Mac OS X e-mail worm squirming

From ZDNet Dancho Danchev A newly discovered email worm dubbed OSX/Tored-A once again puts the spotlight on the potential worm-ability, and malware spreading tactics targeting Apple’s OS X. The worm propagates through emails harvested from infected hosts, and has a backdoor functionality allowing...

Jose Nazario on botnets and DDoS defense

Few people in the world know more about the internal workings of botnets, DDoS attacks and defense than Jose Nazario, a senior security researcher at Arbor Networks. Don’t miss his thoughts on why DDoS attacks are more prevalent in some regions than others and how to react if you’re attacked...

RedHat Update for ruby RHSA-2008:0897-01

Check for the Version of ruby OpenVAS Vulnerability Test RedHat Update for ruby RHSA-2008:0897-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

DNS Server Spoofed Request Amplification DDoS

The remote DNS server answers to any request. It is possible to query the name servers NS of the root zone '.' and get an answer that is bigger than the original request. By spoofing the source IP address, a remote attacker can leverage this 'amplification' to launch a denial of service attack...

MS Windows WRITE_ANDX SMB command handling Kernel DoS (meta)

Exploit for unknown platform in category dos / poc ============================================================ MS Windows WRITEANDX SMB command handling Kernel DoS meta ============================================================ require 'msf/core' module Msf module Exploits module Test class...

CVE-2008-3933

Wireshark (formerly Ethereal) vulnerability CVE-2008-3933 affects versions 0.10.14–1.0.2. A crafted packet containing zlib-compressed data can trigger an invalid read in tvb_uncompress, leading to a denial of service (crash). The connected sources corroborate the affected range and the general im...

Ruby 1.9 - REXML Remote Denial of Service

Ruby 1.9 - REXML Remote Denial of Service source: https://www.securityfocus.com/bid/30802/info Ruby is prone to a remote denial-of-service vulnerability in its REXML module. Successful exploits may allow remote attackers to cause denial-of-service conditions in applications that use the vulnerabl...

Server side request forgery (ssrf)

hcmon.sys in VMware Workstation 6.5.1 and earlier, VMware Player 2.5.1 and earlier, VMware ACE 2.5.1 and earlier, and VMware Server 1.0.x before 1.0.9 build 156507 and 2.0.x before 2.0.1 build 156745 uses the METHODNEITHER communication method for IOCTLs, which allows local users to cause a denia...

Universal honker CNN attack techniques parsing-vulnerability warning-the black bar safety net

Recently, CNN anchor, Carver te for the Chinese people with a strong discriminatory remarks, and CNN for this event the lack of sincerity of the apology and for the Chinese government's groundless accusations, roused the people of the country to strong indignation. So in some Patriotic art...

IPS-1 Protection Update - Authentication (v 15), DDOS (v 12), DHCP (v 8), Enterprise Software (v 2), Finger (v 10), FTP (v 23), IRC (v 13), LPD (v 11)

This advisory covers a set of protocol updates for the Authentication, DDOS, DHCP, Enterprise Software, Finger, FTP, IRC, and LPD protocol groups. The Authentication protocol group has been updated to ignore password strength tests for anonymous and guest users. Increased protocol compliance...

CVE-2003-0857

The 1 ipqread and 2 ipulogread functions in iptables allow local users to cause a denial of service by sending spoofed messages as other users to the kernel netlink interface...

CVE-2003-1354

Multiple GameSpy 3D 2.62 compatible gaming servers generate very large UDP responses to small requests, which allows remote attackers to use the servers as an amplifier in DDoS attacks with spoofed UDP query packets, as demonstrated using Battlefield 1942...

CVE-2003-1354

The CVE-2003-1354 issue concerns GameSpy 3D 2.62–compatible gaming servers that respond with very large UDP packets to tiny requests, enabling remote attackers to use these servers as an amplification vector for DDoS attacks with spoofed UDP query packets (illustrated by Battlefield 1942). The vu...

KwsPHP Module jeuxflash 1.0 (id) Remote SQL Injection Vulnerability

No description provided by source. KwsPHP Module jeuxflash Remote SQL Injection Vulnerability AUTHOR : H-T Team HouSSamix ToXiC350 HOME : http://no-hack.fr & http://no-hack.net Site: http://koogar.alorys-hebergement.com/kwsphp/index.php?mod=downloads&filedl=30&before=8&pdl=1 Dork :...

Unwanted Access to File System via Import Pages Functionality

security vulnerability found in Confluence 2.5.6 Space administrator can use the "Import Pages from Disk" feature to browse the server file system by pointing the importer at "/" folder or any other folder. Because this folder doesn't contain expected files, an error message is displayed,...

Unwanted Access to File System via Import Pages Functionality

security vulnerability found in Confluence 2.5.6 Space administrator can use the "Import Pages from Disk" feature to browse the server file system by pointing the importer at "/" folder or any other folder. Because this folder doesn't contain expected files, an error message is displayed,...

[Full-disclosure] POWER PHLOGGER v.2.2.5 (username) SQL Injection

POWER PHLOGGER v.2.2.5 username SQL Injection Author: Attila Gerendi Darkz Date: June 25, 2007 Package: POWER PHLOGGER http://www.phpee.com/ Versions Affected: v.2.2.5 Other versions may also be affected Severity: SQL Injection Description: Input passed to the "username" parameter in "login.php"...

POWER PHLOGGER v.2.2.5 (username) SQL Injection

POWER PHLOGGER v.2.2.5 username SQL Injection Author: Attila Gerendi Darkz Date: December 20, 2005 Package: POWER PHLOGGER http://www.phpee.com/ Versions Affected: v.2.2.5 Other versions may also be affected Severity: SQL Injection Description: Input passed to the "username" parameter in...

Re: [Full-disclosure] [Amsn-devel] aMSN <= 0.96 remote DoS vulnerability

On Sun, Apr 22, 2007 at 05:41:25PM +0200, Sebastian Rother wrote: On Sun, 22 Apr 2007 01:32:35 -0400 [email protected] Youness Alaoui wrote: Hi, I'm a developer and admin of the aMSN project, someone just sent me this link...

SymEvent Driver Local Access System Denial of Service

Hello, Today, we have accidentally discovered that the vulnerability, which is described here http://www.symantec.com/avcenter/security/Content/2006.09.20a.html and its third party identifications are BID: 20051 Secunia Advisory: SA21938 CVE: CVE-2006-4855 is active again in the today's update of...