Debian Security Advisory DSA 2770-1 (torque - authentication bypass)

John Fitzpatrick of MWR InfoSecurity discovered an authentication bypass vulnerability in torque, a PBS-derived batch processing queueing system. The torque authentication model revolves around the use of privileged ports. If a request is not made from a privileged port then it is assumed not to ...

DSA-2770-1 torque - authentication bypass

Bulletin has no description...

LulzSec Affiliate, Ryan Cleary, Indicted in U.S.

Ryan Cleary, the 20 year-old Essex, England hacker associated with the hacker collective LulzSec, was indicted by a federal grand jury in the United States on Tuesday. According to an FBI press release, the grand jury indicted Cleary with one count of conspiracy and two counts of the unauthorized...

Behind the Flame Malware

The Flame malware has garnered a lot of attention in the last few days, but there’s also been quite a lot of confusion about what it can do and what its implications are. In this video from PBS Newshour, Dave Shackleford of IANS and Catherine Lotrionte of Georgetown University discuss the worm’s...

Anonymous Takedown several Vatican Websites

Anonymous Takedown several Vatican Websites The Italian Anonymous Hackers took down the Vatican's website Vatican.va on Wednesday in retaliation for the "corruption" of the Roman Catholic Church. On an Italian-language website Anonymous accused the Catholic Church of being responsible for various...

Debian DSA-2329-1 : torque - buffer overflow

Bartlomiej Balcerek discovered several buffer overflows in TORQUE server, a PBS-derived batch processing server. This allows an attacker to crash the service or execute arbitrary code with privileges of the server via crafted job or host names. The oldstable distribution lenny does not contain...

DSA-2329-1 torque - buffer overflow

Bulletin has no description...

Sesame Street YouTube Channel Hacked, Porn Posted

Sesame Street YouTube Channel Hacked, Porn Posted On Sunday afternoon, some of the world's worst lowlifes decided to hack the Sesame Street YouTube channel and replace some of the videos with pornographic clips. For about 20 minutes yesterday, visitors to the YouTube channel of the popular...

PBS (Public Broadcasting Service) & Writerspace Hacked Again by Warv0x (AKA Kaihoe)

PBS Public Broadcasting Service & Writerspace Hacked Again by Warv0x AKA Kaihoe Yes ! Its True that PBS Public Broadcasting Service Hacked once again .Last time, A month before Public Broadcasting Service PBS Hacked by Lulzsec and Users data ,Database was Leaked and then Lulzsec claim that PSB.or...

LulzSec take down CIA Website

LulzSec take down CIA Website The hacker group Lulz Security has claimed it has brought down the public-facing website of the US Central Intelligence Agency. Infamous for a series of high-profile hacks on Sony, Nintendo, the PBS, FBI affiliates, LulzSec claimed on Wednesday its responsibility for...

PSB.org was hacked with 0day exploit for MoveableType !

PSB.org was hacked with0day exploit for MoveableType ! Yesterday Public Broadcasting Service PBS was Hacked by Lulzsec, Users data & Database Leaked. Lulzsec hackers today expose that, how exactly they hack all these database, site and Server. They Use 0day exploit for MoveableType, Using the...

PBS Pro symbolic links vulnerability

Symbolic links vulnerability on temporary files creation...

PBS Pro race condition vulnerability

Application: PBS Pro part od PBS Works by Altair Engineering Affected version: 10.4 OS: Linux/UNIX CVE ID: pending Class: temporary file creation race condition Remote: no Threat: destroy arbitrary choosen file of other user Discovered: 02.02.2010 Discovered by: Bartlomiej Balcerek Background: PB...

PBS Pro Race Condition

!/bin/bash set -x PBS Pro int mainint argc, char argv if argc 3 printf"%s","Need 2 arguments!";exit1; while 1 symlinkargv1,argv2; ; EOF if ! -x racer.x ; then echo "Cannot compile C code, do you have gcc installed ?" ;exit 1; fi echo Submitting job... jobname=echo hostname | qsub -j oe -o out.txt...

Altair Engineering PBS Pro 10.x - 'pbs_mom' Insecure Temporary File Creation

source: https://www.securityfocus.com/bid/41449/info Altair Engineering PBS Pro creates temporary files in an insecure manner. An attacker with local access could potentially exploit this issue to perform symbolic-link attacks, overwriting arbitrary files in the context of the affected applicatio...

PBS Website Compromised, Used to Serve Exploits

Some sections of the popular PBS.org Web site have been hijacked by hackers serving up a cocktail of dangerous exploits. According to researchers at Purewire, attempts to access certain PBS Web site pages yielded JavaScript that serves exploits from a malicious domain via an iframe. The malicious...