-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Cisco Security Advisory: Cisco Telnet Denial of Service Vulnerability

Revision 1.0

For Public Release 2004 August 27 1000 UTC

- ------------------------------------------------------------------------
-

Contents

Summary
Affected Products

[ more ]  [ reply ]

Check Point - Zone Labs Division:
Response to "Weak Default Permissions Vulnerability"

Summary

Zone Labs ZoneAlarm family of products and Check Point
Integrity endpoint security client software use the
folder "%WINDOWS%\Internet Logs" to store a copy of
logging information and the locally stor

[ more ]  [ reply ]

In-Reply-To: <20040825150038.9D37AB718 (at) xprdmailfe18.nwk.excite (dot) com [email concealed]>

I have 2 quotes for that :

1)-------------------------------------------------------

VirusList.com Virus Alerts & Virus News. Wednesday, Aug 25, 2004

************************************************

1. 25th August 2004: W

[ more ]  [ reply ]

Tonight i got about 20 - awfully translated - german speaking phising mails.
Therefore i thought a bit about phishing attacks and which of them are
blocked in WinXP SP2.

After a while i created some proof-of-concept code that is capable of
phishing data from any html form based login screen, eve

[ more ]  [ reply ]

#######################################################################

Luigi Auriemma

Application: Ground Control II: Operation Exodus
http://www.groundcontrol2.com
Versions: <= 1.0.0.7
Platforms: Windows
Bug: forced exit (DoS)
Risk:

[ more ]  [ reply ]

Hi,

we received since July 22nd several reports from users who were hacked after visiting several websites. This 0day attack had been used to spread spyware and trojans, infecting patched computers.

Investigations showed the existance of a new and unpublished flaw/exploit in the winamp skin

[ more ]  [ reply ]

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Gentoo Linux Security Advisory GLSA 200408-24
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
http://security.gentoo.org/
- - - - - -

[ more ]  [ reply ]

##########################################################
# GulfTech Security Research August, 25th 2004
##########################################################
# Vendor : Keene Software
# URL : http://www.keenesoftware.com
# Version : Keene Digital Media Server 1.0.2
# Risk :

[ more ]  [ reply ]

Didn't think I'd ever get the chance to report some form of vulnerability, but I did. Minor, granted, but a bug nonetheless.

Use the latest browser from Netscape, Gecko/20040804 Netscape/7.2, set up for tabbed browsing, on a MacOS X 10.3.5 platform with all the latest patches. Open Andy Cuff's "ra

[ more ]  [ reply ]

Hi,

i found some interesting news about the WSC of the SP2 here :

http://www.pcmag.com/article2/0,1759,1639276,00.asp

Summary:

The Windows Security Center displays informations about Firewall, Updates, Antivirus... ans stores them in an internal database managed by the Windows Management

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- ------------------------------------------------------------------------
--
Trustix Secure Linux Security Advisory #2004-0043

Package name: courier-imap, samba, zlib
Summary: Multiple vulnerabilities
Date: 2004-08-26
Affect

[ more ]  [ reply ]

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Gentoo Linux Security Advisory GLSA 200408-25
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
http://security.gentoo.org/
- - - - - -

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

________________________________________________________________________

OpenPKG Security Advisory The OpenPKG Project
http://www.openpkg.org/security.html http://www.openpkg.org
openpkg-security (at) openpkg (dot) org [email concealed]

[ more ]  [ reply ]

> password issues known to exist..
Yes.

> http://www.google.com/search?hl=en&lr=&ie=UTF-8&newwindow=1&safe=off&q=a
xis+camera+exploit
>
> http://www.google.com/search?hl=en&lr=&ie=UTF-8&newwindow=1&safe=off&q=a
xis+camera+vulnerability
>
> or...
> http://www2.corest.com/common/showdoc.php

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

HP SECURITY BULLETIN

HPSBUX01070 REVISION: 0

SSRT4779 HP-UX Netscape NSS Library Suite SSLv2
remote buffer overflow

-----------------------------------------------------------------
NOTICE:
There are no restrictions for dist

[ more ]  [ reply ]

In-Reply-To: <20040820025137.15141.qmail (at) www.securityfocus (dot) com [email concealed]>

All a trojan/attacker has to do is...

E:\WINDOWS\Internet Logs\> attrib/s +h +s +r +a

{{{ and compress the folder (optional) }}}

Next time, when ZAP or PC restarts... Zone Alarm Pro. so called, TrueVector(r) driver in the kerne

[ more ]  [ reply ]

The recent LIBPNG vulnerability can be exploited by sending HTML e-mail containing an embedded malicious PNG image referenced locally using cid: as well, if the recipient of the e-mail is using a vulnerable mail client. See

Chris Evans' security advisory
http://scary.beasts.org/security/CESA-2004-0

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Multiple vulnerabilities in lukemftpd/tnftpd
- --------------------------------------------
Przemys³aw Frasunek <venglin (at) freebsd.lublin (dot) pl [email concealed]> / 14th July 2004

0. Foreword

Originally, the following paper described vulnerabilities found
in lukemftpd, but

[ more ]  [ reply ]

Package: Epixtech / Dynix Webpac
Date: 23/08/2004
Problem Class: Input validation
Advisory: Wil Allsopp
Email: straylight (at) technophreaks.co (dot) uk [email concealed]
Vendor status: Informed but unresponsive

Description
-----------
Webpac is a widely deployed library solutions system
(search google for webpac) that allows

[ more ]  [ reply ]