Security Audits: Important but Rare

From eSecurityPlanet Larry Barrett Securing data networks is important enough for the majority of companies to hire outside security firms to audit their systems but only about one in three bother to have their network audited every year, according to a new survey conducted by VanDyke Software an...

[SECURITY] Fedora 11 Update: libmikmod-3.2.0-5.beta2.fc11

libmikmod is a library used by the mikmod MOD music file player for UNIX-like systems. Supported file formats include MOD, STM, S3M, MTM, XM, ULT and IT...

Heartland, TJX Attacks Look Sadly Familiar

The news that federal authorities have indicted the man they claim is responsible for the TJX attack for also allegedly hacking into the networks of Heartland Payment Systems, 7-Eleven and the Hannaford Brothers grocery chain shows that law enforcement is indeed stepping up its work on cybercrime...

Piwigo SQL Injection Vulnerability - Security Advisory - SOS-09-007

Piwigo SQL Injection Vulnerability - Security Advisory - SOS-09-007 Release Date. 17-Aug-2009 Last Update. - Vendor Notification Date. 15-Jun-2009 Product. Piwigo Platform. Independent Affected versions. 2.0.0 verified, possibly others Severity Rating. Medium Impact. Manipulation of data Attack...

CVE-2009-2026

Stack-based buffer overflow in a token searching function in the dtscore library in Data Transport Services in CA Software Delivery r11.2 C1, C2, C3, and SP4; Unicenter Software Delivery 4.0 C3; CA Advantage Data Transport 3.0 C1; and CA IT Client Manager r12 allows remote attackers to execute...

CVE-2009-2026

Stack-based buffer overflow in a token searching function in the dtscore library in Data Transport Services in CA Software Delivery r11.2 C1, C2, C3, and SP4; Unicenter Software Delivery 4.0 C3; CA Advantage Data Transport 3.0 C1; and CA IT Client Manager r12 allows remote attackers to execute...

CVE-2009-2026: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in a token searching function in the dtscore library in Data Transport Services in CA Software Delivery r11.2 C1, C2, C3, and SP4; Unicenter Software Delivery 4.0 C3; CA Advantage Data Transport 3.0 C1; and CA IT Client Manager r12 allows remote attackers to execute...

CA20090806-01: Security Notice for Data Transport Services

CA20090806-01: Security Notice for Data Transport Services Issued: August 6, 2009 CA's technical support is alerting customers to a security risk with Data Transport Services. A vulnerability exists that can allow a remote attacker to execute arbitrary code. CA has issued patches to address the...

XOOPS 2.3.3 Cross Site Scripting

XOOPS Multiple Cross-Site Scripting Vulnerabilities - Security Advisory - SOS-09-005 Release Date. 31-Jul-2009 Vendor Notification Date. 15-Jun-2009 Product. XOOPS Platform. Independent Affected versions. 2.3.3 verified, possibly others Severity Rating. Medium Impact. Cookie/credential theft,...

Description of the security update for Microsoft Visual C++ 2008 Service Pack 1 Redistributable Package: July 28, 2009

None None...

WebVision 2.1 (news.php n) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ======================================================= WebVision 2.1 news.php n Remote SQL Injection Exploit ======================================================= !/usr/bin/perl -w WebVision 2.1 n Remote SQL Injection Exploit Demo :...

WebVision 2.1 - 'news.php?n' SQL Injection

!/usr/bin/perl -w WebVision 2.1 n Remote SQL Injection Exploit Demo : http://www.webdev4all.nl/demowebsite/ Dork : Webdevelopment Tinx-IT Dork2: Copyright © 2006-2008 Tinx-IT and open your mind admin panel : www.target.com/path/cms Found by : Mr.tro0oqy E-mail : [email protected] special thank...

Microsoft Plugs Critical Windows, IE Vulnerabilities

Microsoft today released six bulletins with fixes for at least nine documented security vulnerabilities in a range of products that put users at risk of malicious hacker attacks. At least two of the vulnerabilities are currently being attacked in the wild so it’s imperative that Windows users and...

iPhone 3G S still not enterprise-ready

From Computerworld Matt Hamblen The new iPhone 3G S boasts remote data wipe, hardware-based encryption and tethering of the device to a laptop that would seem to please business users interested in protecting data and enhancing productivity. But no, those steps are not good enough for widespread...

Microsoft warns of dangerous DirectShow flaw, attacks

Microsoft today warned that hackers are using rigged QuickTime media files to exploit an unpatched vulnerability in DirectShow, the APIs used by Windows programs for multimedia support. The company has activated its security response process to deal with the zero-day attacks has issued a pre-patc...

IT staffs pressured to relax Web security

From SearchSecurity.com Rob Westervelt IT managers are under pressure from the top executives in their organizations to relax their policies on Web security in order to make users more productive. A new survey of more than 1,000 IT managers found that sales and marketing personnel also are leanin...

Counterpoint: The need for a cybersecurity czar is real

As everyone prepares to examine the results of the Obama Administration’s cyber-security review, one of the largest issues in play remains to what extent the White House will embrace recommendations to create a Cabinet-level position to address the matter or some role superior to today’s “cyber...

Patch Tuesday barrage: A bad case of amnesia

Yesterday was a perfect example of the lack of communication between software vendors and their customers about security. Three vendors released major patches for serious bugs, all within hours of each other. You would think that customers would be a high priority for all vendors, especially in...

How employees evade IT security controls

Prior to January of 2007, I had very little exposure to the vast array of applications that employees use while at work. Sure, I used IM, webmail and listened to music online, but I was being paid to do a job, not entertain myself. After joining Palo Alto Networks, and analyzing 18 months worth o...

Critical infrastructure security still lagging

The interdependencies and interconnections of the networks that run the country’s critical infrastructure assets such as water, power and gas have created a dangerously fragile system in which security is just now becoming a priority, experts say. For years the priorities for these networks have...