Mandriva Update for xulrunner MDVA-2010:242 (xulrunner)

Check for the Version of xulrunner OpenVAS Vulnerability Test Mandriva Update for xulrunner MDVA-2010:242 xulrunner Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Virus War : Be aware of bogus e-mails !

The past year reached a new record high for bogus e-mails that clog people's inboxes and can release damaging and costly viruses on computers. Nearly 90 percent of sent e-mail is a ruse to rip off unsuspecting Internet users, according to data released by the computer security firm Symantec. The...

Facebook Revises Bug Disclosure Policy

Social networking behemoth Facebook revised their bug disclosure policy last week to protect well-intentioned vulnerability researchers from potential lawsuits stemming from their discoveries. The revisions, which were made with the assistance of the Electronic Frontier Foundation, are part of...

Experts Warn of Growing Data Theft as Government Lags in Cybersecurity

It will take several more years for the government to fully install high-tech systems to block computer intrusions. This prolonged timeline enables criminals to become more adept at stealing sensitive data, experts say. As the Department of Homeland Security DHS methodically works to secure the...

Dissecting the ZeroAccess Rootkit

The ZeroAccess rootkit isn’t the most well-known or closely watched piece of malware in recent history, but, as an extremely detailed new analysis of the program shows, it is a perfect example of the kind of sophisticated malware that attack crews are using to maintain persistent, silent access t...

pam: pam_namespace executes namespace.init with service's environment

pamnamespace.c in the pamnamespace module in Linux-PAM aka pam before 1.1.3 uses the environment of the invoking application or service during execution of the namespace.init script, which might allow local users to gain privileges by running a setuid program that relies on the pamnamespace PAM...

Image of the Day: Dissecting The ZeroAccess Crimeware

We know a lot about the effects of malicious programs like rootkits and Trojan downloaders. The job of finding out exactly how the programs work, however, is painstaking. That’s because most malware authors worth their salt take steps to make their creations hard to understand. Code obfuscation a...

glibc: ld.so arbitrary DSO loading via LD_AUDIT in setuid/setgid programs

ld.so in the GNU C Library aka glibc or libc6 before 2.11.3, and 2.12.x before 2.12.2, does not properly restrict use of the LDAUDIT environment variable to reference dynamic shared objects DSOs as audit objects, which allows local users to gain privileges by leveraging an unsafe DSO located in a...

Midterm Election Buzz Fuels Rogue AV Attacks

Interest in the U.S. midterm elections is being used to lure Web surfers to malicious Web pages that are pushing rogue antivirus programs, according to security firm Websense. With voter interest running high in the U.S., Web searches for hot terms like “midterm election polls,” “2010 midterm...

Fedora 13 : glibc-2.12.1-4 (2010-16655)

Require suid bit on audit objects in privileged programs CVE-2010-3856 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

[SECURITY] Fedora 13 Update: mozvoikko-1.0-16.fc13

This is mozvoikko, an extension for Mozilla programs for using the Finnish spell-checker Voikko...

glibc security update

2.5-49.el55.7 - Require suid bit on audit objects in privileged programs 645677, CVE-2010-3856...

The GNU C library dynamic linker expands $ORIGIN in setuid library search path

The GNU C library dynamic linker expands $ORIGIN in setuid library search path ------------------------------------------------------------------------------ Gruezi, This is CVE-2010-3847. The dynamic linker or dynamic loader is responsible for the runtime linking of dynamically linked programs...

GNU C Library 2.x (libc6) - Dynamic Linker LD_AUDIT Arbitrary DSO Load Privilege Escalation

GNU C Library 2.x libc6 - Dynamic Linker LDAUDIT Arbitrary DSO Load Privilege Escalation Source: http://marc.info/?l=full-disclosure&m=128776663124692&w=2 The GNU C library dynamic linker will dlopen arbitrary DSOs during setuid loads...

Fedora Update for postgresql FEDORA-2010-15954

Check for the Version of postgresql OpenVAS Vulnerability Test Fedora Update for postgresql FEDORA-2010-15954 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

GNU C Library Dynamic Linker $ORIGIN Expansion Vulnerability

The GNU C library dynamic linker expands $ORIGIN in setuid library search path ------------------------------------------------------------------------------ Gruezi, This is CVE-2010-3847. The dynamic linker or dynamic loader is responsible for the runtime linking of dynamically linked programs...

[SECURITY] Fedora 14 Update: postgresql-8.4.5-1.fc14

PostgreSQL is an advanced Object-Relational database management system DBMS that supports almost all SQL constructs including transactions, subselects and user-defined types and functions. The postgresql package includes the client programs and libraries that you'll need to access a PostgreSQL DB...

Число новых компьютерных вирусов в 2010 году приближается к 2 миллионам

12:30 17.09.2010 По данным Nielsen Online, 51 % европейцев пользуются социальными сетями, такими как Facebook или Xing. Популярность социальных сетей привлекает кибер-преступников, которые используют их с целью нападения на пользователей. Преступники создают компьютерные вирусы для получения...

Programs Script Reinstall admin login Vulnerabilities

Exploit for php platform in category web applications ===================================================== Programs Script Reinstall admin login Vulnerabilities ===================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /'...

Пресечена деятельность хакеров-вымогателей

Источник: http://www.kguvd.ru/news/7 Когда: 31 Августа, 2010 Оперативники отдела "К" и УБЭП ГУВД Москвы пресекли деятельность группы хакеров, заражавших вредоносными программами компьютеры пользователей и вымогавших деньги за разблокировку. Деньги взимались с помощью платных SMS стоимостью от 300...