SecurityFocus Newsletter #253

Peter Laborge <[email protected]> 15 Jun 2004 18:17:57 -0000

Newsgroups	gmane.comp.security.news.general
Message-ID	<[email protected]>

SecurityFocus Newsletter #253
------------------------------

This issue sponsored by: Astaro

Free 30-day trial: firewall with virus/spam protection, URL filtering,
VPN, wireless security

Protect your network against hackers, viruses, spam and other risks with
Astaro Security Linux, the comprehensive security solution that combines
six applications in one software solution for ease of use and lower total
cost of ownership.

Download your free trial at:
http://www.securityfocus.com/sponsor/Astaro_sf-news_040615

------------------------------------------------------------------------
I. FRONT AND CENTER
1. TCP/IP Skills for Security Analysts (Part 2)
2. The Trouble with Gmail
3. Wireless Attacks and Penetration Testing (part 2 of 3)
II. BUGTRAQ SUMMARY
1. SmartStuff FoolProof Security Program Administrative Passwor...
2. cPanel Killacct Script Customer Account DNS Information Dele...
3. RealNetworks RealPlayer Unspecified Remote Code Execution Vu...
4. PostgreSQL ODBC Driver Unspecified Remote Buffer Overflow Vu...
5. PHP Microsoft Windows Shell Escape Functions Command Executi...
6. Microsoft Internet Explorer URL Local Resource Access Weakne...
7. Microsoft Internet Explorer Modal Dialog Zone Bypass Vulnera...
8. Webmin Multiple Unspecified Vulnerabilities
9. IBM GSKit SSL Handshake Unspecified Denial of Service Vulner...
10. Linksys Web Camera Software Next_file Parameter File Disclos...
11. ClueCentral Apache Suexec Patch Security Weakness
12. Multiple CPanel Perl Script Failure To Implement Taint Mode ...
13. NetWin SurgeMail/WebMail Multiple Input Validation Vulnerabi...
14. FreeBSD jail() Process Unauthorized Routing Table Modificati...
15. Apple Mac OS X Multiple Security Vulnerabilities
16. Microsoft DirectX DirectPlay Remote Malformed Packet Denial ...
17. Blosxom Writeback Plug-in HTML Injection Vulnerability
18. U.S. Robotics Broadband Router 8003 Administration Web Inter...
19. ToCA Race Driver Multiple Remote Denial Of Service Vulnerabi...
20. PHP-Nuke Reviews Module Cross-Site Scripting Vulnerability
21. Roundup Remote File Disclosure Vulnerability
22. OpenBSD ISAKMPD Security Association Piggyback Delete Payloa...
23. GNU Aspell Stack Buffer Overflow Vulnerability
24. CVS Multiple Vulnerabilities
25. Squid Proxy NTLM Authentication Buffer Overflow Vulnerabilit...
26. Horde IMP Unspecified Input Validation Vulnerability
27. Symantec Gateway Security 360R Wireless VPN Bypass Weakness
28. Trend Micro OfficeScan Local Privilege Escalation Vulnerabil...
29. Cisco CatOS TCP-ACK Denial Of Service Vulnerability
30. cPanel Passwd Remote SQL Injection Vulnerability
31. AspDotNetStorefront Access Validation Vulnerability
32. AspDotNetStorefront ReturnURL Parameter Cross-Site Scripting...
33. Apache Mod_Proxy Remote Negative Content-Length Buffer Overf...
34. SMTP.Proxy Remote Format String Vulnerability
35. Billion BIPAC-640 AE Administrative Interface Authentication...
36. Invision Power Board SSI.PHP SQL Injection Vulnerability
37. Edimax 7205APL 802.11b Wireless Access Point Default Backdoo...
38. Skype Technologies Skype CallTo URI Handler Buffer Overrun V...
39. Blackboard Learning System Dropbox File Download Vulnerabili...
40. KSymoops KSymoops-GZNM Insecure Temporary File Handling Symb...
41. Microsoft Internet Explorer URI Obfuscation Weakness
42. Subversion SVN Protocol Parser Remote Integer Overflow Vulne...
43. RealNetwork RealPlayer Media File Heap Overflow Vulnerabilit...
44. Usermin HTML Email Script Code Execution Vulnerability
45. Webmin Configuration Module Information Disclosure Vulnerabi...
46. Webmin And Usermin Account Lockout Bypass Vulnerability
47. PHP-Nuke Multiple Input Validation Vulnerabilities
48. ignitionServer Server Link Service Authentication Bypass Vul...
49. WinAgents TFTP Server Remote Buffer Overrun Vulnerability
50. RealNetworks RealPlayer URI Processing Buffer Overrun Vulner...
51. RealNetwork RealPlayer EMBD3260.DLL Error Response Heap Over...
52. NetBSD Swapctl() Local Denial Of Service Vulnerability
III. SECURITYFOCUS NEWS ARTICLES
1. Backdoor program gets backdoored
2. Report: Computer intrusion losses waning
3. Wardriver pleads guilty in Lowes WiFi hacks
4. Akamai blames inaccessible Web sites on `international attac...
5. Iris scans at UK airports, says Home Office
6. Virus attacks mobiles via Bluetooth
IV. SECURITYFOCUS TOP 6 TOOLS
1. SnortNotify 1.02
2. Wasabi 0.1
3. CryptoHeaven v2.4.0
4. Auditor security collection
5. XArp 0.1
6. Devil-Linux v1.2 Beta 1
V. SECURITYJOBS LIST SUMMARY
1. Sales Engineer - D.C. Metro Area (Federal) (Thread)
2. Senior Network Security Engineer vacancy (UK) (Thread)
3. Senior Risk Consultant (Thread)
4. Security Consultants needed for NYC (Thread)
5. Looking for an Internship (Thread)
6. Security Consultant- Northeast (NY/NJ) (Thread)
7. Seeking security researcher / analyst position (Thread)
8. Sales Engineer Atlanta (Thread)
9. Application Security Specialist, London, UK (Thread)
10. Systems and Procedures Analyst (Thread)
11. VA/MD/DC - Security Architects - MITRE (Thread)
12. ISS - Security Consultant Needed - New York, NY (Thread)
13. Information Systems Security Director - Michigan (Thread)
14. HMG / JSP 440/ 442 Security Consultant role - UK BAS... (Thread)
15. (job offered) Security Technology Implementation Con... (Thread)
16. F5 Networks - Senior Test Engineer (Network Security... (Thread)
17. Technical Support Engineer--Network Security Tier I... (Thread)
18. Symantec-Looking for a Technical Editor with Softwar... (Thread)
19. VOIP Security Specialists - TX (Thread)
20. Senior Technical Support Engineer: San Francisco (Thread)
21. Identity / Access Management Consultants - NY, IL, D... (Thread)
22. Information Systems Security Associates - Riggs Bank... (Thread)
23. Business Development Manager NYC or CA (Thread)
24. Security Firm Seeks SE (Thread)
25. MITRE Corporation-DC/VA/MD-Security Analyst Openings... (Thread)
26. Surveillance Technology Provider seeks Solutions Arc... (Thread)
27. Product Manager Need - Stamford, CT (Thread)
28. Principal Java Engineer-Symantec, Santa Monica CA (Thread)
29. Product Manager - Packet Sniffing Technology (Thread)
30. Security Analysts, DC Metro Area (Thread)
31. Charlotte, NC - Security Implementation Engineer (Thread)
32. Symantec-Consumer Team-Need a Windows Engineer in Sa... (Thread)
33. Security Consultant- Bay Area (Thread)
34. Surveillance Technology Provider seeks Project Manag... (Thread)
35. Surveillance Technology Provider seeks Implementer/D... (Thread)
36. Technical Writer for Systems Engineering Manuals-Sym... (Thread)
37. Network Engineer Position - NYC (Thread)
38. Experienced Information Security Professional Availa... (Thread)
39. JOB: USA-FL-Ft. Lauderdale: UNIX C/C++ SW Eng w/ VPN... (Thread)
40. Senior RACF Security Analyst - Indianapolis (Thread)
41. Threats and Exploits Engineer Positions (Thread)
42. Surveillance Technology Provider seeks Subject Matte... (Thread)
43. Vulnerability Management Solution needs Product Mana... (Thread)
44. Senior Information Security Technical Engineer, NY/N... (Thread)
45. Vulnerability Management Solution needs Product Mana... (Thread)
46. Network Security Team Leader vacacncy (UK) (Thread)
47. Firewalls/Sys Admin/Networking Eng role, Palo Alto, ... (Thread)
48. Perimeter Security Engineer Position - NYC (Thread)
VI. INCIDENTS LIST SUMMARY
1. Simple Windows incident response methodology (Thread)
2. Incident investigation methodologies (Thread)
3. [ok] Simple Windows incident response methodology (Thread)
4. Windows IR methodology (Thread)
5. Litigious investigation methodology (Thread)
6. Spammers bypassing Cisco ACL's?? (Thread)
VII. VULN-DEV RESEARCH LIST SUMMARY
1. Acrobat Reader overhead (Thread)
2. Antivirus/Trojan/Spyware scanners DoS [summary] (Thread)
3. openssh buffer_append_space vulnerability (Thread)
VIII. MICROSOFT FOCUS LIST SUMMARY
1. Doubleclick programs entry on start menu (Thread)
2. SV: Doubleclick programs entry on start menu (Thread)
3. Use of L2TP in isolated W2K3 AD (Thread)
4. SecurityFocus Microsoft Newsletter #192 (Thread)
IX. SUN FOCUS LIST SUMMARY
1. files<->packages? (Thread)
2. DNS problem on Solaris X86 (Thread)
3. Basic Solaris study book (Thread)
X. LINUX FOCUS LIST SUMMARY
1. mrtg/snmp/subinterfaces (Thread)
XI. UNSUBSCRIBE INSTRUCTIONS
XII. SPONSOR INFORMATION

I. FRONT AND CENTER
-------------------
1. TCP/IP Skills for Security Analysts (Part 2)
By Don Parker

This article series guides users new to the security field through some
of the key skills required to work as a security analyst. Part two puts
the skills into context by simulating a "day in the life" of a network
security analyst, using an example of what steps to take when new exploit
code appears.

http://www.securityfocus.com/infocus/1784

2. The Trouble with Gmail
By Mark Rasch

Mass acceptance of the keyword scanning in Google's new e-mail service
could leave government spooks feeling lucky.

http://www.securityfocus.com/columnists/248

3. Wireless Attacks and Penetration Testing (part 2 of 3)
By Jonathan Hassell

This is the second of a three part series on penetration testing for
wireless networks. This installment looks at how a nefarious user cracks
the WEP key, scans for servers and services, and then exploits
vulnerabilities to gain system access.

http://www.securityfocus.com/infocus/1785

II. BUGTRAQ SUMMARY
-------------------
1. SmartStuff FoolProof Security Program Administrative Passwor...
BugTraq ID: 10467
Remote: Yes
Date Published: Jun 05 2004
Relevant URL: http://www.securityfocus.com/bid/10467
Summary:
FoolProof is prone to a vulnerability that may allow an unprivileged user to recover the administrative password for the application. This issue can ultimately allow an attacker to gain unauthorized administrative access to the application.

This issue occurs because an attacker can manipulate the password recovery algorithm to recover an 'Administrator' password.

FoolProof versions 3.9.7 for Windows 98/ME and 3.9.4 for Windows 95 are affected by this issue. Subsequent versions of FoolProof do not contain the password recovery feature.

2. cPanel Killacct Script Customer Account DNS Information Dele...
BugTraq ID: 10468
Remote: Yes
Date Published: Jun 05 2004
Relevant URL: http://www.securityfocus.com/bid/10468
Summary:
cPanel is prone to a vulnerability that can allow a remote authenticated administrator to delete customer account DNS information for customers that are not administered by that administrator. This attack can allow an attacker to cause a denial of service condition against vulnerable Web sites.

3. RealNetworks RealPlayer Unspecified Remote Code Execution Vu...
BugTraq ID: 10469
Remote: Yes
Date Published: Jun 05 2004
Relevant URL: http://www.securityfocus.com/bid/10469
Summary:
RealPlayer may be prone to a remote code execution vulnerability. eEye Digital Security reported this vulnerability. The issue exists in default installations of RealPlayer and may lead to remote code execution with minimal user interaction.

All versions of RealPlayer are considered vulnerable at this point.

Due to a lack of details further information is not available at the moment. This BID will be updated as more information becomes available.

4. PostgreSQL ODBC Driver Unspecified Remote Buffer Overflow Vu...
BugTraq ID: 10470
Remote: Yes
Date Published: Jun 07 2004
Relevant URL: http://www.securityfocus.com/bid/10470
Summary:
PostgreSQL ODBC driver is reportedly prone to a remote buffer overflow vulnerability. This vulnerability was reported in a Debian advisory and may allow a remote attacker to crash a Web server used with the application. It is reported that this issue can be exploited by using a malicious script in order to cause a denial of service condition in the Web server.

Due to a lack of details, further information is not available at the moment. This BID will be updated as more information becomes available.

PostgreSQL version 7.2.1 is confirmed to be vulnerable at the moment, however, it is likely that other versions are affected as well.

5. PHP Microsoft Windows Shell Escape Functions Command Executi...
BugTraq ID: 10471
Remote: Yes
Date Published: Jun 07 2004
Relevant URL: http://www.securityfocus.com/bid/10471
Summary:
PHP is reportedly prone to a command execution vulnerability in its shell escape functions. This issue is due to a failure of PHP to properly sanitize function arguments.

This issue might allow an attacker to execute arbitrary shell commands on a computer running the vulnerable software within the security context of the web server; potentially leading to unauthorized access. Other attacks are also possible.

This issue is reported to affect PHP under Microsoft Windows version 4.3.3 and 4.3.5, it is likely that other Microsoft Windows versions are affected as well.

6. Microsoft Internet Explorer URL Local Resource Access Weakne...
BugTraq ID: 10472
Remote: Yes
Date Published: Jun 06 2004
Relevant URL: http://www.securityfocus.com/bid/10472
Summary:
Microsoft Internet Explorer is prone to a security weakness that may permit unauthorized access to local resources on a client computer. This will effectively bypass security restrictions implemented in Internet Explorer 6 SP1. Specifically, a malicious Web page may access a file on a vulnerable client computer by pre-pending "URL:" to a request for a specific resource.

This weakness is useful when exploiting other vulnerabilities, such as vulnerabilities that allow cross-zone access.

Exploits are known to be circulating in the wild that abuse this issue in combination with BID 10473 and one of the issues described in BID 8577.

7. Microsoft Internet Explorer Modal Dialog Zone Bypass Vulnera...
BugTraq ID: 10473
Remote: Yes
Date Published: Jun 06 2004
Relevant URL: http://www.securityfocus.com/bid/10473
Summary:
Microsoft Internet Explorer is prone to a vulnerability that may permit cross-zone access, allowing an attacker to execute malicious script code in the context of the Local Zone. It is possible to exploit this issue by passing a dynamically created IFrame to a modal dialog.

This vulnerability could be exploited in combination with a number of other security issues, such as the weakness described in BID 10472. The end result of successful exploitation is execution of arbitrary code in the context of the client user.

It may also be possible to exploit this vulnerability to access properties of a foreign domain, allowing for other types of attacks that compromise sensitive or private information associated with a domain of the attacker's choosing.

8. Webmin Multiple Unspecified Vulnerabilities
BugTraq ID: 10474
Remote: Yes
Date Published: Jun 07 2004
Relevant URL: http://www.securityfocus.com/bid/10474
Summary:
Webmin is prone to multiple unspecified vulnerabilities that may allow an attacker to disclose sensitive information and carry out denial of service attacks against legitimate users of the application.

The first issue can allow a user to disclose sensitive configuration information about any module regardless of the user's privileges. The second issue can allow an attacker to send fake credentials to the application that results in locking out legitimate users of Webmin.

Webmin versions 1.140 and prior are affected by these issues.

9. IBM GSKit SSL Handshake Unspecified Denial of Service Vulner...
BugTraq ID: 10475
Remote: Yes
Date Published: Jun 07 2004
Relevant URL: http://www.securityfocus.com/bid/10475
Summary:
IBM Global Security Toolkit (GSKit) is susceptible to an unspecified denial of service vulnerability.

IBM has reported that during SSL handshakes, malformed packets can either crash the affected application, or cause a performance degradation.

Multiple applications incorporate GSKit, and are therefore all affected by this vulnerability.

10. Linksys Web Camera Software Next_file Parameter File Disclos...
BugTraq ID: 10476
Remote: Yes
Date Published: Jun 07 2004
Relevant URL: http://www.securityfocus.com/bid/10476
Summary:
It is reported that Linksys Web Camera software is prone to a remote file disclosure vulnerability that may allow a remote attacker to disclose sensitive files.

Linksys Web Camera software version 2.10 is reportedly prone to this issue, however, it is possible that other versions are affected as well.

11. ClueCentral Apache Suexec Patch Security Weakness
BugTraq ID: 10478
Remote: No
Date Published: Jun 07 2004
Relevant URL: http://www.securityfocus.com/bid/10478
Summary:
cluecentral Apache suexec patch is reported prone to a local security weakness. It is reported that the patch that is applied to Apache suexec makes suexec insecure. The patch reportedly removes security checks on insecure directory permissions and permits the execution of files owned by arbitrary users, by the 'nobody' user.

A local attacker who has permissions to create, publish and request PHP web content on the affected system may exploit this weakness in conjunction with other security vulnerabilities to achieve some degree of privilege escalation.

12. Multiple CPanel Perl Script Failure To Implement Taint Mode ...
BugTraq ID: 10479
Remote: No
Date Published: Jun 07 2004
Relevant URL: http://www.securityfocus.com/bid/10479
Summary:
Multiple Perl scripts that are distributed with cPanel are reported prone to a security weakness. The issues are reported to exist because the scripts do not run with taint mode. These weaknesses may be exploited in conjunction with the weakness described in BID 10478 in order to elevate privileges on a vulnerable system.

13. NetWin SurgeMail/WebMail Multiple Input Validation Vulnerabi...
BugTraq ID: 10483
Remote: Yes
Date Published: Jun 07 2004
Relevant URL: http://www.securityfocus.com/bid/10483
Summary:
SurgeMail/WebMail is prone to multiple vulnerabilities. These issue result from insufficient sanitization of user-supplied data. The issues can allow an attacker to carry out path disclosure and cross-site scripting attacks.

SurgeMail versions 1.9 and prior and WebMail 3.1d are affected by these issues.

14. FreeBSD jail() Process Unauthorized Routing Table Modificati...
BugTraq ID: 10485
Remote: No
Date Published: Jun 07 2004
Relevant URL: http://www.securityfocus.com/bid/10485
Summary:
FreeBSD improperly allows routing updates from superuser processes inside jail() environments.

An attacker that gains superuser privileges inside of a jailed process can send routing table changes. An attacker could corrupt the routing table of the server, denying network services to legitimate users. Attackers may also be able to perform connection-hijacking and redirection attacks, such as the SSH man-in-the-middle attack.

15. Apple Mac OS X Multiple Security Vulnerabilities
BugTraq ID: 10486
Remote: Yes
Date Published: Jun 07 2004
Relevant URL: http://www.securityfocus.com/bid/10486
Summary:
Multiple security vulnerabilities were reported in Mac OS X. A security update has been released to address these issues and provide other enhancements. The following issues were reported:

LaunchServices is reported prone to a vulnerability where the LaunchServices utility automatically registers applications. It is reported that an attacker may exploit this issue to register and run malicious applications.

DiskImageMounter is reported prone to a vulnerability where the disk:// URI handler may be used to mount an anonymous remote file system. This attack can be achieved using the HTTP protocol. A remote attacker may exploit this vulnerability to write to the local disk.

Safari is reported prone to an unspecified vulnerability where the Safari "Show in Finder" button, when invoked, would attempt to execute certain files instead of revealing the files in the finder window. An attacker may potentially exploit this condition to automatically execute files on the file system (including downloaded files). This could lead to privilege escalation or remote compromise.

Some of these issues may already be described in previous BIDs. This BID will be split up into unique BIDs when further analysis of this update is complete.

16. Microsoft DirectX DirectPlay Remote Malformed Packet Denial ...
BugTraq ID: 10487
Remote: Yes
Date Published: Jun 08 2004
Relevant URL: http://www.securityfocus.com/bid/10487
Summary:
Microsoft DirectX DirectPlay is affected by a remote denial of service vulnerability. This issue is due to a failure of the affected library to properly handle malformed network data.

An attacker can exploit this vulnerability to cause an application using the affected DirectPlay library to crash, denying service to legitimate users.

17. Blosxom Writeback Plug-in HTML Injection Vulnerability
BugTraq ID: 10488
Remote: Yes
Date Published: Jun 08 2004
Relevant URL: http://www.securityfocus.com/bid/10488
Summary:
Blosxom is prone to an HTML injection vulnerability. This issue presents itself when Blosxom is used in combination with the 'writeback' plug-in.

This can allow an attacker to inject HTML and script code when posting comments on a vulnerable site. A successful attack can allow an attacker to steal cookie-based authentication credentials. Other attacks are possible as well.

Blosxom version 2.0 is affected by this issue, however, other versions could be vulnerable as well.

18. U.S. Robotics Broadband Router 8003 Administration Web Inter...
BugTraq ID: 10490
Remote: Yes
Date Published: Jun 08 2004
Relevant URL: http://www.securityfocus.com/bid/10490
Summary:
U.S. Robotics Broadband Router 8003 is affected by an administration web interface insecure password vulnerability. This issue is due to a design error that allows the device's administrator password to be read in plain text.

This issue would allow an attacker to gain administrative access to the affected device allowing for the manipulation of such things as Internet access controls. This might also aiding further attacks against computers on the local area network.

19. ToCA Race Driver Multiple Remote Denial Of Service Vulnerabi...
BugTraq ID: 10492
Remote: Yes
Date Published: Jun 08 2004
Relevant URL: http://www.securityfocus.com/bid/10492
Summary:
ToCA Race Driver is reportedly affected by multiple remote denial of service vulnerabilities. These issues are due to a failure of the application to handle exceptional network traffic.

These issues may allow an attacker to cause the affected application to crash or hang, denying service to legitimate users.

20. PHP-Nuke Reviews Module Cross-Site Scripting Vulnerability
BugTraq ID: 10493
Remote: Yes
Date Published: Jun 08 2004
Relevant URL: http://www.securityfocus.com/bid/10493
Summary:
PHP-Nuke 'reviews' module is prone to a cross-site scripting vulnerability. These issue could allow an attacker to steal cookie-based authentication credentials. It is reported that the application does not sanitize user-supplied data through the 'id' parameter.

This vulnerability is likely to be fixed in the current versions of PHP-Nuke. This issue may have surfaced earlier, however, this has not been confirmed. This BID will be updated or retired as more information becomes available.

21. Roundup Remote File Disclosure Vulnerability
BugTraq ID: 10495
Remote: Yes
Date Published: Jun 08 2004
Relevant URL: http://www.securityfocus.com/bid/10495
Summary:
Roundup is prone to a remote file disclosure vulnerability. A remote user can disclose files on a vulnerable computer by using the /home/@@file/ prefix and '../' directory traversal sequences.

This vulnerability affects Roundup 0.6.11 and prior versions.

22. OpenBSD ISAKMPD Security Association Piggyback Delete Payloa...
BugTraq ID: 10496
Remote: Yes
Date Published: Jun 08 2004
Relevant URL: http://www.securityfocus.com/bid/10496
Summary:
It is reported that OpenBSD's isakmpd daemon is susceptible to a remote denial of service vulnerability.

An attacker is able to delete security associations and policies from IPSec VPN's by sending a malformed UDP ISAKMP packet to a vulnerable server. The malformed packet contains payloads for both setting up a new tunnel and deleting a tunnel. Isakmpd improperly acts upon the delete payload and terminates the associations and policys relating to the tunnel.

It is possible to destroy security associations, effectively eliminating the VPN connection between gateways, denying service to legitimate users of the VPN.

23. GNU Aspell Stack Buffer Overflow Vulnerability
BugTraq ID: 10497
Remote: No
Date Published: Jun 08 2004
Relevant URL: http://www.securityfocus.com/bid/10497
Summary:
It is reported that the word-list-compress utility, which is a part of aspell contains a buffer overflow vulnerability.

The word-list-compress utility is used for the compression and decompression of word lists. Improper bounds checking allows a buffer overflow condition allowing code execution in the context of the victim's account.

An attacker would have to have access to influence the contents of another user's dictionary to successfully exploit this issue. Potentially through social engineering, improper file permissions, or a file association vulnerability.

24. CVS Multiple Vulnerabilities
BugTraq ID: 10499
Remote: Yes
Date Published: Jun 09 2004
Relevant URL: http://www.securityfocus.com/bid/10499
Summary:
CVS is prone to multiple vulnerabilities. The issues include a double free vulnerability, format string vulnerabilities, and integer overflows. There is also a null termination issue in the security patch for BID 10384, potentially leading to a server crash. Some of these issues may be leveraged to execute arbitrary code, while other issues may only result in a denial of service.

25. Squid Proxy NTLM Authentication Buffer Overflow Vulnerabilit...
BugTraq ID: 10500
Remote: Yes
Date Published: Jun 09 2004
Relevant URL: http://www.securityfocus.com/bid/10500
Summary:
Squid Web Proxy Cache is reportedly affected by a buffer overflow vulnerability when processing NTLM authentication credentials. This issue is due to a failure of the application to properly validate buffer boundaries when copying user-supplied input.

This would allow an attacker to modify stack based process memory in order to cause a denial of service condition and execute arbitrary code in the context of the vulnerable web proxy. This will most likely facilitate unauthorized access to the affected computer.

26. Horde IMP Unspecified Input Validation Vulnerability
BugTraq ID: 10501
Remote: Yes
Date Published: Jun 09 2004
Relevant URL: http://www.securityfocus.com/bid/10501
Summary:
Horde IMP is reportedly affected by an unspecified input validation vulnerability. This issue is due to input validation errors that arise when the application processes user-supplied input.

This issue might be leveraged by an attacker to execute arbitrary HTML or script code in the browser of an unsuspecting user, facilitating session hijacking and theft of cookie-based authentication credentials.

27. Symantec Gateway Security 360R Wireless VPN Bypass Weakness
BugTraq ID: 10502
Remote: Yes
Date Published: Jun 09 2004
Relevant URL: http://www.securityfocus.com/bid/10502
Summary:
Symantec Gateway Security 360R may be prone to a weakness that could allow a remote attacker to establish an insecure wireless connection with an internal computer.

This weakness reportedly affects Symantec Gateway Security 360R firmware 2.1 build 300 and build 415.

28. Trend Micro OfficeScan Local Privilege Escalation Vulnerabil...
BugTraq ID: 10503
Remote: No
Date Published: Jun 09 2004
Relevant URL: http://www.securityfocus.com/bid/10503
Summary:
OfficeScan is prone to a local privilege escalation vulnerability. This issue can allow a local attacker to execute arbitrary applications and escalate privileges.

Trend Micro OfficeScan versions 5.58 and prior are affected by this issue.

29. Cisco CatOS TCP-ACK Denial Of Service Vulnerability
BugTraq ID: 10504
Remote: Yes
Date Published: Jun 09 2004
Relevant URL: http://www.securityfocus.com/bid/10504
Summary:
It has been reported that Cisco CatOS is vulnerable to a denial of service attack. Improper initial TCP handshakes can cause affected devices to cease functioning and reboot.

These improper connections can originate from spoofed source addresses, making it easier for an attacker to accomplish a denial of service attack.

This vulnerability is only accessible if the device is running telnet, HTTP, or SSH services. IOS is not affected by this vulnerability.

30. cPanel Passwd Remote SQL Injection Vulnerability
BugTraq ID: 10505
Remote: Yes
Date Published: Jun 09 2004
Relevant URL: http://www.securityfocus.com/bid/10505
Summary:
cPanel is reportedly affected by a remote SQL injection vulnerability in the passwd script. This issue is due to a failure of the application to properly sanitize user-supplied URI parameter input before using it in an SQL query.

The problem presents itself when malicious SQL statements are passed to the 'passwd' script through URI parameters.

As a result of this a malicious user may influence database queries in order to view or modify sensitive information, potentially compromising the software or the database.

31. AspDotNetStorefront Access Validation Vulnerability
BugTraq ID: 10506
Remote: Yes
Date Published: Jun 09 2004
Relevant URL: http://www.securityfocus.com/bid/10506
Summary:
AspDotNetStorefront is reportedly prone to an access validation vulnerability that may allow a remote attacker to delete arbitrary contents from a vulnerable Web site. The issue occurs because the 'deleteicon.aspx' script does not validate access before allowing an unprivileged user to delete contents such as icons and images from the site.

Other attacks may be possible as well, however, this has not been confirmed.

AspDotNetStorefront 3.3 is reportedly affected by this issue, however, it is possible that other versions are affected as well.

32. AspDotNetStorefront ReturnURL Parameter Cross-Site Scripting...
BugTraq ID: 10507
Remote: Yes
Date Published: Jun 09 2004
Relevant URL: http://www.securityfocus.com/bid/10507
Summary:
AspDotNetStorefront is prone to a cross-site scripting vulnerability. This issue exists due to insufficient sanitization of user-supplied data. The problem presents itself in the 'returnurl' parameter of the 'signin.aspx' script of the application and can allow remote attackers to steal cookie-based authentication credentials and carry out other attacks.

AspDotNetStorefront 3.3 is reportedly affected by this issue, however, it is possible that other versions are affected as well.

33. Apache Mod_Proxy Remote Negative Content-Length Buffer Overf...
BugTraq ID: 10508
Remote: Yes
Date Published: Jun 10 2004
Relevant URL: http://www.securityfocus.com/bid/10508
Summary:
A remote buffer overflow vulnerability exists in Apache mod_proxy.

The source of this issue is that a negative user-specified length value may be used in a memory copy operation, allowing for corruption of memory. This may triggered if a remote server returns a negative Content-Length: HTTP header field to be passed through the proxy.

Exploitation will likely result in a denial of service, though there is an unconfirmed potential for execution of arbitrary code on some platforms (such as BSD implementations). Versions that have the optional AP_ENABLE_EXCEPTION_HOOK define enabled may also be exploitable on some platforms.

This issue affects Apache servers 1.3.26 through 1.3.31 that have mod_proxy enabled and configured. Apache 2.0.x releases are not affected by this issue.

34. SMTP.Proxy Remote Format String Vulnerability
BugTraq ID: 10509
Remote: Yes
Date Published: Jun 10 2004
Relevant URL: http://www.securityfocus.com/bid/10509
Summary:
smtp.proxy is prone to a remotely exploitable format string vulnerability.

The vulnerability occurs in routines that log SMTP headers in email passed through the proxy. This issue may be exploited to execute arbitrary code.

35. Billion BIPAC-640 AE Administrative Interface Authentication...
BugTraq ID: 10510
Remote: Yes
Date Published: Jun 10 2004
Relevant URL: http://www.securityfocus.com/bid/10510
Summary:
Billion BIPAC-640 AE is reported prone to an authentication bypass vulnerability. The issue is reported to exist when a Mozilla Firefox or Opera Web Browser is used to access the Billion BIPAC-640 AE administrative interface.

This vulnerability is reported to affect Billion BIPAC-640 AE firmware version 3.33, other versions might also be affected.

36. Invision Power Board SSI.PHP SQL Injection Vulnerability
BugTraq ID: 10511
Remote: Yes
Date Published: Jun 10 2004
Relevant URL: http://www.securityfocus.com/bid/10511
Summary:
Invision Power Board is reported prone to an SQL injection vulnerability in its 'ssi.php' script.

Due to improper filtering of user supplied data, 'ssi.php' is exploitable by attackers to pass SQL statements to the underlying database.

The impact of this vulnerability depends on the underlying database. It may be possible to corrupt/read sensitive data, execute commands/procedures on the database server or possibly exploit vulnerabilities in the database itself through this condition.

Version 1.3.1 Final of Invision Power Board is reported vulnerable. Other versions may also be affected as well.

*** There have been conflicting reports stating the the vulnerable variable only accepts integer values and not arbitrary strings.

37. Edimax 7205APL 802.11b Wireless Access Point Default Backdoo...
BugTraq ID: 10512
Remote: Yes
Date Published: Jun 10 2004
Relevant URL: http://www.securityfocus.com/bid/10512
Summary:
The Edimax 7205APL is reported to contain a default backdoor account.

This account is hard coded and cannot be removed. This account can be used to log into the device and create a backup of the configuration.

This configuration contains all users and their corresponding passwords, allowing an attacker to then log into the device as administrator.

The reported vulnerable device had firmware revision 2.40a-00. Other revisions may also contain similar backdoor accounts.

38. Skype Technologies Skype CallTo URI Handler Buffer Overrun V...
BugTraq ID: 10513
Remote: Yes
Date Published: Jun 10 2004
Relevant URL: http://www.securityfocus.com/bid/10513
Summary:
Skype is reported to be prone to a buffer overrun vulnerability.

The vulnerability is reported to occur due to a lack of bounds checking performed on "callto://" URI data, when a callto URI is followed.

This may result in the corruption of sensitive regions of memory. Ultimately, it is conjectured that this issue may be exploited to execute arbitrary code in the context of a user who follows a malicious URI.

39. Blackboard Learning System Dropbox File Download Vulnerabili...
BugTraq ID: 10515
Remote: Yes
Date Published: Jun 10 2004
Relevant URL: http://www.securityfocus.com/bid/10515
Summary:
It is reported that Blackboard improperly allows users to download files posted in the 'Digital Dropbox'. Files in the dropbox are intended for the course administrators.

The application does not verify that the files requested for download are intended for the requester. No authorization checks are performed, and the file is served to anybody that can guess the URI.

An attacker would use this vulnerability to download potentially sensitive information.

This vulnerability is reported to exist in the Blackboard Learning System - Basic Edition (release 6), but likely exists in others as well.

40. KSymoops KSymoops-GZNM Insecure Temporary File Handling Symb...
BugTraq ID: 10516
Remote: No
Date Published: Jun 10 2004
Relevant URL: http://www.securityfocus.com/bid/10516
Summary:
Ksymoops ships with several scripts, one of these scripts is 'ksymoops-gznm'. It is reported that the 'ksymoops-gznm' script is prone to a local insecure temporary file handling symbolic link vulnerability. This issue is due to a design error that allows the application to insecurely write to a temporary file that is created with a predictable file name. The script will write to this file before verifying its existence; this would facilitate a symbolic link attack.

41. Microsoft Internet Explorer URI Obfuscation Weakness
BugTraq ID: 10517
Remote: Yes
Date Published: Jun 10 2004
Relevant URL: http://www.securityfocus.com/bid/10517
Summary:
A weakness is reported in Microsoft Internet Explorer allowing an attacker to obfuscate the URI of a link. This could facilitate the impersonation of legitimate web sites in order to steal sensitive information from unsuspecting users.

An attacker may exploit this weakness to make a user think they are visiting a legitimate site, when in reality they are being redirected to an attacker controlled site.

Update: an attacker may be able to use this issue to bypass zone restrictions in Internet Explorer.

Opera 7.51 may also be affected.

42. Subversion SVN Protocol Parser Remote Integer Overflow Vulne...
BugTraq ID: 10519
Remote: Yes
Date Published: Jun 11 2004
Relevant URL: http://www.securityfocus.com/bid/10519
Summary:
It is reported that Subversion is prone to a remote integer overrun vulnerability. The issue exists in the svn protocol parser and is due to a lack of sufficient bounds checking performed on svn URI strings that are transmitted by the client.

If the URI string recieved is long enough an integer overrun may occur where the size value of the URI string will wrap and be misrepresented. This may potentially result in corruption of heap memory management structures.

43. RealNetwork RealPlayer Media File Heap Overflow Vulnerabilit...
BugTraq ID: 10520
Remote: Yes
Date Published: Jun 11 2004
Relevant URL: http://www.securityfocus.com/bid/10520
Summary:
NGSSoftware has reported that heap overflow vulnerabilities exist in RealNetworks RealPlayer releases. These issues may be triggered by a malformed .RA, .RM, .RV, or .RMJ file. If successfully exploited, it is possible to execute arbitrary code in the context of the user running the player.

44. Usermin HTML Email Script Code Execution Vulnerability
BugTraq ID: 10521
Remote: Yes
Date Published: Jun 11 2004
Relevant URL: http://www.securityfocus.com/bid/10521
Summary:
Usermin is reportedly affected by a script code execution vulnerability when rendering HTML email messages. This issue is due to a failure to sanitize HTML email messages.

This issue will allow an attacker to execute arbitrary script code in the browser of an unsuspecting user; facilitating theft of cookie based authentication credentials. This could potentially allow unauthorized access to user accounts on the computer.

45. Webmin Configuration Module Information Disclosure Vulnerabi...
BugTraq ID: 10522
Remote: Yes
Date Published: Jun 11 2004
Relevant URL: http://www.securityfocus.com/bid/10522
Summary:
Webmin is reportedly prone to a vulnerability that allow for unauthorized disclosure of the configuration of a module. This issue is due to an access validation error.

This issue may allow an attacker to view the configuration of a module for the affected application that may facilitate further attacks against the affected system.

46. Webmin And Usermin Account Lockout Bypass Vulnerability
BugTraq ID: 10523
Remote: Yes
Date Published: Jun 11 2004
Relevant URL: http://www.securityfocus.com/bid/10523
Summary:
Webmin and Usermin are affected by an account lockout bypass vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied input.

This issue may be leveraged to carry out brute force authentication attacks against the affected computer; facilitating unauthorized access to the Webmin and Usermin accounts as well as the affected computer. It has been reported that this issue can also be leveraged to prevent users from logging in, although how this occurs is unspecified.

47. PHP-Nuke Multiple Input Validation Vulnerabilities
BugTraq ID: 10524
Remote: Yes
Date Published: Jun 11 2004
Relevant URL: http://www.securityfocus.com/bid/10524
Summary:
PHP-Nuke is prone to multiple vulnerabilities. The issues result from insufficient sanitization of user-supplied data. The following specific issues can affect the application:

PHP-Nuke is prone to multiple cross-site scripting vulnerabilities. These issues affect the 'Faq', 'Encyclopedia' and 'Reviews' modules.

These cross-site scripting issues could permit a remote attacker to create a malicious URI link that includes hostile HTML and script code. If a user follows the malicious link, the attacker-supplied code executes in the Web browser of the victim computer.

PHP-Nuke is prone to an SQL Injection Vulnerability. Again the issue is due to a failure of the application to properly sanitize user-supplied input. The problem presents itself when SQL syntax is passed through the a parameter of the 'Reviews' module.

As a result of this issue an attacker could modify the logic and structure of database queries.

Finally a remote denial of service vulnerability is reported to exist in the score subsystem of the 'Review' module of PHP-Nuke, it is reported that a large number supplied as a value for a parameter passed to the 'Reviews' module will deny service to legitimate PHP-Nuke users.

48. ignitionServer Server Link Service Authentication Bypass Vul...
BugTraq ID: 10525
Remote: Yes
Date Published: Jun 11 2004
Relevant URL: http://www.securityfocus.com/bid/10525
Summary:
ignitionServer is reported prone to an authentication bypass vulnerability. IRC servers can be linked together to form IRC networks. ignitionServer server linking functionality is not reported to be fully functional and so is not enabled by default. However, it is reported that if the ignitionServer linking service is enabled, a remote ignitionServer server may link to the vulnerable ignitionServer without requiring any authentication at all.

49. WinAgents TFTP Server Remote Buffer Overrun Vulnerability
BugTraq ID: 10526
Remote: Yes
Date Published: Jun 11 2004
Relevant URL: http://www.securityfocus.com/bid/10526
Summary:
WinAgents TFTP Server is reported prone to a remote buffer overrun vulnerability. The issue is reported to exist due to a lack of sufficient boundary checks performed on filenames when a request is made for a file. A remote attacker may make a malicious request to the server for a filename of excessive length. This request will trigger the vulnerability. Immediate consequences of such an attack will reportedly result in a denial of service.

50. RealNetworks RealPlayer URI Processing Buffer Overrun Vulner...
BugTraq ID: 10527
Remote: Yes
Date Published: Jun 10 2004
Relevant URL: http://www.securityfocus.com/bid/10527
Summary:
A remote buffer overflow vulnerability is reported to affect RealPlayer 10; previous versions may also be prone to this issue. It is reported that the vulnerability presents itself when RealPlayer processes a URI that contains a large number of period characters. A remote attacker may potentially exploit this vulnerability in order to execute arbitrary supplied code in the context of the user who is running the affected software.

RealNetworks has released updates to the products affected by these issues, and users are urged to upgrade immediately.

51. RealNetwork RealPlayer EMBD3260.DLL Error Response Heap Over...
BugTraq ID: 10528
Remote: Yes
Date Published: Jun 10 2004
Relevant URL: http://www.securityfocus.com/bid/10528
Summary:
eEye has reported that heap overflow vulnerabilities exist in RealNetworks RealPlayer releases. These issues may be triggered by a malformed movie file embedded in an HTML page. If successfully exploited, it is possible to execute arbitrary code in the context of the user running the player.

52. NetBSD Swapctl() Local Denial Of Service Vulnerability
BugTraq ID: 10529
Remote: No
Date Published: Jun 11 2004
Relevant URL: http://www.securityfocus.com/bid/10529
Summary:
NetBSD's swapctl() system call is reported susceptible to a local denial of service vulnerability.

It manifests itself as an integer overflow condition in in the swapctl() system call. This issue may be exploited by local users to trigger a kernel panic, effectively denying service to legitimate users.

This has been fixed in NetBSD-current, and the NetBSD-2-0 branch of CVS.

III. SECURITYFOCUS NEWS ARTICLES
--------------------------------
1. Backdoor program gets backdoored
By: Kevin Poulsen

Popular malware author pulls a fast one on his underground user base.

http://www.securityfocus.com/news/8893

2. Report: Computer intrusion losses waning
By: Kevin Poulsen

But denial-of-service attacks take a multi-million dollar toll in the latest CSI/FBI survey.
http://www.securityfocus.com/news/8883

3. Wardriver pleads guilty in Lowes WiFi hacks
By: Kevin Poulsen

Hacker agrees to cooperate with prosecutors to reduce a potential 12 to 15 year prison sentence.

http://www.securityfocus.com/news/8835

4. Akamai blames inaccessible Web sites on `international attac...
By: Matthew Fordahl, The Associated Press

http://www.securityfocus.com/news/8911

5. Iris scans at UK airports, says Home Office
By: Lucy Sherriff, The Register

The Home Office is to install iris scanning technology in major UK airports. It says this will speed up immigration times for those who register on the scheme, as well as providing a "substantial increase in security".
http://www.securityfocus.com/news/8910

6. Virus attacks mobiles via Bluetooth
By: John Oates, The Register

Some useful citizen has written a virus which targets mobile phones running the Symbian operating system. Anti-virus groups received the worm from its authors but it is not yet "in the wild".

http://www.securityfocus.com/news/8909

IV. SECURITYFOCUS TOP 6 TOOLS
-----------------------------
1. SnortNotify 1.02
By: Adam Ely
Relevant URL: http://www.780inc.com/snortnotify/
Platforms: Linux
Summary:

Running from cron at a specified interval SnortNotify will search a snort database for new alerts. If new alerts match a pre configured priority level, an email will be sent to the contact. The email will include Sensor name, the signaturename, and the timestamp.

2. Wasabi 0.1
By: Andrea Barisani
Relevant URL: http://www.gentoo.org/proj/en/infrastructure/wasabi
Platforms: Perl (any system supporting perl)
Summary:

Wasabi is a log monitoring program, designed to watch a log file for lines matching user defined regular expression and report on the matches. The regular expressions are assigned to queues which have an alert interval and a list of mail recipients.

Queues can be set to send a notification as soon as there is a log line assigned to it, or to send periodic reports.

Additionally, uninteresting fields in the log lines (such as PID numbers) can be masked with the standard regular ex

3. CryptoHeaven v2.4.0
By: Marcin Kurzawa <[email protected]>
Relevant URL: http://www.cryptoheaven.com/
Platforms: UNIX, Windows 2000, Windows 95/98, Windows NT, Windows XP
Summary:

CryptoHeaven offers secure email and online file sharing/storage. Its main features are secure and highly encrypted services such as group collaboration, file sharing, email, online storage, and instant messaging. It integrates multi-user based security into email, instant messaging, and file storage and sharing in one unique package. It provides real time communication for text and data transfers in a multi-user secure environment. The security and usability of CryptoHeaven is well-balanced; even the no-so-technically oriented computer users can enjoy this crypto product with very high level of encryption.

4. Auditor security collection
By: Max Moser - Moser Informatik
Relevant URL: http://moser-informatik.ch/?page=products&lang=eng
Platforms: Os Independent
Summary:

The Auditor security collection is a Live-System based on KNOPPIX. With no installation whatsoever, the analysis platform is started directly from the CD-Rom and is fully accessible within minutes. Independent of the hardware in use, the Auditor security collection offers a standardised working environment, so that the build-up of know-how and remote support is made easier. Even during the planning and development stages, our target was to achieve an excellent user-friendliness combined with an optimal toolset.

5. XArp 0.1
By: Christoph Mayer
Relevant URL: http://www.chrismc.de
Platforms: Windows 2000, Windows XP
Summary:

XArp is a graphical tool to monitor the ARP cache. It periodically requests the local ARP cache and reports changes in the IP to MAC mapping. Thus it can be used to recognize ARP poisoning which is used to prepare 'man in the middle' attacks on switched networks.

6. Devil-Linux v1.2 Beta 1
By: Heiko Zuerker <[email protected]>
Relevant URL: http://www.devil-linux.org/download.htm
Platforms: Linux
Summary:

Devil-Linux is a special Linux distribution which is used for firewalls/routers. The goal of Devil-Linux is to have a small, customizable, and secure Linux system. Configuration is saved on a floppy disk, and it has several optional packages.

V. SECURITYJOBS LIST SUMMARY
----------------------------
1. Sales Engineer - D.C. Metro Area (Federal) (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/366098

2. Senior Network Security Engineer vacancy (UK) (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/366040

3. Senior Risk Consultant (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/366017

4. Security Consultants needed for NYC (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/366006

5. Looking for an Internship (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/366005

6. Security Consultant- Northeast (NY/NJ) (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/366001

7. Seeking security researcher / analyst position (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/365989

8. Sales Engineer Atlanta (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/365911

9. Application Security Specialist, London, UK (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/365907

10. Systems and Procedures Analyst (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/365902

11. VA/MD/DC - Security Architects - MITRE (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/365900

12. ISS - Security Consultant Needed - New York, NY (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/365892

13. Information Systems Security Director - Michigan (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/365859

14. HMG / JSP 440/ 442 Security Consultant role - UK BAS... (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/365852

15. (job offered) Security Technology Implementation Con... (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/365843

16. F5 Networks - Senior Test Engineer (Network Security... (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/365806

17. Technical Support Engineer--Network Security Tier I... (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/365738

18. Symantec-Looking for a Technical Editor with Softwar... (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/365733

19. VOIP Security Specialists - TX (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/365715

20. Senior Technical Support Engineer: San Francisco (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/365712

21. Identity / Access Management Consultants - NY, IL, D... (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/365711

22. Information Systems Security Associates - Riggs Bank... (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/365704

23. Business Development Manager NYC or CA (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/365673

24. Security Firm Seeks SE (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/365664

25. MITRE Corporation-DC/VA/MD-Security Analyst Openings... (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/365655

26. Surveillance Technology Provider seeks Solutions Arc... (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/365653

27. Product Manager Need - Stamford, CT (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/365652

28. Principal Java Engineer-Symantec, Santa Monica CA (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/365634

29. Product Manager - Packet Sniffing Technology (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/365628

30. Security Analysts, DC Metro Area (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/365625

31. Charlotte, NC - Security Implementation Engineer (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/365610

32. Symantec-Consumer Team-Need a Windows Engineer in Sa... (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/365603

33. Security Consultant- Bay Area (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/365602

34. Surveillance Technology Provider seeks Project Manag... (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/365596

35. Surveillance Technology Provider seeks Implementer/D... (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/365590

36. Technical Writer for Systems Engineering Manuals-Sym... (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/365588

37. Network Engineer Position - NYC (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/365587

38. Experienced Information Security Professional Availa... (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/365579

39. JOB: USA-FL-Ft. Lauderdale: UNIX C/C++ SW Eng w/ VPN... (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/365578

40. Senior RACF Security Analyst - Indianapolis (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/365576

41. Threats and Exploits Engineer Positions (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/365572

42. Surveillance Technology Provider seeks Subject Matte... (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/365571

43. Vulnerability Management Solution needs Product Mana... (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/365569

44. Senior Information Security Technical Engineer, NY/N... (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/365568

45. Vulnerability Management Solution needs Product Mana... (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/365495

46. Network Security Team Leader vacacncy (UK) (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/365493

47. Firewalls/Sys Admin/Networking Eng role, Palo Alto, ... (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/365488

48. Perimeter Security Engineer Position - NYC (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/365475

VI. INCIDENTS LIST SUMMARY
--------------------------
1. Simple Windows incident response methodology (Thread)
Relevant URL:

http://www.securityfocus.com/archive/75/365961

2. Incident investigation methodologies (Thread)
Relevant URL:

http://www.securityfocus.com/archive/75/365930

3. [ok] Simple Windows incident response methodology (Thread)
Relevant URL:

http://www.securityfocus.com/archive/75/365889

4. Windows IR methodology (Thread)
Relevant URL:

http://www.securityfocus.com/archive/75/365851

5. Litigious investigation methodology (Thread)
Relevant URL:

http://www.securityfocus.com/archive/75/365723

6. Spammers bypassing Cisco ACL's?? (Thread)
Relevant URL:

http://www.securityfocus.com/archive/75/365700

VII. VULN-DEV RESEARCH LIST SUMMARY
-----------------------------------
1. Acrobat Reader overhead (Thread)
Relevant URL:

http://www.securityfocus.com/archive/82/365983

2. Antivirus/Trojan/Spyware scanners DoS [summary] (Thread)
Relevant URL:

http://www.securityfocus.com/archive/82/365982

3. openssh buffer_append_space vulnerability (Thread)
Relevant URL:

http://www.securityfocus.com/archive/82/365971

VIII. MICROSOFT FOCUS LIST SUMMARY
----------------------------------
1. Doubleclick programs entry on start menu (Thread)
Relevant URL:

http://www.securityfocus.com/archive/88/366041

2. SV: Doubleclick programs entry on start menu (Thread)
Relevant URL:

http://www.securityfocus.com/archive/88/366003

3. Use of L2TP in isolated W2K3 AD (Thread)
Relevant URL:

http://www.securityfocus.com/archive/88/365624

4. SecurityFocus Microsoft Newsletter #192 (Thread)
Relevant URL:

http://www.securityfocus.com/archive/88/365619

IX. SUN FOCUS LIST SUMMARY
--------------------------
1. files<->packages? (Thread)
Relevant URL:

http://www.securityfocus.com/archive/92/366064

2. DNS problem on Solaris X86 (Thread)
Relevant URL:

http://www.securityfocus.com/archive/92/366055

3. Basic Solaris study book (Thread)
Relevant URL:

http://www.securityfocus.com/archive/92/365686

X. LINUX FOCUS LIST SUMMARY
---------------------------
1. mrtg/snmp/subinterfaces (Thread)
Relevant URL:

http://www.securityfocus.com/archive/91/366082

XI. UNSUBSCRIBE INSTRUCTIONS
----------------------------
To unsubscribe send an e-mail message to [email protected] from the subscribed address. The contents of the subject or message body do not matter. You will receive a confirmation request message to which you will have to answer. Alternatively you can also visit http://www.securityfocus.com/newsletters and unsubscribe via the website.

If your email address has changed email [email protected] and ask to be manually removed.

XII. SPONSOR INFORMATION
-----------------------

This issue sponsored by: Astaro

Free 30-day trial: firewall with virus/spam protection, URL filtering,
VPN, wireless security

Download your free trial at:
http://www.securityfocus.com/sponsor/Astaro_sf-news_040615

------------------------------------------------------------------------