Some Advice for Howard Schmidt

It’s been little more than 24 hours since President Obama named Howard Schmidt his White House Cybersecurity Coordinator, but it didn’t take nearly that long for just about everyone with any interest in security to line up on one side or the other of the “he has no chance/he’ll save the Internet”...

Yahoo! Messenger File Transfer Filename Spoofing (CVE-2005-0243)

Yahoo Messenger is a service providing instant messages, similar to MSN Messenger and ICQ. Yahoo! Messenger allows users to see when their friends come online, send instant messages, join chat rooms, and exchange files. There exists a vulnerability in the way Yahoo! Messenger displays file names ...

Low: Red Hat Security Advisory: tomcat security update for Red Hat Network Satellite Server

Updated tomcat packages that fix several security issues are now available for Red Hat Network Satellite Server 5.2 and 5.3. This update has been rated as having low security impact by the Red Hat Security Response Team. Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pag...

MIT Kerberos kadmind Rename Principal Buffer Overflow (CVE-2007-2798)

Kerberos is a protocol suite which allows for the negotiation of authenticated, and optionally encrypted, communication between two points on a network. MIT Kerberos V5 is an implementation of this protocol suite. There exists a stack buffer overflow vulnerability in the Kerberos Administration...

Autodesk Maya Script - Nodes Arbitrary Command Execution

Autodesk Maya Script - Nodes Arbitrary Command Execution -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Autodesk Maya Script Nodes Arbitrary Command Execution 1. Advisory Information Title: Autodesk Maya Script...

Design/Logic Flaw

Research In Motion RIM BlackBerry Browser on the BlackBerry 8800 allows remote attackers to cause a denial of service application hang via a JavaScript loop that configures the home page by using the setHomePage method and a DHTML behavior property...

Design/Logic Flaw

The dbglvl file for the megaraidsas driver in the Linux kernel before 2.6.27 has world-writable permissions, which allows local users to change the 1 behavior and 2 logging level of the driver by modifying this file...

CVE-2009-3944

This CVE concerns the BlackBerry Browser on the BlackBerry 8800. It describes a remotely triggerable denial of service caused by a JavaScript loop that configures the home page via the setHomePage method and a DHTML behavior property. The statement implies the vulnerability arises from how the pa...

CVE-2009-3943: Undefined Security Weakness

Microsoft Internet Explorer 6 through 6.0.2900.2180 and 7 through 7.0.6000.16711 allows remote attackers to cause a denial of service application hang via a JavaScript loop that configures the home page by using the setHomePage method and a DHTML behavior property...

PT-2009-6113 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.27 Description: The issue concerns the megaraid sas driver in the Linux kernel, where the dbg lvl file has world-writable permissions. This allows local users to modify the file, which in turn enables them t...

CVE-2009-3944: Undefined Security Weakness

Research In Motion RIM BlackBerry Browser on the BlackBerry 8800 allows remote attackers to cause a denial of service application hang via a JavaScript loop that configures the home page by using the setHomePage method and a DHTML behavior property...

Hung it to the two new methods 1 1 hackers Handbook manuscript-a vulnerability warning-the black bar safety net

Hung it to the two new methods lcx Here only to do a technical discussion, not a specific hazard of the things. If you want to use my method to do it, I can't help it, huh. On the hanging horse is basically in a web page the original code of Riga contained an iframe. On loading the iframe, I used...

Adobe RoboHelp Server SQL Injection (CVE-2008-2991)

Adobe RoboHelp Server is a server-based Help solution that provides real-time end-user feedback on Help and knowledge bases. It gathers and logs data about what questions users ask, while searching content and how users navigate through topics. There exists an SQL injection vulnerability in Adobe...

Nginx 0.7.61 - WebDAV Directory Traversal

Bug Title: nginx webdav copy/move method directory traversal Program: nginx Version: nginx/0.7.61 - other versions may also be affected Website: http://sysoev.ru/nginx/ Severity: Low Date discovered: 23 September 2009 The webdav component has to be enabled and the user has to have permission to u...

ZDI-09-048: Microsoft Internet Explorer CSS Behavior Memory Corruption Vulnerability

ZDI-09-048: Microsoft Internet Explorer CSS Behavior Memory Corruption Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-09-048 August 5, 2009 -- CVE ID: CVE-2009-1919 -- Affected Vendors: Microsoft -- Affected Products: Microsoft Internet Explorer -- TippingPointTM IPS Customer...

Microsoft Internet Explorer CSS Behavior Memory Corruption Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page. The specific flaw exists when accessing embedded style sheets...

CVE-2009-2336

The forgotten mail interface in WordPress and WordPress MU before 2.8.1 exhibits different behavior for a password request depending on whether the user account exists, which allows remote attackers to enumerate valid usernames. NOTE: the vendor reportedly disputes the significance of this issue,...

Trustwave's SpiderLabs Security Advisory TWSL2009-002

Trustwave's SpiderLabs Security Advisory TWSL2009-002: Cisco ASA Web VPN Multiple Vulnerabilities Published: 2009-06-24 Version: 1.0 Vendor: Cisco Systems, Inc. http://www.cisco.com Versions affected: 8.04, 8.1.2, and 8.2.1 Description: Cisco's Adaptive Security Appliance ASA provides a number of...

Study: Women more affected by ID fraud

From CNet Elinor Mills Women are more affected by identity fraud then men are, according to a new survey that also found that it takes women longer to restore their identities but they also tend to change their behavior afterward. In a survey of 808 U.S. households, half of which reported fraud, ...

MDVA-2008:126 : x11-server

A Xvnc server running in 16 bpp depth would crash when a client with 16 bpp depth connected. Also, keyboard behaviour was incorrect when the X server was run with Xkb extension disabled. This update fixes both issues. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the...