[tested]

OS:Win2k3,CN version

IE: with MS03-048 installed.

OS:WinXp, CN version

Microsoft Internet Explorer v6.Sp1; up-to-date on 2003/11/16

[overview]

By combining several vulnerabilities in Internet Explorer, an attacker can execute his EXE file on victim's system.

("Clean" means: the

[ more ]  [ reply ]

Eudora 6.0.1 (on Windows) has LaunchProtect, to warn the user before
running executable attachments. However this only works in the attach
folder; using spoofed attachments, executables stored elsewhere may run
without warning. In some setups, even executables in the attach folder
may run without wa

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----

CERT Summary CS-2003-04

November 24, 2003

Each quarter, the CERT Coordination Center (CERT/CC) issues the CERT
Summary to draw attention to the types of attacks reported to our
incident response team, as well as other noteworthy incident

[ more ]  [ reply ]

DHCP with a short lease period or a manual lease period

Here's yer sign!

Thank You,
James T. Bohling, CCNA, Security+, MCP-Win2k
Network Security Engineer - JBC CoE
Joint C4ISR Battle Center (AMSEC)
116 Lake View Parkway
Suffolk, VA 23435
(W) 757-638.4032
Web: www.jbc.jfcom.mil
This email was pro

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- - ------------------------------------------------------------------------
---
GENTOO LINUX SECURITY ANNOUNCEMENT 200311-06
- - ------------------------------------------------------------------------
---

GLSA: 200311-06
package: dev-php/ph

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- - ------------------------------------------------------------------------
---
GENTOO LINUX SECURITY ANNOUNCEMENT 200311-07
- - ------------------------------------------------------------------------
---

GLSA: 200311-07
package: net-libs/l

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- - ------------------------------------------------------------------------
---
GENTOO LINUX SECURITY ANNOUNCEMENT 200311-04
- - ------------------------------------------------------------------------
---

GLSA: 200311-04
package: net-analyz

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- - ------------------------------------------------------------------------
---
GENTOO LINUX SECURITY ANNOUNCEMENT 200311-05
- - ------------------------------------------------------------------------
---

GLSA: 200311-05
package: sys-libs/g

[ more ]  [ reply ]

>on Linux it is possible for any user to create a hard link to a file belonging
>to another user.

Only if they can write to some directory on the same partition.

>Furthermore, users can even create links to a setuid binary.

Only if it's on the same partition. This is just one of a huge number of

[ more ]  [ reply ]

Hello,
on Linux it is possible for any user to create a hard link to a file belonging
to another user. This hard link continues to exist even if the original file
is removed by the owner. However, as the link still belongs to the original
owner, it is still counted to his quota. If a malicious us

[ more ]  [ reply ]

All,

I took a look at the failure analysis section, and perhaps I can help
clarify RTUs vs. 'dialups', but it is hard for me to tell much about the
SCADA Systems they run.

Dial-ups are usually remote RTUs that are dialed from the control center and
polled for data/changes/exception events, etc.

[ more ]  [ reply ]

Well, they did specifically discount both current (at the time) Internet worms/activity, and terrorist activity, as having any part in the blackout. As for the RTU failures, FE told investigators they believed that was because they believed the RTU's "started queuing and overloading the terminals bu

[ more ]  [ reply ]

Have you ever checked out the InvisiLAN technology?
InvisiLAN is seemingly developed by ex-KGB and CIA directors. It's a
random IP change technology inside LAN by a set of secureID like
network cards and special router. Anarkey Network security, a Dutch
company started to distribute InvisiLAN in Eur

[ more ]  [ reply ]

ike-scan v1.5.1 has been released. There are many changes from the last
official release which was v1.2. In summary, the changes are:

a) More IKE backoff patterns which allows more systems to be fingerprinted;
b) More flexible backoff pattern specification which allows systems with
more complex

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- ---------------------------------------------------------------------
Red Hat Security Advisory

Synopsis: Updated stunnel packages available
Advisory ID: RHSA-2003:296-01
Issue date: 2003-11-24
Updated on:

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- ---------------------------------------------------------------------
Red Hat Security Advisory

Synopsis: Updated Pan packages fix denial of service vulnerability
Advisory ID: RHSA-2003:311-01
Issue date: 2003

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- ---------------------------------------------------------------------
Red Hat Security Advisory

Synopsis: Updated iproute packages fix local security vulnerability
Advisory ID: RHSA-2003:316-01
Issue date: 200

[ more ]  [ reply ]

S-Quadra Advisory #2003-11-24

Topic: Monit 4.1 HTTP interface Multiple Security Vulnerabilities
Severity: High
Vendor URL: http://www.tildeslash.com/monit/
Advisory URL: http://www.s-quadra.com/advisories/Adv-20031124.txt
Release date: 22 Nov 2003

1. DESCRIPTION

Monit (http:

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- ---------------------------------------------------------------------
Red Hat Security Advisory

Synopsis: Updated EPIC packages fix security vulnerability
Advisory ID: RHSA-2003:342-01
Issue date: 2003-11-17
U

[ more ]  [ reply ]