The Web Won't Be Safe, Let Alone Secure, Unless We Break It

There are several security issues affecting all major Web browsers that have remained unaddressed for years probably because the bad guys haven’t leveraged them aggressively enough, but the potential is there. The problem is that the only known ways to fix these issues adequately is to “break the...

Health scares can provide lessons for security

The swine flu outbreak has inspired a flood of comparisons and false analogies to Conficker and other worms, most of which miss the many key differences between the Internet infrastructure and the human population. But there are lessons that security personnel can learn from the ways that health...

Conficker Worm Detection (uncredentialed check)

The remote host seems to be infected by the Conficker worm. This worm has several capabilities which allow an attacker to execute arbitrary code on the remote operating system. The remote host might also be attempting to propagate the worm to third party hosts. C Tenable Network Security, Inc...

The Ryan & Roel Show Episode 8

The Kido Worm Attack – Fri, Jan. 23 2009 Ryan and Roel discuss the propagation techniques behind the Kido/Conficker worm attack and make important recommendations around protection and mitigation. Download episode...

Code injection

Unspecified vulnerability in Kerberos Incremental Propagation in Solaris 10 and OpenSolaris snv01 through snv110 allows remote attackers to cause a denial of service loss of incremental propagation requests to slave KDC servers via unknown vectors related to the master Key Distribution Center KDC...

CVE-2009-0923

Unspecified vulnerability in Kerberos Incremental Propagation in Solaris 10 and OpenSolaris snv01 through snv110 allows remote attackers to cause a denial of service loss of incremental propagation requests to slave KDC servers via unknown vectors related to the master Key Distribution Center KDC...

CVE-2009-0923

Unspecified vulnerability in Kerberos Incremental Propagation in Solaris 10 and OpenSolaris snv01 through snv110 allows remote attackers to cause a denial of service loss of incremental propagation requests to slave KDC servers via unknown vectors related to the master Key Distribution Center KDC...

CVE-2009-0923

The CVE-2009-0923 entry affects Solaris 10 and OpenSolaris (SNV builds 01–110) in Kerberos Incremental Propagation. It describes a remote DoS against slave KDC servers caused by issues in the master KDC, with unknown vectors. No remediation details are provided in the supplied documents; CVSSv2 b...

kernel: missing check before setting mount propagation

The dochangetype function in fs/namespace.c in the Linux kernel before 2.6.22 does not verify that the caller has the CAPSYSADMIN capability, which allows local users to gain privileges or cause a denial of service by modifying the properties of a mountpoint...

MS Executable Detection

This service is unknown to Nessus. It appears to send a Microsoft Windows executable when a connection to it is established. This may be evidence of some malware that are known to propagate in this manner. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid33950;...

Security Best Practice: Familiarize Yourself with the General CIFS Worm Catcher

A worm is a self-replicating malware malicious software that propagates by actively sending itself to new machines. CIFS, The Common Internet File System sometimes called SMB is a protocol for sharing files and printers. The protocol is implemented and widely used by Microsoft operating systems, ...

CVE-2007-4614

BEA WebLogic Server 9.1 does not properly handle propagation of an admin server's security policy change log to temporarily unavailable managed servers, which might allow attackers to bypass intended restrictions, a different vulnerability than CVE-2007-0426...

CVE-2007-0426

BEA WebLogic Portal 9.2, when running in a WebLogic Server clustered environment using WebLogic Portal entitlements, does not properly propagate entitlement policy changes if the changes are made on a managed server while the Administrative Server is unavailable, which might allow attackers to...

CVE-2007-0426

BEA WebLogic Portal 9.2 in a WebLogic Server clustered environment has a vulnerability where entitlement policy changes made on a managed server while the Administrative Server is unavailable may not propagate correctly, potentially allowing bypass of intended restrictions. The issue affects the ...

Ajax hacking (Monyer)-vulnerability warning-the black bar safety net

Author: dream light In the tenth period published the Ajax hacking, the users give me feedback onXSSthe technical aspects of the problem mainly by the following several. For what in Ajax hacking, withXSS for? It with the traditionalXSSwhat's the difference? They each have what the pros and cons o...

Cyber thieves ten trick-vulnerability warning-the black bar safety net

Peeping five formula One, you enter the account number when not found behind the eye, someone secretly took down your account. Second, you in the cafe Internet, after the Internet leaves a record, someone with the decryption tool will be your password to unscramble it. Third, you go to repair...

For MS06-0 of 4 0 of botnet attacks to reproduce jianghu-vulnerability warning-the black bar safety net

According to the ongoing track of the virus an anti-virus expert Introduction, In addition to targeting the MS06-0 4 0 the Windows Server service vulnerability, this latest round of virus attacks also make use of the Windows System of the other three worm holes. With the month of August to appear...

The Trojan part of the hidden technology hidden technology disclosure-vulnerability warning-the black bar safety net

My friend introduced to this forum, it is rare to discuss the atmosphere of such a good Forum here mentioned a lot of new knowledge, used to think I here a collection of this post is more full of some of the Trojan horse technique, really did not expect, turned out to be hiding the connection...

Preemptive Protection against Blackworm

BlackWorm is a worm that uses its own SMTP engine to spread using remote shares. The worm also tries to disable security-related and file sharing software as well as destroys files of certain types, including .DOC, .ZIP, .XLS and more. Blackworm usually attaches itself to e-mail messages as an...

Bugbear worm

BugBear backdoor is listening on this port. A cracker may connect to it to retrieve secret information, e.g. passwords or credit card numbers... The BugBear worm includes a key logger and can kill antivirus or personal firewall softwares. It propagates itself through email and open Windows shares...