Home

News Archive    Translate Traducen

News november 2003

30 november 2003 New in Archive DA-WEB 2.0 Tiny Shell 1.0 TemporalFTP 2.1 Guides, Papers, etc. www.robertgraham.com: DECOMPILED SOURCE FOR MS RPC DCOM BLASTER WORM. Read more Vulnerabilities & Exploits www.securityfocus.com: Microsoft Internet Explorer MHTML Forced File Execution Vulnerability. Read more www.securitytracker.com: Applied Watch Command Center Authentication Flaw Lets Remote Users Add Accounts and IDS Rules. Read more www.securitytracker.com: Apache mod_python String Processing Bug Lets Remote Users Crash the Web Server. Read more News timesofindia.indiatimes.com: Hackers strike sites at will, govt helpless. Read more

29 november 2003 New in Archive Harvester 2003 (mail) Fake Msn 1.0 Skatan-bot 0.02 RUX The TIc.K 3.0 (a) Guides, Papers, etc. www.securityfocus.com: Fighting Spammers With Honeypots: Part 2. Read more Vulnerabilities & Exploits www.securitytracker.com: OpenCA Certificate Processing Flaws May Accept Revoked or Expired Certificates. Read more www.securitytracker.com: Microsoft Exchange 2003 With Outlook Web Access and Windows SharePoint Services May Grant Incorrect E-mail Account Access to Remote Authenticated Users. Read more www.securitytracker.com: phpBB Input Validation Flaw in 'search_id' Permits SQL Injection and Yields Administrative Access. Read more www.securiteam.com: EPIC4 CTCP Nicknames Buffer Overflow. Read more News money.cnn.com: Microsoft probes new Explorer holes. Read more www.theregister.co.uk: Reseller touts home WLAN pack with easy to use security. Read more www.infoanarchy.org: Winny authors arrested in Japan. Read more catless.ncl.ac.uk: Old Nigerian scam nets $400,000. Read more

28 november 2003 New in Archive PaSzCzuS 1.8 Remote-Anything 3.0.4 Dewin (k) Guides, Papers, etc. www.gilliss.com: Packet Sniffing by Gregory Gilliss. Read more Vulnerabilities & Exploits www.secunia.com: Microsoft Internet Explorer Multiple Vulnerabilities. Read more www.safecenter.net: Internet Explorer System Compromise Vulnerabilities. Read more www.securitytracker.com: RNN Guestbook Authentication Flaw in 'gbadmin.cgi' Yields Administrative Access to Remote Users. Read more www.securitytracker.com: GNU Screen Integer Overflow in 'ansi.c' May Let Local Users Gain Elevated Privileges. Read more www.securitytracker.com: GnuPG ElGamal Signature Flaw May Disclose Type 20 ElGamal Private Keys to Remote Users. Read more www.securitytracker.com: snif Input Validation Flaw Discloses Files to Remote Users. Read more www.securitytracker.com: BIND 8 Negative Cache Poisoning May Cause Denial of Service Conditions. Read more www.securitytracker.com: My_eGallery Include File Flaw Lets Remote Users Execute Arbitrary Commands. Read more www.securitytracker.com: RemotelyAnywhere Input Validation Flaw in 'autologon.html' Permits Remote Cross-Site Scripting Attacks. Read more News www.theregister.co.uk: Spanish police arrest Raleka virus suspect. Read more www.theregister.co.uk: EU internet privacy laws tightened. Read more www.centredaily.com: `Wardrivers' prowl neighborhoods in search of free Internet. Read more economictimes.indiatimes.com: Cyber watchdogs to get stronger teeth. Read more www.bakutoday.net: Hero Hacker Does It Again. Read more www.economist.com: Fighting the worms of mass destruction. Read more

27 november 2003 New in Archive FireNet Sdbot (bx) AircBot 1.0 Guides, Papers, etc. www.securityfocus.com: Fighting Spammers With Honeypots: Part 1. Read more Vulnerabilities & Exploits www.s-quadra.com: FreeRADIUS <= 0.9.3 rlm_smb module stack overflow vulnerability. Read more www.securitytracker.com: Mac OS X Trust of DHCP-Provided Directory Servers Lets Remote Users Login With Root Privileges. Read more www.securitytracker.com: ChatZilla 'irc://' Server Name Buffer Overflow Let Remote Users Execute Arbitrary Code. Read more www.securitytracker.com: Macromedia JRun Input Validation Flaws in Administrative Interface Permit Cross-Site Scripting Attacks. Read more www.securiteam.com: Xitami Malformed Header Request DoS. Read more www.securiteam.com: Thomson TCM315 Denial of Service (Long GET Request). Read more www.securiteam.com: Eudora LaunchProtect Bypassing. Read more www.security-corporation.com: Remotely anywhere Cross Site Scripting Vulnerability. Read more News www.digitmag.co.uk: New security threat discovered in Microsoft's IE. Read more itvibe.com: Raleka virus writer arrested. Read more news.bbc.co.uk: E-commerce targeted by blackmailers. Read more

26 november 2003 New in Archive The TIc.K 2003 beta The TIc.K 2003 Cruel Intentionz 1.2 (b) server Iroffer 1.2b09 Guides, Papers, etc. Simulating and optimising worm propagation algorithms. (pdf) Read more Vulnerabilities & Exploits www.securitytracker.com: Microsoft Internet Explorer Invalid ContentType May Disclose Cache Directory Location to Remote Users. Read more www.securitytracker.com: Microsoft Internet Explorer MHT Redirect Flaws Let Remote Users Execute Arbitrary Code. Read more www.securitytracker.com: CommerceSQL Shopping Cart Discloses Files to Remote Users. Read more www.securitytracker.com: Monit Buffer Overflow Lets Remote Users Obtain Root Privileges. Read more www.securitytracker.com: Pan Newsreader Can Be Crashed By Remote Users. Read more www.securitytracker.com: Thomson TCM315 Can Be Crashed By Remote Users. Read more News www.theregister.co.uk: Scripting flaws pose severe risk for IE users. Read more www.securityfocus.com: Nachi worm infected Diebold ATMs. Read more www.theregister.co.uk: Trojan poses as naked XXX pics. Read more news.zdnet.co.uk: Sysbug Trojan jumps on sexual bandwagon. Read more www.globetechnology.com: Decades after creation, viruses defy cure. Read more www.theregister.co.uk: Busting the Worm Writers. Read more www.thecouriermail.news.com.au: Wireless security problem. Read more

25 november 2003 New in Archive Atwinda Attack FTP Blastit (a) News www.theregister.co.uk: Nigerian fraudsters 'shop early for Xmas'. Read more news.com.com: Exchange flaw could open up user accounts. Read more www.theregister.co.uk: Wi-Fi hacker caught downloading child porn. Read more www.news.scotsman.com: Staff warned as bosses begin to adopt Big Brother tactics. Read more www.sunspot.net: Hackers live by their own code. Read more www.securitypipeline.com: Programmer Charged With Making Violent "Spam Rage" Threats. Read more

24 november 2003 New in Archive Hawk 1.1 Netzwerkchat 2.60 Andromeda 1.0 Tools Splint is a tool for statically checking C programs for security vulnerabilities and coding mistakes. Read more Vulnerabilities & Exploits PrimeBase SQL Database Server Discloses Database Passwords to Local Users. Read more www.securitytracker.com: SIRCD May Grant Operator Privileges to Remote Authenticated Users. Read more www.securitytracker.com: Mac OS X Finder Grants Privileged Directory Access to Local Admin Users. Read more www.securitytracker.com: Opera Buffer Overflow in Processing Skin Files May Let Remote Users Execute Arbitrary Code. Read more www.securitytracker.com: vbPortal 'friend.php' Script Lets Remote Users Send Anonymous E-mail. Read more www.securiteam.com: Sybase ASE Remote Password Array Denial of Service. Read more www.securiteam.com: WebFS Long File Overflow Exploit. Read more www.securiteam.com: Opera File Creation and Execution Exploit (Malicious Web Server). Read more www.securiteam.com: mod_gzip debug_mode Exploit Code. Read more www.securiteam.com: Microsoft SharePoint Portal and Team Services Vulnerability. Read more www.securiteam.com: FreeRADIUS "Tunnel-Password" Attribute Handling Vulnerability. Read more www.securiteam.com: HPUX dtmailpr Buffer Overflow Vulnerability (DISPLAY). Read more News www.securityfocus.com: Exploit Code on Trial. Read more

23 november 2003 New in Archive Messiah 1.0 v2 Tranzhva 1.0 Cabronator 2.1 client Progenic Mail Trojan beta xlbh 1.1 Vulnerabilities & Exploits www.securitytracker.com: Opera Input Validation Flaw in Opera MIME Types Lets Remote Users Write Arbitrary Files. Read more www.securitytracker.com: SGI IRIX rpc.mountd Bugs May Let Remote Users Access NFS Services. Read more News www.theregister.co.uk: Michigan Wi-Fi hackers 'try to steal credit card details'. Read more www.snpx.com: War driving kiddie porn downloader busted using other peoples wireless networks. Read more www.pcworld.com: FTC Cracks Down on Internet Scams. Read more

22 november 2003 New in Archive Oracle 1.0 client added SWU32 1.03 Harvester 2003 v01 Vulnerabilities & Exploits wwww.securitytracker.com: OpenBSD semctl() and semop() Bugs Let Local Users Crash the System. Read more wwww.securitytracker.com: OpenBSD sysctl(3) Flaw Lets Local Users Crash the System. Read more www.securitytracker.com: Xitami Web Server Bug in Processing Certain HTTP POST Headers Lets Remote Users Deny Service. Read more www.securitytracker.com: Sybase Adaptive Server Enterprise (ASE) Can Be Crashed By Remote Authenticated Users Sending Invalid Password Arrays. Read more www.securitytracker.com: FreeRADIUS String Tag Negative Integer Overflow Lets Remote Users Crash the Service. Read more www.securitytracker.com: IBM AIX rcp Buffer Overflow Lets Local Users Execute Arbitrary Code With Root Privileges. Read more www.securitytracker.com: Mac OS X Screen Effects Lets Physically Local Users Bypass Authentication and Access Dock Functions. Read more www.securitytracker.com: gm4 on Mac OS X Has Format String Flaw That May Allow Local Users to Gain Elevated Privileges. Read more News www.securityfocus.com: New charges in Lowe's wi-fi hacks. Read more www.theregister.co.uk: UK ID theft gang jailed for �350K fraud. Read more www.eweek.com: Symantec CEO Warns of Drop in Internet Use. Read more www.internetnews.com: Debian Servers Hacked. Read more times.hankooki.com: Largest Internet Hacking Ring Uncovered. Read more www.theregister.co.uk: Bluejacking ain't hijacking. Read more www.neowin.net: Virus tries to con PayPal users. Read more www.knxv.com: Hacker life doesn't last forever. Read more

21 november 2003 New in Archive Antylamus 0.2 x.l.b.h 1.0 MAD:RAT 1.0 Vulnerabilities & Exploits www.rapid7.com: Sybase ASE 12.5 Remote Password Array Denial of Service. Read more www.securitytracker.com: Effect Office Buffer Overflow Lets Remote Users Crash the Application. Read more www.securitytracker.com: Sun Solaris PGX32 Frame Buffer Has Buffer Overflow That Yields Root Privileges to Local Users. Read more www.securitytracker.com: Microsoft SharePoint May Let Remote Users Access Protected Pages Without Authenticating. Read more News www.usatoday.com: PayPal spoof e-mail virus spread slowing. Read more www.securitypipeline.com: "Phishing" Identity Theft Is Gaining Popularity. Read more seattlepi.nwsource.com: 3 indicted for hacking Lowe's system. Read more www.sundaytimes.co.za: I know! Let's have a hackers' union! Read more

20 november 2003 New in Archive Paszczus 1.7 Rewind 1.2 iseekumona Fearless Lite 1.01 Guides, Papers, etc. patriot.net: The Dark Side of NTFS (Microsoft�s Scarlet Letter). Read more www.giac.org: Windows, NTFS and Alternate Data Streams. (pdf) Read more www.securityfocus.com: Home User Security: Your First Defense. Read more Vulnerabilities & Exploits www.securitytracker.com: Kerio WinRoute Firewall Discloses Authentication Data to Remote Sites When Using Proxy Authentication. Read more www.securitytracker.com: Half-Life Dedicated Server Discloses Configuration Files to Remote Users if Downloads Are Permitted. Read more www.securitytracker.com: Apple 'sudo' on Laptops May Let Local Users Execute Commands Without Authenticating. Read more www.securiteam.com: Opera Skinned and Opera Directory Traversal (Exploit). Read more www.securiteam.com: IA WebMail Server Buffer Overflow Vulnerability (Exploit). Read more www.securiteam.com: OpenBSD exec_ibcs2_coff_prep_zmagic() Kernel Stack Overflow. Read more News www.theage.com.au: Gobo goes over to the other side. Read more www.oaklandtribune.com: Sandia Labs studies phony computer network for hackers. Read more www.washingtonpost.com: Hackers Did Not Cause Blackout - Report. Read more www.heraldsun.news.com.au: Hackers can needle out website data. Read more www.theage.com.au: Hacker gang uncovered in South Korea. Read more news.com.com: 'Spyware' steps out of the shadows. Read more

19 november 2003 New in Archive Hawk Loader 1.0 dmass 1.0 Beast 2.02(b) server Starcross 1.0 Guides, Papers, etc. www.securityfocus.com: Oracle Row Level Security: Part 2. Read more www.net-security.org: Worms Of The Future: Trying To Exorcise The Worst. (pdf) Read more This is a research paper on the security (or lack of) within computer systems and ways of improvement with respect to mobile and hostile code such as worms. www.net-security.org: Flooding From The Underground - A Global Threat. (pdf) Read more When Khaled Mardam-Bey developed an IRC client for the Windows platform, I doubt he envisaged mIRC becoming the basis for the control of an immeasurable number of compromised machines in bot-nets. Khaled has the original authors of the Global-Threat (GT) bot to thank for that. Vulnerabilities & Exploits www.securitytracker.com: SqWebMail URL-based Session IDs Let Remote Users Hijack E-mail Sessions. Read more www.securitytracker.com: HP-UX dtmailpr Buffer Overflow Lets Local Users Grab Root Privileges. Read more www.securitytracker.com: HP-UX CDE Has Unspecified Flaw That Allows Remote Denial of Service. Read more www.securitytracker.com: Koch Roland's PHP Gastebuch Input Validation Flaw in '$path' Variable Permits Remote Code Execution. Read more www.securitytracker.com: SAP DB web-tools Have Multiple Flaws That Disclose Files, Permit Remote Code Execution, and Grant Access to Remote Users. Read more www.securitytracker.com: phpWebFileManager Input Validation Flaw in 'f' Variable Discloses Files to Remote Users. Read more www.securitytracker.com: OpenBSD Kernel ibcs Overflow Yields Root Privileges to Local Users. Read more www.securitytracker.com: NetServe Discloses Files on the System to Remote Users. Read more www.securitytracker.com: iPlanet Web Server Log Analyzer Input Filtering Flaw Lets Remote Users Conduct Cross-Site Scripting Attacks Against Administrators. Read more www.securitytracker.com: SAP DB 'niserver' Buffer Overflow Lets Remote Users Gain Root/LocalSystem Privileges. Read more www.securitytracker.com: SAP DB NETAPI32.DLL Path Specification Flaw Lets Local Users Gain SYSTEM Privileges. Read more News www.theregister.co.uk: Cisco combats network worms. Read more www.theregister.co.uk: Proposed: a Bounty for Bugs. Read more www.nzherald.co.nz: Phony card scam parts unwary customers from funds. Read more www.smh.com.au: Teenager hacked into Cambridge Uni, court told. Read more www.theregister.co.uk: The economics of spam. Read more www.theregister.co.uk: New worm scams PayPal punters. Read more www.theregister.co.uk: 'Police abduction warning' email is a hoax. Read more home.hamptonroads.com ID theft outrunning laws and technology. Read more zdnet.com.com: Report: Net attacks increasing. Read more

18 november 2003 New in Archive Jump Trojan 2.0 Rewind 1.1 Mind Control 7.0 Tools Hackbot is a vulnerability scanner that started as a joke at first, but now it has become a serious project. Hackbot scans over 300 CGI's, scans for banners of several services, does unicode checks, checks for open relays, outsmarts Cisco PIX MailGuard, can do ripe checkup, spamcop db checkup, X connect test and lots more. Read more Vulnerabilities & Exploits www.securiteam.com: pcAnywhere Allows Local Users to Become SYSTEM. Read more www.guninski.com: OpenBSD kernel overflow, yet still *BSD much better than windows. Read more www.debian.org: DSA-402-1 minimalist -- unsanitised input. Read more www.atstake.com: Multiple Issues with SAP DB Web-tools. Read more www.securitytracker.com: Minimalist Input Validation Flaw Lets Remote Users Execute Arbitrary Commands. Read more www.securitytracker.com: monopd Game Daemon Race Condition May Let Remote Users Deny Service. Read more www.securitytracker.com: Zebra netlink Message Spoofing May Let Local Users Deny Service. Read more www.securitytracker.com: Quagga Routing Software Can Be Crashed By Remote Users. Read more www.securitytracker.com: Zebra Routing Software Can Be Crashed By Remote Users. Read more www.securitytracker.com: Solaris cachefsd cfsd_calloc() Buffer Overflow Lets Remote Users Execute Arbitrary Code. Read more www.securitytracker.com: Apache 2.x on Windows May Return Unexpected Files For URLs Ending With Certain Characters. Read more www.securiteam.com: Multiple Issues with SAP DB Web-tools. Read more www.securiteam.com: SAP DB Privilege Escalation/Remote Code Execution. Read more News pcworld.idg.com.au: Attack code surfaces for latest Windows vulnerability. Read more www.theregister.co.uk: Road Runner messages 'censored', newsgroups complain. Read more www.internetweek.com: Gates Thinks Seamless And Secure. Read more www.computerweekly.com: How to secure a wireless Lan. Read more news.bbc.co.uk: Pickpockets turn to technology. Read more www.dailystar.com.lb: Computer hacking: potentially a new kind of war in the Middle East. Read more www.homechannelnews.com: FBI arrests Michigan duo for hacking Lowe�s system. Read more

17 november 2003 New in Archive Lyusane 0.5 G.R.O.B. 4.0.8 Red ZONE 6.5 (c) server Wintro 1.0 Vulnerabilities & Exploits www.debian.org: DSA-401-1 hylafax -- format strings. Read more www.securitytracker.com: monopd Game Daemon Race Condition May Let Remote Users Deny Service. Read more www.securitytracker.com: Zebra netlink Message Spoofing May Let Local Users Deny Service. Read more www.securitytracker.com: Quagga Routing Software Can Be Crashed By Remote User. Read more www.securitytracker.com: Zebra Routing Software Can Be Crashed By Remote Users. Read more www.securiteam.com: Solaris cachefsd cfsd_calloc() Buffer Overflow Lets Remote Users Execute Arbitrary Code. Read more www.securiteam.com: Apache 2.x on Windows May Return Unexpected Files For URLs Ending With Certain Characters. Read more www.securiteam.com: Planet Network Switch Default Administrative User. Read more News news.com.com: Gates addresses spam, security flaws at Comdex. Read more reviews-zdnet.com.com: It wasn't me, it was the Trojan horse. Read more www.rednova.com: Encryption Technology Promises Unbreakable Codes. Read more www.net4nowt.com: Tracking the underground hackers. Read more www.khaleejtimes.com: New Zealand police warn about gold credit card scam from China. Read more

16 november 2003 New in Archive Optix Pro 1.32 server Snow 1.3 Phantom FTP server 2.0(b) DTr 1.6 (a) Vulnerabilities & Exploits www.securitytracker.com: monopd Game Daemon Race Condition May Let Remote Users Deny Service. Read more www.securitytracker.com: Zebra netlink Message Spoofing May Let Local Users Deny Service. Read more www.securitytracker.com: Quagga Routing Software Can Be Crashed By Remote Users. Read more www.securitytracker.com: Zebra Routing Software Can Be Crashed By Remote Users. Read more News news.xinhuanet.com: Experts warn of "New Happy Time" computer virus. Read more www.broadbandreports.com: Mimail-I Paypal Scam. Read more kyw.com: Beware Of Internet Scam. Read more www.computerworld.com: Phishers and bugs: New worm uses PayPal scam. Read more money.guardian.co.uk: Nigerian email conmen fall into their targets' net. Read more

15 november 2003 New in Archive Perfect Keylogger 1.47 Remote Computer Control Center 1.25 Mind Control 6.0 Tools Remote Access Session is a security tool to analyze the integrity of systems. The program tries to gain access to a system using the most advanced techniques of remote intrusion. It can either work in normal mode (which is fast) or hard mode (which is more intensive). There is a big difference between Remote Access Session and other remote security audit tools. If Remote Access Session finds a remote vulnerability that gives user account or root, it will try to exploit it and it will return a shell. Read more Vulnerabilities & Exploits www.securitytracker.com: PostMast Proxy Server Permits Cross-Site Scripting Attacks. Read more www.securitytracker.com: MyServer Can Be Crashed With Specially Crafted URLs. Read more www.securitytracker.com: Web Wiz Forums Registration Scripts Input Validation Flaw Lets Remote Users Conduct Cross-Site Scripting Attacks. Read more www.securitytracker.com: WebWasher Classic Proxy Input Validation Flaw Permits Remote Cross-Site Scripting Attacks. Read more www.securitytracker.com: HP-UX Partition Manager (parmgr) Certification Validation Flaw May Grant Access to Remote Users. Read more www.securitytracker.com: Symantec pcAnywhere Help Interface Yields SYSTEM Privileges to Users. Read more www.securitytracker.com: iproute netlink Message Spoofing May Let Local Users Deny Service. Read more www.securitytracker.com: glibc getifaddrs() Message Spoofing May Let Local Users Deny Service. Read more www.securitytracker.com: terminatorX Multipe Buffer Overflows Lets Local Users Execute Arbitrary Code with Root Privileges. Read more News www.theregister.co.uk: Phishing and viral tech combines in new menace. Read more www.sundaytimes.co.za: FNB Card Security Week: What you should know when transacting online. Read more www.theregister.co.uk: Al Jazeera hacker gets community service. Read more news.bbc.co.uk: Cracking the hacker underground. Read more

14 november 2003 New in Archive Fearless Lite 1.0 Netrunner 2.5 Minicom 3.6.4.1 Vulnerabilities & Exploits www.securitytracker.com: PeopleSoft PeopleTools iClient Lets Remote Users Upload and Execute Arbitrary Commands. Read more www.securitytracker.com: PeopleSoft PeopleTools Discloses Installation Path to Remote Users. Read more www.securitytracker.com: iproute netlink Message Spoofing May Let Local Users Deny Service. Read more www.securitytracker.com: glibc getifaddrs() Message Spoofing May Let Local Users Deny Service. Read more www.securitytracker.com: terminatorX Multipe Buffer Overflows Lets Local Users Execute Arbitrary Code with Root Privileges. Read more www.securitytracker.com: SCO UNIX procfs 'as' Access Control Flaw Lets Local Users Gain Elevated Privileges. Read more www.securitytracker.com: PHP-Coolfile 'action.php' Discloses Administrative Password in 'config.php'. Read more www.securitytracker.com: BEA WebLogic Configuration Error May Disclose MBean Data to Remote Users. Read more www.securitytracker.com: BEA WebLogic Node Manager Can Be Crashed By Remote Users. Read more www.securitytracker.com: BEA WebLogic T3S Protocol May Not Encrypt Connections in Certain Cases. Read more www.securitytracker.com: BEA WebLogic May Disclose JMS Provider Passwords to Local or Remote Authenticated Users. Read more www.securitytracker.com: FortiGate Firewall Admin Interface Input Validation Flaw Permits Remote Cross-Site Scripting Attacks Against Administrators. Read more www.securitytracker.com: Clam AntiVirus 'clamav-milter' Format String Flaw Lets Remote Users Execute Arbitrary Code. Read more www.securitytracker.com: BEA WebLogic Input Validation Flaw in Proxy Plug-in Lets Remote Users Crash the Service With Malformed URLs. Read more www.securitytracker.com: Opera Browser Input Validation Flaw in opera: Protocol Permits Remote Directory Traversal. Read more www.securitytracker.com: Opera MIME Types Let Remote Users Place Arbitrary Files in Certain Directories on the Target System. Read more www.securiteam.com: terminatorX Exploitable Stack-Based Overflow (load_tt_part()). Read more News www.theregister.co.uk: East European gangs in online protection racket. Read more zdnet.com.com: Trojan hides in fake Citibank e-mail. Read more www.theregister.co.uk: Microsoft's New Security Mojo. Read more news.com.com: Al-Jazeera hacker sentenced. Read more economictimes.indiatimes.com: Zombie machines fuel cyber crime wave. Read more www.nbr.co.nz: Is that a virus in your cellphone or are you just being paranoid ? Read more

13 november 2003 New in Archive WinEggDrop Shell Eternity srvcmd Ptakks resurrecion r2.c Vulnerabilities & Exploits www.securiteam.com: Nokia IPSO Script Injection Vulnerability. Read more www.securiteam.com: Cumulative Security Update for Internet Explorer (MS03-048). Read more www.securiteam.com: Windows Workstation Service Remote Buffer Overflow (Exploit). Read more www.securiteam.com: Vulnerability in Microsoft Word and Microsoft Excel Could Allow Arbitrary Code to Run (MS03-050). Read more www.securiteam.com: Buffer Overrun in Microsoft FrontPage Server Extensions Could Allow Code Execution (Technical Details, MS03-051). Read more News www.securityfocus.com: Banking Scam Revealed. Read more www.theregister.co.uk: One, two, three, four MS patches at our door. Read more www.theregister.co.uk: WorldPay recovers from massive attack. Read more www.securityfocus.com: Wireless hacking bust in Michigan. Read more

12 november 2003 New in Archive PcShare 2.0 PasswordAngel Vulnerabilities & Exploits xforce.iss.net: Microsoft Workstation Service Buffer Overflow. Read more www.securitytracker.com: Microsoft Works Macro Name Length Buffer Overflow Lets Remote Users Execute Arbitrary Code. Read more www.securitytracker.com: Microsoft Word Macro Name Length Buffer Overflow Lets Remote Users Execute Arbitrary Code. Read more www.securitytracker.com: Microsoft Excel Macro Security Flaw Lets Remote Users Execute Arbitrary Macro Codes. Read more www.securitytracker.com: Microsoft SharePoint Team Services Buffer Overflow May Let Remote Users Execute Arbitrary Code. Read more www.securitytracker.com: Microsoft FrontPage Server Extensions Buffer Overflow May Let Remote Users Execute Arbitrary Code. Read more www.securitytracker.com: Microsoft Windows Workstation Service (wkssvc.dll) Buffer Overflow Lets Remote Users Execute Arbitrary Code with System Privileges. Read more www.securitytracker.com: Fujitsu tsworks Attachment Expansion Buffer Overflow May Permit Remote Code Execution. Read more www.securitytracker.com: UnAce File Name Buffer Overflow May Allow Remote Code Execution. Read more www.securitytracker.com: Symbol Technologies PDT 8100 Default WEP Keys May Grant Remote Users Access to the Network. Read more www.securitytracker.com: DailyDose Input Validation Flaw in $template Variable Permits Remote OS Command Execution. Read more www.securitytracker.com: Eudora Buffer Overflow During Reply-To-All Lets Remote Users Execute Arbitrary Code. Read more www.securitytracker.com: Bugzilla Javascript Buglists May Disclose Restricted Data to Remote Users. Read more www.securitytracker.com: tc.SimpleWebServer '.../' Directory Traversal Flaw Discloses Files to Remote Users. Read more www.securitytracker.com: (Claim is Retracted) PureFTPd Buffer Overflow in displayrate() Lets Remote Users Crash the Service. Read more www.securitytracker.com: Hylafax Format String Flaws in 'hfaxd' Yield Root Privileges to Remote Users. Read more www.securitytracker.com: EPIC4 Buffer Overflow in Processing CTCP Nicknames May Let Remote Users Execute Arbitrary Code. Read more www.securitytracker.com: Conquest Game Buffer Overflows Let Local Users Obtain Elevated Privileges. Read more www.securitytracker.com: AOL Instant Messenger Can Be Disconnected By Remote Users Sending Spoofed FIN or SYN Scans. Read more www.securiteam.com: Unace Exploitable Buffer Overflow (Filename). Read more www.debian.org: DSA-400-1 omega-rpg -- buffer overflow. Read more News Microsoft Security Bulletin MS03-049 Buffer Overrun in the Workstation Service Could Allow Code Execution (828749). Read more Microsoft Security Bulletin MS03-050 Vulnerability in Microsoft Word and Microsoft Excel Could Allow Arbitrary Code to Run. Read more Microsoft Security Bulletin MS03-051 Buffer Overrun in Microsoft FrontPage Server Extensions Could Allow Code Execution. Read more www.microsoft.com: How to Tell If a Microsoft Security-Related Message Is Genuine. Read more www.bizreport.com: Microsoft Warns of Latest Software Holes. Read more www.taipeitimes.com: Citibank discovers flaw in security. Read more www.theregister.co.uk: Eudora users warned over 'reply to all' trick. Read more news.com.com: Did hackers expose N-Gage games? Read more www.guardian.co.uk: Cyber-terror crackdown sparks civil rights fears. Read more www.esj.com: Commentary: Computer Explosion Equals Virus Explosion. Read more

11 november 2003 New in Archive Sweet Heart 1.0 (b) Skull-Burrow 3.0 (f) Webserver LITE 1.0 Kavar 3.0 Vulnerabilities & Exploits www.securitytracker.com: phpBB Input Validation Flaw in 'profile.php' Lets Remote Users Inject SQL Commands. Read more www.debian.org: DSA-398-1 conquest -- buffer overflow. Read more www.debian.org: DSA-399-1 epic4 -- buffer overflow. Read more News news.independent.co.uk: Hackers, shopfronts and worms: How fraud on the internet costs customers �100,000 a day. Read more www.securityfocus.com: Singapore government given sweeping powers to monitor computer activity. Read more www.theregister.co.uk: FBI on look-out for foreign government hackers. Read more timesofindia.indiatimes.com: No-holds barred cyber war. Read more www.washtimes.com: Spam harmed economy more than hackers, viruses. Read more reviews-zdnet.com.com: Why Microsoft's hacker bounty is wasted money. Read more www.thelouisvillechannel.com: Computer Hackers Find New Stomping Ground. Read more www.msnbc.com: Who falls for e-mail scams? Read more www.internetweek.com: The Mind Of A Hacker. Read more

10 november 2003 New in Archive Nethief XP (a) NetBull 1.1 (b) August 1.0(b) Vulnerabilities & Exploits www.securitytracker.com: IBM DB2 'db2start', 'db2stop', and 'db2govd' Flaws May Yield Root Privileges to Local Users. Read more www.securitytracker.com: Net-SNMP May Let Remote Authenticated Users Access Excluded Objects. Read more www.securiteam.com: Microsoft Windows XP/2000 Remote Return into Libc Exploit (RPC, DCOM). Read more www.securiteam.com: phpBB 'u' Variable SQL Injection. Read more www.securiteam.com: 0verkill Environment Variable Buffer Overflow. Read more News www.theage.com.au: Hackers reach Defence files: report. Read more www.heraldsun.news.com.au: Hackers steal top secrets. Read more www.infoworld.com: Virus writers dismiss Microsoft's bounty fund. Read more www.detnews.com: Security flaws hit Microsoft. Read more www.swissinfo.org: Scientists seek to plug gaps in computer security. Read more

09 november 2003 New in Archive Legendmir 1.03 Legendmir 1.5 Sdbot china Tools packetstormsecurity.nl: Proof of concept PAM backdoor for Linux and FreeBSD that adds a magic password. Download Guides, Papers, etc. www.securityfocus.com: Oracle Row Level Security: Part 1. Read more News www.theregister.co.uk: AV vendors shun MS bounty hunters. Read more www.securityfocus.com: Ashcroft takes on foreign government hackers. Read more news.bbc.co.uk: A glimpse inside the virus writer. Read more www.theregister.co.uk: MS releases Office 2003 bug fix. Read more www.detnews.com: Security flaws hit Microsoft. Read more

08 november 2003 New Trojans PtakkS resurrecion r3 Sweet Heart 1.0 (c) DarkSky 1.0 v2 Vulnerabilities & Exploits www.debian.org: DSA-397-1 postgresql -- buffer overflow. Read more www.securitytracker.com: HP-UX libc Flaw Prevents NLSPATH From Being Appropriately Restricted. Read more www.securitytracker.com: HP Software Distributor Buffer Overflow May Let Local Users Gain Elevated Privileges. Read more News www.securitypipeline.com: More Internet Explorer Vulnerabilities Surface. Read more www.securityfocus.com: Ashcroft takes on foreign government hackers. Read more www.theregister.co.uk: Linux kernel backdoor blocked. Read more news.bbc.co.uk: Retailers count cost of Worldpay attack. Read more www.accountancyage.com: Funding to fight cybercrime unlikely to rise. Read more www.detnews.com: At Microsoft, security flaws emerge as threat to bottom line. Read more

07 november 2003 New Trojans Devil 5 Snake 1.0 beta 1 Snake 1.0 beta 2 Guides, Papers, etc. www.winnetmag.com: NAT Transversal. Read more Vulnerabilities & Exploits www.securitytracker.com: Mac OS X Terminal Bug May Let Remote Users Gain Access to the System. Read more www.securitytracker.com: CDE libDTHelp Buffer Overflow Lets Local Users Execute Arbitrary Code With Root Privileges. Read more www.securitytracker.com: OpenBSD Kernel Bug in Processing File Headers Lets Local Users Crash the System. Read more www.securiteam.com: TelCondex SimpleWebserver Buffer Overflow (Exploit). Read more www.securiteam.com: Serious Sam DoS. Read more www.securiteam.com: BEA Tuxedo Administration CGI Multiple Argument Issues. Read more www.securiteam.com: Plug and Play Web Server '/asdf.?' DoS. Read more www.securiteam.com: BRS WebWeaver User-Agent DoS. Read more www.securiteam.com: LiteServe Buffer Overflow in Handling Server's Log. Read more News www.securityfocus.com: Thwarted Linux backdoor hints at smarter hacks. Read more www.business.scotsman.co: Hackers in attack on RBS credit card firm. Read more zdnet.com.com: Microsoft bounty to disrupt virus writers? Read more rss.com.com: Gap in Windows lets in pop-ups, says FTC. Read more www.techworld.com: Bad day for WLAN security. Read more zdnet.com.com: Researcher warns Wi-Fi users of bad passwords. Read more techfocus.org: Again: Microsoft Forgets to Renew Domain Name. Read more

06 november 2003 New Trojans Snow 3.0 Vagr Nocker 5.0 NT Shell 1.0 Tools www.pentest.co.uk: Btscanner is a tool designed specifically to extract as much information as possible from a Bluetooth device without the requirement to pair. Read more Guides, Papers, etc. www.securityfocus.com: Wireless Intrusion Detection Systems. Read more Vulnerabilities & Exploits www.securitytracker.com: OpenSSL ASN.1 Parsing Recursion May Let Remote Users Crash OpenSSL-based Applications. Read more www.securitytracker.com: X-CD-Roast Symlink Flaw May Let Local Users Gain Elevated Privileges. Read more www.securitytracker.com: LiteServe Log Viewer Buffer Overflow May Let Remote Users Execute Arbitrary Code on the Target System. Read more www.securitytracker.com: NIPrint Print Server Help File Bug Lets Local Users Execute Shell Commands With SYSTEM Privileges. Read more www.securitytracker.com: NIPrint Print Server Buffer Overflow Lets Remote Users Execute Arbitrary Code. Read more www.securitytracker.com: OpenBSD ISAKMP Daemon (isakmpd) May Let Remote Users Delete Arbitrary Security Associations. Read more www.securitytracker.com: Oracle Application Server Portal Component Permits Remote SQL Injection, Graning Access to Remote Users. Read more www.securitytracker.com: Bugzilla May Disclose Data Summaries to Remote Users and Let Privileged Authenticated Users Execute Arbitrary SQL Commands. Read more www.securitytracker.com: Unichat Character Processing Flaw Lets Remote Users Crash a Target User's Client. Read more www.securitytracker.com: SHOUTcast Server 'icy-name' and 'icy-url' Buffer Overflow Lets Remote Authenticated Users Crash the Server. Read more www.securitytracker.com: CUPS IPP Busy Loop May Let Remote Users Deny Service. Read more www.securitytracker.com: DBMail SMTP Input Validation Flaw Lets Remote Users Execute Arbitary Commands in a Certain Configuration. Read more www.securitytracker.com: Ethereal Buffer Overflows in GTP, ISAKMP, MEGACO, and SOCKS Dissectors Permit Remote Code Execution. Read more www.securiteam.com: NIPrint LPD-LPR Print Server (Cross Platform Exploit). Read more www.securiteam.com: OpenBSD ibcs2 Kernel Panic (Exploit). Read more www.securiteam.com: Denial of Service in ASN.1 Parsing. Read more News www.theregister.co.uk: MS puts $250k bounty on virus authors' heads. Read more www.washingtonpost.com: Microsoft Puts Bounty on Virus Authors. Read more economictimes.indiatimes.com: Brazil police bust gang of Internet hackers. Read more www.web-user.co.uk: WorldPay toppled by hack attack. Read more www.bizreport.com: 'DDoS' Attacks Still Pose Threat to Internet. Read more zdnet.com.com: 'Homeless Hacker' speaks out. Read more www.theregister.co.uk: Italian charged in porn dialler virus scam. Read more

05 november 2003 New Trojans Nuclear RAT 1.0 Crnet1.1 InclineRoad 1.0 Guides, Papers, etc. guh.nu: How to install VNC via a remote command prompt on a Windows 2000 computer. Read more Vulnerabilities & Exploits www.guninski.com: OpenBSD kernel panic, yet still *BSD much better than windows. Read more www.securitytracker.com: Web Wiz Forums Discloses Private Messages to Remote Users. Read more www.securitytracker.com: Tritanium Bulletin Board Discloses Messages to Remote Authenticated Users. Read more www.securitytracker.com: Plug and Play Web Server Proxy Service Can Be Crashed By Remote Users. Read more www.securitytracker.com: IA WebMail Server Buffer Overflow in Processing HTTP Headers Lets Remote Users Execute Arbitrary Code. Read more www.securiteam.com: NIPrint LPD-LPR Print Server (Exploit). Read more www.securiteam.com: IA WebMail Server Buffer Overflow Exploit. Read more www.securiteam.com: Aborting the OS X's Init Script Allows Gaining of Root Console. Read more www.securiteam.com: Multiple Payload Handling Flaws in ISAKMPd. Read more www.securiteam.com: NIPrint LPD-LPR Print Server (Long Request). Read more www.securiteam.com: IA WebMail Server Buffer Overflow Vulnerability. Read more www.securiteam.com: VMware GSX Server Remote Buffer Overflow (GLOBAL). Read more www.securiteam.com: OpenAutoClassifieds Cross-Site Scripting Vulnerability. Read more News news.com.com: Microsoft to offer bounty on hackers. Read more www.whatpc.co.uk: Ex-hackers 'rubbish at security'. Read more www.denverpost.com: New rules cut hackers less slack. Read more www.theregister.co.uk: Israeli man charged with hacking Mossad. Read more www.bizreport.com: 'DDoS' Attacks Still Pose Threat to Internet. Read more www.theregister.co.uk: Security fears over UK 'snooper's charter'. Read more www.mytown.co.nz: E-mail scam extracts bank customer details. Read more

04 november 2003 New Trojans Hanky Panky 1.0 Hanky Panky 1.1 Rexec Vulnerabilities & Exploits www.securitytracker.com: BRS WebWeaver Can Be Crashed By Remote Users Sending Long 'User-Agent' Contents. Read more www.securitytracker.com: Sun Java File Installation Hole Lets Local Users Overwrite Files During Installation. Read more www.securiteam.com: SHOUTcast Server Buffer Overflow (icy-name, icy-url). Read more News www.theregister.co.uk: Dangerous Mimail variant knocks over anti-spam sites. Read more www.mytown.co.nz: E-mail scam extracts bank customer details. Read more www.networknews.co.uk: Web hoaxes set to increase. Read more www.theregister.co.uk: Brazilian script kiddie arrested in Japan. Read more www.informationweek.com: Longhorn May Pose Security Concerns. Read more www.haaretz.com: Israeli arrested for hacking Mossad espionage agency site. Read more

03 november 2003 New Trojans Skull-Burrow 3.0b (l) Yulihubot 1.1 Trojan B'Gone 1.0 Vulnerabilities & Exploits www.securiteam.com: Wu-FTPd Remote DoS (/bin/ls). Read more www.securiteam.com: Default Password List (Default passwords sometimes stay for good). Read more www.securiteam.com: BEA WebLogic Example InteractiveQuery.jsp XSS Issue. Read more www.securiteam.com: Unauthorized Message Access in Web Wiz Forums. Read more www.securiteam.com: TelCondex SimpleWebserver Buffer Overflow. Read more www.securiteam.com: Mac OS X Panther Screen Lock Bypass. Read more www.securiteam.com: MPM Guestbook Multiple Vulnerabilities (CSS, Path Disclosure). Read more www.securiteam.com: tHTTPd Virtual Hosting Security Hole (Host: ../..). Read more www.securiteam.com: Buffer Overflow in PostgreSQL's cash_words(). Read more www.securiteam.com: Buffer Overflow in PostgreSQL's lpad() and rpad(). Read more www.securiteam.com: Buffer Overflow in PostgreSQL's repeat(). Read more www.securiteam.com: PostgreSQL to_ascii() Buffer Overflow Vulnerability. Read more News grep.law.harvard.edu: New Worm Steals Your Data. Read more www.heraldsun.news.com.au: Internet phone slug. Read more www.yomiuri.co.jp: Boy hacker arrested over violation of computer law. Read more www.computerweekly.com: Briton pleads guilty to US nuclear lab hacking attack. Read more

02 november 2003 New Trojans HG-Web Downloader 1.0 Raza FTP 1.0 DSK-Lite (a) version 2 Guides, Papers, etc. www.hert.org: Backdooring Binary Objects. Read more Vulnerabilities & Exploits www.securitytracker.com: frox FTP Proxy Can Be Crashed By Remote Users Conducting Port Scans. www.securitytracker.com: Novell ZENworks Buffer Overflow in PMAP.NLM Lets Remote Users Crash the System. Read more www.securitytracker.com: Novell NetWare Buffer Overflow in PMAP.NLM Lets Remote Users Crash the System. Read more www.securitytracker.com: Booby Error Page Input Validation Flaw Lets Remote Users Conduct Cross-Site Scripting Attacks. Read more www.securitytracker.com: Microsoft Internet Explorer IFRAME Refresh Lets Remote HTML Access Local Files. Read more www.securitytracker.com: Citrix MetaFrame Input Validation Flaw in 'NFuse_Message' Variable Permits Cross-Site Scripting Attacks. Read more www.securitytracker.com: VMware GSX Server Buffer Overflow in VMware Authorization Service Input Lets Remote Users Execute Arbitrary Code. Read more News

01 november 2003 New Trojans Pilot 1.0.5 Remote Shut 1.1 Taladrator 2.1(b) server PwlTools with dropper Vulnerabilities & Exploits www.securitytracker.com: LedForums 'Top Message' Input Validation Flaw Permits Cross-Site Scripting Attacks. Read more www.securitytracker.com: FlexWATCH Network Video Server Authentication Flaw Grants Administrative Access to Remote Users. Read more www.securitytracker.com: iWeb Server '%5C' Input Validation Flaw Discloses Files on the System to Remote Users. Read more News www.pcworld.com: New Worm Steals User Data. Read more www.chron.com: Sealed with a kiss, new e-mail virus spreading. Read more www.theregister.co.uk: The conspiracy against our in-boxes. Read more www.timesonline.co.uk: Founder of Redbus denies hacking. Read more news.zdnet.co.uk: Worms and toasters turn up heat on corporate security. Read more

Copyright� MegaSecurity.org