199 matches found
Microsoft Releases February Security Bulletin
Microsoft has released an update to address vulnerabilities in Microsoft Windows and Office as part of the Microsoft Security Bulletin Summary for February 2010. These vulnerabilities may allow an attacker to execute arbitrary code, cause a denial-of-service condition, or operate with elevated...
Security Best Practice: Blocking Yahoo! Messenger
Instant Messaging applications allow communication and collaboration between Internet users using various modes of communication, including instant messages exchange, voice and video, application sharing, white board, file transfer and remote assistance.Yahoo! Messenger is an...
Security Best Practice: Familiarize Yourself with the Max Ping Size Protection
Ping is a computer network administration utility used to test whether a particular host is reachable across an IP network and to measure the round-trip time for packets sent from the local host to a destination computer, including the local host's own interfaces.Ping operates by sending Internet...
Security Best Practice: Familiarize Yourself with the Packet Sanity Protection
The Packet Sanity protection performs several Layer 3 and Layer 4 sanity checks. These include verifying packet size, UDP and TCP header lengths, dropping IP options and verifying the TCP flags.Numerous types of attacks may be hidden in fragmented packets...
Security Best Practice: Familiarize Yourself with the Network Quota Protection
Network Quota enforces a limit upon the number of connections that are allowed from the same source IP, to protect against Denial Of Service attacks...
Security Best Practice: Familiarize Yourself with the Header Spoofing Protection
One of the first steps an attacker takes before attacking a website is to analyze the web server response in order to gather as much information as possible about it. This is known as "fingerprinting"...
Security Best Practice: Familiarize Yourself with the Non Compliant HTTP Protection
HTTP Protocol Inspection provides strict enforcement of the HTTP protocol, ensuring these sessions comply with RFC standards and common security practices...
Security Best Practice: Familiarize Yourself with the Directory Listing Protection
One of the first steps an attacker may take before attacking a web site is to gather information about the site. The goal of the hacker is to get the web server to reveal information that hacker can use to tailor an attack...
Security Best Practice: Domains Block List Protection - Blocking LogMeIn
LogMeIn is a remote control application that provides access to any Windows PC from anywhere in the world. It only requires a computer connected to the Internet. The user can remotely access a target computer and have a full desktop view and complete control of everything on it, including: Remote...
Plan 9 Kernel - 'devenv.c OTRUNC/pwrite' Local Privilege Escalation
/ !!! DO NOT DISTRIBUTE !!! / / identity theft this exploit uses my devenv.c OTRUNC/pwrite vulnerability to overwrite specific kernel addresses to help elevate our privileges. this exploit is very picky, so you must understand the plan9 kernel and know what you are doing, though a best-practice...
Security Best Practice: Protect Yourself from DCOM vulnerabilities
The Distributed Component Object Model DCOM is a protocol that enables software components to communicate directly over a network. Previously called "Network OLE," DCOM is designed for use across multiple network transports, including Internet protocols such as HTTP.There are several known and...
Security Best Practice: Preventing Non-TCP Flooding
Hackers directly target security devices such as firewalls. In advanced firewalls, state information about connections is maintained in a State table. The State table includes connection-oriented TCP and connectionless non-TCP protocols. Hackers can send high volumes of non-TCP traffic in an effo...
Security Best Practice: Protect Yourself from Directory Traversal
Directory traversal attacks allow hackers to access files and directories that should be out of their reach. This can allow viewing of directory listings, and in many attacks, could lead to running executable code on the web server with one simple URL...
Security Best Practice: Enforcement of MS-RPC Protections over all TCP Ports
Remote Procedure Call RPC is a protocol that a program can use to request a service from a program located on another computer in a network. Microsoft Remote Procedure Call MS-RPC is Microsoft's implementation of RPC. Microsoft Windows has reported multiple vulnerabilities MS05-039, MS05-043,...
unixware7.dtappgather.txt
Date: Wed, 3 Nov 1999 10:51:52 -0800 PST From: Sangfroid Subject: bugtraq post Introduction to w00giving '99 RFP's most excellent 0kt0berfest commitment to working for everyman to make the world more secure, caused w00w00 to stop and give thought to our collective contribution to the world of...
Rules Update for Direct Access Best Practice Analyzer for Windows Server 2012 R2 (KB2896496)
Rules Update for Direct Access Best Practice Analyzer for Windows Server 2012 R2 KB2896496...
Rules Update for Direct Access Best Practice Analyzer for Windows Server 2012 (KB2896496)
Rules Update for Direct Access Best Practice Analyzer for Windows Server 2012 KB2896496...
Threat Management Gateway Definition Updates for Network Inspection System
Forefront TMG Network Inspection System NIS helps guard against intrusion attempts targeting known and newly discovered vulnerabilities in network protocols. As a security best practice, NIS signatures should be kept up to date...