PMSoftware Simple Web Server 2.1 - 'From:' Header Processing Remote Denial of Service

source: https://www.securityfocus.com/bid/42155/info PMSoftware Simple Web Server is prone to a denial-of-service vulnerability. Remote attackers can exploit this issue to cause the application to stop responding, denying service to legitimate users. Simple Web Server 2.1 is vulnerable; other...

Possible New Rootkit Has Drivers Signed by Realtek

Security researchers have identified a new suspicious program that is copying itself to PCs via USB mass storage devices and is digitally signed with the certificate of Realtek Semiconductor, a major manufacturer of computer products based in Taiwan. The program, known as Stuxnet, looks like a...

Mumble Murmur 1.2 - Denial of Service

Mumble Murmur 1.2 - Denial of Service source: https://www.securityfocus.com/bid/41251/info Mumble Murmur is prone to a denial-of-service vulnerability. Attackers can exploit this issue to crash the affected application, denying service to legitimate users. Mumble versions 1.2.2 and prior are...

Mumble Murmur 1.2 - Denial of Service

source: https://www.securityfocus.com/bid/41251/info Mumble Murmur is prone to a denial-of-service vulnerability. Attackers can exploit this issue to crash the affected application, denying service to legitimate users. Mumble versions 1.2.2 and prior are vulnerable...

ddrLPD 1.0 - Remote Denial of Service

ddrLPD 1.0 - Remote Denial of Service source: https://www.securityfocus.com/bid/39904/info ddrLPD is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to crash the affected application, denying service to legitimate users. ddrLPD 1.0 is vulnerable; other versio...

IBM DB2 - 'kuddb2' Remote Denial of Service

source: https://www.securityfocus.com/bid/38018/info IBM DB2 is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to cause the application to crash, denying service to legitimate users. IBM DB2 9.7 is vulnerable; other versions may also be affected. The followi...

Sun Java System Directory Server 7.0 - core_get_proxyauth_dn Denial of Service

Sun Java System Directory Server 7.0 - coregetproxyauthdn Denial of Service source: https://www.securityfocus.com/bid/37699/info Sun Java System Directory Server is prone to a denial-of-service vulnerability. An attacker can exploit this issue to crash the effected application, denying service to...

CVE-2009-2825

Certificate Assistant in Apple Mac OS X before 10.6.2 does not properly handle a '\0' character in a domain name in the subject's Common Name CN field of an X.509 certificate, which might allow man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a...

Apple Mac OSX 10.5.x - 'ptrace' Mutex Handling Local Denial of Service

// source: https://www.securityfocus.com/bid/36915/info Apple Mac OS X is prone to a local denial-of-service vulnerability that is caused by a race condition. Exploiting this issue allows local, unprivileged users to crash affected kernels, denying further service to legitimate users. / Mac OS X...

nginx Proxy DNS Cache Domain Spoofing Vulnerability

The 'nginx' program is prone to a vulnerability that may allow attackers to spoof domains because the software fails to properly compare domains when referencing an internal DNS cache. This issue can be exploited when nginx is configured to act as a forward proxy, but this is a nonstandard and...

Legitimate Sites Fertile Ground for Malware

The Web is a dirty, hostile place not fit for use by most decent people, a place where even many seemingly legitimate sites are infested with malware, password-stealing Trojans and all manner of other nasty applications. And it’s getting worse by the minute, according to a new threat report from...

Nokia MultiMedia Player 1.1 - Remote Denial of Service

source: https://www.securityfocus.com/bid/36215/info Nokia Multimedia Player is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to cause the affected application to stop responding, denying service to legitimate users. This issue affects Nokia Multimedia Play...

55,000 Hacked Sites Serving Malware Cocktail

Security researchers are raising an alarm for a potent malware cocktail — backdoor Trojans and password stealers — being pushed to Windows users from about 55,000 hacked Web sites. According to Mary Landesman, a researcher in ScanSafe’s security threat alert team, the cybercriminals have embedded...

New Mobile Malware Transmitter.C Spreading

From Zero Day Dancho Danchev Researchers from NetQin Tech. are reporting on a newly discovered mobile malware variant Transmitter.C distributed through a modified version of legitimate mobile application. Upon execution, the malware attempts to automatically spread by SMS-ing hundreds of messages...

Researchers to Show Off Veiled Browser Darknet

One of the more interesting presentations on the schedule at next month’s Black Hat conference is a talk by renowned Web security researcher Billy Hoffman of HP on a new method for implementing a darknet in browsers using just PHP and JavaScript. The approach, which Hoffman and his co-presenter...

America's Army 3.0.4 - Invalid Query Remote Denial of Service

source: https://www.securityfocus.com/bid/35703/info America's Army is prone to a remote denial-of-service vulnerability because the application fails to properly handle invalid queries. Exploiting this issue allows remote attackers to cause the application to crash, effectively denying service t...

Most attacks come from legit but hijacked sites

From TechWorld John E. Dunn The number of legitimate Websites being hacked to host malware has hit startling highs in recent days, new figures from MessageLabs have revealed. Data taken from the days between May 4 and 8 showed that 84.6 percent of Websites blocked by the company for hosting...

Manis Admin Plugin - Remote Denial of Service

Manis Admin Plugin - Remote Denial of Service source: https://www.securityfocus.com/bid/34685/info Mani's Admin Plugin is prone to a remote denial-of-service vulnerability. Exploiting this issue allows remote attackers to crash the application, denying further service to legitimate users. alias...

QtWeb Browser 2.0 - .HTML File Remote Denial of Service

QtWeb Browser 2.0 - .HTML File Remote Denial of Service source: https://www.securityfocus.com/bid/34327/info QtWeb browser is prone to a remote denial-of-service vulnerability. Attackers can exploit this issue to crash the affected application, denying service to legitimate users. QtWeb 2.0 is...

Apple Safari 4 - 'feeds:' URI Null Pointer Dereference Remote Denial of Service

source: https://www.securityfocus.com/bid/33909/info Apple Safari is prone to a denial-of-service vulnerability that stems from a NULL-pointer dereference. Attackers can exploit this issue to crash the affected application, denying service to legitimate users. Apple Safari 4 Beta is vulnerable;...