Bookmark or link to: kobayashi.cjb.net. All other url`s could change!

Home   News Archive    Translate Traducen

News August 2003

29 august 2003 New Trojans: WinEggDrop Shell 1.35 Hacker defender 0.73 MagicLink 1.0 Tools www.kismetwireless.net: Kismet is an 802.11 wireless network sniffer. Read more packetstormsecurity.nl: Shatter attack exploit for DameWare Mini Remote Control Server. Download Guides, Papers, etc. packetstormsecurity.nl: Intrusion Agent. The Next Generation Of Spy (pdf). Read more Vulnerabilities & Exploits: www.securitytracker.com: Castle Rock SNMPc Yields Supervisor Privileges to Remote Users. Read more www.securitytracker.com: newsPHP Flaws in 'nphpd' Permit Remote Users to View and Execute Files and Execute Script Functions. Read more www.securitytracker.com: suidperl Discloses File Existence to Local Users. Read more www.securitytracker.com: Tellurian TftpdNT Buffer Overflow Lets Remote Users Execute Arbitrary Code. Read more www.securitytracker.com: PY-Membres Input Validation Flaw in 'pass_done.php' Permits SQL Injection. Read more www.securiteam.com: GtkFTPd Remotely Exploitable Buffer Overflow (Filename). Read more News: www.theregister.co.uk: Net anonymity service un-backdoored. Read more www.abc.net.au: NAB hit by scam email. Read more www.adn.com: Arrest planned in Internet virus attack. Read more www.smh.com.au: FBI to arrest teenager for creating Blaster worm. Read more www.9news.com: Computer hackers costing businesses billions. Read more www.smh.com.au: Anti-virus software 'causing more headaches than Sobig worm'. Read more www.startribune.com: Viruses might be outwitting individual computers. Read more www.ajc.com: Identity theft, scourge of information age, a threat here. Read more www.theregister.co.uk: AV bigwigs weigh in on Sobig debate. Read more www.computerworld.com: EarthLink sues spam, identity-theft rings. Read more www.eurekalert.org: Electricity grids left open to hackers. Read more

28 august 2003 New Trojans: SpyAnywhere 2.12.03 NetControl TakeOver 2.0 Espionage 1.0 Vulnerabilities & Exploits: www.securitytracker.com: MPCSoftWeb Forum Access Control Flaw Discloses Administrator and User Passwords to Remote Users. Read more www.securitytracker.com: MPCSoftWeb Photo Discloses Administrator Password to Remote Users. Read more www.securitytracker.com: AnalogX Proxy Input Validation Flaw Permits Remote Cross-Site Scripting Attacks Against Arbitrary Web Sites. Read more www.securitytracker.com: Sendmail DNS Map Initialization Flaw May Let Remote Users Crash the System. Read more News: www.ajc.com: Exploiting Holes In The Net. Read more www.theregister.co.uk: Why Sobig is bad for privacy and AV vendors. Read more www.computerweekly.com: Thought for the day: The attack of the worms. Read more www.startribune.com: Internet attackers harder to track, experts say. Read more catless.ncl.ac.uk: Some observations on e-mail phenomenology. Read more www.theregister.co.uk: Viral opportunity. Read more www.vnunet.com: Amazon declares war on spoofers. Read more

27 august 2003 New Trojans: Iroffer 1.2b13 Spybot 1.2a WinEggDrop Shell 1.36 winrcLoader Guides, Papers, etc. Court order requiring Earthlink to install a CARNIVORE. (out of date). Read more Vulnerabilities & Exploits: www.securitytracker.com: AnyBoard Discloses System Information to Remote Users. Read more www.securitytracker.com: GNU Whois Local Buffer Overflow May Present a Remote-Based Vulnerability When Called By Web Applications. Read more www.securitytracker.com: Blubster File Sharing Software Can Be Crashed By Remote Users. Read more www.securitytracker.com: WIDZ Intrusion Detection Input Validation Flaw Lets Remote Users Execute Arbitrary Code With Root Privileges. Read more www.securitytracker.com: Monop Local Vulnerability Exploit Code Released. Read more News: www.securityfocus.com: U.S. Sponsors Anti-Censorship Web Service. Read more news.com.com: FBI hunts down worm writers. Read more www.startribune.com: Internet attackers wear many guises. Read more www.msnbc.com: A legal fix for software flaws? Read more www.globetechnology.com: This worm can be turned. Read more news.com.com: Netgear flaw triggers accidental DoS attack. Read more www.zdnet.com: The ONLY ways to stop spam and viruses. Read more news.com.com: Boingo Wi-Fi checks in to more hotels. Read more

26 august 2003 New Trojans: Red ZONE 6.2 Remote PC News: www.chron.com: Experts see greed as motive for Sobig. Read more www.usatoday.com: Worm, virus threat grows. Read more www.eweek.com: Microsoft's Worm Fund. Read more news.com.com: Hackers cut off SCO Web site. Read more www.sltrib.com: Arizona company subpoenaed in virus attack. Read more

25 august 2003 New Trojans: PianoYes Herman Uploader Public Beta 1.0 Vulnerabilities & Exploits: www.securitytracker.com: Helix Universal Server and RealServer URL Parsing Flaw in View Source Plug-in Lets Remote Users Execute Arbitrary Code With Root Privileges. Read more www.securitytracker.com: Linux Kernel C-Media PCI Audio Driver Does Not Properly Access Userspace Data. Read more www.securitytracker.com: WapServ WAP Gateway Can Be Crashed By Remote Users. Read more www.securiteam.com: Vonage VOIP 3-way call CID Spoofing Vulnerability. Read more www.securiteam.com: Mapquest.com Cross-Site Scripting Vulnerability. Read more www.securiteam.com: URL Parsing and Plain Text Password disclosure in Best Buy Employee Toolkit Software. Read more www.securiteam.com: Cross Site Scripting Vulnerability Found in Yahoo WebSite. Read more www.securiteam.com: Buffer Overflow in UDP Broadcasts for Microsoft SQL Server Client Utilities. Read more News: www.telecomasia.net: Sobig.F worm origin traced to porn Usenet group. Read more www.infoconomy.com: Sobig virus traced to Arizona Internet company. Read more www.ntsecurity.net: SoBig.F Slows, But SoBig.G is Coming Soon. Read more www.zdnet.com: Why virus writers get away with it. Read more www.news.com.au: Japan challenges hackers. Read more linuxtoday.com: Update: ESR Confirms DoS Attack; Hacker to End Attack. Read more

24 august 2003 New Trojans: Iroffer 1.2b12 WinEggDrop Online Keylogger 1.1 Slackbot 1.0 (chinese version) Vulnerabilities & Exploits: www.securitytracker.com: Avant Browser Crashes When Loading a Long URL. Read more www.securitytracker.com: GNOME Display Manager (gdm) Lets Local Users View Files With Root Privileges. Read more www.securitytracker.com: srcpd Buffer Overflows Let Remote Users Execute Arbitrary Code. Read more News: uk.news.yahoo.com: Sobig virus slows. Read more www.channelnewsasia.com: Sobig virus slows, author aims to build robot network: experts. Read more

23 august 2003 New Trojans: Snow 2.5 WinEggDrop Shell 1.27 Tools ntbugtraq.ntadvice.com: Memet Anwar has made a free patch deployment tool called hfnetFU that can remotely install hotfixes based on Microsoft Baseline Security Analyzer output (mbsacli.exe /hf, or previously Hfnetchk.exe). Read more Guides, Papers, etc. www.lurhq.com: Sobig.e - Evolution of the Worm. Read more News: xforce.iss.net: Sobig.F Mass-Email Worm - Trojan Horse Functionality. Read more www.prnewswire.com: Easynews.com Cooperating With FBI on Search for SoBig.F Virus Origin. Read more story.news.yahoo.com: Experts: Much-Feared Virus Attack Fizzles. Read more www.sunspot.net: Infected PCs await orders from hacker. Read more www.theregister.co.uk: Sobig-F timed for Trojan download tonight? Read more www.pittsburghlive.com: Officials issue Sobig virus subpoena; Attack fails. Read more www.usatoday.com: Sobig.F worm believed to start at Web porn site. Read more news.bbc.co.uk: Why people write computer viruses. Read more www.blackhat.com: BLACK HAT BRIEFINGS, call for papers. Read more www.sundaytimes.co.za: Investec ups security for private bank clients. Read more

22 august 2003 New Trojans: sdbot 0.5a Proc32 URCS 1.06 HTTP RAT 0.31 (n) Guides, Papers, etc. www.securityfocus.com: Penetration Testing for Web Applications (Part Three). Read more Vulnerabilities & Exploits: www.secadministrator.com: Multiple Vulnerabilities in Microsoft Internet Explorer. Read more www.lac.co.jp: Internet Explorer Object Type Buffer Overflow in Double-Byte Character Set Environment. Read more www.lac.co.jp: The Return of the Content-Disposition Vulnerability in IE. Read more www.securitytracker.com: netris Client Buffer Overflow May Let Remote Servers Execute Arbitrary Code on the Client. Read more www.securitytracker.com: OpenBSD semget() Boundary Overflow Bug Lets Local Users Crash the System. Read more www.securitytracker.com: ViRobot Anti-Virus Buffer Overflows Let Local Users Gain Elevated Privileges. Read more www.securitytracker.com: paBox May Disclose the Administrator's Password in a Cookie. Read more www.securitytracker.com: Piolet File Sharing Client Can Be Crashed By a Remote User Send a Data Flood. Read more www.securitytracker.com: netris Game Buffer Overflow Lets Remote Users Crash the Daemon. Read more www.securitytracker.com: Lotus Domino Web Server Can Be Crashed With Incomplete or Invalid POST Request. Read more www.securitytracker.com: Microsoft Internet Explorer Buffer Overflow in CR549.DLL ActiveX Control Permits Remote Code Execution. Read more www.securitytracker.com: Microsoft Internet Explorer Object Tag Flaw Lets Remote Users Execute Arbitrary Code. Read more www.securitytracker.com: Microsoft Internet Explorer Cache Script Flaw Lets Remote Users Execute Code in the My Computer Zone. Read more www.securitytracker.com: Microsoft MDAC Database Component Lets Remote Users Execute Arbitrary Code. Read more www.securitytracker.com: Multipoint FTP-Server Input Validation Flaw Discloses Files on the System to Remote Authenticated Users. Read more www.securitytracker.com: oMail-webmail Input Validation Flaw in checklogin() Lets Remote Users Execute Arbitrary Shell Commands. Read more www.securitytracker.com: RealOne Player May Execute Scripting Code in an Arbitrary Domain. Read more News: www.detnews.com: Microsoft browser, Windows have new security flaws. Read more www.securityfocus.com: Slow Down Internet Worms With Tarpits. Read more www.theregister.co.uk: MS releases unholy trinity of security fixes. Read more www.worldtechtribune.com: Microsoft working with Feds; virus attacks may be terrorism. Read more www.zdnet.com.au: New e-mail scam targets St. George. Read more Watch Out for "Phishing" Emails Attempting to Capture Your Personal Information. Read more www.freep.com: Latest computer worm wreaks havoc worldwide. Read more money.cnn.com: Worm turns PCs into spam machines. Read more www.theregister.co.uk: Net anonymity service back-doored. Read more www.theregister.co.uk: More kids want to be hackers than rockers. Read more www.theregister.co.uk: Forget California, it's time to recall Microsoft. Read more

21 august 2003 New Trojans: NT RootKit 1.1 Registry Loader 2.0 Beast 2.01 Chinese Vulnerabilities & Exploits: www.eeye.com: Internet Explorer Object Data Remote Execution Vulnerability. Read more www.securitytracker.com: vHost POP Server Can Be Crashed By Remote Users. Read more www.securitytracker.com: Oracle Database XML Database Function Buffer Overflows Let Remote Users Access Database Sessions. Read more www.securiteam.com: The Return of the Content-Disposition Vulnerability in IE. Read more www.securiteam.com: Internet Explorer Object Type Buffer Overflow in Double-Byte Character Set Environment. Read more www.securiteam.com: ViRobot Linux Server Contains Several Local Overflows. Read more News: Microsoft Security Bulletin MS03-030 Unchecked Buffer in DirectX Could Enable System Compromise (819696). Read more Microsoft Security Bulletin MS03-032 Cumulative Patch for Internet Explorer (822925). Read more Microsoft Security Bulletin MS03-033 Unchecked Buffer in MDAC Function Could Enable System Compromise (823718). Read more Microsoft Security Bulletin MS02-040 Unchecked Buffer in MDAC Function Could Enable System Compromise (Q326573). Read more www.zdnet.com.au: New e-mail scam targets St. George. Read more www.wral.com: Identity Thieves Go 'Phishing' For Personal Information Through E-Mail. Read more silicon.com: Banking websites are 'turkey shoot for hackers'. Read more hpat962.external.hp.com: hp OpenView products impacted by �Blaster� worm virus. Read more www.theregister.co.uk: Auto-responders magnify Sobig problem. Read more www.theregister.co.uk: Slammer worm crashed Ohio nuke plant net. Read more www.masshightech.com: Former hacker launches network security company. Read more

20 august 2003 New Trojans: Haxial RAT sdbot 0.4b The[X] 1.3 Guides, Papers, etc. codersroot.net: SDBot Kiddies Get A Dose Of My Boredom :) Read more www.toorcon.org: ToorCon is a comprehensive, three-day information security extravaganza. Read more Vulnerabilities & Exploits: www.securitytracker.com: OpenSLP Temporary File Flaw May Let Local Users Gain Elevated Privileges. Read more www.securitytracker.com: MatrikzGB Authentication Hole Yields Administrative Privileges to Remote Authenticated Users. Read more www.securitytracker.com: Dropbear SSH Server Format String Flaw Lets Remote Users Execute Arbitrary Code. Read more www.securitytracker.com: Attila PHP Input Validation Flaws Permit Remote Cross-Site Scripting Attacks. Read more www.securitytracker.com: lmule Buffer Overflow, Format String, and Other Flaws Let Remote Users Execute Arbitrary Code. Read more www.securitytracker.com: xMule Buffer Overflow, Format String, and Other Flaws Let Remote Users Execute Arbitrary Code. Read more www.securitytracker.com: eMule Buffer Overflow, Format String, and Other Flaws Let Remote Users Execute Arbitrary Code. Read more www.securitytracker.com: DWebPro Discloses MySQL Database Password to Local Users. Read more www.securitytracker.com: CheckMail Discloses Passwords to Local Users. Read more www.securitytracker.com: StarFish Family Mail Discloses Passwords to Local Users. Read more www.securitytracker.com: NetMail Discloses Passwords to Local Users. Read more www.securitytracker.com: Allenchow POP3 Checker Discloses Passwords to Local Users. Read more www.securitytracker.com: NetServe Discloses the Administrator's Password to Local Users. Read more www.securitytracker.com: WebFtp Discloses Passwords to Local Users. Read more www.securityfocus.com: Bug in Norton FireWall 2003. Read more News: www.informationweek.com: Citigroup Is Latest Victim Of Phishing Expedition. Read more www.securityfocus.com: Microsoft Weighs Automatic Security Updates as a Default. Read more www.siliconvalley.com: In wake of worm, Microsoft considers automating updates. Read more silicon.com: Friendly viruses? Pull the other one. Read more www.sunspot.net: 'Good' PC worm vs. 'bad' one. Read more www.sundaytimes.co.za: Good worm tries to fix Blaster damage. Read more

19 august 2003 New Trojans: Srv superSpy 2.0 Beta Hacker defender 0.2.6 Guides, Papers, etc. www.securityfocus.com: MRTG for Intrusion Detection with IIS 6. Read more Vulnerabilities & Exploits: www.securiteam.com: Anonymizer.com Might Reveal Your IP (Double Proxy). Read more www.securiteam.com: eMule / Lmule / xMule Multiple Remote Vulnerabilities. Read more www.securiteam.com: UNIX Entropy Source Can Be Used For Keystroke Timing Attacks. Read more www.securiteam.com: Microsoft URLScan Configuration Can be Enumerated when Implemented in Conjunction with RSA SecurID. Read more www.security-corporation.com: Multiple vulnerabilities in AttilaPHP. Read more www.securiteam.com: Ecartis Contains Multiple Vulnerabilities. Read more www.securiteam.com: Dropbear SSH Server Format String Vulnerability. Read more www.securiteam.com: Remote Vulnerability in Horde MTA. Read more www.debian.org: DSA-373-1 autorespond -- buffer overflow. Read more www.debian.org: DSA-372-1 netris -- buffer overflow. Read more News: www.securityfocus.com: The Sad Tale of a Security Whistleblower. Read more www.miami.com: Internet Information Scam Uses Citi Logo. Read more www.heraldsun.news.com.au: Hackers target financial institutions. Read more www.sfgate.com: Security lessons unlearned, don't blame the worm. Read more news.bbc.co.uk: The hidden dangers of documents. Read more

18 august 2003 New Trojans: Infiltrator 1.0 ICQ PasswordSniffer 3.0 ICQ PasswordSniffer 4.1 Armageddon 2.0 Vulnerabilities & Exploits: security.e-matters.de: emule/xmule/lmule remote vulnerabilities. Read more News: www.zdnet.com: The end of e-mail viruses--and antivirus apps. Read more www.sfgate.com: Microsoft pulls a vanishing act on Blaster. Read more www.newscientist.com: Online document search reveals secrets. Read more

17 august 2003 New Trojans: Real McCoy AIM Password Stealer 4.2 AmigaAnywhere 0.97 WinEggDrop Shell 1.33 Tools Nmap's Silent Partner POF is an OS fingerprinting tool for the good guys. Read more Vulnerabilities & Exploits: www.securitytracker.com: Best Buy Employee Toolkit Lets Local Users Execute Arbitrary Commands and Also Discloses Server Password. Read more www.securitytracker.com: Poster Setup Script Lets Remote Users Access Administrative Functions. Read more www.securitytracker.com: RSA SecurID Interaction With Microsoft URLScan May Disclose URLScan Configuration to Remote Users. Read more www.securitytracker.com: SGI Checkpoint/Restart 'libcpr' Flaw Lets Local Users Overwrite Files With Elevated Privileges. Read more www.securitytracker.com: Cronus CPOP Discloses Passwords to Local Users. Read more News: www.chron.com: Worm error gives Web wiggle room. Read more www.ctv.ca: Blaster worm looks like a dud, Microsoft says. Read more www.thepost.ie: MSBlast virus claimed 9,000 Irish victims. Read more www.vnunet.com: Richer surfers feel less secure. Read more

16 august 2003 New Trojans: Bear & Tiger 1.0 Saria Fake Logins GLSSpy Guides, Papers, etc. www.securityfocus.com: Honeypot Farms. Read more www.hackinglinuxexposed.com: Sniffing with Net::Cap to stealthily managing iptables rules remotely, Part 1. Read more www.hackinglinuxexposed.com: Running programs in response to sniffed DNS packets - stealthily managing iptables rules remotely, Part 2. Read more Vulnerabilities & Exploits: www.securitytracker.com: WebiToome Discloses Passwords to Local Users. Read more www.securitytracker.com: Magic Winmail Server Discloses Passwords to Local Users. Read more www.securitytracker.com: Ecartis Buffer Overflows May Let Remote Users Execute Arbitrary Code. Read more www.securitytracker.com: DameWare Mini Remote Control Lets Local Users Gain System Privileges. Read more www.securitytracker.com: holaCMS Discloses Administrator Password to Remote Users. Read more News: www.informationweek.com: Tick-Tock: Microsoft Counts Down To Blaster Denial-Of-Service Attack. Read more www.chron.com: Worm error gives Web wiggle room. Read more www.wcpo.com: Authorities Look At Possible Hacker Angle In Power Outage. Read more Who wants to be a millionaire? The Nigeria-Connection. Nigerian fraudsters who dupe people around the world by writing scam letters have invaded cyberspace. Read more www.theregister.co.uk: GNU servers 'owned' by crackers since March. Read more www.eweek.com: GNU Project's FTP Servers Hacked. Read more

15 august 2003 New Trojans: A-311 Death 1.03 Red ZONE 5.5 eBlaster 2.1 Tools cmn.listprojects.darklab.org: SADoor, Non-Listening Remote Administration Tool. Read more Guides, Papers, etc. www.net-security.org: Detecting and Understading rootkits. Read more Vulnerabilities & Exploits: Disassembly of the Win32 DCOM worm by Rolf Rolles. Read more www.securitytracker.com: ChitChat.NET Input Filtering Holes in 'Name' and 'TopicTitle' Permit Remote Cross-Site Scripting Attacks. Read more www.securitytracker.com: XOOPS Input Filtering Flaw in BBcode Tags Permits Remote Cross-Site Scripting Attacks. Read more www.securitytracker.com: SGI IRIX nfsd Packet Decoding Errors Let Remote Users Crash the System. Read more www.securitytracker.com: Microsoft Visual Studio Buffer Overflow in 'mciwndx.ocx' May Let Remote Users Execute Arbitrary Code. Read more www.securitytracker.com: CiscoWorks 2000 Input Validation Flaws Let Remote Users Access the System. Read more www.securitytracker.com: xMule Format String Bugs May Let Remote Users Execute Arbitrary Code. Read more www.securitytracker.com: Webware WebKit Input Validation Flaw in SmartCookie May Let Remote Users Execute Arbitrary Code. Read more www.securitytracker.com: SkunkWeb Input Validation Flaw Discloses Files Located Outside of the Document Directory to Remote Users. Read more www.securitytracker.com: distcc Temporary File Bug May Let Local Users Gain Elevated Privileges. Read more www.securitytracker.com: Inframail Discloses Passwords to Local Users. Read more www.securitytracker.com: WorkgroupMail Discloses Passwords to Local Users. Read more www.securiteam.com: Off-by-One Error in realpath() (Exploit). Read more www.securiteam.com: IBM DB2 Lib Directory Vulnerability Allows Gaining of Elevated Privileges (Exploit). Read more www.securiteam.com: Netris Remote Memory Corruption Exploit Code Released. Read more www.securiteam.com: CiscoWorks 2000 Privilege Escalation Vulnerabilities (CiscoWorks Application Vulnerabilities). Read more www.securiteam.com: Microsoft Internet Explorer about:blank Cross Site Scripting. Read more www.securiteam.com: ChitChat.NET XSS Vulnerability. Read more News: www.securityfocus.com: The Bright Side of Blaster. Read more www.theage.com.au: Worm outbreak leads to change in XP's default firewall setting. Read more www.nynewsday.com: Internet Worm Spreads Fear. Read more www.heraldsun.news.com.au: Worm turns up again to hit PCs. Read more www.sundaytimes.co.za: Blaster worm variant loose. Read more www.news.com.au: Worm on the wane: FBI. Read more www.nytimes.com: Microsoft to Change Distribution of Vulnerable Software. Read more uk.news.yahoo.com: Indian teenage hacker spurns jobs for studies. Read more www.securityfocus.com: Hackers Claim New Fingerprint Biometric Attack. Read more

14 august 2003 New Trojans: Beast 2.01 Cracked Glacier 0.0 Glacier ROSE e-Surveiller 1.0 Tools pedram.redhive.com: dnshijacker is a libnet/libpcap based packet sniffer & spoofer. Read more Guides, Papers, etc. www.blackhat.com: Variations in Exploit methods between Linux and Windows (pdf). Read more Windows Server 2003: The Road To Gold. Part One: The Early Years. Read more Part Two: Developing Windows. Read more microsoft.com: Internet Firewalls. Read more Vulnerabilities & Exploits: www.securitytracker.com: HostAdmin Discloses Installation Path to Remote Users Via Error Messages. Read more www.securitytracker.com: WWW File Share Pro Discloses the Site Password to Local Users. Read more www.securitytracker.com: BulletProof FTP Server Discloses FTP User Passwords to Local Users. Read more www.securitytracker.com: Eudora WorldMail Server Input Filtering Hole in Search Feature Permits Remote Cross-Site Scripting Attacks. Read more www.securitytracker.com: BadBlue Personal Edition 'phptest' Script Discloses Installation Path to Remote Users. Read more www.securitytracker.com: Smallftpd Discloses Passwords to Local Users. Read more www.securitytracker.com: NGC Active FTPServer Discloses FTP Server User Passwords to Local Users. Read more www.securiteam.com: xv Local Exploit (-name Variable). Read more www.securiteam.com: Dialog Local Exploit (HOME). Read more www.securiteam.com: Linux x86 "joe" Local Exploit. Read more www.securiteam.com: Subnet Bandwidth Management (SBM) Protocol subject to attack via the Resource Reservation Protocol (RSVP). Read more www.securiteam.com: NetSurf URL Overflow. Read more www.securiteam.com: DameWare Mini-RC Shatter (Exploit). Read more www.securiteam.com: SurgeLDAP Multiple Security Vulnerabilities. Read more Cisco Security Advisory: CiscoWorks Application Vulnerabilities. Read more www.7f.no-ip.com: An analysis of the Sendmail prescan vulnerability (CA-2003-12). Read more www.cert.org: CERT� Advisory CA-2003-21 GNU Project FTP Server Compromise. Read more News: Microsoft Security Bulletin MS03-029 Flaw in Windows Function Could Allow Denial of Service (823803). Read more www.theinquirer.net: New version of Blaster worm on the loose. Read more www.nytimes.com: Microsoft to Change Distribution of Vulnerable Software. Read more www.timesofoman.com: Expert warns of another Web worm attack. Read more www.washingtonpost.com: Transcript: Alan Paller, from the SANS Institute, discussed the worm. Read more www.nationalpost.com: Virus finds new way to attack computers. Read more www.heraldsun.news.com.au: Worm turns up again to hit PCs. Read more story.news.yahoo.com: Worms Shouldn't Break Windows. Read more www.theaustralian.news.com.au: Kylie download heightens fever. Read more english.eastday.com: Windows cracked by 'LovSan'. Read more

13 august 2003 New Trojans: A-311 Death 1.02 DNS Trojan 1.2 ColdLife 4.0 Tools www.shellsec.net: Rootkit Detector V0.3. Read more Guides, Papers, etc. www.eeye.com: Blaster Worm Analysis. Read more www.securityfocus.com: Basic IIS Lockdown Using Scripts and Group Policy. Read more phrack.efnet.ru: Phrack 61 is out. Read more Vulnerabilities & Exploits: www.debian.org: DSA-371-1 perl -- cross-site scripting. Read more www.securitytracker.com: SurgeLDAP Can Be Crashed By Remote Users and Also Discloses Passwords to Local Users. Read more www.securitytracker.com: Zorum Input Validation Flaw in 'method' Parameter Permits Cross-Site Scripting Attacks. Read more www.securitytracker.com: Lil' HTTP Server Discloses Web Server Passwords to Local Users. Read more www.securitytracker.com: imate Web Mail Server Discloses E-mail Passwords to Local Users. Read more www.securitytracker.com: Meteor FTP Server Discloses FTP User Passwords to Local Users. Read more www.securitytracker.com: Xynph FTP Server Discloses Passwords to Local Users. Read more www.securitytracker.com: Mercury/32 Mail Server Discloses Passwords to Local Users. Read more www.securitytracker.com: War FTP Daemon Stores User Passwords in Clear Text on the Local System. Read more www.securitytracker.com: EFTP Discloses FTP Server Passwords and the Web Administration Password to Local Users. Read more www.securitytracker.com: BisonFTP Discloses User Passwords to Local Users. Read more www.securitytracker.com: FreeBSD 'ibcs2.ko' Loadable Kernel Module May Disclose Kernel Memory to Local Users. Read more www.securitytracker.com: FreeBSD Kernel Flaw in Checking Signal Numbers May Let Local Users Modify Kernel Memory or Crash the System. Read more www.securitytracker.com: DCForum+ Input Validation Flaw in 'Subject' Field Permits Cross-Site Scripting Attacks By Remote Users. Read more www.securitytracker.com: phpWebSite Calendar Module Permits SQL Injection, Cross-Site Scripting Attacks, and Denial of Service Attacks. Read more www.securitytracker.com: Stellar Docs Grants Administrative Access to Remote Users. Read more www.securitytracker.com: Better Basket Pro Store Builder Discloses Installation Path to Remote Users. Read more www.securitytracker.com: News Wizard Discloses Installation Path to Remote Users. Read more News: news.bbc.co.uk: Worm blasts across the web. Read more quote.bloomberg.com: Computer Virus on Microsoft Infects More Than 57,000 Systems. Read more news.com.com: 'MSBlast' worm a piecemeal monster. Read more www.theregister.co.uk: MSBlaster worm spreading rapidly. Read more www.theregister.co.uk: Slovenian hacker found shot dead. Read more

12 august 2003 New Trojans: NetAmine (1.03.104) PinkPigeon 1.0 G.R.O.B. 4.0.6 URCS 1.05 (build2) Tools sourceforge.net: BugScam IDC Package. A bunch of IDC scripts for IDA to look for common programming flaws. Read more Guides, Papers, etc. tms.symantec.com: Microsoft DCOM RPC Worm Alert. (pdf). Read more Vulnerabilities & Exploits: xforce.iss.net: "MS Blast" MSRPC DCOM Worm Propagation. Read more www.securitytracker.com: Wedgetail JCSI Single Sign-On Parsing Flaw May Disable Access Controls in Certain Situations. Read more www.securitytracker.com: Xitami Web Server Fails to Log Non-HTTP Connections. Read more www.securitytracker.com: BadBlue Discloses User and Administrator Passwords to Local Users. Read more News: www.securityfocus.com: RPC DCOM Worm Hits the Net. Read more story.news.yahoo.com: Newly Discovered Worm Attacks Vulnerable Systems. Read more asia.cnet.com: Windows worm starts its spread. Read more www.enquirer.com: Young hacker charged again. Read more www.theage.com.au: 'Trojan horse' hacks into computer and ruins a life. Read more www.dw-world.de: Hacking Away Under the Sunshine. Read more www.nwanews.com: Breach a �wake-up call� for Acxiom. Read more pcworld.idg.com.au: Anti-US hackers deface Australian government site. Read more www.businessweek.com: Unholy Matrimony: Spam and Virus. Read more www.nmrc.org: Simple Nomad's DefCon 11 Rant. Read more

11 august 2003 New Trojans: sredir PowerBOT DDoS 1.3 Guides, Papers, etc. www.cs.berkeley.edu: Warhol Worms: The Potential for Very Fast Internet Plagues. Read more Vulnerabilities & Exploits: www.securitytracker.com: Meteor FTP Server Can Be Crashed By Remote Users Sending Long USER Commands. Read more www.securitytracker.com: Invision Power Board Input validation Flaw in 'admin.php' Permits Remote Cross-Site Scripting Attacks. Read more www.securitytracker.com: MDaemon SMTP Authentication Flaw Lets Remote Users Access the SMTP Service. Read more www.securitytracker.com: GeeeekShop Shopping Cart Discloses Installation Path to Remote Users. Read more www.securitytracker.com: pam-pgsql Format String Flaw in Debug Mode May Let Remote Users Execute Arbitrary Code. Read more www.securitytracker.com: Sandsprite.com Chat Server Input Filtering Hole Lets Remote Users Conduct Cross-Site Scripting Attacks. Read more www.securitytracker.com: xpcd Buffer Overflow in HOME Environment Variable May Yield Root Privileges to Local Users. Read more www.securiteam.com: Defeating Lotus SameTime "Encryption". Read more www.securiteam.com: Sustworks Unauthorized Network Monitoring and tcpflow Format String Attack. Read more www.securiteam.com: Data Leak in UDP Echo Service. Read more www.securiteam.com: Sending 2GB Data in GET Request Causes Buffer Overflow in Cisco IOS Software. Read more www.securiteam.com: Cisco CSS 11000 Series Denial of Service (TCP SYN). Read more www.securiteam.com: Format String Vulnerability in Compaq HTTP Servers (DebugSearchPaths). Read more www.securiteam.com: tcpflow Format String Vulnerability. Read more News: www.zdnet.com: How an e-mail virus could cripple a nation. Read more www.smh.com.au: Little-known worm was top threat in July. Read more slashdot.org: Acxiom Hacking Details Made Public. Read more www.rgj.com: Bogus Web sites sting unsuspecting customers. Read more

10 august 2003 New Trojans: A-311 Death 1.00.A Iroffer 1.2b11 Snow 2.4 Guides, Papers, etc. e2-labs.com: Spoofing - Arts of attack and defense. (pdf) Read more Vulnerabilities & Exploits: www.debian.org: DSA-370-1 pam-pgsql -- format string. Read more www.debian.org: DSA-369-1 zblast -- buffer overflow. Read more www.securitytracker.com: gURLChecker Can Be Crashed By Remote Users When Checking Certain HTML Tags. Read more www.securitytracker.com: PostNuke 'ttitle' Variable in 'Downloads' and 'Web_Links' Modules Permits Remote Cross-Site Scripting Attacks. Read more www.securitytracker.com: iPlanet Administration Server Discloses Arbitrary Files to Remote Authenticated Users. Read more www.securitytracker.com: C-Cart Discloses Installation Path to Remote Users. Read more www.securitytracker.com: Open Group Distributed Computing Environment (DCE) Null Pointer Dereference Lets Remote Users Crash DCE Services. Read more News: microdoc-news.info: Google Preferences and Your Online Privacy. Read more www.ameinfo.com: eHosting Datafort partners with Synergy Professional Services (SPS) to deliver 'Ethical Hacking' Courses. Read more www.thekcrachannel.com: Hacker Downloads Sensitive Information. Read more www.theinquirer.net: Mitnick unveiled in more crazy DEFCON 03 photos. Read more

09 august 2003 New Trojans: Pro Agent 1.22 Shellcode 2.0 Beast 2.01 (b) Multi Bot Pro Vulnerabilities & Exploits: www.s21sec.com: Cisco CSS 11000 Series DoS. Read more ferruh.mavituna.com: VBulletin New Member XSS Vulnerability. Read more www.remote-exploit.org: Document describing the generic security problems with online games and applications. Read more www.debian.org: DSA-368-1 xpcd -- buffer overflow. Read more www.debian.org: DSA-367-1 xtokkaetama -- buffer overflow. Read more www.securitytracker.com: tcpflow Format String Flaw May Let Local Users Execute Arbitrary Code With Root Privileges. Read more www.securitytracker.com: Lotus Sametime Instant Messaging Encryption Flaws Disclose User Passwords to Remote Users. Read more www.securitytracker.com: IdealBB Input Validation Flaw in 'error.asp' Permits Remote Cross-Site Scripting Attacks. Read more www.securitytracker.com: Cisco Content Services Switches (CSS) 11xxx Series Can Be Crashed By Remote Users With a TCP SYN Attack. Read more News: www.toorcon.org: TOORCON 2K3: Computer Security Conference. Call for Papers. Read more www.securityfocus.com: NSA Proposes Backdoor Detection Center. Read more www.computerworld.com: Acxiom database hacked. Read more www.theregister.co.uk: Do Not Spam list and filtering firms join hands. Read more www.theregister.co.uk: Jailbird appeals in bug disclosure case. Read more www.theregister.co.uk: Sysadmins in the dark about network problems. Read more

08 august 2003 New Trojans: DSK Webdl 1.0 CMDGet 1.0 Attar TeeJayEm KeySpy 1.0 (a) Tools www.sys-security.com: Xprobe2 is a remote active operating system fingerprinting tool with a different approach to operating system fingerprinting. Read more Vulnerabilities & Exploits: www.securityfocus.com: Microsoft Internet Explorer Self Executing HTML File Vulnerability. Read more www.securitytracker.com: BEA WebLogic Server Console Input Validation Holes Permit Cross-Site Scripting Attacks Against Administrators. Read more www.securitytracker.com: 121 WAM! Server Input Validation Flaw Discloses Files on the System to Remote Authenticated Users. Read more www.securitytracker.com: Crob FTP Server Can By Crashed By Remote Authenticated Users Manipulating DOS Device Names. Read more www.securitytracker.com: ECLiPt Roaster (ERoaster) Uses Unsafe Temporary Files, Allowing Local Users to Gain Elevated Privileges. Read more www.securiteam.com: Man-db Open_cat_stream() Privileged Call Exploit. Read more www.k-otik.com: Windows RPC DCOM Remote Exploit with 48 TARGETS. Read more News: www.securityfocus.com: Appeal in bug disclosure case. Read more www.theregister.co.uk: Computer virus cramps Pan-Am Games. Read more www.prosperity4.com: IT could only happen in Vegas - Hackers convention. Read more www.bayarea.com: Hacker attack damages 2,000 computers at Stanford. Read more www.charlotte.com: Hacker Gets Acxion Customer Information. Read more www.iht.com: A hacker masters keystroke theft. Read more www.theargusonline.com: Berkeley computers under attack. Read more www.cio.com.au: When Documents Rise from the Grave. Read more www.vnunet.com: Bugwatch: Know your security onions. Read more

07 august 2003 New Trojans: Remote Control System 2.7 G.R.O.B. 4.0.7 Pardillo Guides, Papers, etc. www.coresecurity.com: Bypassing the StackShield and StackGuard protection. Read more www.hackinglinuxexposed.com: Sniffing with Net::Cap to stealthily managing iptables rules remotely, Part 1. Read more Vulnerabilities & Exploits: www.securitytracker.com: TightVNC 'QueryAllowNoPass' Flaw May Let Remote Users Access the System. Read more www.securitytracker.com: ZoneAlarm Buffer Overflow in VSDATANT Device Driver Yields System Privileges to Local Users. Read more www.securitytracker.com: IBM DB2 'db2job' File Access Flaw Lets Local Users Write/Overwrite Files With Root Privileges. Read more www.securitytracker.com: IBM DB2 Database Libraries Let Local Users With 'bin' Privileges Gain 'root' Privileges. Read more www.securitytracker.com: Everybuddy Messaging Client Can Be Crashed By Remote Users. Read more www.securitytracker.com: aspBoard Message Board Input Validation Hole Permits Remote Cross-Site Scripting Attacks. Read more www.securitytracker.com: 'man-db' May Execute User-Specified DEFINE Statements With Elevated Privileges. Read more News: www.mlive.com: Keystroke logger used to swipe user passwords. Read more www.theinquirer.net: DEFCON '03: Myth, Reality and Pictures. Read more news.bbc.co.uk: Snooping goes hi-tech. Read more www.hindustantimes.com: Kargil site hacked, linked to pornographic site. Read more www.infoanarchy.org: Let's Put SCO Behind Bars. Read more www.eweek.com: McAfee Antivirus Tool Blocks Internet Access. Read more

06 august 2003 New Trojans: Remote ICQ Pager 1.0 Shellcode 1.0 20CN v1.01 Guides, Papers, etc. www.surasoft.com: Denial Of Service (DoS) Attacks & DDoS. Read more Vulnerabilities & Exploits: sec-labs.hack.pl: Local ZoneAlarm Firewall Device Driver vulnerability. Read more www.debian.org: DSA-366-1 eroaster -- insecure temporary file. Read more www.debian.org: DSA-365-1 phpgroupware -- several vulnerabilities. Read more www.debian.org: DSA-364-1 man-db -- buffer overflows, arbitrary command execution. Read more www.securitytracker.com: NetBSD OSI Networking Code (netiso) May Let Remote Users Crash the System. Read more www.securitytracker.com: Invision Power Board Input Validation Flaw in Processing IBF Tags Lets Remote Users Modify the Appearance of the Forum. Read more www.securitytracker.com: Password Safe May Retain a Clear Text Password in Memory Even When Configured Not To. Read more www.securitytracker.com: Macromedia Dreamweaver PHP Users Authentication Extensions Permit Cross-Site Scripting Attacks. Read more www.securitytracker.com: (Vendor Issues Fix) Rpc.mountd May Disclose File Existence to Remote Users. Read more www.securitytracker.com: Mindi Unsafe Temporary Files May Allow Local Users to Gain Elevated Privileges. Read more www.securitytracker.com: Compaq Insight Manager Format String Flaw May Let Remote Users Execute Arbitrary Code. Read more www.securitytracker.com: vqServer Discloses the Administrator's Password to Local Users. Read more www.securitytracker.com: Microsoft WebServer Beta for Pocket PC Yields Administrative Access to Remote Users. Read more www.securitytracker.com: Mollensoft FTP Server Discloses Passwords to Local Users. Read more www.securitytracker.com: Minihttp Forum Web Server Default Configuration Leaves Administrator Account Without a Password. Read more www.securitytracker.com: Postfix Bounce Messages Let Remote Users Scan for Open Ports on Other Hosts. Read more www.securitytracker.com: Postfix Address Resolver Parsing Bug Lets Remote Users Hang the System. Read more www.securitytracker.com: 'libc' Off-by-One Overflow in realpath() May Let Remote Users Execute Arbitrary Code. Read more www.securitytracker.com: Enceladus Server Suite Default Configuration Creates an Account With a Common Password. Read more www.securiteam.com: Exploit Code Released for wu-ftpd fb_realpath() Off-by-One Bug. Read more www.securiteam.com: Cdrtools Local Root Exploit. Read more www.securiteam.com: PHP Authentication Suit for DreamWeaver XSS Vulnerability. Read more www.securiteam.com: Everybuddy Vulnerable to a DoS Attack (Long Message). Read more www.securiteam.com: Novell GroupWise Clear Text Vulnerability. Read more www.securiteam.com: Off-by-One Error in realpath (OpenBSD). Read more www.securiteam.com: Posfix Remote DoS / Postfix Bounce Scanning. Read more News: www.canada.com: E-mail fraud takes a new twist. Read more straitstimes.asia1.com.sg: ATM fraudsters rake in $6m from 21,000 bank accounts. Read more www.sundaytimes.co.za: New hybrid virus lurking? Read more www.smh.com.au: Hacking it against the hackers. Read more www.net4nowt.com: Hacker Hit Parade. Read more www.trivalleyherald.com: Berkeley braces for hacker attack. Read more www.canada.com: A network of drive-by spies. Read more www.theregister.co.uk: Britain: a nation of cyber snoopers. Read more

05 august 2003 New Trojans: Atmaca Downloader 1.0 Fearless Keyspy 1.1 b Glacier 2002 Guides, Papers, etc. www.securityfocus.com: Demonstrating ROI for Penetration Testing (Part Two). Read more Vulnerabilities & Exploits: www.securitytracker.com: bjServer Discloses the Administrator's Password to Local Users. Read more www.securitytracker.com: Linux Netfilter With Network Address Translation (NAT) Can Be Crashed By Remote Users in Certain Cases. Read more www.securitytracker.com: Netfilter Connection Tracking Flaw Lets Remote Users Deny Service. Read more www.securiteam.com: Tab Control Shatter Attack Exploit. Read more www.securiteam.com: ePolicy Orchestrator Multiple Vulnerabilities. Read more www.securiteam.com: Win32 Device Drivers Communication Vulnerabilities - Tutorial. Read more www.debian.org: DSA-352-1 fdclone -- insecure temporary directory. Read more News: www.theregister.co.uk: Is it a bird? A plane? No, it's a Windows Trojan. Read more australianit.news.com.au: Hack attacks at record levels. Read more straitstimes.asia1.com.sg: Just 18 but hacker whiz-kid can counter Net criminals. Read more www.hindustantimes.com: Internet worms change form, threaten greater havoc. Read more www.sundaytimes.co.za: Another nasty worm to catch. Read more www.theregister.co.uk: Sneaky virus poses as email from sysadmin. Read more www.pcworld.com: When Is It Safe to Disclose Security Flaws? Read more www.zdnet.com.au: Hackers and vendors brawl over nothing. Read more

04 august 2003 New Trojans: Insurrection 1.0 Neo Trojan 1.0 MSN Hotmail Password Stealer 4.0 Vulnerabilities & Exploits: www.securitytracker.com: Sun Solaris psig() Race Condition May Let Local Users Cause a System Panic. Read more www.securitytracker.com: Symantec Anti Virus Quarantine Server Can Be Crashed By Remote Users. Read more www.securitytracker.com: Norton Anti-Virus Quarantine Server Can Be Crashed By Remote Users. Read more www.securitytracker.com: Cisco LEAP Authentication Protocol for Wireless Devices Is Vulnerable to Dictionary Attacks. Read more www.securitytracker.com: Cdrtools Flaw in 'rscsi' Lets Local Users Modify Root-Owned Files to Grab Root Privileges. Read more www.securitytracker.com: Novell GroupWise WebAccess Discloses Wireless User Passwords to Local Users. Read more badwebmasters.net: Passing script/html-filter with special chars (multibrowser). Read more www.debian.org: DSA-361-1 kdelibs -- several vulnerabilities. Read more www.debian.org: DSA-362-1 mindi -- insecure temporary file. Read more News: news.com.com: Hackers get lesson in the law. Read more news.com.com: Worm masquerades as note from IT staff. Read more news.com.com: Attack bot exploits Windows flaw. Read more news.com.com: Microsoft.com suffers outage. Read more www.bday.co.za: Hacker's sidekick says no bank is safe. Read more

03 august 2003 New Trojans: APRE 1.0 Momaker CyberSpy 8.2 (built 8.4.7) v2 CyberSpy 8.0 (build 8.2.2) Troia Vulnerabilities & Exploits: www.securitytracker.com: Atari800 Buffer Overflow Lets Local Users Execute Arbitrary Code With Root Privileges. Read more www.securitytracker.com: IISShield May Fail to Drop a Specific Malformed HTTP Request. Read more www.securitytracker.com: Cisco IOS May Disclose Portions of Memory to Remote Users Via UDP Echo Response Packets. Read more News: www.globetechnology.com: Microsoft warns Internet Explorer users about virus. Read more www.eweek.com: Microsoft Downplays Dangers of Worm. Read more www.ciol.com: Beware! Hackers on the prowl! Read more www.reuters.co.uk: Threat to Internet as hackers meet. Read more story.news.yahoo.com: Internet Threat Looms as Thousands of Hackers Meet. Read more www.theregister.co.uk: MS flaw highlights e-security laziness. Read more

02 august 2003 New Trojans: Back Attack 1.8 Glacier 8.0 Beta2 Snow 2.3 Magic Link 2.4 Guides, Papers, etc. www.microsoft.com: Remove Fatty Deposits from Your Applications Using Our 32-Bit Liposuction Tools. Read more lasecwww.epfl.ch: Making a Faster Cryptanalytic Time-Memory Trade-Off. Read more Vulnerabilities & Exploits: www.securitytracker.com: WoltLab Burning Board 3rd Party User Werben Hack/Guthabenhack Add-ons Permit SQL Injection. Read more www.securitytracker.com: McAfee ePolicy Orchestrator Has Multiple Bugs That May Let Remote Users Execute Arbitrary Code With System Privileges. Read more www.securitytracker.com: wu-ftpd Off-by-one Overflow in fb_realpath() May Let Remote Users Execute Arbitrary Code. Read more www.securitytracker.com: xtokkaetama Buffer Overflows Let Local Users Gain 'Games' Group Privileges. Read more www.securitytracker.com: RobotFTP Server Discloses Usernames and Passwords to Local Users. Read more www.securitytracker.com: HP-UX Unspecified 'libxti' Bug May Let Remote Users Crash Some Services. Read more www.securitytracker.com: Liteserve Discloses Passwords to Local Users. Read more www.securitytracker.com: GameSpy Arcade 'GSAPAK.exe' Lets Remote Users Install Arbitrary Files. Read more www.securitytracker.com: Cisco IOS Web Interface Buffer Overflow Lets Remote Users Send 2GB HTTP GET Requests to Execute Arbitrary Code. Read more www.debian.org: DSA-360-1 xfstt -- several vulnerabilities. Read more www.debian.org: DSA-359-1 atari800 -- buffer overflows. Read more www.debian.org: DSA-358-1 linux-kernel-2.4.18 -- several vulnerabilities. Read more www.debian.org: DSA-357-1 wu-ftpd -- remote root exploit. Read more News: xforce.iss.net: "Mimail" Mass-Email Worm Propagation. Read more www.chron.com: Users beware as e-mail worm spreads. Read more www.pcworld.com: Security Flaws Under the Microscope. Read more www.informationweek.com: Microsoft's Web Site Brought Down By Attack. Read more www.infoworld.com: Wireless security: Harder than you think. Read more www.chron.com: Student accused of hacking into Michigan system. Read more

01 august 2003 New Trojans: PSPV K-Stealth III Evoloution 1.0 superSpy 0.99 Beta NetDown 0.5 Vulnerabilities & Exploits: www.atstake.com: ePolicy Orchestrator Multiple Vulnerabilities. Read more isec.pl: wu-ftpd fb_realpath() off-by-one bug. Read more www.securitytracker.com: BEA WebLogic Code Flaw May Let Remote Users Gain Access to Other User Accounts. Read more www.securitytracker.com: Small HTTP Server Discloses Administrator Password to Local Users. Read more www.securitytracker.com: Ambrosia Software 'escapepod' Screen Saver Password Protection Can Be Bypassed. Read more www.securitytracker.com: SGI IRIX Name Service Daemon Buffer Overflow in Processing AUTH_UNIX RPC Packets Yields Root Access to Remote Users. Read more www.securitytracker.com: 'sup' Unsafe Use of Temporary Files Lets Local Users Overwrite Files. Read more www.securitytracker.com: Half-Life Clients Buffer Overflow Vulnerability Exploit Code. Read more www.securiteam.com: NetScreen TCP Option DoS (manager-ip). Read more www.securiteam.com: Half-Life Servers Buffer Overflow and Denial of Service Vulnerability (Exploit). Read more www.securiteam.com: Passing JavaScript/HTML Filters with Special Chars (Multibrowser). Read more www.securiteam.com: Hughes Billing Incorrect File Permissions Allows Gaining of Elevated Privileges. Read more www.securiteam.com: IIS Executes Files by Default Whenever They Reside Under an ".asp" Directory. Read more www.securiteam.com: GameSpy Arcade Arbitrary File Writing. Read more www.securiteam.com: Shattering SEH. Read more www.securiteam.com: wu-ftpd fb_realpath() Off-by-One Bug. Read more www.securiteam.com: Buffer Overflow in Sun Solaris Runtime Linker. Read more News: news.bbc.co.uk: Growing fears over net threat. Read more www.dailytelegraph.news.com.au: Experts fret over likely net attacks. Read more www.msnbc.com: Study: Net security flaws don�t die. Read more www.bayarea.com: Government issues second warning on Microsoft security flaw. Read more www.zdnet.com.au: Hackers look to hide communications. Read more www.idc.com: IDC UK�s Annual Security Conference, Understanding the Real Risks - 16th September, 2003. Read more www.theregister.co.uk: Spam dumpster diving. Read more slate.msn.com: Hack the Vote. Read more

Copyright� MegaSecurity.org