A Cyberwarfare Reality Check

Let’s take a step back for a moment from who the actors are in the recent DDoS attacks and look at the root cause of the problem, because that isn’t going away. We have a horribly insecure software ecosystem that lets the bad guys take advantage of all the insecure software that vendors have...

DDoS Attacks Cripple U.S. and Korean Sites

From The New York Times Choe Sang-Hun Cyberattacks that have crippled the Web sites of several major American and South Korean government agencies since the July 4th holiday weekend appear to have been launched by a hostile group or government, South Korea’s main government spy agency said on...

DDoS Attacks Ongoing Against FTC, Other Sites

It looks like the distributed denial-of-service attack, once the favorite tactic of script kiddies and professional hackers alike, is coming back into favor. Attackers have been conducting an ongoing DDoS attack against the Federal Trade Commission’s main site, as well as some other government...

Security Guard Allegedly Hacked Patient Records, HVAC System at Hospital

From DarkReading Kelly Jackson Higgins A former security guard for a Dallas hospital has been arrested by federal authorities for allegedly breaking into the facility’s HVAC and confidential patient information computer systems. In a bizarre twist, he posted videos of his hacks on YouTube, and wa...

ruby

New ruby packages are available for Slackware 11.0, 12.0, 12.1, 12.2, and -current to fix a security issue. More details about this issue may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2009-1904 Here are the details from the Slackware 12.2...

How to defend against botnet attacks

Botnets have become one of the more insidious threats on the Internet in the last few years. Large-scale botnets such as the Storm, Asprox and Nugache networks have caused tremendous problems by serving as platforms for spamming operations, DDoS attacks and other mischief. In this podcast from...

Mac OS X e-mail worm squirming

From ZDNet Dancho Danchev A newly discovered email worm dubbed OSX/Tored-A once again puts the spotlight on the potential worm-ability, and malware spreading tactics targeting Apple’s OS X. The worm propagates through emails harvested from infected hosts, and has a backdoor functionality allowing...

Jose Nazario on botnets and DDoS defense

Few people in the world know more about the internal workings of botnets, DDoS attacks and defense than Jose Nazario, a senior security researcher at Arbor Networks. Don’t miss his thoughts on why DDoS attacks are more prevalent in some regions than others and how to react if you’re attacked...

RedHat Update for ruby RHSA-2008:0897-01

Check for the Version of ruby OpenVAS Vulnerability Test RedHat Update for ruby RHSA-2008:0897-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

DNS Server Spoofed Request Amplification DDoS

The remote DNS server answers to any request. It is possible to query the name servers NS of the root zone '.' and get an answer that is bigger than the original request. By spoofing the source IP address, a remote attacker can leverage this 'amplification' to launch a denial of service attack...

MS Windows WRITE_ANDX SMB command handling Kernel DoS (meta)

Exploit for unknown platform in category dos / poc ============================================================ MS Windows WRITEANDX SMB command handling Kernel DoS meta ============================================================ require 'msf/core' module Msf module Exploits module Test class...

CVE-2008-3933

Wireshark (formerly Ethereal) vulnerability CVE-2008-3933 affects versions 0.10.14–1.0.2. A crafted packet containing zlib-compressed data can trigger an invalid read in tvb_uncompress, leading to a denial of service (crash). The connected sources corroborate the affected range and the general im...

Ruby 1.9 - REXML Remote Denial of Service

Ruby 1.9 - REXML Remote Denial of Service source: https://www.securityfocus.com/bid/30802/info Ruby is prone to a remote denial-of-service vulnerability in its REXML module. Successful exploits may allow remote attackers to cause denial-of-service conditions in applications that use the vulnerabl...

Server side request forgery (ssrf)

hcmon.sys in VMware Workstation 6.5.1 and earlier, VMware Player 2.5.1 and earlier, VMware ACE 2.5.1 and earlier, and VMware Server 1.0.x before 1.0.9 build 156507 and 2.0.x before 2.0.1 build 156745 uses the METHODNEITHER communication method for IOCTLs, which allows local users to cause a denia...

Universal honker CNN attack techniques parsing-vulnerability warning-the black bar safety net

Recently, CNN anchor, Carver te for the Chinese people with a strong discriminatory remarks, and CNN for this event the lack of sincerity of the apology and for the Chinese government's groundless accusations, roused the people of the country to strong indignation. So in some Patriotic art...

IPS-1 Protection Update - Authentication (v 15), DDOS (v 12), DHCP (v 8), Enterprise Software (v 2), Finger (v 10), FTP (v 23), IRC (v 13), LPD (v 11)

This advisory covers a set of protocol updates for the Authentication, DDOS, DHCP, Enterprise Software, Finger, FTP, IRC, and LPD protocol groups. The Authentication protocol group has been updated to ignore password strength tests for anonymous and guest users. Increased protocol compliance...

CVE-2003-0857

The 1 ipqread and 2 ipulogread functions in iptables allow local users to cause a denial of service by sending spoofed messages as other users to the kernel netlink interface...

CVE-2003-1354

The CVE-2003-1354 issue concerns GameSpy 3D 2.62–compatible gaming servers that respond with very large UDP packets to tiny requests, enabling remote attackers to use these servers as an amplification vector for DDoS attacks with spoofed UDP query packets (illustrated by Battlefield 1942). The vu...

CVE-2003-1354

Multiple GameSpy 3D 2.62 compatible gaming servers generate very large UDP responses to small requests, which allows remote attackers to use the servers as an amplifier in DDoS attacks with spoofed UDP query packets, as demonstrated using Battlefield 1942...

KwsPHP Module jeuxflash 1.0 (id) Remote SQL Injection Vulnerability

No description provided by source. KwsPHP Module jeuxflash Remote SQL Injection Vulnerability AUTHOR : H-T Team HouSSamix ToXiC350 HOME : http://no-hack.fr & http://no-hack.net Site: http://koogar.alorys-hebergement.com/kwsphp/index.php?mod=downloads&filedl=30&before=8&pdl=1 Dork :...