Bookmark or link to: www.kobayashi.cjb.net. All other url`s could change!

Home   News Archive    Translate Traducen

News July 2002

30 July 2002 New Trojans: R0xR4t 1.0 Beta 1 Kryptonic Ghost 0.4b Cabronator 1.0 Tools: www.taltech.com: TALBreakout! software is a powerful serial diagnostics tool to allow the user to easily debug 2-way serial communications. Read More freshmeat.net: BlackHole Spam/Virus Filter 0.9.121 (Stable). Read More Vulnerabilities & Exploits: www.securitytracker.com: Microsoft Outlook Express Flaw in Parsing XML Using Internet Explorer Allows a Remote User to Silently Deliver and Install an Executable on a Target User's Computer. Read More www.iss.net: Linux tip flock() /var/log/acculog denial of service. Read More www.securitytracker.com: phpBB Bulletin Board 'Gender Mod' Profile Modification Input Validation Flaw Lets Remote Authenticated Users Gain Administrative Privileges on the Bulletin Board. Read More www.securitytracker.com: D-Link DP-300+ Print Server Can Be Crashed By Remote Users. Read More www.securitytracker.com: Lucent Access Point Routers Can Be Crashed By Remote Users Sending a Large HTTP GET Request to the Web Management Interface. Read More www.securitytracker.com: Brother NC-3100h Print Server Can Be Crashed By Remote Users Sending a Large Password to the Web Interface. Read More www.securitytracker.com: Easy Guestbook CGI Script Access Validation Flaw Gives Remote Users Administrative Access. Read More www.securitytracker.com: Easy Homepage Creator Access Control Flaw Lets Remote Users Edit Other Users' Home Pages. Read More www.securitytracker.com: HP ProCurve Switch Can Be Crashed By Remote Users Attempting to Set a Particular SNMP Write Variable. Read More www.securitytracker.com: HP Printers Running JetDirect Disclose Administrative Passwords to Remote Users. Read More www.securitytracker.com: HP ChaiVM Java Virtual Machine Access Control Flaws Let Users Add, Delete, and Modify Chai Services. Read More www.securitytracker.com: Cisco IOS Buffer Overflow in Processing TFTP File Names May Let Remote Users Cause IOS-based Devices to Crash. Read More www.securitytracker.com: SEH IC-9 Pocket Print Server Can Be Crashed By Remote Users Sending a Large Password to the Web Interface. Read More www.securitytracker.com: Lucent (Ascend) Pipeline Router Discloses System Information to Remote Users via Undocumented Protocol. Read More www.securitytracker.com: Lucent (Ascend) MAX Universal Gateway Discloses System Information to Remote Users via Undocumented Protocol. Read More www.securitytracker.com: Lucent VPN Firewall Brick Weakness in Processing the ARP Protocol Lets Remote Users on the Local Network Disrupt Management Communications. Read More www.securiteam.com: Brother NC-3100h Buffer Overflow Vulnerability. Read More www.securiteam.com: phpBB's Gender Mod Allows Gaining Administrative Privileges. Read More News: www.usatoday.com: Klez: The computer worm that keeps on giving. Read More www.theregister.co.uk: Wi-Fi honeypots a new hacker trap. Read More www.vnunet.com: Bin Laden hunt enters cyberspace. Read More www.varbusiness.com: Finding Linux Security Holes. Read More seattletimes.nwsource.com: Cyberinsurance may cover damage of computer woes. Read More www.fcw.com: Rep. Smith sounds cyberalarm. Read More www.wired.com: Fluffy Bunny No Longer Energized. Read More www.dallasnews.com: Prying Princeton officers focused on 2. Read More www.infoworld.com: Microsoft taps academics on security. Read More

29 July 2002 New Trojans: EES Polymorphic Downloader LANfiltrator Beta 4 QRoject WebDownloader 2.0 (a) Tools: www.nmapwin.org: NMapWin1.2.13 released. Read More freshmeat.net: Linux Firewall 2.0rc3. Read More freshmeat.net: FIAIF is an Intelligent Firewall 1.1.3. Read More Vulnerabilities & Exploits: online.securityfocus.com: Cisco IOS TFTP Server Long File Name Buffer Overflow Vulnerability. Read More online.securityfocus.com: SEH IC9 Pocket Print Server Web Administrative Interface Password Denial Of Service Vulnerability. Read More www.securitytracker.com: OpenRatings Voting Software Input Validation Flaw Lets Remote Users Execute Arbitrary SQL Statements on the System. Read More www.securitytracker.com: Confixx Service Provider Customer Management Interface May Let Remote Users Execute Arbitrary Commands on the System. Read More www.securitytracker.com: Ipswitch IMail Server Buffer Overflow in Web Messaging Daemon Lets Remote Users Execute Arbitrary Code and Gain System Level Access. Read More www.securitytracker.com: SSH Communications SSH Secure Shell on IBM AIX Systems Lets Authenticated Remote Users Escape Their 'chroot' Directory. Read More www.securitytracker.com: Jana Server Has Multiple Buffer Overflows and Other Bugs That Allow Remote Users to Crash the Server. Read More News: www.computeruser.com: Gates pushes Microsoft's .NET strategy. Read More www.bayarea.com: Hacking, hijacking our rights. Read More www.smh.com.au: Secure site seals may be misleading: Netcraft. Read More www.computeruser.com: Computer Associates proxy fight ends. Read More www.computeruser.com: Critics blast IT Loophole in Homeland Security plan. Read More

28 July 2002 New Trojans: Silent Spy 2.08 Pinochet 1.01 R0xr4t 1.0 Tools: alpinista.dyndns.org: Tiny Honeypot - resource consumption for the good guys. Read More freshmeat.net: BlackHole Spam/Virus Filter 0.9.120 (Stable). Read More condor.gmu.edu: The Logging Project was born out of a need for secure, centralized, fault tolerant, real time logging. Read More Vulnerabilities & Exploits: online.securityfocus.com: T. Hauck Jana Server FTP Server PASV Mode Port Exhaustion Denial Of Service Vulnerability. Read More www.securiteam.com: HP ProCurve Switch Denial of Service Attack. Read More www.securiteam.com: ChaiVM Multiple Security Vulnerabilities. Read More www.securiteam.com: HP Network-Enable Printers (JetDirect) Password Exposure. Read More www.securiteam.com: Ascend's Undocumented Protocol Allows Unauthorized Modifications. Read More www.phenoelit.de: Access Point IP Services Router. Read More www.securitytracker.com: ICQ Instant Messaging Client Software Can Be Crashed By a Remote User Sending a Message With a Large Number of Graphical 'Smiles'. Read More www.securitytracker.com: Mailman E-mail Discussion List Software Has More Input Validation Holes That Allow Remote Users to Conduct Cross-Site Scripting Attacks. Read More www.securitytracker.com: KaZaA Media Desktop File Sharing Program Can Be Crashed By Remote Users Sending Large Messages. Read More www.securitytracker.com: StatsPlus Web Server Statistics Package Allows Remote Users to Inject Arbitrary Script Commands into the Statistics Log and Conduct Cross-site Scripting Attacks. Read More www.securitytracker.com: CacheFlow CacheOS Input Validation Flaw Allows Remote Users to Conduct Cross-site Scripting Attacks. Read More www.securitytracker.com: ezContents Web Content Management System Contains Multiple Flaws That Allow Remote Users to Create or Delete Directories and Inject SQL Commands and Allow Remote Authenticated Users to View Files on the System. Read More www.securitytracker.com: Mozilla Web Browser Allows Javascript Code to Read and Modify Cookies from Other Domains. Read More www.securitytracker.com: Sun Cobalt Qube 3 Appliance Access Control Bugs Let Remote Users Access New User Accounts or Delete Files on the System and Let Local Users Gain 'Admin' Privileges. Read More www.securitytracker.com: Novell GroupWise Mail Service Buffer Overflow Lets Remote Users Crash the Service and May Allow Arbitrary Code to Be Executed. Read More www.securitytracker.com: W3Mail May Disclose MIME Attachments to Remote Users and May Allow Remote Users to Execute Arbitrary Code. Read More News: www.theregister.co.uk: What's wrong with this JPEG picture? Read More www.it-director.com: US union defends hacker code. Read More www.wired.com: The Dark Side of Hacking Bill. Read More www.theregister.co.uk: Congress blasts Feds on cyber-terror FOIA games. Read More zdnet.com.com: The week in review: PCs under attack. Read More zdnet.com.com: Microsoft begins to clean out Hotmail. Read More www.theregister.co.uk: Ethical hacker faces war driving charges. Read More zdnet.com.com: Open-source guru backs off DVD hack. Read More

27 July 2002 New Trojans: Lame WebDownloader 0.1 In Route To The Hell 1.0 G.R.O.B. 1.0 Vulnerabilities & Exploits: www.securitytracker.com: VMware GSX Server Buffer Overflow in VMware Authorization Service 'GLOBAL' Parameter Lets Remote Users Execute Arbitrary Code. Read More www.securitytracker.com: Microsoft Data Engine (MSDE) Buffer Overflow in Database Consistency Checker May Let Remote Authenticated Users Execute Arbitrary Code with the Privileges of the Database Service. Read More www.securitytracker.com: Microsoft SQL Server Buffer Overflow in Database Consistency Checker May Let Remote Authenticated Users Execute Arbitrary Code with the Privileges of the Database Service. Read More www.securitytracker.com: Microsoft SQL Server Resolution Service Buffer Overflows Let Remote Users Execute Arbitrary Code with the Privileges of the SQL Service. Read More www.securitytracker.com: Microsoft Exchange Server Buffer Overflow in Processing SMTP EHLO Command Lets Remote Users Execute Arbitrary Code on the Server with System Level Privileges. Read More www.securitytracker.com: Microsoft Metadirectory Services Authentication Flaw May Let Remote Users Modify Data and Obtain Elevated Privileges on the System. Read More www.securitytracker.com: Pegasus Mail Bug in Processing 'From' and 'To' Headers Lets Remote Users Send Mail to Crash the Recipient's Pegasus Mail Client. Read More www.securitytracker.com: ClickCartPro E-Commerce Software Configuration Error May Disclose Administrator Password to Remote Users. Read More www.securitytracker.com: ZyXEL Prestige Routers Can Be Made to Temporarily Stop Processing Traffic By Remote Users Sending Certain Fragmented Packets. Read More www.securiteam.com: IPSwitch IMail Multiple Security Vulnerabilities (GET, HTTP/1.0). Read More online.securityfocus.com: VisualShapers ezContents Multiple Vulnerabilities. Read More online.securityfocus.com: CascadeSoft W3Mail Predictable File Attachment Location Vulnerability. Read More www.securiteam.com: Multiple Vulnerabilities in JanaServer. Read More www.securiteam.com: Confixx Vulnerability Allows Attacker Remote Control of the SQL Server. Read More News: www.nwfusion.com: Microsoft offers plug for 'critical' SQL Server holes. Read More www.ipsos-reid.com: U.S. Businesses at Risk for Major Cyber Attack, IT Pros Say. Read More www.politechbot.com: Peer-to-peer hacking bill officially introduced in House. Read More www.fcw.com: Deal struck for security alerts. Read More www.theregister.co.uk: Big software pushes hard for national Gestapo. Read More www.infoworld.com: Reactivity targets secure XML message routing. Read More www.internetwk.com: Study: Routers, Firewalls Can't Handle XML Traffic. Read More www.networknews.co.uk: Firewalls: The soft option. Read More www.networknews.co.uk: Princeton and Yale in hacking spat. Read More

26 July 2002 New Trojans: LANfiltrator Beta 3 iwAnywhere 1.0 WMFA Vulnerabilities & Exploits: online.securityfocus.com: Zyxel Prestige 642R Router Malformed TCP Packet Denial Of Service Vulnerability. Read More online.securityfocus.com: VMWare GSX Server Authentication Server Buffer Overflow Vulnerability. Read More online.securityfocus.com: ICQ 2001/2002 Malformed Message Denial Of Service Vulnerability. Read More online.securityfocus.com: Mozilla JavaScript URL Host Spoofing Arbitrary Cookie Access Vulnerability. Read More online.securityfocus.com: TightVNC Repeated Challenge Replay Attack Vulnerability. Read More www.securitytracker.com: SoulSeek File Sharing Bug May Cause 'Unshared' Subdirectories to Be Shared In Certain Situations. Read More www.securitytracker.com: OpenSSH's Secure Shell (SSH) Implementation Weakness May Disclose User Passwords to Remote Users During Man-in-the-Middle Attacks. Read More www.securitytracker.com: SSH.com's Secure Shell (SSH) Implementation Weakness May Disclose User Keys to Remote Users During Man-in-the-Middle Attacks. Read More www.securitytracker.com: VanDyke Software's SecureCRT SSH Client Buffer Overflow Lets Malicious Remote Servers Execute Arbitrary Code on the Client. Read More www.securitytracker.com: SmartMax Software's MailMax POP Server Buffer Overflow in Processing 'USER' Argument Lets Remote Users Execute Arbitrary Code on the System. Read More www.securitytracker.com: Sun Fire Server Software Has Unspecified Access Control Flaw That May Let Local Users Cause the System to Become Unavailable. Read More www.securiteam.com: Novell GroupWise 6.0.1 Support Pack 1 Buffer Overflow. Read More www.securiteam.com: Heap Overflow in Solaris cachefs Daemon. Read More www.securiteam.com: Authentication Flaw in Microsoft Metadirectory Services Could Allow Privilege Elevation. Read More www.securiteam.com: Microsoft SQL Server 2000 Unauthenticated System Compromise. Read more www.securiteam.com: Server Response to SMTP Client EHLO Command Results In Buffer Overrun. Read More www.securiteam.com: Cobalt Qube 3 Administration Page Insecurity. Read More News: www.zdnet.com: Microsoft stomps on swarm of bugs. Read More www.theregister.co.uk: MS goes security patch crazy. Read More www.zdnet.com: MS: Full steam ahead!... Hollywood hacking?... SQL Server holes. Read More www.washingtonpost.com: Yale Accuses Princeton of Hacking. Read More arstechnica.infopop.net: Hacking is illegal unless you have a strong lobby. Read More techupdate.zdnet.co.uk: Hackers use Wi-Fi invisibility cloak. Read More www.zdnet.com: Gates: The state of .Net. Read More www.newsfactor.com: Daily CyberCrime and Security Report for July 25, 2002. Read More www.idg.net: PGP on shaky ground. Read More

25 July 2002 New Trojans: Cyn 2.2 Ultimate RAT 2.1 DataRape 1.0 Vulnerabilities & Exploits: www.securiteam.com: Arbitrary Code Execution Vulnerability in VanDyke SecureCRT. Read More www.securiteam.com: How to Reproduce PHP Segfault. Read More bvlive01.iss.net: Remote Buffer Overflow Vulnerability in Microsoft Exchange Server. Read More online.securityfocus.com: SecureCRT SSH1 Identifier String Buffer Overflow Vulnerability. Read More online.securityfocus.com: SmartMax MailMax Popmax Buffer Overflow Vulnerability. Read More www.securitytracker.com: Pablo FTP Server Discloses Files and Directories on the System to Remote Authenticated Users, Including Anonymous Users. Read More www.securitytracker.com: PHP Flaw in Processing Multipart/Form-Data May Let Remote Users Execute Arbitrary Code on the Server. Read More www.securiteam.com: InterNIC Vulnerable to Cross Site Scripting. Read More www.securiteam.com: SSH Protocol Weakness Vulnerability (MITM). Read More www.securiteam.com: VMWare GSX Server Remote Buffer Overflow. Read More www.securiteam.com: Pablo Software Solutions FTP server Directory Traversal Vulnerability. Read More www.securiteam.com: Why Pressing CTRL in IE is Dangerous. Read More News: Microsoft Security Bulletin MS02-032 26 June 2002 Cumulative Patch for Windows Media Player (Q320920). Read More Microsoft Security Bulletin MS02-036 Authentication Flaw in Microsoft Metadirectory Services Could Allow Privilege Elevation (Q317138). Read More Microsoft Security Bulletin MS02-037 Server Response To SMTP Client EHLO Command Results In Buffer Overrun (Q326322). Read More Microsoft Security Bulletin MS02-038 Unchecked Buffer in SQL Server 2000 Utilities Could Allow Code Execution (Q316333). Read More Microsoft Security Bulletin MS02-039 Buffer Overruns in SQL Server 2000 Resolution Service Could Enable Code Execution (Q323875). Read More www.theregister.co.uk: Congress to turn hacks into hackers. Read More www.businessweek.com: GAO: U.S. Cyber Security Efforts are Uncoordinated. Read More www.ctnow.com: Computer Secrecy Proposals Debated. Read More www.informationweek.com: Experts Seek Liability Protections To Improve Cybersecurity. Read More www.theregister.co.uk: WebTV 911 exploit causes confusion. Read More

24 July 2002 New Trojans: Al-Bareki. Thanks to Unlight. Sphere 2.0 DNS 0.1 Vulnerabilities & Exploits: online.securityfocus.com: Sun PC NetLink Backup Restoration ACL Permissions Vulnerability. Read More online.securityfocus.com: PHP HTTP POST Incorrect MIME Header Parsing Vulnerability. Read More online.securityfocus.com: PHP Interpreter Direct Invocation Denial Of Service Vulnerability. Read More online.securityfocus.com: Pyramid BenHur Default Firewall Weakness. Read More www.securitytracker.com: Working Resources BadBlue Web Server Uses Weak Administrator Authentication Method That May Allow Remote Users to Execute Arbitrary Commands on the System. Read More www.securitytracker.com: TrendMicro InterScan VirusWall Bug in Processing Malformed MIME Headers Allows Malicious Attachments to Bypass the Virus Filtering. Read More News: www.phrack.org: Hacker magazine PHRACK #59 released. Read More www.theregister.co.uk: Sir Dystic steps up, clears air. Read More www.2600.com: H2K2 PICTURES/FEEDBACK SOUGHT. Read More online.securityfocus.com: Find a Bug? Don't E-Mail Microsoft. Read More online.securityfocus.com: Detecting and Removing Malicious Code. Read More techupdate.zdnet.co.uk: Microsoft talks the talk on security. Read More www.osopinion.com: Will Hackers Unite and Take Over? Read More www.zdnet.com: Here's one more trick up hackers' sleeves. Read More hoovnews.hoovers.com: Hacker nabbed for Bt1.8m scam. Read More itmanagement.earthweb.com: Coming Soon: Attack Of The Super Worms. Read More slashdot.org: WebTV/MSNTV Virus Dials 911. Read More www.cioinsight.com: Wireless (In)security: Are Your Networks Snoop-Proof? Read More

23 July 2002 New Trojans: Lithium 1.02 SuperMM 1.2 Dimbus 1.0 Vulnerabilities & Exploits: online.securityfocus.com: Microsoft Outlook Express Spoofable File Extensions Vulnerability. Read More online.securityfocus.com: Working Resources BadBlue Administrative Interface Arbitrary File Access Vulnerability. Read More Internet Security Systems Security Alert: Remote Compromise and Denial of Service Vulnerability in PHP. Read More www.securiteam.com: Nanog Traceroute Format String Exploit. Read More www.securiteam.com: ClickCartPro Security Vulnerability (Misconfiguration). Read More www.securiteam.com: Oracle Reports Server Information Disclosure. Read More www.securiteam.com: Additional Details Released on PHP Security Vulnerability in Multipart FORM Data Handling. Read More www.securiteam.com: PHP Security Vulnerability in Multipart FORM Data Handling. Read More www.securiteam.com: Pyramid BenHur Firewall Active FTP Portfilter Ruleset Results in a Firewall Leak. Read More www.securiteam.com: Oddsock Playlist Generator Multiple Buffer Overlow Vulnerability. Read More News: online.securityfocus.com: GAO: U.S. Cyber Security Efforts are Uncoordinated. Read More www.theregister.co.uk: Serious PHP vuln reported. Read More www.neowin.net: Hard disk will have hackers seeing double. Read More www.atnewyork.com: Is Anti-Virus Software Obsolete? Read More www.theregister.co.uk: Ex-Microserf Schmidt as govt cyberterror Cassandra. Read More

22 July 2002 New Trojans: TheefLE 1.11 PSYchoFiles 1.9 Arturik 1.0 Vulnerabilities & Exploits: www.securitytracker.com: Microsoft Outlook Express (and Possibly Outlook) Has File Attachment Name Bugs That Let Remote Users Send Malicious Mail to Bypass Attachment Type Filters and Modify the Apparent File Name and File Size. Read More online.securityfocus.com: Adobe eBook Reader File Restoration Privilege Escalation Vulnerability. Read More www.securitytracker.com: BadBlue File Sharing Web Server File Path Input Validation Bug Lets Remote Users Conduct Cross-Site Scripting Attacks Against BadBlue Users. Read More www.securitytracker.com: UnrealIRCd Chat Server May Let Remote Authenticated Users Crash the IRC Service. Read More www.securiteam.com: PHP Resource Exhaustion Denial of Service. Read More www.securiteam.com: Geeklog XSS and CRLF Injection. Read More News: www.cipherwar.com: Web Hacking: Attacks and Defense. Read More arstechnica.infopop.net: Yahoo filters modify attachments to battle viruses. Read More www.fcw.com: Feds endorse guide for Windows security. Read More zdnet.com.com: Bracing for an Internet disaster. Read More www.theregister.co.uk: Inventor of Risc chips dies. Read More

21 July 2002 New Trojans: Jannet Remote Keylogger 4.20 NetCat32 Helios 1.7 Tools: www.insecure.org: Nmap 2.99RC1 Released. Read More freshmeat.net: Linux Firewall 2.0rc2. Read More Vulnerabilities & Exploits: www.securitytracker.com: Geeklog Weblog Software Input Filtering Bug in 'Stories' and 'Comments' Lets Remote Users Conduct Cross-site Scripting Attacks. Read More www.securitytracker.com: Sun Solaris PC NetLink Software May Not Retain Access Control List Permissions When Restored After a Backup. Read More www.securitytracker.com: Fastlink Software 'TheServer' Web Server Access Bug May Let Remote Users View Log File Access Passwords. Read More www.securitytracker.com: World Wide Web Offline Explorer (WWWOFFLE) Proxy Buffer Overflow May Let Remote Users Execute Arbitrary Code on the System. Read More www.securitytracker.com: Oracle Reports Server Discloses System Information to Remote Users. Read More www.securitytracker.com: MERCUR Mailserver Buffer Overflow in Authenticating Access to the Control-Service Lets Remote Users Execute Arbitrary Code with the Privileges of the Mail Server. Read More www.securitytracker.com: HP Instant Support Enterprise Edition (ISEE) Application Bug Lets Remote Authenticated Users Gain Access to Restricted Files. Read More News: www.siliconvalley.com: Delaware college student charged with hacking university system to give herself As. Read More www.pcworld.com: Online Security Incidents Jump in 2002. Read More online.securityfocus.com: Why Microsoft's Palladium project threatens to send Linux and open-source into exile. Read More

20 July 2002 New Trojans: Msnspider 1.3 Network Terrorist 1.3 Luzak 1.0 Vulnerabilities & Exploits: cert.uni-stuttgart.de: CRLF Injection. Read More online.securityfocus.com: Trend Micro InterScan VirusWall Space Gap Scan Bypass Vulnerability. Read More online.securityfocus.com: Andrew Bishop WWWOFFLE Negative Content-Length Buffer Overflow Vulnerability. Read More online.securityfocus.com: Oracle Reports Server Information Disclosure Vulnerability. Read More www.securitytracker.com: Caucho Resin Web Server Discloses Physical Path of Web Root Directory to Remote Users. Read More www.securitytracker.com: W3C Jigsaw Web Server Bugs in Processing Device Requests Let Remote Users Crash the Web Service and Determine the Web Root Directory Path. Read More www.securitytracker.com: Macromedia Sitespring Content Management Server Default Error Page Input Validation Flaw Lets Remote Users Conduct Cross-site Scripting Attacks. Read More News: techupdate.zdnet.com: Like it or not--we need Microsoft's security initiative. Read More zdnet.com.com: The world according to Bill Gates. Read More www.siliconvalley.com: Dave Barry: Spam beats cafeteria food. Read More www.eweek.com: Shavlik Upgrades Patch Inspection Tool. Read More www.theregister.co.uk: Bill Gates spams the world on Trustworthy Computing. Read More www.osopinion.com: The Mac: Worm in the Apple. Read More www.extremetech.com: Army Research Web Site Hacked. Read More www.newsfactor.com: Are Hacking Defenses Winning the War? Read More www.theregister.co.uk: ElcomSoft rubbishes eBook security ahead of Sklyarov case. Read More www.csds.uidaho.edu: Workshop on Computer Forensics as part of a DoD grant at the University of Idaho. Read More www.eweek.com: PKWare Encrypts Compressed Files. Read More www.theregister.co.uk: China to build own version of Windows 98. Read More www.theregister.co.uk: Dutch judge tears up bulk mail ban. Read More

19 July 2002 New Trojans: Remote-Anything 3.5.9 NeoArk 1.9 AutoSpY 1.2.2 Apocalipse Vulnerabilities & Exploits: www.securiteam.com: TrendMicro's VirusWall Space Gap (Exploit). Read More www.securitytracker.com: Oddsock Song Requester Playlist Generator for Winamp Has Buffer Overflows Let Remote Users Crash the Winamp Media Server. Read More www.securitytracker.com: HP-UX RFC-Netbios Daemon Can Be Crashed By Remote Users Sending Malformed Packets. Read More www.securitytracker.com: Double Choco Latte Input Validation Flaws Let Authenticated Remote Users View Files on the Server and Remote Users Conduct Cross-site Scripting Attacks Against Other Users. Read More www.securitytracker.com: HP (Compaq) Tru64 'ipcs' Utility Buffer Overflow May Let Local Users Gain Elevated Privileges. Read More www.securiteam.com: Buffer Overflow in AnalogX Proxy and NEC Socks5. Read More www.securiteam.com: Lil'HTTP Pbcgi.cgi XSS Vulnerability. Read More www.securiteam.com: Three New BadBlue Vulnerabilities. Read More www.securiteam.com: NOLA Arbitrary Code Execution (Via File Upload). Read More www.securiteam.com: phpSquidPass Software Design Error. Read More www.securiteam.com: Serious Flaw in Unreal IRCd (Server Linking, Svsnick). Read More www.securiteam.com: PHP fopen() Warning Cross-Site Scripting Vulnerability. Read More News: www.hindustantimes.com: Gates says Microsoft security push cost $100 million. Read More www.zdnet.com: Tighter PC security... Encrypt your laptop... Pittman leaving AOL. Read More www.pcworld.com: Online Security Incidents Jump in 2002. Read More www.pcworld.com: Hackers Tackle Censorship With New Tool. Read More www.businessweek.com: Hackers Say They Want a Revolution. Read More abcnews.go.com: Should Hackers Go to Prison for Life? Read More www.azcentral.com: Yahoo changes e-mail text to block hackers. Read More www.computerworld.com: Hackers to corporate America: You're lazy. Read More

18 July 2002 New Trojans: Diablo Keys 2.2 HVL-Rat 6.0.0b Uprising 1.0 Vulnerabilities & Exploits: hickory.csc.ncsu.edu: Just another beginners' tutorial on Buffer Overflows ver 1. Read More www.securiteam.com: Stealing Hotmail.com Cookie and User Login. Read More www.securitytracker.com: Norton Personal Firewall Buffer Overflow in HTTP Proxy May Allow Remote Users to Execute Arbitrary Code on the System. Read More www.securitytracker.com: Norton Internet Security Buffer Overflow in HTTP Proxy May Allow Remote Users to Execute Arbitrary Code on the System. Read More online.securityfocus.com: Tru64 IPCS Buffer Overflow Vulnerability. Read More online.securityfocus.com: Tru64 InetD Denial Of Service Vulnerability. Read More online.securityfocus.com: Thorsten Korner 123tkShop Arbitrary File Include Vulnerability. Read More online.securityfocus.com: Thorsten Korner 123tkShop SQL Injection Vulnerability. Read More www.securiteam.com: Multiple Buffer Overflow Found in Novell Netmail. Read More www.securiteam.com: Jigsaw Webserver Path Disclosure. Read More www.securiteam.com: Macromedia Sitespring Cross-Site Scripting. Read More www.securitytracker.com: Caldera OpenServer UNIX-to-UNIX System Command Execution Utility 'uux' Has Buffer Overflow That Lets Local Users Grab Root. Read More www.securitytracker.com: IBM's Tivoli Management Framework Endpoint and ManagedNode Component Buffer Overflows Let Remote Users Crash the Service and Execute Arbitrary Code with High Privileges. Read More www.securitytracker.com: Novell NetMail Buffer Overflows Let Remote Users Crash the Service and Reboot the Server. Read More www.securitytracker.com: RealOne Player and RealJukebox 2 Buffer Overflow and Use of Predictable Temporary Files Lets Remote Users Cause Arbitrary Code to Be Executed on the Victim's Computer. Read More www.securiteam.com: Resin DOS Device Path Disclosure. Read More www.securiteam.com: Jigsaw Webserver DOS device DoS. Read More www.securiteam.com: Wiki Module PostNuke Cross-Site Scripting Vulnerability. Read More News: www.peek-a-booty.org: The goal of the Peekabooty Project is to create a product that can bypass the nation-wide censorship of the World Wide Web practiced by many countries. Read More zdnet.com.com: China scolded for Net censorship. Read More news.com.com: Is your cable guy a spy? Read More zdnet.com.com: U.S. wants your mailman to snoop on you. Read More www.theregister.co.uk: 'Hacker' security biz built on FBI snitches. Read More zdnet.com.com: Security filter: Yahoo edits e-mail. Read More

17 July 2002 New Trojans: Infinaeon Motalases Netsnooper GOLD 1.6.0 Vulnerabilities & Exploits: www.securiteam.com: Multiple Buffer Overflow Found in Novell Netmail IMAP Service. Read More www.securitytracker.com: BadBlue Web Server Can Be Crashed By Remote Users Sending Invalid Requests, Discloses Passwords to Local Users, and May Disclose Passwords and Files to Remote Users. Read More www.securitytracker.com: Apache 2.x Web Server ap_log_rerror() Function May Disclose Full Installation Path to Remote Users. Read More www.securitytracker.com: Northern Solutions Xeneo Web Server (aka WebMan Server) Lack of Input Validation Lets Remote Users View Files on the System. Read More www.securitytracker.com: Sun Volumen Management Daemon (vold) Buffer Overflow Lets Local Users Gain Root Privileges. Read More www.securitytracker.com: Adobe Content Server Implementation Flaws Let Remote Users Borrow All Copies of an E-Book for an Unlimited Time, Execute Arbitrary SQL Commands, and Conduct Cross-site Scripting Attacks. Read More www.securitytracker.com: Hosting Controller Web Hosting Software Access Control Hole Allows Remote Authorized Users to Change Other User Passwords. Read More News: news.independent.co.uk: Microsoft Palladium: Access denied! Read More news.bbc.co.uk: Hackers could face life in jail. Read More www.lasvegassun.com: Feds Devise Computer Security Program. Read More www.zdnet.com: How to protect yourself against worms of the future. Read More www.zdnet.com: New Windows XP on the way... Hackers get life... Bluetooth blues. Read More www.zdnet.com: Microsoft squashes Windows 2000 bugs. Read More www.theregister.co.uk: Frethem worm poses as Password file. Read More www.online.ie: O2 security bubble pricked. Read More rootprompt.org: Linux Security Modules: General Security Support. Read More www.counterpane.com: Phone Hacking: The Next Generation. Read More www.palecrow.com: Locking Down Your Daemons: An overview of 'chroot jailing' services in Linux. Read More www.microsoft.com: Best Practices for Preventing DoS/Denial of Service Attacks. Read More www.news24.com: Hacking in the name of security. Read More

16 July 2002 New Trojans: Iowa's Joke Maker Greek Hackers Rat 1.0 Ducktoy 1.1.1 Vulnerabilities & Exploits: www.atstake.com : Norton Personal Internet Firewall HTTP Proxy Vulnerability. Read More online.securityfocus.com: Working Resources BadBlue Null Byte File Disclosure Vulnerability. Read more online.securityfocus.com: Hosting Controller Hidden Field Password Changing Vulnerability. Read more online.securityfocus.com: Working Resources BadBlue Plain Text Password Storage Vulnerability. Read More News: news.com.com: House OKs life sentences for hackers. Read More Someone's Watching You: The Web's Secret Police. Read More www.wired.com: The Hackers Who Ate New York City. Read more www.hindustantimes.com: Hackers raise hell in name of security. Read More www.chron.com: Hackers plan to bypass government censorship. Read More www.wired.com: Whole Lot of Happy Hacker Campers. Read more news.com.com: Microsoft pulls Java from download page. Read more

15 July 2002 New Trojans: BackWindows 1.0 Katux Latinus 2.0 Ghost 2.3 mini server Vulnerabilities & Exploits: www.pivx.com: IE allows universal Cross Domain Scripting. Read More www.nextgenss.com: BULK INSERT Buffer Overflow. Read More www.securitytracker.com: Care 2002 Medical Application Input Validation Holes Let Remote Users View Files on the System and Execute SQL Commands. Read More www.securitytracker.com: Microsoft Foundation Classes (MFC) Information Server Application Programming Interface (ISAPI) 'mfc42.dll' Contains Buffer Overflows That Can Crash the System or Possibly Allow for the Remote Execution of Arbitrary Code. Read More www.securitytracker.com: Pingtel 'xpressa' Voice-over-IP (VoIP) Telephone Has Many Flaws That Allow Remote Users to Gain Full Control Over the Phone. Read More www.securitytracker.com: ATPhttpd Web Server Buffer Overflows Let Remote Users Execute Arbitrary Code on the Server. Read More www.securitytracker.com: RealOne Player and RealJukebox 2 Buffer Overflow and Use of Predictable Temporary Files Lets Remote Users Cause Arbitrary Code to Be Executed on the Victim's Computer. Read More www.securitytracker.com: Microsoft IIS SMTP Service Encapsulation Bug Lets Remote Users Relay Mail and Send SPAM Via the Service. Read More www.securiteam.com: The Adobe eBook Library's Multiple Vulnerabilities. Read More www.securiteam.com: MacOS X SoftwareUpdate Vulnerability. Read More News: www.siliconvalley.com: Hacker group targets countries that censor Internet. Read More www.hindustantimes.com: Hacker group targets countries that censor Internet. Read More www.vibrantmedia.com: PGP Vulnerable to Attack Via Outlook Plug-In. Read More

14 July 2002 New Trojans: DataRape 1.1 Uprising 1.1 Feap Tools: www.nmapwin.org: NMapWin 1.2.11 released. Read more www.cqure.net: SQL Server Password Auditing Tool. Read more violating.us: Bigeye - The Ghetto Honeypot Bigeye is a network utility dump, that can be run in multiple modes: sniffer, logging connections, and even emulating protocols such as HTTP or FTP. Read more Vulnerabilities & Exploits: www.securitytracker.com: MyNewsGroups :) PHP-based USENET News Client Bug Lets Remote Users Execute Arbitrary Code on the Server. Read more www.securitytracker.com: Entercept Agent May Disclose the Entercept Agent Password to Local Administrators During Installation. Read more www.securitytracker.com: IBM DCE Distributed File System (DFS) Web Secure Relative Path Bug Lets Local Users Execute Arbitrary Code on the System With the Privileges of the Web Server. Read more www.securitytracker.com: Ultrafunk's Popcorn E-mail Client Has Various Bugs That Allow a Remote User to Crash the E-mail Client. Read more www.securitytracker.com: Lil' HTTP Server 'pbcgi.cgi' Script Input Validation Flaw Allows Remote Users to Conduct Cross-site Scripting Attacks Against Web Server Users. Read more www.securitytracker.com: Sharp Zaurus PDA Includes an FTP Server That Does Not Require Authentication for Write Access With Root Privileges. Read more www.securitytracker.com: IBM AIX System Management Interface Tool (SMIT) Path Input Validation Flaw Lets Remote Authorized Users Execute Arbitary Binaries on the System. Read more www.securitytracker.com: Sun i-Runbook Input Validation Flaw Discloses Files on the System to Remote Users. Read more www.securiteam.com: Popcorn Security Vulnerabilities. Read more www.securiteam.com: Page Transitions Denial of Service Attack. Read more www.securiteam.com: RealONE Player Gold / RealJukebox2 Skin File Download Vulnerability. Read more www.securiteam.com: MFC ISAPI Framework Buffer Overflow (BadBlue PWS). Read more www.securiteam.com: IIS Microsoft SMTP Service Encapsulated SMTP Address Vulnerability. Read more www.securiteam.com: Cross-Site Scripting Vulnerability in Mewsoft Auction Script. Read more www.securiteam.com: Cross-Site Scripting Vulnerability in PHP Classifieds. Read more www.securiteam.com: Directory Traversal Vulnerability in SunPS iRunbook. Read more www.securiteam.com: Multiple Security Vulnerabilities in CARE 2002. Read more News: timesofindia.indiatimes.com: AT&T warns not to be duped by hackers. Read more www.osopinion.com: Time for a Spyware Takedown. Read more www.msnbc.com: Search engines slow on disclosure. Read more

13 July 2002 New Trojans: RemoteNC beta4 Zany 1.0 complete BackSocket 5.6 Vulnerabilities & Exploits: www.securiteam.com: IIS Administration Web Site Redirect Exploits. Read more www.securiteam.com: 2fax Local Exploit Code Released (-bpcx). Read more www.securiteam.com: Exploit Code Released for MFC ISAPI Framework Buffer Overflow (BadBlue PWS). Read more online.securityfocus.com: Sun i-Runbook Directory And File Content Disclosure Vulnerability. Read more www.securiteam.com: Multiple Vulnerabilities with Pingtel xpressa SIP Phones. Read more www.securiteam.com: Britcoun.org Cross Site Scripting via Wops.cgi. Read more www.securiteam.com: Brinkster Web Hosting Protected File Retrieval. Read more www.securiteam.com: ActivWebserver Cross Site Scripting Vulnerability. Read more www.securiteam.com: Northern Solutions WebMan Webserver Arbitrary File Disclosure. Read more www.securitytracker.com: Microsoft Internet Explorer Flaw in OBJECT Domain Security Enforcement Lets Remote Users Execute Code in Arbitrary Domains. Read more www.securitytracker.com: Apache Tomcat Java Server Allows Cross-Site Scripting Attacks. Read more www.securitytracker.com: Microsoft SQL Server Install Process May Disclose Sensitive Passwords to Local Users. Read more www.securitytracker.com: Fluid Dynamics Search Engine Input Validation Bug in 'Rank' Variable Lets Remote Users Conduct Cross-site Scripting Attacks. Read more www.securitytracker.com: Network Associates PGP Outlook Plug-in Buffer Overflow Lets Remote Users Send Malicious E-mail to Execute Arbitrary Code on the Recipient's Computer. Read more www.securitytracker.com: Common Desktop Environment (CDE) ToolTalk Server Input Validation and Symlink Bugs Let Local and Remote Users Obtain Root Privileges on the System. Read more www.securitytracker.com: Microsoft SQL Server Desktop Engine (MSDE) Buffer Overflow and Access Control Bug May Let Remote Authorized Users Execute Code with Elevated Privileges, Possibly Including Local System Privileges. Read more www.securitytracker.com: Microsoft SQL Server Buffer Overflow and Access Control Bug May Let Remote Authorized Users Execute Code with Elevated Privileges, Possibly Including Local System Privileges. Read more www.securitytracker.com: GoAhead Web Server Input Validation Bugs Disclose Files on the System to Remote Users and Also Permit Cross-Site Scripting Attacks. Read more www.securitytracker.com: Radio Community Server Default Configuration Lets Remote Users Create Users Accounts and Upload Arbitrary Files to the Server. Read more www.securitytracker.com: Carello Shopping Cart Input Validation Flaw in 'VBEXE' Parameter Lets Remote Users Cause Files on the Server to Be Executed. Read more www.cracked.ne: Remote DoS Against A Given Chat Client With the !seen Service. Read more www.via.ecp.fr: A list of not that well known numbers (like stack and heap start, for instance) on various Unix like operating systems and architectures. Read more News: Stegograms found on azzam.com Preliminary checking with a tool called stegdetect shows that a large number of images on azzam.com may have hidden information encoded using an algorithm called jphide. The site at http://66.197.135.110/~azzam has roughly 580 images and yields some 70 hits almost all for jphide. By Declan McCullagh. www.politechbot.com: Politech challenge: Decode Al Qaeda stego-communications! Read more www.politechbot.com: Declan McCullagh'sPolitech. Searching by date for matches of: steganography. Read more www.wired.com: Older News: Bin Laden: Steganography Master? Read more www.techfocus.org: McAfee admits antivirus software occasionally misses Klez worm. Read more www.theregister.co.uk: USA Today swats hack attack - but not entirely. Read more www.drudgereport.com: 'USA TODAY' WEBSITE HACKED; PRANKSTERS MOCK BUSH, CHRISTIANITY. Read more www.hindustantimes.com: Hackers put fake stories on USA Today Web site. Read more news.bbc.co.uk: Alert as hackers meet. Read more www.idg.net: Microsoft fails to use own security product. Read more www.theregister.co.uk: Attack of the Cyber-Terror Studies. Read more zdnet.com.com: Internet fridges--keeping viruses fresh? Read more www.themercury.news.com.au: Optus accounts hacked. Read more

12 July 2002 New Trojans: Vagr Nocker 2.0 Rorex Server (b) Qroject DualDownloader 1.0 Vulnerabilities & Exploits: online.securityfocus.com: Pacific Software Carello Shopping Cart Carello.DLL Remote Command Execution Vulnerability. Read more online.securityfocus.com: Apache Tomcat Servlet Mapping Cross Site Scripting Vulnerability. Read more online.securityfocus.com: Apache Tomcat DOS Device Name Cross Site Scripting Vulnerability. Read more online.securityfocus.com: HP Advanced Server/9000 RFC-NetBIOS Denial Of Service Vulnerability. Read more online.securityfocus.com: Microsoft Internet Explorer OBJECT Tag Same Origin Policy Violation Vulnerability. Read more www.securitytracker.com: Icecast Audio Streaming Server Discloses the Presence of Named Directories Located Anywhere on the System. Read more www.securitytracker.com: Netscape Enterprise Server Input Validation Bug in Search Function Discloses Files on the System to Remote Users. Read more www.securitytracker.com: iPlanet Web Server Input Validation Bug in Search Function Discloses Files on the System to Remote Users. Read more www.securitytracker.com: iPlanet Web Server Buffer Overflow in Search Function Lets Remote Users Execute Arbitrary Code on the Server. Read more www.securitytracker.com: WatchGuard Firebox VPN Management Function Can Be Crashed By Remote Users Sending Malformed Packets. Read more www.securitytracker.com: XSS Hole in Fluid Dynamics Search Engine. Read more www.securitytracker.com: Cisco VPN3000 Gateway MTU Overflow. Read more www.securitytracker.com: Multiple Security Vulnerabilities in Sharp Zaurus. Read more www.securitytracker.com: BULK INSERT Buffer Overflow. Read more www.securitytracker.com: Cumulative Patch for SQL Server. Read more www.securitytracker.com: SQL Server Installation Process May Leave Passwords on System. Read more www.securitytracker.com: Linux Kernels DoSable by File-max Limit. Read more News: Microsoft Security Bulletin MS02-034 Cumulative Patch for SQL Server (Q316333). Read more Microsoft Security Bulletin MS02-035 SQL Server Installation Process May Leave Passwords on System (Q263968). Read more zdnet.com.com: Holes put Linux handheld at risk. Read more zdnet.com.com: Flaw lets hackers pick Outlook locks. Read more www.internetnews.com: Windows Worm, Multiple Bugs Haunt MS Users. Read more www.feer.com: The Falun Gong hacks into state broadcasts and demonstrates its power to annoy the leadership. Read more www.internetwk.com: How Often Hackers Attack, And What They're After. Read more news.zdnet.co.uk: Australian telecoms hacker charged. Read more zdnet.com.com: Cyberterrorists don't care about your PC. Read more

11 July 2002 New Trojans: CRS-Gate 1.1 Infexor Server (b) XLog 2.21 Tool: www.insecure.org: Nmap 2.54BETA36 released. Read more Vulnerabilities & Exploits: CERT� Advisory CA-2002-19: Buffer Overflow in Multiple DNS Resolver Libraries. Read more Westpoint Security Advisory: Carello 1.3 Remote File Execution. Read more Westpoint Security Advisory: Apache Tomcat Cross Site Scripting. Read more Westpoint Security Advisory: GoAhead Web Server Directory Traversal + Cross Site Scripting. Read more online.securityfocus.com: Watchdog Firebox Dynamic VPN Configuration Protocol Denial Of Service Vulnerability. Read more www.securiteam.com: Exploit for Previously Reported DoS Issues in Shambala Server. Read more www.securitytracker.com: BadBlue Web Server Input Validation Flaw in cleanSearchString() Function Lets Remote Users Conduct Cross-Site Scripting Attacks Against BadBlue Users. Read more www.securitytracker.com: MyWebServer Buffer Overflow in Processing GET Requests Lets Remote Users Execute Arbitrary Code on the System. Read more www.securitytracker.com: PowerBASIC 'urlcount.cgi' Hit Counter Script Input Validation Flaw Lets Remote Users Conduct Cross-site Scripting Attacks. Read more www.securitytracker.com: 2fax File Conversion Utility Buffer Overflow in '-bpcx' Command Option Lets Local Users Execute Arbitrary Code With Elevated Privileges. Read more www.securiteam.com: iPlanet Search Buffer Overflow. Read more www.securiteam.com: WatchGuard Firebox Dynamic VPN Configuration Protocol DoS. Read more www.securiteam.com: IE Allows Universal Cross Domain Scripting. Read more www.securiteam.com: Remote PGP Outlook Encryption Plug-in Vulnerability. Read more www.securiteam.com: Multiple Vulnerabilities in ToolTalk Database Server. Read more News: online.securityfocus.com: Detecting and Containing IRC-Controlled Trojans: When Firewalls, AV, and IDS Are Not Enough. Read more news.com.com: New security flaw in Outlook, IE. Read more www.nikkeibp.asiabiztech.com: Virus Damage for First Half of 2002 Exceeds Entire Reports in 2001: Trend Micro. Read more www.theregister.co.uk: al-Qaeda poised to strike hard via the Internet. Read more www.washingtonpost.com: E-Mail Encrypting Program Suffers Flaw. Read more www.netimperative.info: Hacking - It will never happen to me. Read more www.themercury.news.com.au: Optus accounts hacked. Read more www.itweb.co.za: Crypto challenge has geeks scratching their heads. Read more www.theregister.co.uk: Cracking MS SQL Server passwords. Read more www.theregister.co.uk: Dutch ban virtual kinderporno. Read more

10 July 2002 New Trojans: InCommand1.7-b2 Kryptonic Ghost 1.3 QUetnek Server Tools: Senna Spy AVP Signature Offset Finder. This tool will help you to find what signature/position AVP uses for detecting viruses, worms and trojans. Download areyoufearless.com: YAB V2.00. A binder with a massive selection of features. All the features of before, plus many new features and improvements! Read more www.nmapwin.org: New version (1.2.8) of NMapWin released. Read more Vulnerabilities & Exploits: online.securityfocus.com: Key Focus KF Web Server Directory Contents Disclosure Vulnerability. Read more online.securityfocus.com: MacOS X SoftwareUpdate Arbitrary Package Installation Vulnerability. Read more www.securitytracker.com: KF Web Server Discloses Directory Listings for All Web Directory Contents to Remote Users. Read more www.securitytracker.com: Mac OS X SoftwareUpdate Feature Uses Unauthenticated Connections for Downloading and Automatically Installing Software Updates, Allowing Remote Users to Install Arbitrary Code on the System. Read more News: www.infoworld.com: Experts expect a major cyberattack. Read more www.nwfusion.com: President's advisor predicts cyber-catastrophes unless security improves. Read more rootprompt.org: Security in Open versus Closed Systems. Read more www.newsfactor.com: Apple Warned of Update Exploit. Read more www.eweek.com: iPlanet Web Server Vulnerable to Attackers. Read more www.voanews.com: Computer Hackers Beware! Read more rtnews.globetechnology.com: Israel tops hacker list. Read more news.zdnet.co.uk: Israel, Hong Kong: hacker hotbeds? Read more www.2600.com: MITNICK TO APPEAR AT "FREEDOM DOWNTIME" SCREENING IN LOS ANGELES. Read more news.ft.com: Falun Gong hacks into Chinese satellite TV broadcasts. Read more www.msnbc.com: China vows to catch satellite hackers. Read more

09 July 2002 New Trojans: InsultMedia Server DarkFace 2.1 HoneyPot 1.3 Vulnerabilities & Exploits: online.securityfocus.com: Webresolve Host Name Buffer Overflow Vulnerability. Read more online.securityfocus.com: KMMail Code Injection Vulnerability. Read more online.securityfocus.com: ROX-Filer Default World Writeable File Permissions Vulnerability. Read more online.securityfocus.com: Nagios Plugin Shell Character Arbitrary Command Execution Vulnerability. Read more online.securityfocus.com: Sun Solaris /dev/poll Null Pointer Dereference Denial Of Service Vulnerability. Read more www.securiteam.com: KCMS Configure Tool Security Vulnerability (Exploit). Read more www.securiteam.com: Technical Details of BadBlue EXT.DLL Vulnerability. Read more www.securiteam.com: KF Web server File and Directory Disclosure. Read more www.securiteam.com: Buffer Overflow in MyWebServer. Read more www.securiteam.com: BEA WebLogic Performance Pack Denial of Service. Read more www.securitytracker.com: 'artswrapper' Format String Hole Lets Local Users Gain Root Privileges. Read more www.securitytracker.com: XiRCON Internet Relay Chat (IRC) Client Connections Can Be Disabled By Remote Users Via an IRC Server. Read more www.securitytracker.com: Share360 Groupware Applications Allow Remote Users to Conduct Cross-site Scripting Attacks. Read more News: online.securityfocus.com: Internet Attacks On Companies Up 28 Percent, Report Says. Read more online.securityfocus.com: Show us the bugs - users want full disclosure. Read more online.securityfocus.com: Past its Prime: Is Anti-Virus Scanning Obsolete? Read more online.securityfocus.com: Life After AV: If Anti-Virus is Obsolete, What Comes Next? Read more zdnet.com.com: New worm eats into Kazaa. Read more www.eweek.com: Who's Watching Whom? Read more www.online.ie: Worm blocks access to The Register. Read more zdnet.com.com: Mid-year report: Win32 viruses rule. Read more www.news24.com: Hackers' paradise. Read more techupdate.zdnet.co.uk: Facing the security risks of cable modems. Read more southflorida.bizjournals.com: Hackers warn of 'crackers'. Read more www.cnn.com: Cyberattacks against energy firms rise. Read more news.com.com: Hacker to Apple: Watch those downloads. Read more

08 July 2002 New Trojans: HoneyPot 1.1 Paltalk Trojan for Pitbul 0.9 Vulnerabilities & Exploits: www.securiteam.com: Remote Winamp Exploit (Product Updates). Read more www.securiteam.com: XiRCON Vulnerable to a Denial of Service. Read more www.securitytracker.com: Winamp MP3 Media Player Buffer Overflow in Checking 'www.winamp.com' for New Versions Lets Remote Users Execute Arbitrary Code on the Player. Read more News: www.theage.com.au: X marks the spot for hackers. Read more www.dailytelegraph.co.uk: No escape from the spies that watch you 24 hours a day. Read more www.computeruser.com: EU warns Microsoft over 'interoperability' of security product. Read more www.newscientist.com: 'Hacktivists' to release covert communications tool. Read more

07 July 2002 New Trojans: Barisot Server Ma petite amie Harvester 3.0 Vulnerabilities & Exploits: online.securityfocus.com: Nullsoft Winamp Automatic Update Check Buffer Overflow Vulnerability. Read more www.securiteam.com: The Apache "APC" worm. Read more www.securiteam.com: Cisco Secure ACS UNIX Acme.server Information Disclosure Vulnerability. Read more www.securiteam.com: OpenSSH Challenge-Response Buffer Overflow (Update). Read more www.securiteam.com: Argosoft Mail Server Plus/Pro Webmail Reverse Directory Traversal. Read more www.securiteam.com: Remotely Exploitable Buffer Overruns in Microsoft's Commerce Server 2000/2. Read more www.securiteam.com: SunPCi II VNC Weak Authentication Scheme Vulnerability. Read more www.securiteam.com: NN Vulnerable to a Remote Format String Vulnerability. Read more www.securitytracker.com: Worldspan for Windows Gateway Software Can Be Crashed By Remote Users Sending Malformed Packets. Read more www.securitytracker.com: 'nn' News Reader Format String Hole Lets Remote Malicious News Server Execute Arbitrary Code on the Client. Read more News: www.europemedia.net: EU takes issue with Microsoft's security plan. Read more rtnews.globetechnology.com: Hacker raids banks, skips town. Read more www.computing.vnunet.com: Mitnick takes novel approach to hacking. Read more www.manchesteronline.co.uk: Hackers wipe out parking website. Read more slashdot.org: Falun Gong Hacks Chinese Satellite. Read more www.computing.vnunet.com: Stealth tool makes big entrance. Read more

06 July 2002 New Trojans: FoxEyes 2.0 CDU`s Backdoor Eurosol 6.0 Vulnerabilities & Exploits: online.securityfocus.com: BEA Systems WebLogic Server and Express Race Condition Denial of Service Vulnerability. Read more www.securitytracker.com: Squid Proxy Cache Has Buffer Overflows in Processing Gopher and FTP Data and May Incorrectly Forward Proxy Authentication Credentials to Remote Web Sites. Read more www.securitytracker.com: Kim Storm NN NNTP Error Message Format String Vulnerability. Read more www.securitytracker.com: Epic Games Unreal Tournament Server DoS Amplifier Vulnerability. Read more www.securitytracker.com: www.securitytracker.com: Sun Solaris Operating System gethostbyX() Functions May Allow Remote Users to Cause Certain Applications to Fail. Read more www.securitytracker.com: BEA WebLogic Server Race Condition May Let Remote Users Crash the Server. Read more www.securitytracker.com: Noguska's NOLA Web-based Accounting and Inventory Management Package Lets Remote Users Upload and Execute PHP Code. Read more www.securitytracker.com: Sun Virtual Network Computing Software (SUNWspvnc) for Sun's PCi Card Discloses the VNC Password to Remote Users, Offering System Access to Remote Users. Read more www.securitytracker.com: Macromedia JRun Java Server Authentication Process Can Be Bypassed By Remote Users By Adding an Extra '/' to the Administrative Server URL. Read more www.securitytracker.com: ArGoSoft Mail Server Input Validation Flaw Lets Remote Users View Files on the System. Read more www.securitytracker.com: Sun Solaris Operating System Bug in '/dev/poll' May Let Local Users Cause a Kernel Panic. Read more News: economictimes.indiatimes.com: Cult of the dead cow strikes India. Read more economictimes.indiatimes.com: Hacker swipes $35,000 from Sing bank. Read more www.ciol.com: Privacy at stake: The Carnivore is on the prowl. Read more news.zdnet.co.uk: KWBot worm hits Kazaa. Read more rootprompt.org: Linux Trojans/Malware? Read more www.smh.com.au: Exploiting DCOM To Spy On IE Users. Read more www.idg.net: Microsoft Needs Help for Security Plan to Fly. Read more www.iht.com: U.S. security plan omits a threat. Read more www.theregister.co.uk: Greek ban on gaming threatens Internet cafes. Read more www.theregister.co.uk: Council temp fired after virus outbreak. Read more

05 July 2002 New Trojans: DataRape 1.2 PSYchoFiles 1.81 HalloDoor Server Tool: securityfriday.com: IE'en remotely controls Internet Explorer using DCOM. Read more freshmeat.net: Mandrake Security tools 0.24. Read more Vulnerabilities & Exploits: online.securityfocus.com: ArGoSoft Mail Server Directory Traversal Vulnerability. Read more online.securityfocus.com: NEC Socks5 User Name Buffer Overflow Vulnerability. Read more online.securityfocus.com: NEC Socks4 User Name Buffer Overflow Vulnerability. Read more www.securitytracker.com: Lotus Domino Web Server R4 May Disclose Files in the Web Root Directory to Remote Users Via URL Requests Ending With a Question Mark. Read more www.securitytracker.com: Inktomi Traffic Edge Caching Server Buffer Overflow Lets Local Users Execute Arbitrary Code with Root Privileges. Read more www.securitytracker.com: Inktomi Traffic Server Network Cache Buffer Overflow Lets Local Users Execute Arbitrary Code with Root Privileges. Read more www.securitytracker.com: APC PowerChute Plus for Windows Default Configuration Creates a Shared Folder with World Writeable Permissions. Read more www.securitytracker.com: HP DCE Client Software Has Unspecified Security Hole That Allows Remote Users to Crash the DCE Daemon. Read more www.securitytracker.com: PhpAuction Authentication Hole Lets Remote Users Create Administrator Accounts on the Application. Read more www.securitytracker.com: CommuniGate Pro Messaging Server Discloses Certain Directory Contents to Remote Users. Read more www.securitytracker.com: Sun Solaris Unspecified Kernel Streams Bug May Let Local Users Access Data From the System Serial Console. Read more www.securitytracker.com: Slashcode 'Slash' Forum Input Validation Bug Lets Remote Users Conduct Cross-Site Scripting Attacks Against Slash Users. Read more www.securitytracker.com: Blackboard Learning and Community Portal System Input Validation Holes Let Remote Users Conduct Cross-site Scripting Attacks. Read more www.securitytracker.com: Cisco Secure Access Control Server for Unix Discloses Files on the System to Remote Users. Read more News: online.securityfocus.com: Web Server vulnerability reaches all time high. Read more www.virusbtn.com: Setting the record straight. "The Mental Driller", member of the 29A virus-writing group, denies working for any anti-virus company. Read more rtnews.globetechnology.com: Hotmail, AOL and anti-virus software. Read more zdnet.com.com: Fed-up customers want faster bug alerts. Read more zdnet.com.com: Microsoft teases 'Trustworthy Computing'. Read more www.silicon.com: Council worker fired for wreaking virus havoc. Read more www.vnunet.com: Publisher of hacker site surrenders. Read more

04 July 2002 New Trojans: XPosure 2.1 Aphex FTP Fonly Server (b) Vulnerabilities & Exploits: www.securiteam.com: SQL Injection Walkthrough. Read more www.securiteam.com: More Advanced SQL Injection Paper Released. Read more online.securityfocus.com: Slashcode Paragraph Tag Script Injection Vulnerability. Read more online.securityfocus.com: Blackboard Cross-Site Scripting Vulnerability. Read more www.securitytracker.com: AnalogX Proxy Server Buffer Overflow Lets Remote Users Execute Arbitrary Code on the System. Read more www.securitytracker.com: OmniHTTPd Web Server Bug in Processing Long HTTP Protocol Parameters Allows Remote Users to Crash the Web Service. Read more www.securitytracker.com: Betsie Text-to-Speech Enhancement Script Has Input Validation Holes That Let Remote Users Conduct Cross-site Scripting Attacks. Read more www.securitytracker.com: Macromedia JRun Server Bug in Processing Unicode Null Characters in URL Discloses JSP Source Code to Remote Users. Read more www.securitytracker.com: Macromedia Sitespring Content Management Server Can Be Crashed By Remote Users. Read more www.securitytracker.com: WatchGuard Firebox SOHO Default Configuration May Facilitate Brute Force Password Guessing Attacks on the Internal Interface. Read more www.securiteam.com: Lotus Domino Web Server File Retreival Vulnerability. Read more www.securiteam.com: Vulnerability Report for Inktomi Traffic Server. Read more News: www.timesonline.co.uk: In global trouble spots, cells of "hacktivists" are waging e-war on rival states. Read more www.ananova.com: Klez-H tops half-year virus chart. Read more www.pcworld.com: Why Is the Web More Vulnerable Than Ever? Read more www.informationweek.com: Chalk One Up For Free Wireless. Read more www.theregister.co.uk: Zimmermann calls for NAI to free PGP. Read more

03 July 2002 New Trojans: NetDevil 1.5 Smoke Downloader 1.1 Sonitro Server Vulnerabilities & Exploits: online.securityfocus.com: Macromedia Sitespring Database Engine Denial Of Service Vulnerability. Read more www.securiteam.com: TrendMicro's VirusWall Space Gap (Virus Protection Bypassing). Read more www.securitytracker.com: E-Guest Guestbook CGI Script Input Validation Hole Lets Remote Users Execute Shell Commands on the System and Also Conduct Cross-Site Scripting Attacks Against E-Guest Users. Read more www.securitytracker.com: Simple Wide Area Information Service (SWAIS) Input Validation Flaw Lets Remote Users Execute Shell Commands on the System. Read more www.securitytracker.com: ht://Dig Search Engine Software May Allow Cross-Site Scripting Attacks. Read more News: Microsoft Security Bulletin MS02-029 Unchecked Buffer in Remote Access Service Phonebook Could Lead to Code Execution (Q318138). Read more www.smh.com.au: Apache worm loose on the Net. Read more www.zdnet.com: How we could have prevented an Apache worm. Read more rtnews.globetechnology.com: CA issues Apache Worm warning. Read more www.pcworld.com: Klez: The Virus That Won't Die? Read more www.detnews.com: Microsoft security holes widen. Read more www.infoworld.com: DNS flaws put Net connected systems at risk. Read more www.theregister.co.uk: Bug puts Unix servers in a BIND. Read more www.msnbc.com: FBI To Valley: Tell Us About Attacks. Read more www.vnunet.com: Adding fuel to the firewall. Read more zdnet.com.com: Wireless attacks: Wave a white flag? Read more www.nzherald.co.nz: Modems in danger of hackers gaining entry. Read more www.vnunet.com: Computer viruses mimic real thing. Read more

02 July 2002 New Trojans: Glacier 8.0 PlayX Screen Cutter 1.0 Vulnerabilities & Exploits: online.securityfocus.com: E-Guest Guest Book Script Injection Vulnerability. Read more online.securityfocus.com: E-Guest Server Side Include Arbitrary Command Execution Vulnerability. Read more online.securityfocus.com: Zap Book Server Side Include Arbitrary Command Execution Vulnerability. Read more online.securityfocus.com: Zap Book Script Injection Vulnerability. Read more www.securitytracker.com: Bonobo 'efstool' Buffer Overflow Lets Local Users Execute Arbitrary Code to Gain Root Privileges. Read more www.securitytracker.com: OpenBSD UNIX Kernel ktrace(2) Function Allows Local Users to Trace Processes With Elevated Privileges. Read more bvlive01.iss.net: OpenSSH Remote Challenge Vulnerability. Read more www.securiteam.com: WatchGuard SOHO FTP Authentication Flaw. Read more www.securiteam.com: Macromedia JRun Admin Server Authentication Bypass. Read more www.securiteam.com: JRun Source Code Disclosure. Read more www.securiteam.com: Sitespring Server Denial of Service. Read more www.securiteam.com: 'WEB-INF' Folder Accessible in Multiple Web Application. Read more www.securiteam.com: Apache mod_ssl Off-by-One Vulnerability. Read more News: www.cnn.com: Book by outlaw hacker describes tricks of the trade. Read more news.zdnet.co.uk: Web ripe for massive worm attack. Read more www.smh.com.au: Apache worm loose on the Net. Read more news.com.com: Apache worm barely squirms. Read more www.pcworld.com: Worm Exploits Apache Vulnerability. Read more zdnet.com.com: Few signs of life in Apache worm. Read more www.smh.com.au: Klez tops virus stakes. Read more www.theregister.co.uk: Klez tops virus charts - again. Read more news.zdnet.co.uk: FBI overhauling 'broken' tech systems. Read more

01 July 2002 New Trojans: BlackHole 2000 QRoject WebDownloader 2.0a WebDownloader Shut-it 1.0 Vulnerabilities & Exploits: online.securityfocus.com: Bonobo EFSTool Commandline Argument Buffer Overflow Vulnerability. Read more www.securitytracker.com: Oracle Containers for J2EE (OC4J) Dot URL Bug Discloses Server Files to Remote Users. Read more www.securitytracker.com: PHP Ticket Cross Site Scripting Vulnerability. Read more www.securitytracker.com: Macromedia JRun Web Application Server Dot URL Bug Discloses Server Files to Remote Users. Read more www.securitytracker.com: HP Application Server Dot URL Bug Discloses Server Files to Remote Users. Read more www.securitytracker.com: Orion Application Server Dot URL Bug Discloses Server Files to Remote Users. Read more www.securitytracker.com: Pramati Server Java Web Application Server Dot URL Bug Discloses Server Files to Remote Users. Read more www.securitytracker.com: jo! Java Application Server Dot URL Bug Discloses Server Files to Remote Users. Read more www.securitytracker.com: Sybase EAServer Java Web Application Server Dot URL Bug Discloses Server Files to Remote Users. Read more www.securitytracker.com: Novell iManage for NetWare Lets Remote Users Crash the Service. Read more www.securitytracker.com: Half-Life Gaming Server Protocol Allows Remote Users to Deny Service to Other Players. Read more www.securitytracker.com: Ransom's Scripts 'whois' CGI Script Input Validation Flaw Lets Remote Users Execute Shell Commands on the Server. Read more www.securiteam.com: OpenBSD SSHd Remote Root Exploit. Read more www.securiteam.com: SSI & CSS Execution in E-Guest and ZAP Book. Read more www.securiteam.com: Simple WAIS Allows Users to Execute Commands as the SWAIS Daemon.. Read more News: www.sfgate.com: Security analysts dismiss fears of terrorist hackers Electricity, water systems hard to damage online . Read more www.smh.com.au: Worm hits Pakistan government site. Read more www.canada.com: Canada's hero hacker unmasked. Read more timesofindia.indiatimes.com: Pak claims Indian hackers blocked govt website. Read more www.cnet.com: Online hacker raids bank accounts. Read more

Copyright� MegaSecurity.org