CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

Donation/Premium
spacer
block bottom
Security Central
spacer
· Home
· PIRT/Fried Phish
· MIRT
· SIRT
· Deutsch
· Wiki
· Newsletter
· O16/ActiveX
· CLSID List
· Contest2007
· Downloads
· Feedback (send)
· Forums
· HijackThis
· Hijacktrend
· LSPs
· My Downloads
· O18
· O20
· O21
· O22
· O23
· O9
· Premium
· Private Messages
· Proxomitron
· Reviews
· Search
· StartupList
· Stories Archive
· Submit News
· WsIRT
· Your Account
· Acceptable Use Policy
block bottom
spacer spacer
image Advisories!: Latest Advisories & Live Feeds (11/28/03) image
Cyber Security
Latest Advisories
Live Virus Advisory Feeds
2003-11-28

Secunia
Security Tracker
Security Focus
Symantec
*Live Feeds are from Panda, Trend Micro, and Symantec

Live Virus Advisory Feeds

Secunia

Secunia Highlights:
Internet Explorer System Compromise Vulnerabilities
Multiple vulnerabilities have been identified in Internet Explorer, which in combination can be exploited to compromise a user's system.
Opera Browser Skin File Handling Vulnerabilities
Two vulnerabilities have been identified in the Opera browser, which potentially can be exploited by malicious people to compromise a user's system.

Latest 15 Secunia Security Advisories:
2003-11-28
- GNU Screen Privilege Escalation Vulnerability

- OpenBSD Local Denial of Service Vulnerabilities

- Solaris BIND Negative Cache Poisoning

- RNN Guestbook Lack of Authentication

- Immunix update for bind

2003-11-27
- GnuPG ElGamal Signing Weakness Expose Private Key

- Engarde update for bind

- snif Arbitrary File Download Vulnerability

- My_eGallery Arbitrary File Inclusion Vulnerability

- BIND Negative Cache Poisoning Vulnerability

- Mac OS X Insecure Default DHCP Packet Handling Vulnerability

2003-11-26
- Sun Fire Blade System Chassis ARP Packet Denial of Service

- Fedora update for Ethereal

- OpenPKG update for zebra

- Gentoo update for net-dialup/freeradius

Top 5 Most Read Secunia Security Advisories (Last 24 hours):
Internet Explorer System Compromise Vulnerabilities

- Microsoft Internet Explorer Multiple Vulnerabilities

- Mac OS X Insecure Default DHCP Packet Handling Vulnerability

- Apple Safari Cookie Stealing Vulnerability

- BIND Negative Cache Poisoning Vulnerability


Security Tracker

Special Alert - BIND 8 remote cache poisoning may cause denial of service.

RNN Guestbook Authentication Flaw in 'gbadmin.cgi' Yields Administrative Access to Remote Users

Several vulnerabilities were reported in RNN Guestbook. A remote user can gain administrative access on the application and execute arbitrary commands on the target system.

Impact: Disclosure of authentication information, Disclosure of system information, Disclosure of user information, Execution of arbitrary code via network, Modification of authentication information, Modification of user information, User access via network

GNU Screen Integer Overflow in 'ansi.c' May Let Local Users Gain Elevated Privileges

A vulnerability was reported in GNU Screen. A local user may be able to execute arbitrary code to gain elevated privileges on the target system.

Impact: Execution of arbitrary code via local system, Root access via local system, User access via local system

GnuPG ElGamal Signature Flaw May Disclose Type 20 ElGamal Private Keys to Remote Users

A vulnerability was reported in GnuPG in the creation of ElGamal keys for digital signature. Keys used for signing can be compromised.

Impact: Disclosure of authentication information

snif Input Validation Flaw Discloses Files to Remote Users

A vulnerability was reported in the 'simple and nice index file' (snif) application. A remote user can view files on the server.

Impact: Disclosure of system information, Disclosure of user information

BIND 8 Negative Cache Poisoning May Cause Denial of Service Conditions

A vulnerability was reported in BIND 8. A remote user can introduce invalid DNS records to cause denial of service conditions.

Impact: Denial of service via network


SecurityFocus BugTraq
SecurityFocus Vulnerabilities

11/27/2003 phpBB 2.06 search.php SQL injection n teusink planet nl
11/27/2003 Re: Unhackable network really unhackable? Niels Bakker
11/27/2003 GnuPG's ElGamal signing keys compromised Werner Koch
11/27/2003 SRT2003-TURKEY-DAY - *novelty* - detecttr.c Trace Route detection vulnerability KF
11/27/2003 GNU screen buffer overflow Timo Sirainen
11/27/2003 RNN's Guestbook 1.2 Multiple Vulnerabilities BrainRawt
11/27/2003 Re: Speedtouch 510 DOS Thomas Chopitea
11/27/2003 Immunix Secured OS 7+ bind update Immunix Security Team
11/26/2003 Re: Unhackable network really unhackable? Julian Wynne
11/26/2003 [ESA-20031126-031] BIND cache poisoning vulnerability EnGarde Secure Linux
11/26/2003 SGI ProPack v2.3 security update SGI Security Coordinator
11/26/2003 EPIC4 remote client-side stack-based overflow(exploit) Li0n7 voila fr
11/26/2003 Remote execution in My_eGallery Bojan Zdrnja
11/26/2003 FreeRADIUS Symantec SSR

Backdoor.Asoxy November 26, 2003 November 26, 2003
Backdoor.Spotcom November 25, 2003 November 25, 2003
Backdoor.Sysbug
BackDoor-CAG [McAfee], Troj/Sysbug-A [Sophos] November 25, 2003 November 25, 2003
W32.Azha.Worm November 24, 2003 November 25, 2003
W32.Randex.AW
Backdoor.SdBot.gen [Kaspersky], W32/Sdbot.worm.gen [McAfee] November 24, 2003 November 25, 2003
W32.HLLW.Bandie November 24, 2003 November 25, 2003
W32.Widare
Bloodhound.W32.2 November 23, 2003 November 24, 2003
Backdoor.Ciadoor.B
Backdoor.Ciadoor.12.b [Kaspersky], Backdoor-ASB [McAfee] November 23, 2003 November 24, 2003
W32.Notime November 22, 2003 November 24, 2003
W32.Randex.AT
Backdoor.SdBot.gen [KAV] November 21, 2003 November 21, 2003
Backdoor.Tinydog November 20, 2003 November 21, 2003
W32.Bolgi.Worm November 20, 2003 November 21, 2003
W32.HLLW.Taplak
W32.Klap, W32.HLLW.Taplak November 20, 2003 November 20, 2003
PWSteal.Banpaes.B November 20, 2003 November 20, 2003
W32.Randex.AR November 19, 2003 November 20, 2003
W32.HLLW.Anarch@mm November 19, 2003 November 20, 2003
W32.Wozer.Worm
I-Worm.Poffer.b [Kaspersky], W32/Wozer.worm [McAfee], WORM_WOZER.A [Trend] November 18, 2003 November 19, 2003
W32.Francette.Worm
Worm.Win32.Francette.a [Kaspersky], W32/Tumbi.worm [McAfee] November 17, 2003 November 18, 2003
W32.Hostidel.Trojan.B November 17, 2003 November 18, 2003
W32.Mimail.J@mm
W32/Mimail.j@MM [McAfee], WORM_MIMAIL.J [Trend], Win32.Mimail.J [Computer Associates], W32/Mimail-J [Sophos], I-Worm.Mimail.j [Kaspersky] November 17, 2003 November 17, 2003
W32.Doggie.BX
Bloodhound.W32.1, W32.NGVCK.4920 November 16, 2003 November 17, 2003
Downloader.MSCache
Win32.Skoob.B [Computer Associates], Downloader-DH.b [McAfee], Trojan.Win32.TalkStocks [Kaspersky] November 15, 2003 November 17, 2003
Hacktool.WSRShell November 14, 2003 November 17, 2003
W32.HLLW.Bereb November 13, 2003 November 13, 2003
W32.Hostidel.Trojan November 13, 2003 November 13, 2003
VBS.Bryon@mm November 13, 2003 November 13, 2003
Trojan.Bedrill November 13, 2003 November 13, 2003
W32.Mimail.I@mm
W32.Paylap@mm, W32.Mimail.H@mm, W32/Mimail-I [Sophos], WORM_MIMAIL.I [Trend], Win32.Mimail.I [Computer Associates], W32/Mimail.i@MM [McAfee], I-Worm.Mimail.i [Kaspersky] November 13, 2003 November 13, 2003
W32.Autex.Worm
Worm.Win32.Autex [AVP] November 13, 2003 November 13, 2003
W32.Dabyrev November 13, 2003 November 13, 2003
Backdoor.Helios.B November 12, 2003 November 13, 2003
W32.HLLW.Cebe November 12, 2003 November 13, 2003
W32.HLLW.Sinala@mm
I-Worm.Alanis (KAV), W32/Generic.worm!p2p (McAfee) November 12, 2003 November 13, 2003
W32.Yaha.AF@mm
W32/Yaha.y@MM[McAfee] November 12, 2003 November 13, 2003
PHP.Rumaz.Trojan November 11, 2003 November 12, 2003
Trojan.Naldem November 11, 2003 November 11, 2003
Backdoor.Dister November 10, 2003 November 11, 2003
Backdoor.Zinx November 10, 2003 November 10, 2003
Trojan.KillAV.C November 10, 2003 November 10, 2003
W32.HLLW.Flopcopy November 9, 2003 November 10, 2003
W32.Xabot.Worm November 9, 2003 November 10, 2003
W32.HLLW.Logpole.C
Worm.P2P.Logpole.b [Kaspersky] November 7, 2003 November 10, 2003
Trojan.Androv November 7, 2003 November 10, 2003
Backdoor.Isen.Rootkit November 7, 2003 November 7, 2003
BAT.Mumu.B.Worm November 6, 2003 November 7, 2003
W32.Randex.Z
BAckdoor.Sdbot.by [KAV] November 6, 2003 November 7, 2003
W32.Wullik.B@mm
Bloodhound.W32.VBWORM, W32/Wukill.worm [McAfee] November 6, 2003 November 7, 2003
W32.Lamin.B
Win32.LazyMin.31 [KAV] November 5, 2003 November 6, 2003
W32.HLLW.Moega.E November 5, 2003 November 6, 2003
Backdoor.Bionet.404
Backdoor.Bionet.404 [Kaspersky], BackDoor-FK.svr [McAfee] November 4, 2003 November 5, 2003
Backdoor.IRC.Yoink.A
IRC-Yoink [McAfee], Backdoor.Delf.ao[AVP] November 4, 2003 November 5, 2003
W32.Darker.Worm
Worm.P2P.Darker.b [Kaspersky] November 4, 2003 November 5, 2003
W32.HLLW.Skus November 4, 2003 November 5, 2003
W32.Mimail.G@mm
I-Worm.Mimail.h [Kaspersky], W32/Mimail-H [Sophos], W32/Mimail.h@MM [McAfee], WORM_MIMAIL.H [Trend], Mimail.H [F-Secure] November 4, 2003 November 5, 2003
W32.Mimail.F@mm
I-Worm.Mimail.e [Kaspersky], W32/Mimail-E [Sophos], WORM_MIMAIL.E [Trend], Win32.Mimail.E [Computer Associates], W32/Mimail.e@mm [McAfee], Mimail.E [F-Secure] November 4, 2003 November 5, 2003
W32.Randex.Y
Backdoor.IRCBot.gen[KAV] November 4, 2003 November 5, 2003
W32.HLLW.Carpet.C November 4, 2003 November 4, 2003
W32.HLLW.Gaobot.CA
WORM_AGOBOT.CA [Trend], W32/Gaobot.worm.gen.b [McAfee] November 4, 2003 November 4, 2003
PWSteal.Ldpinch
Trojan.PSW.Ldpinch.s [Kaspersky] November 3, 2003 November 4, 2003
Backdoor.Augudor
Backdoor.Augudor.a [Kaspersky] November 3, 2003 November 3, 2003
VBS.Bootconf November 3, 2003 November 3, 2003
W32.Mimail.E@mm
WORM_MIMAIL.F [Trend], Win32.Mimail.G [Computer Associates], Mimail.G [F-Secure], W32/Mimail-F [Sophos] November 2, 2003 November 3, 2003
W32.Petch.B
IRC-Worm.Fagot [Kaspersky] November 2, 2003 November 3, 2003
W32.Mimail.D@mm
I-Worm.Mimail.f [Kaspersky], W32/Mimail.f@MM [McAfee], WORM_MIMAIL.G [Trend], Win32.Mimail.E [Computer Associates], W32/Mimail-E [Sophos], Mimail.F [F-Secure] November 1, 2003 November 1, 2003
W32.Mafeg.B
Bloodhound.W32.1, W32/MGF [McAfee] November 1, 2003 November 1, 2003
W32.HLLW.Gaobot.BZ
W32/Gaobot.worm.gen [McAfee] November 1, 2003 November 1, 2003
W32.Kwbot.Z.Worm
W32/Sdbot.worm.gen [McAfee], Backdoor.SdBot.gen [KAV] October 30, 2003 October 31, 2003
Backdoor.Madfind October 31, 2003 October 31, 2003
W32.HLLW.Gaobot.BV
W32/Gaobot.worm.gen [McAfee] October 31, 2003 October 31, 2003
W32.Mimail.C@mm
W32/Mimail.c@mm [McAfee], WORM_MIMAIL.C [Trend], W32/Mimail-C [Sophos], I-Worm.Mimail.c [Kaspersky], Win32.Mimail.C [Computer Associates] October 31, 2003 October 31, 2003
VBS.Noex.Trojan October 30, 2003 October 31, 2003
W32.HLLW.Gaobot.BT
Backdoor.Agobot.2.h[KAV] October 30, 2003 October 31, 2003
W32.Kwbot.Y.Worm
Backdoor.SdBot.12[KAV], W32/Kwbot.Worm.C[McAfee], Win32/Kwbot.B.worm[GeCAD] October 30, 2003 October 31, 2003
PWSteal.Tarno October 30, 2003 October 30, 2003
W32.Randex.S October 29, 2003 October 30, 2003
W32.HLLW.Franriv
WORM_FRANRIV.A [Trend] October 29, 2003 October 29, 2003
Trojan.Obsorb October 29, 2003 October 29, 2003
Downloader.Dluca.D
TrojanDownloader.Win32.Dluca.a [Kaspersky] October 29, 2003 October 29, 2003
Backdoor.DMSpammer October 28, 2003 October 29, 2003
Backdoor.Hogle
Proxy-Regate [McAfee] October 28, 2003 October 29, 2003
W32.HLLW.Gaobot.BM
W32/Gaobot.worm.gen [McAfee] October 28, 2003 October 29, 2003
Backdoor.IRC.Bot.B
Backdoor.IRC.Bot, BackDoor-BBB [McAfee], BKDR_FOLLA.A [Trend] October 27, 2003 October 28, 2003
W32.HLLW.Gaobot.BI
W32/Gaobot.worm.gen [McAfee] October 27, 2003 October 28, 2003
Backdoor.Ranky.C
TROJ_RANCK.A [Trend], TrojanProxy.Win32.Ranck [Kaspersky], Proxy-FBSR [McAfee] October 27, 2003 October 28, 2003
W32.HLLW.Gaobot.BH October 27, 2003 October 28, 2003
W32.HLLW.Gaobot.BF October 27, 2003 October 28, 2003
Downloader.Tooncom
TrojanDownloader.Win32.Tooncom.c October 27, 2003 October 27, 2003

Live Virus Advisory Feed

Posted on Friday, 28 November 2003 @ 06:23:23 UTC by phoenix22 (1403 reads)
[ Trackback ]
image

"Advisories!: Latest Advisories & Live Feeds (11/28/03)" | Login/Create an Account | 0 comments
Threshold
The comments are owned by the poster. We aren't responsible for their content.

No Comments Allowed for Anonymous, please register
 
Login
spacer
Nickname

Password

Security Code: Type Security Code: Usage signifies AUP acceptance
· New User? · Click here to create a registered account.
block bottom
Related Links
spacer
· del.icio.us!
· digg it!
· reddit!
· TrackBack (0)
· Linux.com
· GNU Project
· PHP HomePage
· Microsoft
· HotScripts
· Apple
· W3 Consortium
· Spam Cop
· More about Cyber Security
· News by phoenix22


Most read story about Cyber Security:
Booby Trapped software!

block bottom
Article Rating
spacer
Average Score: 0
Votes: 0

Please take a second and vote for this article:

Bad
Regular
Good
Very Good
Excellent


block bottom
Options
spacer

Printer Friendly Page  Printer Friendly Page

block bottom
spacer spacer