New Linux Rootkit Attacks Internet Users

Security researchers have discovered what appears to be an experimental Linux rootkit designed to infect its highly select victims during a classic drive-by website attack. The malware allows hackers to inject code directly in any infected web page. The new malware, discovered on November 13 of...

Splunk Inadvertently Exposes User Passwords

The passwords of customers on Splunk.com were revealed after some debug information leaked on to its production servers. The debug code exposed users passwords to Splunk.com as clear text, the company said. Read the full article. The Register...

Fedora 7 : wpa_supplicant-0.5.7-3.fc7 (2007-0185)

A buffer overflow flaw was found in the debugging code of Fedora's version of wpasupplicant. This can be triggered by those using NetworkManager. It is recommended that users of wpasupplicant or NetworkManager update to this package and the accompanying NetworkManager packages which removes the...

CVE-2006-1855

The CVE-2006-1855 case concerns Linux kernel code (choose_new_parent) containing obsolete debugging paths that can be exploited locally to cause a kernel panic/Denial of Service. The vulnerability is described as a local issue in the kernel prior to a fixed release (notably reflected across multi...