: Running a Hacker Simulation. Read more www.newsfactor.com: Hackers V. Colleges: Security Bolstered for University Computer Systems. Read more www.computeruser.com: News sites tackle e-mail 'subversion' security holes. Read more

30 May 2002 New trojans: Aphex's Remote Packet Sniffer 0.1.2 AntiLamer Backdoor 1.4 Net Advance 3.1.0 News: Microsoft Security Bulletin MS02-025 Malformed Mail Attribute can Cause Exchange 2000 to Exhaust CPU Resources (Q320436). Read more NGSSoftware Insight Security Research Advisory Macromedia JRun 3.1 Remote System Buffer Overrun. Read more ProCheckUp Security Bulletin PR02-12 Gafware's CFXImage showtemp program file reading vulnerability. Read more www.ethereal.com: Potential issues with Ethereal 0.9.3. Read more online.securityfocus.com: FileZilla FTP Server Directory Traversal Vulnerability. Read more online.securityfocus.com: Virtual Programming VP-ASP SQL Injection Vulnerability. Read more online.securityfocus.com: Virtual Programming VP-ASP Test Page Information Disclosure Vulnerability. Read more online.securityfocus.com: Oracle Application Server PL/SQL Module Format String Vulnerability. Read more online.securityfocus.com: Oracle TNSListener Remote Buffer Overflow Vulnerability. Read more online.securityfocus.com: Microsoft Active Data Objects Buffer Overflow Vulnerability. Read more online.securityfocus.com: Microsoft SQL Server 2000 Multiple Vulnerabilities. Read more online.securityfocus.com: Microsoft IIS 5.0 Denial Of Service Vulnerability. Read more online.securityfocus.com: Microsoft Windows 2000 Remote Access Service Buffer Overflow Vulnerability. Read more online.securityfocus.com: Microsoft IIS HTR ISAPI Extension Heap Overflow Vulnerability. Read more www.securitytracker.com: Yahoo! Messenger Buffer Overflows and Scripting Flaws Let Remote Users Execute Arbitrary Code on Another User's Messenger Client. Read more www.securitytracker.com: 3Com OfficeConnect DSL Router Address Translation Hole Lets Remote UsersGain Unauthorized Access to Ports on Hosts Behind the Router. Read more www.securitytracker.com: Opera Web Browser Allows Malicious Servers to Silently Retrive Files from the Victim's System. Read more www.securitytracker.com: NetScreen Firewall Can Be Made to Reboot By Remote Users That Send Long Usernames to the Device's Login Screen. Read more www.securitytracker.com: Virtual Programming's VP-ASP Shopping Cart Default Configuration May Disclose Internal Database (Including Credit Card Data) to Remote Users. Read more www.securitytracker.com: BlueFace's Falcon Web Server Lets Remote Users Access Password-Protected Files. Read more www.securiteam.com: Remote Exploit for UW-IMAPd Capability (IMAP4). Read more www.securiteam.com: Gafware's CFXImage Showtemp Program File Reading Vulnerability. Read more www.securiteam.com: Malformed Mail Attribute Causes Exchange 2000 to Exhaust CPU Resources. Read more www.securiteam.com: Macromedia JRUN Buffer Overflow Vulnerability (ISAPI DLL). Read more www.smh.com.au: FBI's Carnivore system disrupted anti-terror investigation. Read more www.newsfactor.com: Newest IT Job Title: Chief Hacking Officer. Read more www.cnet.com: Hacker breaks into electronics site. Read more www.zdnet.com: Instant messaging: The next hacker target. Read more news.com.com: Microsoft Exchange hole "critical". Read more www.newsday.com: Glitch Exposes Fidelity Accounts. Read more www.newsbytes.com: Klez Infection Persists - Anti-Virus Companies. Read more zdnet.com.com: Hacker attacks TheNerds.net. Read more

29 May 2002 New trojans: DS Web Downloader 3.0 AutoSpY 1.3 NetGrisch News: online.securityfocus.com: BlueFace Falcon Web Server File Disclosure Vulnerability. Read more online.securityfocus.com: Opera Arbitrary File Disclosure Vulnerability. Read more online.securityfocus.com: AMANDA amindexd Remote Buffer Overflow Vulnerability. Read more online.securityfocus.com: Yahoo! Messenger Call Center Buffer Overflow Vulnerability. Read more online.securityfocus.com: Yahoo! Instant Messenger Script Injection Vulnerability. Read more www.securiteam.com: YoungZSoft CMailServer Buffer Overflow. Read more www.securiteam.com: WFTPD Directory Traversal Vulnerability (CWD). Read more www.securiteam.com: Meteor FTP Denial of Service (MKD, STOR). Read more www.securiteam.com: TransSoft's Broker FTP Server DoS (CWD). Read more www.securiteam.com: FtpXQ MKD Buffer Overflow. Read more www.securiteam.com: phpBB Cross Site Scripting Vulnerability. Read more www.securiteam.com: WBBoard New User Registration Vulnerability. Read more www.computing.vnunet.com: Yahoo bug on the rampage. Read more www.computing.vnunet.com: Klez variant crowned virus king. Read more arstechnica.infopop.net: Worm.Klez, and false senders. Read more www.nzherald.co.nz: Klez.H 'spoofing worm' infects one in 170 emails. Read more www.idg.net: Worms Crawl Toward Instant Messaging. Read more www.techfocus.org: XML hole takes advantage of Excel, opens door to crackers. Read more www.eweek.com: Assessment Is Charney's Job One. Read more www.computing.vnunet.com: Kimble 'hacker' fined �100,000. Read more www.bayinsider.com: Terror Issues Raise Surveillance Concerns. Read more www.newscientist.com: Anti-snooping operating system close to launch. Read more www.sfgate.com: Wired and worried. Read more

28 May 2002 New trojans: SpySender 0.88i client Ricta 1.0 DTR 1.3 News: GreyMagic Security Advisory GM#001-OP Reading ANY local file in Opera. Read more online.securityfocus.com: CVS Daemon RCS Off By One Local Buffer Overflow Vulnerability. Read more online.securityfocus.com: IRSSI Trojaned Configure File Arbitrary Access Vulnerability. Read more online.securityfocus.com: Trend Micro Interscan Viruswall SMTP Header Removal Vulnerability. Read more www.securitytracker.com: Mailman E-mail Discussion List Software Allows Remote Users to Conduct Cross-Site Scripting Attacks. Read more www.securitytracker.com: Concurrent Versions System (CVS) Off-by-one Buffer Overflow May Let Local Users Execute Arbitrary Code to Gain Elevated Privileges. Read more www.securitytracker.com: PGP Public Key Server Buffer Overflow Lets Remote Users Crash the Service. Read more www.securitytracker.com: IRSSI IRC Client for UNIX May Contain a Backdoor in a Certain Version of the Source Code Distribution. Read more www.securiteam.com: NetScreen 25 Unauthorized User Reboot (DoS). Read more www.securiteam.com: Yahoo Messenger - Multiple Vulnerabilities. Read more www.securiteam.com: VP-ASP Multiple Security Vulnerabilities. Read more www.securiteam.com: Vulnerability in 3Com OfficeConnect Remote 812 ADSL Router (PAT). Read more www.securiteam.com: AMANDA Security Issues. Read more www.securiteam.com: COWS Contains Multiple Security Vulnerabilities. Read more online.securityfocus.com: Klez-H is the worst virus ever - official. Read more news.zdnet.co.uk: Excel hole opens PCs to hackers. Read more www.japantimes.co.jp: Hacker hits Kommy customer files. Read more www.lendingintelligence.com: Experian, Ford Still Unsure How Hacker Stole 13,000 Credit Reports. Read more www.timesonline.co.uk: Internet security breaches threaten e-trade potential. Read more www.businessweek.com: An Education in Hacking. Read more www.businesstoday.com: Hackers go wireless with greatest of ease. Read more www.nationalpost.com: Tracking Mafiaboy. Read more

27 May 2002 New trojans: Avone 2 Osiris v2 Aphex WebDownloader 0.1.2 News: www.securityoffice.net: Falcon Web Server Unauthorized File Disclosure Vulnerability. Read more www.sendmail.org: File Locking Local Denial of Service Impact on sendmail. Read more www.cgisecurity.net: Header Based Exploitation: Web Statistical Software Threats. Read more www.securiteam.com: ATA-186 Password Disclosure Vulnerability. Read more www.securiteam.com: CBOS - Improving Resilience to Denial-of-Service Attacks. Read more www.securiteam.com: TrendMicro Interscan VirusWall Insecurity "Feature". Read more www.securiteam.com: Microsoft Active Directory Security Vulnerability (Zero Length). Read more www.securiteam.com: LocalWeb2000 Web Server Protected File Access Vulnerability. Read more www.securiteam.com: Irssi IRC Found to Contain a Backdoor. Read more www.securiteam.com: Local Off By One Overflow in CVSd. Read more www.securiteam.com: Gridscan.com Security-risk. Read more www.securiteam.com: PGP Public Key Server DoS and Remote Code Execution. Read more www.securitytracker.com: TightVNC Virtual Network Computing Software May Disclose Passwords to Local Users and May Allow Remote Users to Crash the Server. Read more www.securitytracker.com: Microsoft Excel Spreadsheet XML Stylesheet ActiveX Object Flaw Lets Remote Users Create Malicious Excel Spreadsheets That May Execute Arbitrary Code When Opened With the XML Stylesheet Option. Read more www.securitytracker.com: Cisco Intrusion Detection System (IDS) Device Manager Bug in Web Access Feature Lets Remote Users View Files on the Sensors. Read more www.securitytracker.com: Microsoft Active Directory May Have Bug That Allows Remote Users to Crash the Directory. Read more www.securitytracker.com: Sendmail Default File Permissions and Configuration Allows Local Users to Deny Service to Sendmail. Read more www.securitytracker.com: Debian 'netstd' Utility Package Has Several Components With Buffer Overflows That Allow Remote Users to Execute Arbitrary Code on the System. Read more www.securitytracker.com: LocalWEB2000 Web Server Discloses Password-Protected Files to Remote Users. Read more www.securitytracker.com: Pharao Web Portal Software Has Multiple Flaws That Allow Remote Users to Access the System as Any User and to Read Files on the Server. Read more techupdate.zdnet.co.uk: Grey WLANs and web services top security risks. Read more www.it-director.com: World Cup viruses poised to strike. Read more

26 May 2002 New trojans: HellzAddiction 1.15 server Deves Enculator 0.1 Enculator 1.0 server. Enculator 1.0 is now also complete. Tool: qb0x.net: boegADT is a UNIX based library for make easy to write buffer overflow exploits. The intention of this library is to make possible that anyone can write an exploit without knowledge of the techniques. Read more News: www.hert.org: The Frame Pointer Overwrite. Read more online.securityfocus.com: Debian GNU/Linux netstd Multiple Buffer Overflow Vulnerabilities. Read more online.securityfocus.com: ViewCVS Cross-Site Scripting Vulnerability. Read more online.securityfocus.com: IBM DB2 db2ckpw Buffer Overflow Vulnerability. Read more online.securityfocus.com: LocalWEB2000 File Disclosure Vulnerability. Read more online.securityfocus.com: Microsoft Excel 2002 XML Stylesheet Arbitrary Code Execution Vulnerability. Read more online.securityfocus.com: Ethereal Server Message Block Dissector Malformed Packet Denial Of Service Vulnerability. Read more online.securityfocus.com: Cisco CBOS Telnet Denial of Service Vulnerability. Read more online.securityfocus.com: Cisco Broadband Operating System TCP/IP Stack Denial of Service Vulnerability. Read more online.securityfocus.com: Cisco CBOS Oversized Packet DHCP Denial Of Service Vulnerability. Read more www.securitytracker.com: Cisco Broadband Operating System (CBOS) for Cisco 600 Series DSL Routers Lets Remote Users Crash the Routers. Read more www.securitytracker.com: User-Mode Linux (UML) Environment System Call Breakpoint Bug Lets Local Users Execute System Calls on the Host (Outside of the UML Environment). Read more www.securitytracker.com: Microsoft Date Engine (MSDE) Default Configuration Leaves Blank Password for System Administrator Account. Read more www.nandotimes.com: Hackers obtain California employee data. Read more www.sfgate.com: Hackers gain entry to key state database. Personnel files were breached last month for 265,000 workers. Read more computerworld.com: Secret Service warns of Afghanistan e-mail scam. Read more

25 May 2002 New trojans: Arcanum 0.1.1 AutoSpY 1.2 Fearless Webdownloader 1.1 News: Georgi Guninski security advisory #55, 2002 Excel XP xml stylesheet problems. Read more online.securityfocus.com: OpenBSD sshd BSD Authentication Implementation Error Vulnerability. Read more online.securityfocus.com: Microsoft Active Directory Zero Page Length Query Vulnerability. Read more online.securityfocus.com: NewAtlanta ServletExec/ISAPI JSPServlet Denial Of Service Vulnerability. Read more online.securityfocus.com: Cisco VoIP Phone Web Interface System Memory Contents Information Leakage Vulnerability. Read more online.securityfocus.com: Cisco VoIP Phone Default Administrative Password Vulnerability. Read more www.securitytracker.com: Opty-Way Enterprise Glassworks Management Application Installs Microsoft Data Engine Insecurely, Allowing Remote Users to Execute Commands on the System. Read more www.securitytracker.com: Compaq Integrated Administrator for Compaq ProLiant Server Blade Enclosure May Allow Authenticated Remote Users to Gain Full Access to the Enclosure Operating System. Read more www.securitytracker.com: Microsoft Windows Debugging Facility for Windows NT4 and 2000 Has Authentication Hole That Lets Local Users Execute Arbitrary Code with SYSTEM Privileges. Read more www.securitytracker.com: Cisco IP Phones Allow Remote Users to Cause the Phone to Crash and Restart and Allow Physically Local Users to Modify the Telephone's Configuration. Read more www.securitytracker.com: MatuSoft's MatuFtpServer Buffer Overflow Lets Remote Users Crash the Server or Possibly Execute Arbitrary Code on the Server. Read more www.securitytracker.com: New Atlanta Communications ServletExec/ISAPI Java Server Can Be Crashed By Remote Users and Discloses the Directory Path and Files in the Web Root Directory to Remote Users. Read more www.computing.vnunet.com: Make way for the uber worm. Read more www.esecurityplanet.com: Microsoft Battles Debugger Flaw, SQL Worm. Read more www.internetnews.com: World Gets Caught In Wormy Situation. Read more www.net4nowt.com: Beware Of World Cup Viruses, Say Experts. Read more www.varbusiness.com: So You've Been Hacked... Now What? Read more www.nandotimes.com: Hackers access information on California state employees. Read more www.computing.vnunet.com: Chinese crackers prepare for cyber war. Read more

24 May 2002 New trojans: AntiLamer Backdoor 1.3 TruvaAti 1.2b YAI News: www.cisco.com: Cisco Security Advisory: ATA-186 Password Disclosure Vulnerability. Read more www.ngsec.com: Solaris in.talkd, remote root compromise. Read more online.securityfocus.com: Sun Solaris In.Rarpd Multiple Vulnerabilities. Read more online.securityfocus.com: Matu FTP Server Buffer Overflow Vulnerability. Read more www.securiteam.com: Multiple Vulnerabilities in CISCO VoIP Phones (Additional details). Read more www.securiteam.com: Opty-Way Enterprise Includes MSDE with Blank 'sa' Account. Read more www.securiteam.com: Authentication Flaw in Windows Debugger can lead to Elevated Privileges. Read more www.securiteam.com: Multiple Vulnerabilities in Solaris in.rarpd. Read more www.securitytracker.com: YoungZSoft CMail Server Buffer Overflow Allows Remote Users to Execute Arbitrary Code to Gain Shell Access on the System. Read more www.securitytracker.com: IBM DB2 Database Buffer Overflow in 'db2ckpw' Lets Local Users Gain Root Access on the System. Read more www.securitytracker.com: Sun Solaris 'in.rarpd' Reverse ARP Protocol Daemon May Let Local and Remote Users Gain Root Access on the System. Read more www.securitytracker.com: Deerfield WebSite Pro Windows-based Web Server May Disclose CGI Source Code to Remote Users in Certain Cases. Read more www.securitytracker.com: Ethereal Network Sniffer Has Multiple Bugs That May Allow Remote Users to Send Packets to Execute Arbitrary Code or Cause the Sniffer to Hang or Crash. Read more www.securitytracker.com: Fetchmail Client Buffer Overflow May Allow a Remote Mail Server to Execute Arbitrary Code on the Client System. Read more www.securitytracker.com: Cisco IOS Can Be Crashed By Remote Users Sending ICMP Redirect Messages. Read more www.securitytracker.com: SSH May Allow Authorized Remote Users to Bypass Server Authentication Configuration Settings and Login Using Passwords When the Server is Configured to Prohibit the Use of Passwords. Read more www.securitytracker.com: Talkd Format String Hole Lets Remote Users Execute Arbitrary Code on the System. Read more www.vnunet.com: Klez worm hits US State Department. Read more www.vnunet.com: SQL server hacks send out more attacks. Read more www.vnunet.com: IT crime still going unreported. Read more www.astalavista.com: Virus Prediction Text. Read more news.com.com: Microsoft warns of new debugger flaw. Read more online.securityfocus.com: Navy Domain Hijacked By German Pornography Site. Read more www.vnunet.com: Bug Watch: No such thing as absolute security. Read more

23 May 2002 New trojans: ILL-Eagle 1.0 DS Web Downloader 2.0 Peeper 1.2 News: Microsoft Security Bulletin MS02-024 Authentication Flaw in Windows Debugger can Lead to Elevated Privileges (Q320206). Read more online.securityfocus.com: Sun AnswerBook2 Gettransbitmap Buffer Overflow Vulnerability. Read more online.securityfocus.com: Stronghold Secure Server Path Information Disclosure Vulnerability. Read more online.securityfocus.com: Ipswitch IMail Server LDAP Buffer Overflow Vulnerability. Read more online.securityfocus.com: bzip2 Archive Inherited Symbolic Link Permissions Vulnerability. Read more online.securityfocus.com: bzip2 Insecure Decompressed File Permissions Vulnerability. Read more online.securityfocus.com: bzip2 Decompression File Overwrite Vulnerability. Read more online.securityfocus.com: FreeBSD k5su Wheel Group Membership Validation Vulnerability. Read more online.securityfocus.com: Nullsoft Winamp Plaintext Authentication Credentials Vulnerability. Read more www.securiteam.com: Multiple Vulnerabilities in Cisco IP Telephones. Read more www.securiteam.com: Cisco IOS ICMP Redirect DoS. Read more www.securiteam.com: Multiple vulnerabilities in New Atlanta ServletExec ISAPI. Read more www.securiteam.com: MatuFtpServer Remote Buffer Overflow and DoS. Read more www.securiteam.com: WebSite Pro Vulnerable to Source Code Disclosure (8.3 Name Format). Read more www.securitytracker.com: mcNews Forum Software Has Several Bugs That Disclose Files to Remote Users and Allow Remote Users to Conduct Cross-Site Scripting Attacks Against mcNews Users. Read more www.securitytracker.com: Red Hat Stronghold Secure Web Server Sample Script ('swish') Discloses Installation Path to Remote Users. Reading more www.securitytracker.com: Xitami Web Server Flaw in Processing Errors May Allow Remote Users to View CGI Source Code. Read more www.securitytracker.com: Winamp Media Player May Disclose Certain User Passwords to Local Users. Read more www.securitytracker.com: BannerWheel CGI-based Banner Display Management Software Buffer Overflows May Let Remote Users Execute Arbitrary Code Via the Management Interface. Read more www.securitytracker.com: Sun AnswerBook2 'gettransbitmap' Buffer Overflow Lets Remote Users Execute Arbitrary Code. Read more www.securitytracker.com: Ipswitch's IMail Server Buffer Overflow in LDAP Service Lets Remote Users Execute Arbitrary Code with SYSTEM Level Privileges. Read more www.securitytracker.com: 'bzip2' File Compression Utility May Allow Local Users to Be Able to Read the Contents of Privileged Files. Read more www.securitytracker.com: K5su Kerberos-based Set Userid ('su') Utility for FreeBSD Fails to Limit Access to Only 'wheel' Group Users. Read more www.wired.com: The Beauty and Grace of a Worm. Read more online.securityfocus.com: The Viral Mind: Understanding the Motives of Malicious Coders. Read more www.newsfactor.com: SQL Server Worm: Just the Beginning. Read more zdnet.com.com: MS SQL server worm: Gone fishing? Read more news.bbc.co.uk: Waging war on computer viruses. Read more quote.bloomberg.com: Security Hole Found in PCs From Sony, Others, Mainichi Says. Read more www.thestar.com: Online privacy firm offers `bug bounty'. Read more www.bergen.com: Two face charges of cyber extortion. Read more zdnet.com.com: Microsoft digs own grave of mistrust. Read more

22 May 2002 New trojans: HoaVeLu Wollf 1.4 9_119 Tool: sourceforge.net: New version (1.2.3) of NMapWin released. Read more News: www.idefense.com: Evolution of Cross-Site Scripting Attacks. Read more archives.neohapsis.com: OpenBSD local DoS and root exploit. Read more www.iss.net: Microsoft SQL Spida Worm Propagation. Read more online.securityfocus.com: MacOS X Sliplogin Buffer Overflow Vulnerability. Read more www.securiteam.com: Plain Text Password Vulnerability in Winamp. Read more www.securiteam.com: Buffer Overflow in Ipswitch IMail (LDAP). Read more www.securiteam.com: Sun AnswerBook2 Gettransbitmap Buffer Overflow Vulnerability. Read more www.securiteam.com: Stronghold Secure Webserver Sample Script Path Disclosure Vulnerability. Read more www.securitytracker.com: ViewCVS Web-based CVS Interface Allows Cross-Site Scripting Attacks Against ViewCVS Users. Read more www.msnbc.com: Computer Lessons for Terrorists. Read more www.computeruser.com: 'SQLsnake' worm blamed for spike in port 1433 scans. Read more www.newsbytes.com: Its Creator Says Kazaa Benjamin Worm Means Well. Read more www.smh.com.au: New worm spreads via Microsoft SQL Servers. Read more cryptome.org: Meet Bruce McIndoe, lead architect for Echelon II, the 'most productive intelligence program' in history. Read more digitalmass.boston.com: Hundreds of law enforcement, media outlets receive computer virus from forged State Department e-mail address. Read more www.ddj.com: Security In Web Services: An Evolving Threat Model. Read more www.linuxsecurity.com: PortSentry for Attack Detection, Part One. Read more www.nandotimes.com: Computer virus attacks law enforcement, media. Read more www.business.scotsman.com: The price of security is less than the cost of its absence. Read more

21 May 2002 New trojans: Nerte 7.8.1 CANCER 1.0 AutoSpY 1.1 News: www.cgisecurity.com Frequently asked questions in relation to Cross Site Scripting Attacks. Read more www.securityoffice.net: Stronghold Secure Webserver Path Disclosure Vulnerability. Read more online.securityfocus.com: MacOS X Sliplogin Buffer Overflow Vulnerability. Read more online.securityfocus.com: FreeBSD Process Concealment Bypass Vulnerability. Read more online.securityfocus.com: Cisco IDS Device Manager Arbitrary File Read Access Vulnerability. Read more online.securityfocus.com: GRSecurity Linux Kernel Memory Protection Weakness. Read more online.securityfocus.com: Xerox DocuTech Scanner Insecure Default Configuration Vulnerability. Read more online.securityfocus.com: SonicWall SOHO3 Content Blocking Script Injection Vulnerability. Read more online.securityfocus.com: Hosting Controller DSNManager Directory Traversal Vulnerability. Read more online.securityfocus.com: CGIScript.net Information Disclosure Vulnerability. Read more online.securityfocus.com: Hosting Controller Import Root Directory Command Execution Vulnerability. Read more online.securityfocus.com: Cybercenter fills security niche. Read more www.computeruser.com: Worm infiltrates Kazaa file-swapping network. Read more www.idg.net: Worm Targets Kazaa Users. Read more news.com.au: Hacker losses rocket. Read more news.zdnet.co.uk: Hackers siphon Ford credit records. Read more atimes.com: Alert issued for China's next cyber attack. Read more www.businessweek.com: A Hacker Whodunit at Vivendi. Read more

20 May 2002 New trojans: QwErTos RAT 0.2 Sneak Server ZSpyII 0.99beta News: online.securityfocus.com: SonicWall SOHO3 Content Blocking Script Injection Vulnerability. Read more online.securityfocus.com: Hosting Controller DSNManager Directory Traversal Vulnerability. Read more online.securityfocus.com: CGIScript.net Information Disclosure Vulnerability. Read more online.securityfocus.com: Hosting Controller Import Root Directory Command Execution Vulnerability. Read more online.securityfocus.com: Xerox DocuTech Printer Weak Default Configuration Vulnerability. Read more www.securiteam.com: Xitami CGI Processing Failure Vulnerability. Read more www.securiteam.com: More than Fourteen CGIscript.net Scripts Have Path Disclosure Vulnerability. Read more www.securiteam.com: ViewCVS's Cross-site Scripting Bug. Read more www.securitytracker.com: Xerox DocuTech Publishing System Has Insecure Default Configuration for the System Controllers, Letting Remote Users Take Full Control of the System. Read more www.securitytracker.com: Multiple CGI Scripts From CGIScript.net Disclose the Installation Path to Remote Users. Read more www.securitytracker.com: Phorum Bulletin Board Software Has PHP Include Bug in 'plugin.php' Lets Remote Users Execute Arbitrary PHP Code and Shell Commands on the Server. Read more www.securitytracker.com: Quake II Game Server May Disclose Sensitive Information, Including Passwords, to Remote Users. Read more www.securitytracker.com: Swatch Log File Monitor Has Bug in the Throttling Code That May Cause Some Events to Be Missed. Read more www.securitytracker.com: SonicWALL SOHO Firewall Device Log File Filtering Hole Lets Remote Users on the Local Network Inject Scripting into Log Files for Denial of Service or Potential Cross-Site Scripting Attacks. Read more www.securitytracker.com: Hosting Controller Software for Web Hosting Companies Has Input Validation Errors in 'dsnmanager.asp' and 'imp_rootdir.asp' Scripts That Allow Remote Users to View Files on the System and Upload and Copy Files With Administrator Privileges. Read more www.securitytracker.com: XMB Group Magic Lantern Forum Software Discloses Log Files and Server Installation Path Information to Remote Users. Read more www.neowin.net: FastTrack network(Kazaa) share virus too. Read more www.internetnews.com: FBI Probes Hacks on Ford, Experian. Read more www.guardian.co.uk: Have the hackers got your number? Read more www.msnbc.com: Please keep your big e-mail shut. Read more

19 May 2002 New trojans: KiKbak Troyano-Argentino 2.0 M2 Trojan 1.6 Tool: www.inphiltration.com: Remote Control Packet Sniffer. Read more News: online.securityfocus.com: SuSE AAA_Base_Clean_Core Script RM Race Condition Vulnerability. Read more online.securityfocus.com: SuSE Shadow File Truncation Vulnerability. Read more online.securityfocus.com: Cisco Content Service Switch XML Denial Of Service Vulnerability. Read more online.securityfocus.com: Cisco Cache Engine Default Configuration Arbitrary User Proxy Vulnerability. Read more online.securityfocus.com: Microsoft Internet Explorer Content-Disposition Handling File Execution Vulnerability. Read more online.securityfocus.com: Cisco Content Service Switch HTTPS Post Denial Of Service Vulnerability. Read more online.securityfocus.com: Swatch Throttled Event Reporting Vulnerability. Read more online.securityfocus.com: Microsoft Internet Explorer Zone Spoofing Vulnerability. Read more online.securityfocus.com: Microsoft Internet Explorer Cookie Content Disclosure Vulnerability. Read more www.securitytracker.com: 'sliplogin' Serial Line IP Utility Buffer Overflow May Possibly Allow Local Users to Gain Elevated Privileges. Read more www.securitytracker.com: Parallel URL Fetcher ('puf') Format String Error May Let Remote Users Cause Arbitrary Commands to Be Executed. Read more www.securitytracker.com: 'mpg321' Audio Player Buffer Overflow May Let Remote Users Cause the Player to Execute Arbitrary Code. Read more www.securitytracker.com: Lukemftp FTP Client Buffer Overflow in Processing Server-Supplied PASV Commands May Allow Remote FTP Servers To Cause Arbitrary Code to Be Executed on the FTP Client. Read more www.securitytracker.com: SuSE Linux 'shadow' Password Management Utility May Let Local Users Obtain Elevated Group Privileges. Read more www.securitytracker.com: SonicWALL SOHO Content Blocking Script Injection and Logfile DoS. Read more www.securitytracker.com: Content Service Switch Web Management HTTP Processing Vulnerabilities. Read more www.securitytracker.com: Transparent Cache Engine and Content Engine TCP Relay Vulnerability. Read more www.securitytracker.com: Opera JavaScript Protocol Vulnerability. Read more www.securitytracker.com: 15 May 2002 Cumulative Patch for Internet Explorer. Read more www.securitytracker.com: Microsoft Internet Explorer Still Download and Execute any Program Automatically. Read more www.securitytracker.com: OpenBSD File Descriptor Vulnerability (Additional Details). Read more www.securitytracker.com: Phorum Remote Command Execution Vulnerability (PHORUM[settings_dir]). Read more www.securitytracker.com: Grsecurity Allows Modifying of "read-only kernel". Read more www.securitytracker.com: GNU rm fileutils Race Condition Problems on SuSE. Read more www.spacer.com: New Class Of Attacks On Computer Security Systemss. Read more www.content-wire.com: INTERNET SECURITY: Germany Under Attack? Read more www.nzherald.co.nz: Net-Fraud Bill Wiped But Victim Hacked Off. Read more

18 May 2002 New trojans: Kcom Downloader Optix PRO 1.1 ShadowPhyre server (b) News: www.securitytracker.com: Sharutils Package Uudecode Component Fails to Check for Symlinks When Decoding to a Temporary File, Allowing Local Users to Potentially Gain Elevated Privileges. Read more www.securitytracker.com: Microsoft Internet Explorer (IE) New Content-Disposition Bugs May Let Remote Users Execute Arbitrary Code on the Victim's Computer. Read more www.securitytracker.com: Microsoft Internet Explorer (IE) Zone Spoofing Hole Lets Remote Users Create HTML That, When Loaded, May Run in a Less-Secure IE Security Zone. Read more www.securitytracker.com: WolfMail Perl-based CGI E-mailer Lets Remote Users Send Mail (SPAM) Using Arbitrary 'From' Addresses. Read more www.securitytracker.com: Cisco ACNS Content Software (Running on Cache Engines and Content Engines) May Let Remote Users Open Unauthorized Connections to Arbitrary Ports and Addresses. Read more www.securitytracker.com: Cisco Content Service Switch (CSS) 11000 Can Be Reset By Remote Users. Read more www.securitytracker.com: Opera Browser Frame Location Bug Lets Remote Users Cause Arbitrary Javascript to Be Executed in the Incorrect Security Domain to Access Cookies and Other Sensitive Information. Read more www.securitytracker.com: Sun Microsystems SunATM 'atmsnmpd' Daemon Allows Remote Users to Crash the Daemon. Read more www.securitytracker.com: Microsoft Internet Explorer Bugs in 'BGSOUND' and 'IFRAME' Tags Let Remote Users Create HTML That Will Cause Denial of Service Conditions or Will Access Special DOS Devices. Read more www.theregister.co.uk: MS releases grand daughter of all IE security patches. Read more www.theregister.co.uk: MS IE patch misses the mark. Read more zdnet.com.com: Sneaky Klez worm won't go away. Read more www.pcworld.com: Stop Those Sneaky E-Mail Viruses in Their Tracks. Read more www.newsfactor.com: Fanatics with Laptops: The Coming Cyber War. Read more www.theregister.co.uk: Outlook worm markets porn site via your sig. Read more www.newsbytes.com: Windows Media Player Exposes IE Users To Attack. Read more www.extremetech.com: MSN Chat May Open Door for Hackers. Read more www.computerworld.com: Defense agency found using unsecure WLAN security cameras. Read more www.newsfactor.com: Hackers Expose Consumer Info from Ford, Experian. Read more www.nzherald.co.nz: Net-fraud bill wiped but victim hacked off. Read more zdnet.com.com: Spammers could face fines. Read more

17 May 2002 New trojans: AcidHead 1.0 Hobbit Katux Latinus 1.1 Tools: Remote Nmap (Rnmap) is a pair of client and server programs which allow for various authorized clients to run their port scans from a centralized server. Version 0.7 released. Read more pedram.redhive.com: dnshijacker is a libnet/libpcap based packet sniffer & spoofer. a versatile tool, dnshijacker supports tcpdump style filters that allow you to specifically target victims. Read more News: GreyMagic Security Advisory Appendix GM#001-AX Topic: Appendix to "IE allows universal Cross Site Scripting". Read more online.securityfocus.com: id Software Quake II Server Remote Information Disclosure Vulnerability. Read more www.securitytracker.com: NetPad Text Editing CGI Script Input Validation Flaws Let Remote Users View Files and Execute Shell Commands. Read more www.securitytracker.com: NOCC PHP-based Webmail Client Software Displays Message Text as HTML Without Filtering, Allowing a Remote User to Access the Victim's Mailbox Using a Cross-Site Scripting Attack. Read more www.eweek.com: Microsoft Patch for IE Flaws Is 'Incomplete'. Read more www.computeruser.com: 'Fortnight' worm changes browser start-up page to porn site. Read more www.techfocus.org: Lusers spread virus hoax, annoy IT people everywhere. Read more www.online.ie: Irish companies targeted by hackers. Read more www.nzherald.co.nz: Net-fraud bill wiped but victim hacked off. Read more www.informationweek.com: Deceptive Duo Reportedly Raided. Read more

16 May 2002 New trojans: AcidShiver (e) Net Trash Xs 1b Kcom FTP News: Microsoft Security Bulletin MS02-023 15 May 2002 Cumulative Patch for Internet Explorer (Q321232). Read more Cisco Security Advisory: Transparent Cache Engine and Content Engine TCP Relay Vulnerability. Read more Cisco Security Advisory: Content Service Switch HTTP Processing Vulnerabilities. Read more www.security.nnov.ru: special device access and DoS in Microsoft Internet Exporer/Outlook Express/Outlook. Read more online.securityfocus.com: Bannermatic World Readable Data Files Information Disclosure Vulnerability. Read more online.securityfocus.com: NOCC Webmail Script Injection Vulnerability. Read more online.securityfocus.com: LevCGI NetPad Unauthorized File Access Vulnerability. Read more online.securityfocus.com: kv Poll Cookie Security Bypass Vulnerability. Read more online.securityfocus.com: Gaim Sensitive World Readable Temporary File Vulnerability. Read more online.securityfocus.com: tinyproxy HTTP Proxy Memory Corruption Vulnerability. Read more www.securiteam.com: WolfMail Allows Relaying of SPAM. Read more www.securitytracker.com: nCipher MSCAPI CSP Install Wizard Bug May Result in Generated Keys That Are Not Protected By Smart Cards Even if the User Requests This Protection. Read more www.securitytracker.com: NetWin DNews News Server Has Unspecified 'Security Fault' That May Allow Remote Users to Access the Management Interface. Read more www.securitytracker.com: Gaim Instant Messaging Client Lets Local Users Access the Hotmail Accounts of Other Active Gaim Users. Read more www.computing.vnunet.com: Hackers target Israel. Read more www.timesonline.co.uk: Control phreaks. Read more zdnet.com.com: Can we really stop script kiddies? Read more www.computing.vnunet.com: Hackers turn on open source. Read more www.washingtonpost.com: FBI Tightens Net Around 'Deceptive Duo'. Read more www.nzherald.co.nz: Protection against hackers not good enough, say police. Read more www.computing.vnunet.com: Flash flaw turns PCs into zombies. Read more www.theregister.co.uk: Hoax virus alert could cripple Windows Java. Read more itmanagement.earthweb.com: Security Sieves: Misused Technology Leaving Networks Vulnerable. Read more

15 May 2002 New trojans: Muska52 1.6 Boiling client. Boiling is now complete. AutoSpY 1.0 News: online.securityfocus.com: Seminole Webserver Invalid Request Heap Corruption Vulnerability. Read more www.securiteam.com: NOCC Cross-Site Scripting Bug. Read more www.securiteam.com: Word Mail Merge Variant Vulnerability. Read more www.securiteam.com: Hacking Sybase/MS-SQL for the NT Administrator. Read more www.securiteam.com: Wu-IMAP Buffer Overflow Condition (PARTIAL). Read more www.securiteam.com: Levcgi.com's NetPad Multiple Vulnerabilities. Read more www.securiteam.com: Gaim Arbitrary Email Access. Read more www.newsbytes.com: Most Home Computers Virus Targets - Survey. Read more news.zdnet.co.uk: UK fights back against cybercrime. Read more techupdate.zdnet.co.uk: Keeping hackers out of your Web services. Read more news.com.com: How hackers avoid getting caught. Read more

14 May 2002 New trojans: Tcc 0.91 Acid Reign 2.0 Wolff 1.3 News: online.securityfocus.com: Novell BorderManager Connection Table Denial of Service Vulnerability. Read more online.securityfocus.com: XMB Forum 1.6 Magic Lantern Cross Site Scripting Vulnerabilities. Read more online.securityfocus.com: MyBB DevBB 1.0 install.php Reconfiguration Vulnerability. Read more online.securityfocus.com: mnoGoSearch 3.1.19 Search Query Buffer Overflow Vulnerability. Read more online.securityfocus.com: Seminole Webserver Empty Request Denial of Service Vulnerability. Read more online.securityfocus.com: XMB Forum 1.6 Magic Lantern Log File Vulnerabilities. Read more online.securityfocus.com: Critical Path InJoin Directory Server File Disclosure Vulnerability. Read more online.securityfocus.com: Wu-imapd Partial Mailbox Attribute Remote Buffer Overflow Vulnerability. Read more online.securityfocus.com: Multiple Vendor Firewall Port 53 Communication Vulnerability. Read more online.securityfocus.com: Macromedia Dreamweaver InterDev SQL Injection Vulnerability. Read more online.securityfocus.com: Critical Path InJoin Directory Server Cross-Site Scripting Vulnerability. Read more online.securityfocus.com: Gisle Aas Digest-MD5 UTF-8 Incorrect Digest Calculation Threat. Read more online.securityfocus.com: ACD Systems ACDSee Photo Album File Description Buffer Overflow Vulnerability. Read more online.securityfocus.com: OpenBSD exec C Library Standard I/O File Descriptor Race Condition Vulnerability. Read more www.securitytracker.com: mnoGoSearch SQL-based Search Engine Software Has Heap Overflow That Lets Remote Users Execute Arbitrary Code with the Privileges of the Web Server. Read more www.securiteam.com: MSCAPI CSP Install Wizard Incorrect Behavior Pose a Security Threat. Read more www.securiteam.com: Cibleclick.com Stores Passwords in Clear Text inside Cookies. Read more www3.gartner.com Microsoft Sends Mixed Signals About Software Security. Read more www.yomiuri.co.jp: Learning from poor network security products. Read more networknews.vnunet.com: Virus writers get behind Gigabyte. Read more www.eweek.com: Hackers Attack Public, Private Sectors. Read more www.internetnews.com: Navy Brass Latest Hacking Victim. Read more www.eweek.com: ISP Protects Its IP Backbone From DDoS Attacks. Read more www.iscentral.org: How To UnCap Motorola Surfboard Cable Modems. Read more www.theinquirer.net: Cable modems under mega-hacking threat. Read more www.infosecuritymag.com: A six-part Information Security Special Report on the growing virus problem--and what to do about it. Read more www.iht.com: Online trade for stolen credit cards flourishes. Read more www.nationalpost.com: Cyber-spies needed for Ottawa jobs. Read more www.primezone.com: Discover What It Takes to Beat Even the Most Sophisticated Cyber Invader. Read more

13 May 2002 New trojans: I am looking some time for the older trojan "Sivka-Burka". Who can help me out? Little Witch 5.3 DKangel 2.0 Rebate Server News: www.securiteam.com: Cisco ATA-186 Admin Password Can be Trivially Circumvented. Read more www.securitytracker.com: AOL Instant Messenger (AIM) Bug in 'aim:AddBuddy' Link Processing May Let Remote Users Cause the AIM Client to Crash. Read more www.securitytracker.com: Cisco ATA 186 Analog Telephone Adaptor Discloses Device Password to Remote Users and May Also Let Remote Users Modify the Configuration Without Having the Password. Read more www.securitytracker.com: Perl-Digest-MD5 Utility May Result in Incorrect MD5 Checksums When Processing UTF-8 Encoded Characters. Read more www.securitytracker.com: BEA Systems WebLogic Server and Express May Disclose an Administrative Password to Local Users. Read more www.securitytracker.com: BEA Systems WebLogic Server Default Management Servlet Discloses the Contents of Files in Certain Subdirectories to Remote Users. Read more www.securitytracker.com: Critical Path inJoin Directory Server 'iCon' Management Interface Allows Cross-Site Scripting Attacks Against Administrators. Read more www.securitytracker.com: Critical Path inJoin Directory Server 'iCon' Web Administration Interface Discloses Files on the System to Authenticated Remote Users. Read more www.securitytracker.com: University of Washington IMAP Toolkit ('uw-imap') Has Buffer Overflow That May Let Remote Users Execute Arbitrary Code with User-Level Privileges on the System. Read more www.securiteam.com: Linux NetFilter NAT/ICMP Code Information Leak. Read more www.securiteam.com: Critical Path inJoin Directory Server Cross Site Scripting Issue. Read more www.securiteam.com: Critical Path inJoin Directory Server Web Traversal Issue. Read more www.securiteam.com: Unfortunate Interaction Between EZMLM and MessageLabs Virus Scanning. Read more www.computeruser.com: Army layers security blankets to guard networks. Read more www.computeruser.com: Judge says Russian firm to be charged in e-book case. Read more www.gulf-news.com: Firms ignoring IT security threat. Read more allafrica.com: Creation of Cyber Inspectors Challenged. Read more

12 May 2002 New trojans: NetBUIE Lula C.H.C.B. beta1 Glacier 6.0 The Glacier 6.0 that was already in the archive, turned out to be Glacier 6.0-J and is renamed to 6.0-J. News: www.newsbytes.com: Xbox 'Emulator' Front For Online Money-Making Scam. Read more www.egoclan.barrysworld.net: Microsoft Net Messenger Service Local Heap Overflow via SEND. Read more online.securityfocus.com: Wu-imapd Partial Mailbox Attribute Remote Buffer Overflow Vulnerability. Read more online.securityfocus.com: Cisco ATA-186 HTTP Device Configuration Disclosure Vulnerability. Read more online.securityfocus.com: AOL Instant Messenger AddBuddy Hyperlink Vulnerability. Read more online.securityfocus.com: Cisco ATA-186 Web Administration Authentication Bypass Vulnerability. Read more www.securitytracker.com: Yahoo! Messenger Client Discloses Buddy List Contents to Local Users. Read more www.securiteam.com: mnoGoSearch Found To Be Vulnerable to a Heap Overflow. Read more www.securiteam.com: DOS Reserved Filenames Cause ColdFusion To Reveal Physical Web Root. Read more www.securiteam.com: SafeWeb Vulnerability, Fingerprinting Websites Using Traffic Analysis. Read more www.securiteam.com: KStat, Kernel Memory Accessing Tool. Read more www.securiteam.com: SQLSmack, a UNIX Based Remote Command Execution for MSSQL. Read more www.reuters.com: Top Argentine Court Wants Law Against Hackers. Read more www.infowarrior.org: Who Needs Hackers? We've Got Microsoft! Read more www.eweek.com: Error in MS Protocol Could Compromise Security. Read more www.theregister.co.uk: Kill the MSN Messenger. Read more www.theregister.co.uk: Europe's MS sanctions to be wide-ranging, long-taking. Read more www.theregister.co.uk: Sklyarov/ElcomSoft case sent to trial. Read more www.securitynewsportal.com: Unknown hackers give hotel hosting CanSecWest Security Conference a few whacks. Read more

11 May 2002 New trojans: Fearless Webdownloader 1.0 Guangwai Girl 1.53b HellzAddiction 1.20E DKangel 1.0 News: Extension Identification Bug and IE Registry Manipulation by Doc~. Read more CERT� Advisory CA-2002-13 Buffer Overflow in Microsoft's MSN Chat ActiveX Control. Read more www.nmrc.org: Critical Path inJoin V4.0 Directory Server. Read more www.securiteam.com: CRLF Injection. Read more online.securityfocus.com: OpenBSD exec C Library Standard I/O File Descriptor Race Condition Vulnerability. Read more online.securityfocus.com: Webmin / Usermin Authentication Bypass Vulnerability. Read more www.securitytracker.com: Cisco BTS 10200 Softswitch Underlying Operating System Contains Network Time Daemon (NTP) Buffer Overflow That May Allow a Remote User to Crash the Device or Execute Arbitrary Code. Read more www.securitytracker.com: Cisco IP Manager Underlying Operating System Contains Network Time Daemon (NTP) Buffer Overflow That May Allow a Remote User to Crash the Device or Execute Arbitrary Code. Read more www.securitytracker.com: Cisco Media Gateway Controller (MGC) Product Line Underlying Operating System Contains Network Time Daemon (NTP) Buffer Overflow That May Allow a Remote User to Crash the Device. Read more www.securitytracker.com: NetWare FTP Server Errors in Handling Unexpected Input Let Remote Users Cause the Server to Consume All Available CPU Resources. Read more www.securitytracker.com: Usermin Session ID Spoofing Hole May Allow Remote Users to Gain Root Access to the System. Read more www.securitytracker.com: Webmin Session ID Spoofing Hole May Allow Remote Users to Gain Root Access to the System. Read more www.securitytracker.com: Network Associates PGP 'Wipe Deleted Files' Option Fails to Wipe Clear Text Temporary Files Used by the Windows 2000 Encrypted File System Feature. Read more www.securitytracker.com: SGI 'fsr_xfs' XFS Filesystem Reorganizer May Let Local Users Obtain Root Access. Read more www.securitytracker.com: Ecometry's SGDynamo Web Application Engine Allows Remote Users to Conduct Cross-Site Scripting Attacks. Read more www.securitytracker.com: Microsoft Exchange Instant Messenger ActiveX Control Has 'ResDLL' Parameter Buffer Overflow That Lets Remote Users Execute Arbitrary Code. Read more www.securitytracker.com: Microsoft MSN Messenger Includes an ActiveX Control That Has 'ResDLL' Parameter Buffer Overflow That Lets Remote Users Execute Arbitrary Code. Read more www.securitytracker.com: Microsoft MSN Chat Control ActiveX Control Has 'ResDLL' Parameter Buffer Overflow That Lets Remote Users Execute Arbitrary Code. Read more www.salon.com: Microsoft says penalty will let hackers run wild. Read more www.cnet.com: Security trips up instant messaging. Read more www.commweb.com: Security Hole Found In MSN Messenger. Read more news.com.com: States grill Microsoft's computer expert. Read more techupdate.zdnet.co.uk: Hackers: Allies in the network security war? Read more news.zdnet.co.uk: Chat 'bots' may be hacker tool. Read more

10 May 2002 New trojans: Alicia version k Anal FTP 0.1 Remote-Anything 3.5.8 News: online.securityfocus.com: HP Virtualvault Unauthorized Administrative Access Vulnerability. Read more www.securitytracker.com: L.Y.S.I.A.S. Lidik Web Server for Microsoft Windows Systems Lets Remote Users View Files Located Anywhere on the Partition. Read more www.securitytracker.com: Intel BIOS Bug Lets Physically Local Users Boot From Alternate Boot Media Even When The Supervisor Password is Set. Read more www.securitytracker.com: MDaemon Mail Server WorldClient Buffer Overflow Lets Authenticated Remote Users Execute Arbitrary Code on the Server with SYSTEM Privileges. Read more www.securitytracker.com: 'netstat' Utility for SGI IRIX UNIX Operating System May Let Local Users Detect the Presence of Files Regardless of File Permissions. Read more www.securitytracker.com: Pointsec for Palm OS Discloses the User's PIN Code to Physically Local Users. Read more www.securitytracker.com: Microsoft Office 'Word Mail Merge' Feature Allows Remote Users to Cause Arbitrary Programs to Be Executed on the Target User's Computer. Read more www.securitytracker.com: HP-UX 'ndd' Network Tuning Utility Has Unspecified Problem That May Let Local Users Cause Denial of Service Conditions. Read more www.securiteam.com: NTFS and PGP Interact to Expose EFS Encrypted Data. Read more www.securiteam.com: MSN Messenger OCX Buffer Overflow. Read more www.securiteam.com: Webmin/Usermin Cross-site Scripting Vulnerability. Read more www.securiteam.com: ISC DHCPDv3 Remote Root Compromise. Read more www.computing.vnunet.com: US approves tougher cybercrime penalties. Read more news.bbc.co.uk: Stopping the cyber-criminals. Read more www.zdnet.com: Don't trust MS? Make IE and Outlook more secure. Read more www.computing.vnunet.com: Microsoft admits to 'critical' security hole. Read more www.fcw.com: Team tackles Windows security. Read more www.reuters.com: Microsoft Warns of 'Critical' Chat Security Flaw. Read more zdnet.com.com: Argentine hackers go scot-free. Read more www.osopinion.com: Understanding Security Threats: You Are a Target! Read more www.computing.vnunet.com: Bug watch: The boy who cried worm. Read more www.spokesmanreview.com: Hackers defile Spokane County Web site. Read more www.theregister.co.uk: Attack of the clones. Read more

09 May 2002 New trojans: Lanbyte 0.01 Ducktoy 1.0.1 DarkSky 2.3 News: Microsoft Security Bulletin MS02-022 Unchecked Buffer in MSN Chat Control Can Lead to Code Execution (Q321661). Read more CERT� Advisory CA-2002-12 Format String Vulnerability in ISC DHCPD. Read more www.eeye.com: MSN Messenger OCX Buffer Overflow. Read more www.securiteam.com: Unchecked Buffer in MSN Chat Control Can Lead to Code Execution. Read more www.securiteam.com: Multiple Vulnerabilities in MDaemon and WorldClient. Read more www.securiteam.com: Lysias Lidik Web Server Suffers from a Directory Traversal Vulnerability. Read more www.securiteam.com: Cisco Found To Contain a NTP Related Vulnerability. Read more www.securiteam.com: Novell SDMR DoS. Read more www.securiteam.com: Novell Netware Client Unchecked Buffers. Read more www.securiteam.com: The Netware FTP Server Contains a DoS vulnerability. Read more www.securiteam.com: Novell Border Manager Multiple Vulnerabilities. Read more www.securitytracker.com: Microsoft MSN Messenger Instant Messaging Client Malformed Header Processing Flaw Lets Remote Users Crash the Client. Read more www.securitytracker.com: 'pam_ldap' LDAP-based Authentication Module Format String Bug Lets Local Users Obtain Root Level Access. Read more www.securitytracker.com: Logitech iTouch Keyboard and Keyboard Software Can Bypass Computer Locking Protections and Execute Certain iTouch-assigned Programs When Locked. Read more www.securitytracker.com: Another AOL Instant Messenger (AIM) TLV Buffer Overflow Lets Remote Users Execute Arbitrary Code on Another User's AIM Client. Read more www.summercon.org: Announce for Summercon 2002 May 31, June 1-2. Read more www.nandotimes.com: Some MSN Messenger versions vulnerable to hackers. Read more www.ananova.com: MSN Messenger users vulnerable to hackers. Read more online.securityfocus.com: Cable Modem Hacking Goes Mainstream. Read more www.cnn.com: Hackers say holes exposed retail data. Read more www.online.ie: Allchin quizzed on 'secret' MS protocols and APIs. Read more www.wired.com: MS: Remedies a Bonus for Crackers. Read more

08 May 2002 New trojans: Nethero 1.0 (b) Neat 2.0 NeuroticKat 1.3 News: www.newsbytes.com: 'Cute' Trojan Could Take Over Your PC - Anti-Virus Companies. Read more www.it-checkpoint.net: Lysias Lidik Webserver suffers from a Directory Traversal Vulnerability. Read more online.securityfocus.com: B2Config.PHP Remote Command Execution Vulnerability. Read more online.securityfocus.com: Solaris cachefsd Heap Overflow Vulnerability. Read more www.securiteam.com: Mis-formated Message Header Causes MSN Messenger to Crash. Read more www.securiteam.com: Pointsec for PalmOS PIN Disclosure. Read more online.securityfocus.com: Flame war after Klez worms onto Richer Sounds mailing list. Read more www.newsbytes.com: Virus Hoax Making The Rounds - 'JDBGMGR.EXE'. Read more www.forbes.com: UPDATE 1-Microsoft sees security threat in states' ideas. Read more digitalmass.boston.com: Microsoft says disclosures could help hackers; judge allows new witness for states. Read more www.washingtonpost.com: Microsoft Witness Raises Windows Security Issues. Read more www.newsbytes.com: Band's Sites Deluged After Mailbox-Bomb Suspect ID'd. Read more digitalmass.boston.com: Top Argentine Court Wants Law Against Hackers. Read more www.newsbytes.com: Army Layers Security Blankets To Guard Networks. Read more news.com.com: Working in a network war zone. Read more thisisleeds.co.uk: Hackers make the most of lax security. Read more www.wired.com: A Challenge to Dissect Some Code. Read more itmanagement.earthweb.com: The Feds' Top Hacker Speaks. Read more www.newsbytes.com: `Evil Angelica' Parodies Government Site Hacking Duo. Read more itmanagement.earthweb.com: Social Engineering: The Human Side Of Hacking. Read more

07 May 2002 New trojans: Under 7.43 BirdSpy 3.0 Last 2000 version b News: CERT� Advisory CA-2002-11 Heap Overflow in Cachefs Daemon (cachefsd). Read more www.guninski.com: Digitally signing buggy ActiveX components (version 2.0) by Georgi Guninski. Read more www.owasp.org: Cross Site Scripting. Read more www.w00w00.org: AOL Instant Messenger Overflow #2. Read more www.securiteam.com: cURL Remote Exploit Code Released. Read more www.securiteam.com: Windows 2000 Server IIS 5.0 .ASP Overflow Exploit. Read more www.securiteam.com: Bruteforcing support for PPPD (Patch). Read more www.securiteam.com: LabVIEW Web Server DoS Vulnerability Exploit Code Released. Read more www.securiteam.com: 3CDaemon DoS Exploit. Read more online.securityfocus.com: askSam Web Publisher Cross Site Scripting Vulnerability. Read more online.securityfocus.com: NewsPro 1.01 Unauthenticated Administrator Vulnerability. Read more online.securityfocus.com: PHPImageView Cross Site Scripting Vulnerability. Read more online.securityfocus.com: PhotoDB 1.4 Administrator Access Vulnerability. Read more www.securiteam.com: New AOL Instant Messenger Buffer Overflow. Read more www.securiteam.com: RealityScape MyLogin 2000 Professional SQL Injection. Read more www.securiteam.com: ASP Client Check SQL Injection Vulnerability. Read more www.securiteam.com: Digitally Signed Vulnerability Components Pose a Viable Threat. Read more www.securiteam.com: B2 PHP Remote Command Execution. Read more zdnet.com.com: Chernobyl virus hitches a ride. Read more www.osopinion.com: The Computer Virus of the Future. Read more www.pcworld.com: Aging Worms Still Crawl, Threaten Net. Read more www.pcworld.com: Hackers Say They Hack for Our Sake. Read more news.zdnet.co.uk: Online banking: Anatomy of a hacking. Read more www.pcworld.com: Kazaa Sneakware Stirs Inside PCs. Read more australianit.news.com.au: Security myths costing firms. Read more www.idg.net: Security Flaw Found in AOL Instant Messenger. Read more www.usatoday.com: Cyberspace full of terror targets. Read more

06 May 2002 New trojans: TCC 0.90 Remote HAVOC 2.0.7 Intruzzo 2002 version b News: www.cultdeadcow.com: The Tao of Windows Buffer Overflow by DilDog. Read more www.enseirb.fr: A Buffer Overflow Study. Attacks & Defenses. Read more www.securiteam.com: Solaris cachefsd Remote Buffer Overflow Vulnerability (Cache Name). Read more www.theinquirer.net: Best Buy hit by WLAN snooping. Read more www.newscientist.com: Competition to "reverse engineer" mystery program. Read more www.computeruser.com: DrinkOrDie software pirate goes to prison. Read more www.it-director.com: Hacker says .Net is pretty good. Read more www.usatoday.com: Cyberspace full of terror targets. Read more www.computeruser.com: Macromedia flash bug could open Windows PCs to hackers. Read more www.zdnet.com: .Net's security just OK... Best Buy hacked?... Flash hole patched...Read more allafrica.com: Cyber Crime Crisis Looms in Zim. Read more hoovnews.hoovers.com: WIRED SOCIETY: Fast action needed on cybercrime law. Read more www.cleveland.com: FBI ex-chief sees law, rights challenged. Read more www.msnbc.com: Web Attack in the Workplace. Read more seattletimes.nwsource.com: Highline hacking brings suspensions; 19 high-schoolers accused of grade-tampering. Read more

05 May 2002 New trojans: iD_2001 version 1.0 Mantice 1.0 Haan News: www.securitytracker.com: Macromedia Flash OCX Activex Object for Internet Explorer Contains Buffer Overflow That Allows Malicious HTML to Execute Arbitrary Code on the Victim's Computer. Read more www.securitytracker.com: Nautilus GNOME Shell and File Manager Symlink Hole May Let Local Users Cause Other Users' to Overwrite Files on the System. Read more www.securitytracker.com: 4D Web Server Buffer Overflow in Processing Basic HTTP Authentication Lets Remote Users Crash the Server and May Allow Arbitrary Code to Be Executed. Read more www.securitytracker.com: Apache 'mod_python' Python Language Interpreter Bug in Publisher Handler May Allow Remote Users to Modify Files on the System. Read more www.securitytracker.com: alterMIME Null Byte Overflow May Allow a Remote User to Cause the Application to Crash. Read more www.securitytracker.com: SnapGear LITE+ Firewall Device Can Be Crashed By Remote Users Sending Certain Malformed Packets or Consuming Connections on Management Ports. Read more www.securiteam.com: PHPImageView XSS Vulnerability and Information Disclosure. Read more www.securiteam.com: Nautilus Symlink Vulnerability. Read more www.securiteam.com: askSam Cross Site Scripting and Path Disclosure Vulnerabilities. Read more www.securiteam.com: The 4D Web Server has a Buffer Overflow Condition. Read more seattletimes.nwsource.com: Q & A: Worm-infested e-mail plagues computer user. Read more www.theregister.co.uk: Solaris wall shows cracks. Read more www.nwfusion.com: Gartner: Attacks exploit user security indifference. Read more www.fcw.com: Security poses primary wireless challenge. Read more news.com.com: Shades of gray at security conference. Read more www.theregister.co.uk: MS seeks senior spook to score Federal security $$$s. Read more

04 May 2002 New trojans: AIMVision Spadeace Fade 1.0 News: www.iss.net: Increased Hacking Activity Associated with Underground File-Sharing Networks. Read more www.securiteam.com: How to Remotely and Automatically Exploit a Format Bug. Read more online.securityfocus.com: Snapgear Lite+ Firewall HTTP Denial of Service Vulnerability. Read more online.securityfocus.com: Snapgear Lite+ Firewall PPTP Denial of Service Vulnerability. Read more online.securityfocus.com: Snapgear Lite+ Firewall IPSEC Denial of Service Vulnerability. Read more online.securityfocus.com: Snapgear Lite+ Firewall IP-OPTIONS Denial of Service Vulnerability. Read more online.securityfocus.com: HP MPE/iX FTPSRVR Arbitrary Shell Command Execution Vulnerability. Read more online.securityfocus.com: Microsoft Internet Explorer/Outlook Express XBM Handling DoS Vulnerability. Read more online.securityfocus.com: RedHat DocBook Tools Default Stylesheet Arbitrary File Write Vulnerability. Read more online.securityfocus.com: SGI Irix nsd Symbolic Link Vulnerability. Read more www.securiteam.com: Classic Cross-Site Scripting: Gibson Research Corporation. Read more www.securiteam.com: Macromedia Flash ActiveX Buffer Overflow. Read more www.securitytracker.com: (SGI Issues Fix) XFree Xlib Buffer Overflow May Let Local Users Exploit Linked Programs to Gain Elevated Privileges. Read more www.securitytracker.com: SGI IRIX Unified Name Service Daemon (nsd) Symlink Bug May Let Local Users Obtain Root Privileges on the System. Read more www.securitytracker.com: Caldera OpenServer System Activity Reporter (sar) Command Line Buffer Overflow May Let Local Users Gain Elevated Privileges. Read more www.securitytracker.com: Red Hat DocBook Document Conversion Tool May Allow Remote Users to Cause Arbitrary File Names to be Used for Storing a Convered HTML Document. Read more www.securitytracker.com: HP FTPSRVR FTP Server for MPE/iX Operating System May Allow Remote Users to Gain Access to the System. Read more www.securitytracker.com: Sun Solaris 'admintool' Installation Path Buffer Overflow Lets Local Users Execute Arbitrary Code with Root Privileges. Read more www.securitytracker.com: Sun Solaris 'lbxproxy' Display Name Buffer Overflow Lets Local Users Obtain Root Group Privileges. Read more www.securitytracker.com: Sun Solaris 'cachefsd' Mount Buffer Overflow Lets Local Users Gain Root Privileges. Read more www.securitytracker.com: ISS RealSecure Network Sensor DHCP Processing Bug Lets Remote Users Crash the Sensor. Read more www.securiteam.com: Snapgear Lite+ Firewall Denial of Service. Read more www.securiteam.com: IE and OE Cannot Handle Malformed XBM Files. Read more www.securiteam.com: Spooky Login SQL Injection Vulnerability. Read more www.informationweek.com: A New Degree Of Security. Read more www.computeruser.com: Texas University plans cybercrime institute. Read more timesofindia.indiatimes.com: Macromedia fixes Flash security bug. Read more www.newsbytes.com: Klez Offers Ride To CIH Virus. Read more zdnet.com.com: ActiveX flaw exposes Flash users to hacks. Read more www.infoworld.com: Kournikova virus writer appeals sentence. Read more zdnet.com.com: Forum: The fate of wireless security. Read more www.computeruser.com: Laws, Net filters not enough to protect kids online - report. Read more

03 May 2002 New trojans: XPosure Glacier 3.3 PC Xplorer 1.2 Tools: piorio.supereva.it: BackStealth is an innovative Security Utility which allows to bypass the outbound protection of a Personal Firewall in order to establish a remote connection. Read more News: www.defcon.org: Announcing DEF CON 10. Read more project.honeynet.org: The Reverse Challenge Your challenge is to analyze a binary captured in the wild. Read more Reverse Engineering Malware by Lenny Zeltser. Read more An Environment for Controlled Worm Replication and Analysis. Read more www.eeye.com: Macromedia Flash Activex Buffer overflow. Read more www.cqure.net: The 4D webserver has a buffer overflow condition. Read more www.msnbc.com: Best Buy closes wireless registers. Read more www.theinquirer.net: Best Buy hit by WLAN snooping. Read more www.securitytracker.com: SGI IRIX Performance Metrics Collector Daemon (pcmd) Can Be Made to Consume Available Memory on the Host By Remote Users. Read more www.securitytracker.com: Microsoft Internet Explorer Can Be Crashed By Incorrectly Sized XBM Graphics Files. Read more www.securitytracker.com: 3Com's 3CDaemon FTP Server Buffer Overflow Lets Remote Users Crash the FTP Service. Read more www.securitytracker.com: SGI IRIX Operating System 'ipfilterd' Configuration Error Lets Local Users Disrupt Network Traffic. Read more www.securitytracker.com: Levcgi.com's myGuestbook Input Filtering Flaw Allows Remote Users to Conduct Cross-Site Scripting Attacks Against myGuestbook Users. Read more www.securitytracker.com: SGI IRIX '/usr/sbin/cpr' State Saving Facility Has Buffer Overflow That May Let Local Users Get Root Access. Read more www.securitytracker.com: Netscape Browser XMLHTTP Redirect Bug Lets Remote Users View Files on a User's Computer. Read more www.securitytracker.com: Mozilla Browser XMLHTTP Redirect Bug Lets Remote Users View Files on a User's Computer. Read more www.securitytracker.com: CIDER Project's SHADOW Intrusion Detection Software Allows Remote Users to Execute Arbitrary Code on the Server with Web Server Privileges. Read more www.securitytracker.com: BEA Weblogic URL Parsing Flaw Lets Remote Users View .JSP Source Code or the Physical Installation Path and Cause Denial of Service Conditions. Read more www.securitytracker.com: Sun Solaris 'rpc.walld' Format String Bug May Let Remote Users Execute Arbitrary Code with Root Privileges. Read more zdnet.com.com: Hacking in the shadow of 9/11. Read more zdnet.com.com: Contest: Crack this hacking tool. Read more www.computing.vnunet.com: Chaos as 'Klez cocktails' begin to strike. Read more www.smh.com.au: Security watchdog reveals spy groups' eavesdropping. Read more zdnet.com.com: Ashcroft renews fight on child porn online. Read more investor.cnet.com: Hacking spree hits Defense Department. Read more news.com.com: Hacker finds fault in .Net security. Read more www.computeruser.com: USB port devices pose security threat. Read more www.computing.vnunet.com: Hacker duo continues cyber assault. Read more news.com.com: University systems a haven for hackers. Read more www.smh.com.au: Virus proves painful for creator. Read more www.computing.vnunet.com: The threat is out there. Read more www.komotv.com: Two Dozen Highline H.S. Students In Hot Water For Falsifying Grades. Read more

02 May 2002 New trojans: China 1.0 Controlo do Virus Client Bigshot 1.0 Client News: online.securityfocus.com: 3Com 3CDaemon Buffer Overflow Vulnerability. Read more online.securityfocus.com: Mozilla / Netscape 6 XMLHttpRequest File Disclosure Vulnerability. Read more online.securityfocus.com: Sun Solaris RWall Daemon Syslog Format String Vulnerability. Read more online.securityfocus.com: AutoLog IP Spoofing Vulnerability. Read more online.securityfocus.com: CIDER Shadow Analyzer Remote Command Execution Vulnerability. Read more www.securitytracker.com: Sun Solaris 'admintool' Buffer Overflows Let Local Users Execute Arbitrary Code to Gain Root Privileges. Read more www.securitytracker.com: SAP R/3 Default Installation Allows Remote Users to Access the Database Port and View, Write, and Modify Any SAP Data on the Server. Read more www.securitytracker.com: Reading Local Files in Netscape 6 and Mozilla. Read more www.securitytracker.com: SAP R/3 with Oracle Default Installation Vulnerability. Read more www.securitytracker.com: Remote Denial of Service Vulnerability in RealSecure Network Sensor. Read more www.securitytracker.com: Sun Solaris cachefsd Mount File Buffer Overflow Vulnerability. Read more www.securitytracker.com: QPopper Buffer Overflow Vulnerability (BULLDIR). Read more www.securitytracker.com: Levcgi.com's MyGuestbook JavaScript Injection Vulnerability. Read more www.securitytracker.com: SunShop Shopping Cart Security Vulnerability. Read more www.securitytracker.com: DNSTools Authentication Bypass Vulnerability. Read more www.lasvegassun.com: Melissa Virus Maker Gets 20 Months. Read more www.guardian.co.uk: Melissa virus creator jailed. Read more www.wired.com: Klez: Don't Believe 'From' Line. Read more www.usatoday.com: PC viruses: Never open your door to strangers. Read more www.cnet.com: Livewire: Prevention is better than cure for any virus. Read more www.newsbytes.com: Hacker Pleads Guilty To Accessing NASA System. Read more www.zdnet.com: Stay one step ahead of hackers. Here's how. Read more news.com.com: Anatomy of a hacking. Read more www.uniontrib.com: Hackers spur shutdown of computer server for Navy. Read more hoovnews.hoovers.com: USB Port Devices Pose Security Threat. Read more

01 May 2002 New trojan(s): NetDevil 1.4 Little Witch 5.2 Avanzado Server News: GreyMagic Security Advisory GM#001-NS Reading local files in Netscape 6 and Mozilla. Read more www.eSecurityOnline.com: Microsoft Internet Information Server denial of service vulnerabilities. Read more online.securityfocus.com: ATGuard Personal Firewall Outgoing Connection Restriction Bypass Vulnerability. Read more online.securityfocus.com: DNSTools Authentication Bypass Vulnerability. Read more online.securityfocus.com: Blahz-DNS Direct Script Call Authentication Bypass Vulnerability. Read more online.securityfocus.com: Qualcomm QPopper Bulletin Name Buffer Overflow Vulnerability. Read more www.securitytracker.com: DNSTools Authentication Flaw Lets Remote Users Access the Application to Make DNS Changes Without Authenticating. Read more www.securitytracker.com: Blahz DNS Authentication Design Weakness Lets Remote Users Access the Application. Read more www.securiteam.com: CIDER SHADOW CGI Arbitrary Command Execution Vulnerabilities. Read more www.securiteam.com: Lotus Domino Bindsock PATH Buffer Overflow Vulnerability. Read more www.securiteam.com: Lotus Domino Bindsock Arbitrary File Creation Vulnerability. Read more www.securiteam.com: Lotus Domino Bindsock Notes_ExecDirectory Buffer Overflow Vulnerability. Read more www.securiteam.com: Method Found to Bypass ATGuard's Firewall. Read more www.securiteam.com: Bea WebLogic Incorrect URL Parsing Issues. Read more www.securiteam.com: Sun Solaris admintool -d and PRODVERS Buffer Overflow Vulnerabilities. Read more www.securiteam.com: Sun Solaris admintool Media Installation Path Buffer Overflow Vulnerability. Read more www.securiteam.com: CDE dtprintinfo Help Search Buffer Overflow Vulnerability. Read more www.securiteam.com: Sun Solaris lbxproxy Display Name Buffer Overflow Vulnerability. Read more www.securiteam.com: Sun Solaris Cachefsd Denial of Service Vulnerability. Read more www.newsbytes.com: New Stealth Attack Found Against Personal Firewalls. Read more www.theregister.co.uk: Netscape blows off new vuln warning. Read more online.securityfocus.com: WinAmp's 'malicious MP3' vuln. Read more zdnet.com.com: WinAmp bug opens door to MP3 viruses. Read more www.computeruser.com: NY Times readers can't digest klez worm. Read more www.computeruser.com: Security firm's site preview marred by Nimda worm. Read more www.computeruser.com: Does your modem have loose lips? Read more online.securityfocus.com: Hackers Continue 'Early Warning' Attacks On U.S. Web Sites. Read more www.internetnews.com: AIM Today Gets Hacked. Read more www.internetnews.com: Beware! Your PC Could Be Bugged. Read more www.informationweek.com: U.S. military cadets compete in the second-annual Cyber Defense Exercise. Read more

Copyright� MegaSecurity.org