CVE-2011-4080

The sysrqsysctlhandler function in kernel/sysctl.c in the Linux kernel before 2.6.39 does not require the CAPSYSADMIN capability to modify the dmesgrestrict value, which allows local users to bypass intended access restrictions and read the kernel ring buffer by leveraging root privileges, as...

SuSE 10 Security Update : Linux kernel (ZYPP Patch Number 7811)

This Linux kernel update fixes various security issues and bugs in the SUSE Linux Enterprise 10 SP4 kernel. The following security issues have been fixed : - A USB string descriptor overflow in the auerwald USB driver was fixed, which could be used by physically proximate attackers to cause a...

kernel: sysctl: restrict write access to dmesg_restrict

The sysrqsysctlhandler function in kernel/sysctl.c in the Linux kernel before 2.6.39 does not require the CAPSYSADMIN capability to modify the dmesgrestrict value, which allows local users to bypass intended access restrictions and read the kernel ring buffer by leveraging root privileges, as...

PT-2012-1800 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.39 Description: The issue allows local users to bypass intended access restrictions and read the kernel ring buffer by leveraging root privileges. This can be demonstrated by a root user in a Linux Container...

With 4 Million Ghost Click Victims, FBI Hoping A Few Step Forward

The news last month was of the bust up of the biggest cyber crime ring in history, with 4 million victims and $14 million in losses. Now the FBI is hoping a few of those victims step forward to help with the prosecution. In a post on the FBI Web site, the agency said it is “seeking information fr...

RealNetworks RealPlayer QCP Parsing

Added: 09/12/2011 CVE: CVE-2011-2950 BID: 49172 OSVDB: 74549 Background RealPlayer is a media player application which can play back various multimedia file formats, including QCP audio files. The QCP file format is frequently used to provide ring tones and to record voice for cellular telephones...

RealNetworks RealPlayer QCP Parsing

Added: 09/12/2011 CVE: CVE-2011-2950 BID: 49172 OSVDB: 74549 Background RealPlayer is a media player application which can play back various multimedia file formats, including QCP audio files. The QCP file format is frequently used to provide ring tones and to record voice for cellular telephones...

FBI tracking hackers who targeting Vanessa Hudgens &other celebs !

The Federal Bureau of Investigation FBI is reportedly investigating a hacker ring that is targeting phones and computers of celebrities and stealing nude photos and other personal items. The probe stems from nude photos of Vanessa Hudgens that were recently leaked online, reports the New York Dai...

Four Face Jail Time for Ghost Market Crime Forum

Two U.K. teens and twenty-somethings received a collective prison sentence of fifteen years after administering the Ghost Market criminal forum, a meeting place and a classroom where nefarious individuals found anything from banking malware to methamphetamine recipes. Gary Paul Kelly, an unemploy...

Irish Banking Fraud Ring Uncovered

A Moldovan man alleged to be the mastermind behind an international fraud ring that targeted both private and corporate bank accounts has been arrested in Limerick, Ireland, in a joint operation by Gardai and customs officials. According to a report in the Irish Independent, this operation was...

Dozens Charged in $1M Scheme To Fence Apple Goods

UPDATED: The Manhattan district attorney’s office on Wednesday announced the break-up of an identity theft and fencing ring responsible for around $1 million in fraudulent purchases from Apple stores around the country. District Attorney Cyrus Vance and the U.S. Secret Service in a press conferen...

Hacking kits making Cyber Crime Easy !

The incidence of cybercrime is set to increase with the proliferation of pre-made hacking software able to be used by less sophisticated criminals, research suggests. IT security software maker Symantec said attack toolkits are becoming more accessible and easier to use, allowing criminals with...

Multi-Million Dollar Cyber Fraud Investigation Surrounds Exchange Students

Two international students from Vietnam are under investigation by the Department of Homeland Security on charges of identity theft and wire fraud. The two Winona State University students, Tram Vo and Khoi Van, are alleged to have taken part in a criminal ring that defrauded ecommerce merchants...

Report: Romanian Authorities Bust VoIP Hacking Group

Authorities in Romania have disrupted a large hacking ring accused of stealing Voice over IP VoIP data from hacked servers and using it to place bogus calls to premium rate numbers. Agence France Presse reported on Tuesday that 42 people were arrested in the sting, breaking up a network that was...

Feds Bust Black Market ID Theft Ring

Thirty-eight defendants from across the United States have been charged with participating in a multimillion-dollar black market travel agent ring that used the stolen identities of thousands of victims to purchase airline tickets for customers. Read the full article. Dark Reading...

SMS Crime Ring Busted in Malaysia

Malaysian cops have busted an alleged text message spam scam ring thought to have fleeced locals for hundreds of thousands of dollars. The group are suspected of raking in RM6.4m $1.9m between 2006 and April 2010 using fictitious lottery winnings as a bait for an advanced fee fraud. Read the full...

Xilisoft Blackberry Ring Tone Maker Crash

Exploit Title: Xilisoft Blackberry Ring Tone Maker .wma Local Crash Date: March 29, 2010 Software Link: http://www.xilisoft.com/blackberry-ringtone-maker.html Version: 1.0.12 build-0326 Tested on: Windows XP SP3 / Windows 7 Cost: 9.95 USD Author: chap0 Site: http://www.setfreesecurity.com Email:...

Xilisoft BlackBerry Ring Tone Maker - .wma Local Crash

Xilisoft BlackBerry Ring Tone Maker - .wma Local Crash !/usr/bin/perl Exploit Title: Xilisoft Blackberry Ring Tone Maker .wma Local Crash Date: March 29, 2010 Software Link: http://www.xilisoft.com/blackberry-ringtone-maker.html Version: 1.0.12 build-0326 Tested on: Windows XP SP3 / Windows 7 Cos...

Xilisoft BlackBerry Ring Tone Maker - '.wma' Local Crash

!/usr/bin/perl Exploit Title: Xilisoft Blackberry Ring Tone Maker .wma Local Crash Date: March 29, 2010 Software Link: http://www.xilisoft.com/blackberry-ringtone-maker.html Version: 1.0.12 build-0326 Tested on: Windows XP SP3 / Windows 7 Cost: 9.95 USD Author: anonymous Site:...

A Closer Look at the Koobface Gang

The Koobface botnet is the tip of the iceberg for the malicious operations of the online crime ring. Here are the top 10 things you didn’t know about the Koobface gang. Read the full article. ZDNet...