Apathy Creeps In as Cybersecurity Czar Search Drags On

It’s been five months since President Obama announced his plan to appoint a cybersecurity coordinator, and his failure to fill the position has created something worse than anger: apathy. Immediately following the announcement in May, there was tremendous optimism in the security industry and in...

Dave Dittrich on Botnets, Conficker and the Evolution of Malware

Dennis Fisher talks with Dave Dittrich of the University of Washington, one of the top botnet and malware researchers in the industry, about the evolution of botnets and malware, the innovations of the Nugache botnet and the monetization of large-scale botnets. Download Subscribe to the Digital...

SLES9: Security update for University of Washington IMAP

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: imap-devel imap-lib More details may also be found by searching for keyword 5019212 within the SuSE Enterprise Server 9 patch database at...

SLES9: Security update for University of Washington IMAP

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: imap-devel imap-lib More details may also be found by searching for keyword 5019212 within the SuSE Enterprise Server 9 patch database linked in the...

Q&A: Amit Yoran

Amit Yoran, CEO of NetWitness, is the former director of the National Cyber Security Division at the Department of Homeland Security and a longtime veteran of the security industry both inside and outside the Beltway. He spoke with Dennis Fisher recently about the current power vacuum in Washingt...

SuSE9 Security Update : University of Washington IMAP (YOU Patch Number 10523)

The client part of the University of Washington IMAP implementation is prone to a buffer overflow while parsing mailbox names. This bug can probably be exploited by a remote attacker to execute arbitrary code with the privileges of the user running the affected mail client. %NASLMINLEVEL 70300 C...

Experts Call for Change in Thinking on Federal Cybersecurity

The powers that be in Washington are not known for getting things done quickly, and the current power vacuum in information security in the capital is a painful case in point. The well-documented failure to find a coordinator to oversee security for the country is only one piece of the puzzle, an...

Mandrake Security Advisory MDVSA-2009:166 (c-client)

The remote host is missing an update to c-client announced via advisory MDVSA-2009:166. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

Mandrake Security Advisory MDVSA-2009:166 (c-client)

The remote host is missing an update to c-client announced via advisory MDVSA-2009:166. OpenVAS Vulnerability Test $Id: mdksa2009166.nasl 6587 2017-07-07 06:35:35Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:166 c-client Authors: Thomas Reinke Copyright: Copyright c 2009 E-Sof...

Obama is Failing the Cybersecurity Test

That giant sucking sound you hear is the steady stream of talented security people and experienced policy makers getting out of Washington as quickly as possible as the Obama administration continues to be paralyzed by indecision and a lack of direction regarding cybersecurity. The latest chapter...

Hathaway Resigns as Federal Cybersecurity Adviser

Melissa Hathaway has left her post as the country’s top cybersecurity adviser, casting even more doubt on who will take the open job of cybersecurity coordinator created by President Obama in May. Hathaway said she is resigning for personal reasons and has no interest in the coordinator job,...

Mandrake Security Advisory MDVSA-2009:146 (imap)

The remote host is missing an update to imap announced via advisory MDVSA-2009:146. OpenVAS Vulnerability Test $Id: mdksa2009146.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:146 imap Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Mandrake Security Advisory MDVSA-2009:146 (imap)

The remote host is missing an update to imap announced via advisory MDVSA-2009:146. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

Mandriva Linux Security Advisory : imap (MDVSA-2009:146-1)

Security vulnerabilities has been identified and fixed in University of Washington IMAP Toolkit : Multiple stack-based buffer overflows in 1 University of Washington IMAP Toolkit 2002 through 2007c, 2 University of Washington Alpine 2.00 and earlier, and 3 Panda IMAP allow a local users to gain...

Unfixed XSS vulnerability at www.washingtonchinareview.org

Security researcher Xylitol, has submitted on 06/10/2009 a cross-site-scripting XSS vulnerability affecting www.washingtonchinareview.org, which at the time of submission ranked 12424883 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/06/201...

New cybersecurity czar faces a tough road

While much of the reaction to President Obama’s speech on Internet security last week has centered on who Obama will name to the newly created cybersecurity coordinator position, that may be a moot point unless there is a dramatic change in the way that security is handled at the highest levels i...

FreeBSD : imap-uw -- University of Washington IMAP c-client Remote Format String Vulnerability (5ed2f96b-33b7-4863-8c6b-540d22344424)

SecurityFocus reports : University of Washington IMAP c-client is prone to a remote format-string vulnerability because the software fails to adequately sanitize user-supplied input before passing it as the format-specifier to a formatted-printing function. %NASLMINLEVEL 70300 C Tenable Network...

Battle brewing over cybersecurity in Washington

There is a good old-fashioned backroom brawl shaping up in Washington over the cybersecurity issue, and the forces are aligning in some interesting ways on a variety of different sides of the debate. The latest installment in this long-running drama involves not just the fight over which, if any,...

Mandrake Security Advisory MDVSA-2009:064 (imap)

The remote host is missing an update to imap announced via advisory MDVSA-2009:064. OpenVAS Vulnerability Test $Id: mdksa2009064.nasl 6587 2017-07-07 06:35:35Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:064 imap Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Mandrake Security Advisory MDVSA-2009:064 (imap)

The remote host is missing an update to imap announced via advisory MDVSA-2009:064. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...