SecurityFocus Newsletter #257

Peter Laborge <[email protected]> 13 Jul 2004 20:54:57 -0000

Newsgroups	gmane.comp.security.news.general
Message-ID	<[email protected]>

SecurityFocus Newsletter #257
------------------------------

This issue sponsored by: FaceTime

Free Webinar! Enterprise IM: How IT Managers Can Survive. Featured Speaker:
Nate Root, Senior Analyst, Forrester Research. IT directors and security
managers will gain new insights to balance compliance and security risks.
Highlights an integrated solution from FaceTime Communications and MSN
Messenger Connect for Enterprises. Ideal for financial services,
healthcare, energy companies and other regulated organizations.

View the webinar now!
http://www.securityfocus.com/sponsor/FaceTime_sf-news_040713

------------------------------------------------------------------------
I. FRONT AND CENTER
1. Metasploit Framework (Part One)
2. Service Pack Deux?
II. BUGTRAQ SUMMARY
1. Easy Chat Server Multiple Denial Of Service Vulnerabilities
2. Centre Online School Software Multiple Vulnerabilities
3. IBM Websphere Edge Server Denial Of Service Vulnerability
4. Microsoft Internet Explorer Shell.Application Object Script ...
5. Enterasys XSR Security Router Record Route Denial Of Service...
6. MySQL Authentication Bypass Vulnerability
7. MySQL Password Length Remote Buffer Overflow Vulnerability
8. Oracle Database 10g Installer Insecure Temporary File Creati...
9. Symantec Brightmail Anti-spam Unauthorized Message Disclosur...
10. Fastream NetFile FTP/Web Server Directory Traversal Vulnerab...
11. 12Planet Chat Server Cross-Site Scripting Vulnerability
12. Linux VServer Project ProcFS Weak Sharing Permissions Vulner...
13. Multiple Vendor Internet Browser User Action Prediction/Inte...
14. Linux Kernel chown() System Call Group Ownership Alteration ...
15. Unreal IRCD Cloak.C IP Address Disclosure Vulnerability
16. PureFTPd Accept_Client Remote Denial of Service Vulnerabilit...
17. Tri Dung Nguyen Free Perl Guestbook BBCode HTML Injection Vu...
18. BasiliX Webmail Email Header HTML Injection Vulnerability
19. Open WebMail Email Header HTML Injection Vulnerability
20. IlohaMail Email Header HTML Injection Vulnerability
21. Zoom Model 5560 X3 ETHERNET ADSL Modem Default Backdoor Acco...
22. JAWS Multiple Input Validation Vulnerabilities
23. Qualcomm Eudora MIME Attachment Spoofing Vulnerability
24. Ethereal Multiple Unspecified iSNS, SMB and SNMP Protocol D...
25. Mbedthis Software AppWeb HTTP Server Multiple Vulnerabilitie...
26. Comersus Open Technologies Comersus Cart Multiple Vulnerabil...
27. DiamondCS Process Guard Service Description Table Restoratio...
28. NPDS BB HTML Injection Vulnerability
29. Microsoft Windows Program Group Converter Filename Local Buf...
30. Opera Web Browser IFrame OnLoad Address Bar URL Obfuscation ...
31. Nokia 3560 Handset Text Message Remote Denial of Service Vul...
32. Mozilla External Protocol Handler Weakness
33. Microsoft Word/Outlook Object Tag Security Setting Compromis...
34. SSLTelnetd Remote Syslog Format String Vulnerability
35. Sun Java Virtual Machine Font.createFont Method Insecure Tem...
36. Symantec Norton Antivirus Denial Of Service Vulnerability
37. Linux Kernel Floating Point Register Contents Leak Vulnerabi...
III. SECURITYFOCUS NEWS ARTICLES
1. VoIP hacks gut Caller I.D.
2. Gates Defends Microsoft Patch Efforts
3. Wi-fi hopper guilty of cyber-extortion
4. Senate Bill Targets Phishers
5. Mozilla bug rears its head
6. 'Together we can defeat spam in two years'
IV. SECURITYFOCUS TOP 6 TOOLS
1. mod_auth_nufw 1.0.1
2. Ettercap v0.7.0 pre2
3. Free CPM Cellular Passwords Manager 1.0
4. DumpSIS.pl 0.81
5. CifsPwScanner 1.0.3
6. Wasabi 0.2
V. SECURITYJOBS LIST SUMMARY
1. [SJ-JOB] Security Researcher, San Francisco, US (Thread)
2. [SJ-JOB] Security Product Manager, San Francisco, US (Thread)
3. [SJ-JOB] VP of Marketing, Oshkosh, US (Thread)
4. [SJ-JOB] Auditor, Orange County, Seattle, US (Thread)
5. [SJ-RESUME] Sr. Security Engineer (Thread)
6. [SJ-RESUME] Developer (Thread)
7. [SJ-RESUME] Director, Information Security (Thread)
8. [SJ-JOB] Security System Administrator, Vienna, US (Thread)
9. [SJ-RESUME] Security Consultant (Thread)
10. [SJ-JOB] Security Consultant, Arcadia, US (Thread)
11. [SJ-RESUME] Jr. Security Analyst (Thread)
12. [SJ-JOB] Security Architect, South Florida, US (Thread)
13. [SJ-JOB] Security Consultant, Foster City, US (Thread)
14. [SJ-JOB] Sales Engineer, Ann Arbor, US (Thread)
15. [SJ-JOB] Security Engineer, Johnstown, US (Thread)
16. [SJ-JOB] Account Manager, Ann Arbor, US (Thread)
17. [SJ-JOB] Security Consultant, Washington DC, US (Thread)
18. [SJ-JOB] Security Engineer, Suburbs, US (Thread)
19. [SJ-JOB] Quality Assurance, Arlington, US (Thread)
20. [SJ-RESUME] Account Manager (Thread)
21. [SJ-JOB] Technical Writer, Fort Mead, US (Thread)
22. [SJ-RESUME] VP of Regional Sales (Thread)
23. [SJ-RESUME] Security Engineer (Thread)
24. [SJ-JOB] Sales Engineer, London, GB (Thread)
25. [SJ-RESUME] Sr. Security Analyst (Thread)
26. [SJ-RESUME] Forensics Engineer (Thread)
27. [SJ-JOB] Director, Computer Security, Bay Area, US (Thread)
28. [SJ-JOB] Sales Engineer, Alexandria Area, US (Thread)
29. [SJ-JOB] Account Manager, Chicago, US (Thread)
30. [SJ-JOB] Account Manager, New York City, US (Thread)
31. [SJ-JOB] Security Auditor, Redmond, US (Thread)
32. [SJ-JOB] Information Assurance Analyst, Washington D... (Thread)
33. [SJ-RESUME] Security System Administrator (Thread)
34. [SJ-JOB] Quality Assurance, Santa Clara, US (Thread)
35. [SJ-JOB] Manager, Information Security, San Francisc... (Thread)
36. [SJ-JOB] Security Engineer, All Iowa, US (Thread)
37. [SJ-RESUME] Manager, Information Security (Thread)
38. [SJ-RESUME] Security Researcher (Thread)
39. [SJ-JOB] Security System Administrator, DC, US (Thread)
40. [SJ-JOB] Application Security Engineer, San Francisc... (Thread)
41. [SJ-RESUME] CISO (Thread)
42. [SJ-JOB] Account Manager, Miami, US (Thread)
43. [SJ-JOB] Account Manager, Atlanta, US (Thread)
44. [SJ-JOB] Sr. Security Engineer, Dulles, US (Thread)
45. [SJ-JOB] Security Engineer, Dulles, US (Thread)
46. [SJ-RESUME] Security Auditor (Thread)
47. [SJ-JOB] Security Architect, Seattle, US (Thread)
48. [SJ-RESUME] Security Architect (Thread)
49. Bugs, fine tuning and patience. (Thread)
50. Resume, (Thread)
51. Security Engineer, Yardley, US (Thread)
52. Developer, San Francisco Bay Area, US (Thread)
53. Resume, Security System Administrator (Thread)
54. Resume, Jr. Security Analyst (Thread)
55. Sales Engineer, Northeastern US, US (Thread)
56. Sales Engineer, San Francisco Bay Area, US (Thread)
57. Security Product Manager, San Mateo, US (Thread)
58. Information Assurance Analyst, Lornton, US (Thread)
59. VP of Regional Sales, San Francisco, US (Thread)
60. Resume, Security Engineer (Thread)
61. Resume, Security Consultant (Thread)
62. Resume, Customer Support (Thread)
63. Resume, Sr. Security Analyst (Thread)
64. Security Engineer, Saint Louis, US (Thread)
65. Resume, Manager, Information Security (Thread)
66. Resume, Compliance Officer (Thread)
67. Resume, Sr. Security Engineer (Thread)
68. Resume, Director, Information Security (Thread)
69. , , (Thread)
70. Security Auditor, Fort Lauderdale, US (Thread)
71. VP of Marketing, Sherman Oaks, US (Thread)
72. Account Manager, North Bergen, US (Thread)
73. Resume, Sales Engineer (Thread)
74. Resume, Quality Assurance (Thread)
75. Developer, Fort Lauderdale, US (Thread)
VI. INCIDENTS LIST SUMMARY
1. Workstations trying to GET /download/IEService215.ch... (Thread)
2. Interesting webserver intrusion (apache 1.3.31, mod_... (Thread)
3. Workstations trying to GET /download/IEService215.ch... (Thread)
4. Workstations trying to GET /download/IEService215.ch... (Thread)
5. Workstations trying to GET /download/IEService215.ch... (Thread)
6. Interesting webserver intrusion (apache 1.3.31, mod_... (Thread)
7. UDP packets from Apache ? New DDOS ? (Thread)
8. TCP/IP reference [WAS: UDP packets from Apache ? New... (Thread)
9. e-crime and computer evidence Call for Papers (Thread)
VII. VULN-DEV RESEARCH LIST SUMMARY
1. Norton AntiVirus Remote Denial Of Service Vulnerabil... (Thread)
2. DHCPing 0.90 (Thread)
3. Norton AntiVirus Remote Denial Of Service Vulnerabil... (Thread)
4. help:// protocol in Windows XP Prof (Thread)
5. Shell: (Thread)
6. status-bar SHATTER attack (Thread)
VIII. MICROSOFT FOCUS LIST SUMMARY
1. SecurityFocus Microsoft Newsletter #196 (Thread)
2. supressing IE (Thread)
3. Betr.: supressing IE (Thread)
IX. SUN FOCUS LIST SUMMARY
NO NEW POSTS FOR THE WEEK 2004-07-06 to 2004-07-13.
X. LINUX FOCUS LIST SUMMARY
1. Visited by a cracker (Thread)
2. Weird! (Thread)
3. Re[2]: Weird! (Thread)
4. Last login missing (Thread)
XI. UNSUBSCRIBE INSTRUCTIONS
XII. SPONSOR INFORMATION

I. FRONT AND CENTER
-------------------
1. Metasploit Framework (Part One)
By Pukhraj Singh and K.K. Mookhey

This article provides an elaborate insight into the Open Source exploit
framework, the Metasploit Framework, which is meant to change the future of
penetration testing once and for all. Part one of three.

http://www.securityfocus.com/infocus/1789

2. Service Pack Deux?
By Scott Granneman

Microsoft should make SP2 available to all users and backport the changes
to older operating systems, or they risk putting profits ahead of security
yet again.

http://www.securityfocus.com/columnists/254

II. BUGTRAQ SUMMARY
-------------------
1. Easy Chat Server Multiple Denial Of Service Vulnerabilities
BugTraq ID: 10649
Remote: Yes
Date Published: Jul 02 2004
Relevant URL: http://www.securityfocus.com/bid/10649
Summary:
It is reported that Easy Chat Server is susceptible to multiple denial of service vulnerabilities.

The chat software is implemented as a web server serving a chat web application to clients. The software is reported to contain two denial of service vulnerabilities. The application improperly sanitizes user supplied URI data, and cannot handle large numbers of anonymous users created in chat rooms.

An attacker with remote access to an affected instance of this application could use these vulnerabilities to crash the service, denying service to legitimate users.

2. Centre Online School Software Multiple Vulnerabilities
BugTraq ID: 10650
Remote: Yes
Date Published: Jul 03 2004
Relevant URL: http://www.securityfocus.com/bid/10650
Summary:
It is reported that Centre is vulnerable to multiple vulnerabilities.

The first vulnerability lies in the ability to create new accounts without being loggin in and authorized to do so. It is reported that other similar authorization problems exist in the software as well.

A second vulnerability is reported to allow an attacker to execute arbitrary PHP scripts in the context of the web application server. These scripts would have to exist on the local filesystem of the server.

Multiple undisclosed SQL injection vulnerabilities are reported as well.

These issues are all reported in version 1.0 of Centre.

Update: Please see the message reference from Adrew Schmadeke <[email protected]>. This BID may be retired, or significantly modified.

3. IBM Websphere Edge Server Denial Of Service Vulnerability
BugTraq ID: 10651
Remote: Yes
Date Published: Jul 02 2004
Relevant URL: http://www.securityfocus.com/bid/10651
Summary:
A denial of service vulnerability is reported in the Caching Proxy component bundled with the IBM Websphere Edge Server.

It is reported that if the proxy is configured with the JunctionRewrite directive in conjunction with the UseCookie option, an attacker may be able to crash the application.

A remote attacker reportedly is able to cause a denial of service condition with one request.

IBM has released a patch dealing with this issue. This patch is available only to customers with support levels 2 or 3.

4. Microsoft Internet Explorer Shell.Application Object Script ...
BugTraq ID: 10652
Remote: Yes
Date Published: Jul 03 2004
Relevant URL: http://www.securityfocus.com/bid/10652
Summary:
Microsoft Internet Explorer is reported prone to a security weakness that may permit malicious HTML documents the ability to execute script code. This script code has the ability to alter registry settings that may allow for further attacks. In conjunction with other vulnerabilities, execution of attacker-supplied binaries may also be possible.

In particular, it is reported possible to alter the registry to allow for previously patched vulnerabilities to be exploitable again.

Exploitation of this weakness typically requires other vulnerabilities to redirect the browser into the Local Zone (or other appropriate Security Zone). Other attack vectors also exist, such as enticing a user to download an HTML document to their system then opening it with the Web browser. HTML email may also provide an attack vector for this weakness (in combination with other vulnerabilities). Cross-site scripting and HTML injection vulnerabilities in Web applications may also provide a surreptitious attack vector in unsuspecting clients.

5. Enterasys XSR Security Router Record Route Denial Of Service...
BugTraq ID: 10653
Remote: Yes
Date Published: Jul 02 2004
Relevant URL: http://www.securityfocus.com/bid/10653
Summary:
Enterasys XSR Security Routers are reported prone to a denial of service vulnerability.

When these devices pass packets with the IP record route option, they will reportedly crash.

This vulnerability was found in the XSR-1800 series of routers with firmware version 7.0.0.0. Other device models and firmware versions may also be affected.

6. MySQL Authentication Bypass Vulnerability
BugTraq ID: 10654
Remote: Yes
Date Published: Jul 05 2004
Relevant URL: http://www.securityfocus.com/bid/10654
Summary:
MySQL is prone to a vulnerability that may permit remote clients to bypass authentication.

This is due to a logic error in the server when handling client-supplied length values for password strings.

Successful exploitation will yield unauthorized access to the database.

This issue is known to exist in MySQL 4.1 releases prior to 4.1.3 and MySQL 5.0.

7. MySQL Password Length Remote Buffer Overflow Vulnerability
BugTraq ID: 10655
Remote: Yes
Date Published: Jul 05 2004
Relevant URL: http://www.securityfocus.com/bid/10655
Summary:
MySQL is prone to a remotely exploitable stack-based buffer overflow vulnerability.

This issue exists in the password checking routines and may be triggered by a malicious authentication packet.

Exploitation will be complicated by the fact that the exploit string will be scrambled with a random number generator and may also require a valid password hash. However, if successfully exploited, the attacker may execute arbitrary code in the context of the server.

This issue is known to exist in MySQL 4.1 releases prior to 4.1.3 and MySQL 5.0.

8. Oracle Database 10g Installer Insecure Temporary File Creati...
BugTraq ID: 10656
Remote: No
Date Published: Jul 05 2004
Relevant URL: http://www.securityfocus.com/bid/10656
Summary:
Oracle Database 10g installer application is reported prone to an insecure temporary file creation vulnerability.

It is reported that this issue occurs because the installer application creates certain files in the '/tmp' directory with '777' privileges.

Exploitation of this issue can potentially allow a local user to overwrite files during the installation process.

Due to a lack of details, further information is not available at the moment. This BID will be updated as more information becomes available.

9. Symantec Brightmail Anti-spam Unauthorized Message Disclosur...
BugTraq ID: 10657
Remote: Yes
Date Published: Jul 05 2004
Relevant URL: http://www.securityfocus.com/bid/10657
Summary:
Symantec Brightmail anti-spam is reported prone to an unauthorized message disclosure vulnerability.

This issue exists in the Brightmail anti-spam control center. Due to improper access validation a remote attacker can read users' filtered email.

Symantec Brightmail anti-spam 6.0 is reported prone to this issue, however, other versions may be affected as well.

10. Fastream NetFile FTP/Web Server Directory Traversal Vulnerab...
BugTraq ID: 10658
Remote: Yes
Date Published: Jul 05 2004
Relevant URL: http://www.securityfocus.com/bid/10658
Summary:
The NetFile FTP/Web Server is reported prone to a directory traversal vulnerability due to insufficient sanitization of user-supplied data. This can allow an attacker to create, view, and delete arbitrary files outside the web root.

Fastream NetFILE FTP/Web Server versions 6.7.2.1085 and prior are reported prone to this issue.

11. 12Planet Chat Server Cross-Site Scripting Vulnerability
BugTraq ID: 10659
Remote: Yes
Date Published: Jul 05 2004
Relevant URL: http://www.securityfocus.com/bid/10659
Summary:
It is reported that 12Planet Chat Server is prone to a cross-site scripting vulnerability. This issue is due to a lack of sanitization of user-supplied data.

The problem presents itself when malicious HTML or script code is passed in a URI argument to one of the servlets in the application.

A remote attacker can exploit this issue by creating a malicious link to the vulnerable application that includes hostile HTML and script code. If this link were followed by an unsuspecting user, the hostile code may be rendered in the their web browser. This would occur in the security context of the web server and may allow for theft of cookie-based authentication credentials or other attacks.

Although version 2.9 of the software was reported vulnerable, other versions may also be affected.

12. Linux VServer Project ProcFS Weak Sharing Permissions Vulner...
BugTraq ID: 10660
Remote: No
Date Published: Jul 05 2004
Relevant URL: http://www.securityfocus.com/bid/10660
Summary:
It is reported that VServer may be used in order to disclose memory contents and to deny service to the host operating system and other virtual servers. The vulnerability exists due to weak sharing permissions on procfs mounted directories. It is reported that a user residing in a VServer may make changes to a procfs mounted directory any changes made will affect the host operating system and all VServers that exist.

An attacker may exploit this issue to disclose information or initiate a denial of service.

13. Multiple Vendor Internet Browser User Action Prediction/Inte...
BugTraq ID: 10661
Remote: Yes
Date Published: Jul 05 2004
Relevant URL: http://www.securityfocus.com/bid/10661
Summary:
Multiple vendor Internet Browsers are reported prone to a weakness where user actions may be used to commit unintentional actions. It is reported that if a malicious website can control or predict a user action, then a malicious site may popup a dialog and have the user unintentionally commit an action to that dialog.

The issue is reported to be exploitable through the XPInstall dialog feature of Mozilla and Mozilla Firefox. Other browsers are also vulnerable.

14. Linux Kernel chown() System Call Group Ownership Alteration ...
BugTraq ID: 10662
Remote: Yes
Date Published: Jul 05 2004
Relevant URL: http://www.securityfocus.com/bid/10662
Summary:
It is reported that the Linux kernel version 2.6 contains a flaw which allows users to improperly change the group ownership on arbitrary files that they do not own. For the Linux kernel 2.4.X this issue is only exploitable when the kernel NFS server is active, for the 2.6.X kernel this issue is always exploitable.

An attacker may reportedly be able to exploit this issue to gain superuser privileges.

This issue was reported in version 2.6.6, but other versions, including 2.4.X, are also likely vulnerable.

15. Unreal IRCD Cloak.C IP Address Disclosure Vulnerability
BugTraq ID: 10663
Remote: Yes
Date Published: Jul 05 2004
Relevant URL: http://www.securityfocus.com/bid/10663
Summary:
Unreal ircd is reported prone to a vulnerability that may allow a remote attacker to disclose a user's IP address when the IP cloaking feature is used to obfuscate the IP address. It is reported that due to a weakness in the algorithm used to cloak IP addresses in the 'cloak.c' file, an attacker can disclose a user's IP address.

Successful exploitation of this issue will reveal the IP address of a vulnerable user and the attacker can then carry out other attacks against the computer.

16. PureFTPd Accept_Client Remote Denial of Service Vulnerabilit...
BugTraq ID: 10664
Remote: Yes
Date Published: Jul 05 2004
Relevant URL: http://www.securityfocus.com/bid/10664
Summary:
PureFTPd is reported prone to a remote undisclosed denial of service vulnerability. The vulnerability is reported to exist due to a bug in the accept_client function used to setup new connections. It is reported that when the maximum number of connections is reached an attacker may be able to deny service to the affected daemon.

It is reported that all versions of cPanel are also affected by this issue because cPanel ships with PureFTPd 1.0.12.

17. Tri Dung Nguyen Free Perl Guestbook BBCode HTML Injection Vu...
BugTraq ID: 10665
Remote: Yes
Date Published: Jul 05 2004
Relevant URL: http://www.securityfocus.com/bid/10665
Summary:
Free Perl Guestbook is prone to an HTML injection vulnerability. This issue is exposed through the application's BBCode implementation.

Since this could permit an attacker to inject hostile HTML into a site, it is possible to steal cookie credentials or misrepresent site content.

Free Perl Guestbook 1.25 is reported prone to this issue, however, it is possible that other versions are affected as well.

18. BasiliX Webmail Email Header HTML Injection Vulnerability
BugTraq ID: 10666
Remote: Yes
Date Published: Jul 05 2004
Relevant URL: http://www.securityfocus.com/bid/10666
Summary:
BasiliX Webmail is reported to be prone to an email header HTML injection vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied email header strings.

An attacker can exploit this issue to gain access to an unsuspecting user's cookie based authentication credentials; disclosure of personal email is possible. Other attacks are also possible.

19. Open WebMail Email Header HTML Injection Vulnerability
BugTraq ID: 10667
Remote: Yes
Date Published: Jul 05 2004
Relevant URL: http://www.securityfocus.com/bid/10667
Summary:
Open WebMail is reported to be prone to an email header HTML injection vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied email header strings.

An attacker can exploit this issue to gain access to an unsuspecting user's cookie based authentication credentials; disclosure of personal email is possible. Other attacks are also possible.

OpenWebmail 2.32 and prior are prone to this issue.

20. IlohaMail Email Header HTML Injection Vulnerability
BugTraq ID: 10668
Remote: Yes
Date Published: Jul 05 2004
Relevant URL: http://www.securityfocus.com/bid/10668
Summary:
IlohaMail is reported to be prone to an email header HTML injection vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied email header strings.

An attacker can exploit this issue to gain access to an unsuspecting user's cookie based authentication credentials; disclosure of personal email is possible. Other attacks are also possible.

IlohaMail 0.8.12 and prior are prone to this issue.

21. Zoom Model 5560 X3 ETHERNET ADSL Modem Default Backdoor Acco...
BugTraq ID: 10669
Remote: Yes
Date Published: Jul 06 2004
Relevant URL: http://www.securityfocus.com/bid/10669
Summary:
The Zoom Model 5560 X3 ETHERNET ADSL Modem is reported to contain a default backdoor account.

A remote attacker can gain unauthorized access to the vulnerable appliance and then carry out other attacks against the users of the network.

22. JAWS Multiple Input Validation Vulnerabilities
BugTraq ID: 10670
Remote: Yes
Date Published: Jul 06 2004
Relevant URL: http://www.securityfocus.com/bid/10670
Summary:
JAWS is reported prone to multiple vulnerabilities. The issues result from insufficient sanitization of user-supplied data. The following specific issues can affect the application:

JAWS is prone to a cross-site scripting vulnerability.

This cross-site scripting issue can permit a remote attacker to create a malicious URI link that includes hostile HTML and script code. If a user follows the malicious link, the attacker-supplied code executes in the Web browser of the victim computer. This attack can allow for theft of cookie-based authentication credentials and other attacks.

JAWS is reported to be prone to a file disclosure vulnerability. The vulnerability presents itself because directory traversal sequences "../.." are not correctly sanitized from user-supplied data. It is reported that an attacker may disclose a target file by including a relative path including directory traversal sequences to the target file as a value for URI parameters passed to the a JAWS script.

An authentication bypass vulnerability is reported to affect the JAWS authentication system. It is reported that an authentication cookie is derived from a known value, a remote attacker may create a cookie and use this cookie to authenticate to the system.

23. Qualcomm Eudora MIME Attachment Spoofing Vulnerability
BugTraq ID: 10671
Remote: Yes
Date Published: Jul 06 2004
Relevant URL: http://www.securityfocus.com/bid/10671
Summary:
It is reported that Eudora is susceptible to a MIME attachment spoofing vulnerability.

A user of Eudora could potentially be tricked into unknowingly sending sensitive files as attachments to forwarded email containing malicious MIME attachments.

Eudora version 6.1.2 for Windows was reported by the vendor to be fixed, but Paul Szabo disclosed an untested proof-of-concept exploit to demonstrate that the vulnerability still reportedly exists.

24. Ethereal Multiple Unspecified iSNS, SMB and SNMP Protocol D...
BugTraq ID: 10672
Remote: Yes
Date Published: Jul 07 2004
Relevant URL: http://www.securityfocus.com/bid/10672
Summary:
Ethereal 0.10.5 has been released to address multiple vulnerabilities, including an iSNS protocol dissector vulnerability, a SMB protocol dissector vulnerability, and a SNMP protocol dissector vulnerability. These issues are due to a failure of the application to properly handle malformed packets.

Successful exploitation of these issues will allow an attacker to cause a denial of service condition in the affected application, it has also been reported that these issues may facilitate arbitrary code execution.

25. Mbedthis Software AppWeb HTTP Server Multiple Vulnerabilitie...
BugTraq ID: 10673
Remote: Yes
Date Published: Jul 07 2004
Relevant URL: http://www.securityfocus.com/bid/10673
Summary:
Mbedthis Software AppWeb HTTP Server is reported prone to multiple vulnerabilities that may allow a remote attacker to disclose sensitive information and gain unauthorized access to potentially sensitive resources.

Mbedthis Software AppWeb HTTP Server versions 1.1.2 and prior are affected by these vulnerabilities.

26. Comersus Open Technologies Comersus Cart Multiple Vulnerabil...
BugTraq ID: 10674
Remote: Yes
Date Published: Jul 07 2004
Relevant URL: http://www.securityfocus.com/bid/10674
Summary:
Comersus Cart is reported prone to multiple vulnerabilities. These issues may allow a remote attacker to carry out cross-site scripting attacks and manipulate parameters to change the price of an order.

Comersus Cart version 5.09 is affected by these issues, however, other versions may be prone to these vulnerabilities as well.

27. DiamondCS Process Guard Service Description Table Restoratio...
BugTraq ID: 10675
Remote: No
Date Published: Jul 07 2004
Relevant URL: http://www.securityfocus.com/bid/10675
Summary:
A vulnerability is reported to affect Process Guard that could permit an executable that is run by an administrator to disable Process Guard protection. It is reported that it is possible to restore the Service Description Table (SDT) to its original state. This can be accomplished because direct writes to certain devices are not controlled by the Process Guard driver-blocking feature. A malicious application that is run by an administrator can read an intact SDT table from kernel memory and restore the SDT table in the running kernel by writing to kernel memory space.

28. NPDS BB HTML Injection Vulnerability
BugTraq ID: 10676
Remote: Yes
Date Published: Jul 07 2004
Relevant URL: http://www.securityfocus.com/bid/10676
Summary:
A vulnerability is reported in NPDS BB that may allow a remote attacker to execute HTML and script code in a user's browser.

The problem exists due to insufficient sanitization of user-supplied input. It may be possible for an attacker to include malicious HTML code in a vulnerable text field. The injected code would be interpreted by the browser of a user visiting the vulnerable site when the malicious HTML code is viewed.

29. Microsoft Windows Program Group Converter Filename Local Buf...
BugTraq ID: 10677
Remote: Yes
Date Published: Jul 07 2004
Relevant URL: http://www.securityfocus.com/bid/10677
Summary:
Microsoft Windows Program Group Converter (grpconv.exe) is reported prone to a buffer overrun vulnerability. The issue is reported to exist due to a lack of sufficient validation performed on filename data.

An attacker may craft a malicious file and present it to a victim in order to exploit this vulnerability. Additionally, it is demonstrated that this vulnerability may also be exploited using a series of seperate vulnerabilities in Internet Explorer in order to exploit this vulnerability when a malicious website is viewed.

It is reported that exploitation may be hindered because parameter data is stored in Unicode format.

30. Opera Web Browser IFrame OnLoad Address Bar URL Obfuscation ...
BugTraq ID: 10679
Remote: Yes
Date Published: Jul 08 2004
Relevant URL: http://www.securityfocus.com/bid/10679
Summary:
Opera Web Browser is prone to a security weakness that may permit malicious web pages to spoof address bar information.

It is currently not known if this issue is related to the Opera Web Browser Address Bar Spoofing Weakness reported in BID 10337. As more information becomes available this BID will be updated.

This issue may be used to spoof information in the address bar, facilitating phishing attacks against unsuspecting users.

This issue is reported to affect Opera Web Browser version 7.52, it is likely that other versions are affected as well.

31. Nokia 3560 Handset Text Message Remote Denial of Service Vul...
BugTraq ID: 10680
Remote: Yes
Date Published: Jul 08 2004
Relevant URL: http://www.securityfocus.com/bid/10680
Summary:
Nokia 3560 handset is reported prone to a remote denial of service vulnerability. This issue occurs when the handset receives and processes a specially crafted text message from a remote source. Furthermore, it is reported that this message does not emit a 'new message' signal in the phone and is not stored on the phone. Users are required to disconnect the battery and reboot the phone to retain normal functionality.

This issue is reported to affect Nokia 3560 handset, however, it is possible that other Nokia phones are vulnerable as well.

A similar issue was reported in Nokia 6210 Handset. More information is available from BID 6952 (Nokia 6210 vCard Denial of Service Vulnerability). It is not currently known whether this issue is related to BID 6952.

Due to a lack of information, further details cannot be provided at the moment. This BID will be updated as more information becomes available.

32. Mozilla External Protocol Handler Weakness
BugTraq ID: 10681
Remote: Yes
Date Published: Jul 08 2004
Relevant URL: http://www.securityfocus.com/bid/10681
Summary:
Mozilla Internet Browser is reported prone to a weakness that may permit an external protocol to be called without any user interaction. This may expose Mozilla users to vulnerabilities that exist in the underlying operating system or in the software that is the default handler for a registered protocol.

Vulnerabilities in the applications that are invoked by a protocol, and vulnerabilities in the way a called protocol is handled by the host operating system may be exploited using this weakness in the Mozilla browser.

33. Microsoft Word/Outlook Object Tag Security Setting Compromis...
BugTraq ID: 10683
Remote: Yes
Date Published: Jul 08 2004
Relevant URL: http://www.securityfocus.com/bid/10683
Summary:
Microsoft Outlook when configured to employ Microsoft Word as an email editor, is reported prone to a security setting compromise vulnerability. It is reported that under certain circumstances, when an HTML email is received and said email message contains an OBJECT tag that is not closed, the URI that the OBJECT tag points to will be rendered in the Microsoft Outlook window when the email message is forwarded.

34. SSLTelnetd Remote Syslog Format String Vulnerability
BugTraq ID: 10684
Remote: Yes
Date Published: Jul 09 2004
Relevant URL: http://www.securityfocus.com/bid/10684
Summary:
Reportedly SSLTelnetd, which is available as a FreeBSD port, is affected by a remote format string vulnerability. This issue is due to an improper implementation of the 'syslog()' formatted string function.

As a result of this issue, malicious log entries containing format specifiers will be interpreted literally when logs are written; this may result in attacker-specified memory being corrupted or disclosed, leading to arbitrary code execution.

35. Sun Java Virtual Machine Font.createFont Method Insecure Tem...
BugTraq ID: 10685
Remote: Yes
Date Published: Jul 09 2004
Relevant URL: http://www.securityfocus.com/bid/10685
Summary:
Sun Java Virtual Machine is a component of the Sun Java infrastructure that performs the handling of Java applets and other programs. It is available for Unix, Linux, and Microsoft platforms.

Sun Java Virtual Machine is prone to an insecure temporary file creation weakness. It is reported that this file is created by the 'Font.createFont' method with the following name:

+~JFxxxxx.tmp

where xxxxx is a random number.

This issue can be combined with various other vulnerabilities in Internet Explorer to ultimately allow for code execution on a vulnerable computer.

36. Symantec Norton Antivirus Denial Of Service Vulnerability
BugTraq ID: 10686
Remote: Yes
Date Published: Jul 09 2004
Relevant URL: http://www.securityfocus.com/bid/10686
Summary:
It is reported that Symantec Norton AntiVirus is prone to a denial of service vulnerability. The issue is reported to present itself if the vulnerable software scans a compressed archive that contains a malicious executable contained in over 49647 directories. When an archive of this type is scanned, the affected software will reportedly consume system resources. This may impact performance, ultimately denying service to legitimate users.

37. Linux Kernel Floating Point Register Contents Leak Vulnerabi...
BugTraq ID: 10687
Remote: No
Date Published: Jul 09 2004
Relevant URL: http://www.securityfocus.com/bid/10687
Summary:
The Linux kernel is reported prone to a data disclosure vulnerability.

It is reported that this issue may permit a malicious executable to disclose the contents of Floating Point registers that belong to another process.

It is reported that this vulnerability will only affect ia64 systems.

III. SECURITYFOCUS NEWS ARTICLES
--------------------------------
1. VoIP hacks gut Caller I.D.
By: Kevin Poulsen

Implementation quirks in Voice over IP are making it easy for hackers to spoof Caller I.D., and to unmask blocked numbers.

http://www.securityfocus.com/news/9061

2. Gates Defends Microsoft Patch Efforts
By: Patrick Gray

Microsoft chairman downplays the role that unpatched vulnerabilities played in last week's Russian hack attacks.
http://www.securityfocus.com/news/9004

3. Wi-fi hopper guilty of cyber-extortion
By: Kevin Poulsen

FBI agents initially traced threats to a suburban dentist's office, and other spots with unsecured wireless networks.

http://www.securityfocus.com/news/8991

4. Senate Bill Targets Phishers
By: David McGuire, Washington Post

Internet scam artists who use fake Web sites to dupe people into revealing sensitive financial information could face up to five years in jail and forced to pay $250,000 in fines under a bill introduced late last week in the Senate.

http://www.securityfocus.com/news/9091

5. Mozilla bug rears its head
By: John Leyden, The Register

A popular browser for Windows is subject to a security hole that creates a means for hackers to run malicious code on vulnerable machines. But this time, the vulnerability involves Mozilla and Firefox browsers - not Internet Explorer.

http://www.securityfocus.com/news/9085

6. 'Together we can defeat spam in two years'
By: John Leyden, The Register

Delegates at an International Telecommunication Union (ITU) spam conference this week have called for standardised, stronger worldwide anti-spam legislation. They aim control the 'modern day epidemic' of spam within two years.

http://www.securityfocus.com/news/9069

IV. SECURITYFOCUS TOP 6 TOOLS
-----------------------------
1. mod_auth_nufw 1.0.1
By: Vincent Deffontaines
Relevant URL: http://freshmeat.net/redir/modauthnufw/51307/url_homepage/article.php3
Platforms:
Summary:

mod_auth_nufw is a Single Sign On Apache module which performs secure user identification and authentication, based on the Nufw firewalling suite. Nufw marks all connections of a network with a unique UserID. This module takes advantage of that mark and uses it to transparently identify and authenticate users requiring access to an Apache server.

2. Ettercap v0.7.0 pre2
By: ALoR <[email protected]>
Relevant URL: http://ettercap.sourceforge.net/
Platforms: FreeBSD, Linux, MacOS, NetBSD, Windows 2000, Windows NT, Windows XP
Summary:

Ettercap is a network sniffer/interceptor/logger for ethernet LANs. It supports active and passive dissection of many protocols (even ciphered ones, like SSH and HTTPS). Data injection in an established connection and filtering on the fly is also possible, keeping the connection synchronized. Many sniffing modes were implemented to give you a powerful and complete sniffing suite. Plugins are supported. It has the ability to check whether you are in a switched LAN or not, and to use OS fingerprints (active or passive) to let you know the geometry of the LAN.

3. Free CPM Cellular Passwords Manager 1.0
By:
Relevant URL: http://www.mycell.org/megaas/security/V2demos2.asp
Platforms: Java
Summary:

Enter our downloads page to find the free Cellular Passwords Manager.A J2ME program that will manage all your sites/accounts passwords and IDs.The program is PIN protected, simple Menu driven.

This program is part of the CAT Cellular Authentication token. The CAT manages the OTPs and Fixed IDs/Passwords accounts.

4. DumpSIS.pl 0.81
By: Jimmy Shah
Relevant URL: http://www.geocities.com/jfldars/DumpSIS.zip
Platforms: Perl (any system supporting perl)
Summary:

Symbian SIS file dumping utility that allows for analysis of potential malware without actual installation of files.

It has been field tested by various Antivirus researchers, who used it to help analyze the the recent Symbian Carib Worm.

5. CifsPwScanner 1.0.3
By: Patrik Karlsson
Relevant URL: http://www.cqure.net/tools/cifspwscan-bin-1_0_3.tar.gz
Platforms: Java
Summary:

A CIFS/SMB password scanner based on the jcifs implementation. The scanner and jcifs are both 100% pure java, making it possible to run the scanner on a few different platforms.

6. Wasabi 0.2
By: Andrea Barisani
Relevant URL: http://www.gentoo.org/proj/en/infrastructure/wasabi
Platforms: Perl (any system supporting perl)
Summary:

Wasabi is a log monitoring program, designed to watch a log file for lines matching user defined regular expression and report on the matches. The regular expressions are assigned to queues which have an alert interval and a list of mail recipients.

Queues can be set to send a notification as soon as there is a log line assigned to it, or to send periodic reports.

Additionally, uninteresting fields in the log lines (such as PID numbers) can be masked with the standard regular ex

V. SECURITYJOBS LIST SUMMARY
----------------------------
1. [SJ-JOB] Security Researcher, San Francisco, US (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/368696

2. [SJ-JOB] Security Product Manager, San Francisco, US (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/368688

3. [SJ-JOB] VP of Marketing, Oshkosh, US (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/368682

4. [SJ-JOB] Auditor, Orange County, Seattle, US (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/368613

5. [SJ-RESUME] Sr. Security Engineer (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/368606

6. [SJ-RESUME] Developer (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/368605

7. [SJ-RESUME] Director, Information Security (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/368604

8. [SJ-JOB] Security System Administrator, Vienna, US (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/368602

9. [SJ-RESUME] Security Consultant (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/368585

10. [SJ-JOB] Security Consultant, Arcadia, US (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/368584

11. [SJ-RESUME] Jr. Security Analyst (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/368583

12. [SJ-JOB] Security Architect, South Florida, US (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/368581

13. [SJ-JOB] Security Consultant, Foster City, US (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/368580

14. [SJ-JOB] Sales Engineer, Ann Arbor, US (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/368579

15. [SJ-JOB] Security Engineer, Johnstown, US (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/368578

16. [SJ-JOB] Account Manager, Ann Arbor, US (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/368577

17. [SJ-JOB] Security Consultant, Washington DC, US (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/368561

18. [SJ-JOB] Security Engineer, Suburbs, US (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/368559

19. [SJ-JOB] Quality Assurance, Arlington, US (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/368558

20. [SJ-RESUME] Account Manager (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/368554

21. [SJ-JOB] Technical Writer, Fort Mead, US (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/368545

22. [SJ-RESUME] VP of Regional Sales (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/368536

23. [SJ-RESUME] Security Engineer (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/368531

24. [SJ-JOB] Sales Engineer, London, GB (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/368526

25. [SJ-RESUME] Sr. Security Analyst (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/368517

26. [SJ-RESUME] Forensics Engineer (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/368515

27. [SJ-JOB] Director, Computer Security, Bay Area, US (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/368514

28. [SJ-JOB] Sales Engineer, Alexandria Area, US (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/368478

29. [SJ-JOB] Account Manager, Chicago, US (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/368453

30. [SJ-JOB] Account Manager, New York City, US (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/368452

31. [SJ-JOB] Security Auditor, Redmond, US (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/368450

32. [SJ-JOB] Information Assurance Analyst, Washington D... (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/368445

33. [SJ-RESUME] Security System Administrator (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/368443

34. [SJ-JOB] Quality Assurance, Santa Clara, US (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/368440

35. [SJ-JOB] Manager, Information Security, San Francisc... (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/368438

36. [SJ-JOB] Security Engineer, All Iowa, US (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/368436

37. [SJ-RESUME] Manager, Information Security (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/368431

38. [SJ-RESUME] Security Researcher (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/368414

39. [SJ-JOB] Security System Administrator, DC, US (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/368411

40. [SJ-JOB] Application Security Engineer, San Francisc... (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/368409

41. [SJ-RESUME] CISO (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/368408

42. [SJ-JOB] Account Manager, Miami, US (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/368407

43. [SJ-JOB] Account Manager, Atlanta, US (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/368404

44. [SJ-JOB] Sr. Security Engineer, Dulles, US (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/368391

45. [SJ-JOB] Security Engineer, Dulles, US (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/368390

46. [SJ-RESUME] Security Auditor (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/368384

47. [SJ-JOB] Security Architect, Seattle, US (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/368376

48. [SJ-RESUME] Security Architect (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/368373

49. Bugs, fine tuning and patience. (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/368332

50. Resume, (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/368320

51. Security Engineer, Yardley, US (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/368319

52. Developer, San Francisco Bay Area, US (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/368316

53. Resume, Security System Administrator (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/368315

54. Resume, Jr. Security Analyst (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/368313

55. Sales Engineer, Northeastern US, US (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/368312

56. Sales Engineer, San Francisco Bay Area, US (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/368311

57. Security Product Manager, San Mateo, US (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/368310

58. Information Assurance Analyst, Lornton, US (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/368308

59. VP of Regional Sales, San Francisco, US (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/368307

60. Resume, Security Engineer (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/368306

61. Resume, Security Consultant (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/368305

62. Resume, Customer Support (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/368304

63. Resume, Sr. Security Analyst (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/368303

64. Security Engineer, Saint Louis, US (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/368301

65. Resume, Manager, Information Security (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/368299

66. Resume, Compliance Officer (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/368298

67. Resume, Sr. Security Engineer (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/368296

68. Resume, Director, Information Security (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/368294

69. , , (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/368293

70. Security Auditor, Fort Lauderdale, US (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/368291

71. VP of Marketing, Sherman Oaks, US (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/368289

72. Account Manager, North Bergen, US (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/368285

73. Resume, Sales Engineer (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/368284

74. Resume, Quality Assurance (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/368283

75. Developer, Fort Lauderdale, US (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/368280

VI. INCIDENTS LIST SUMMARY
--------------------------
1. Workstations trying to GET /download/IEService215.ch... (Thread)
Relevant URL:

http://www.securityfocus.com/archive/75/368687

2. Interesting webserver intrusion (apache 1.3.31, mod_... (Thread)
Relevant URL:

http://www.securityfocus.com/archive/75/368632

3. Workstations trying to GET /download/IEService215.ch... (Thread)
Relevant URL:

http://www.securityfocus.com/archive/75/368623

4. Workstations trying to GET /download/IEService215.ch... (Thread)
Relevant URL:

http://www.securityfocus.com/archive/75/368622

5. Workstations trying to GET /download/IEService215.ch... (Thread)
Relevant URL:

http://www.securityfocus.com/archive/75/368620

6. Interesting webserver intrusion (apache 1.3.31, mod_... (Thread)
Relevant URL:

http://www.securityfocus.com/archive/75/368619

7. UDP packets from Apache ? New DDOS ? (Thread)
Relevant URL:

http://www.securityfocus.com/archive/75/368505

8. TCP/IP reference [WAS: UDP packets from Apache ? New... (Thread)
Relevant URL:

http://www.securityfocus.com/archive/75/368504

9. e-crime and computer evidence Call for Papers (Thread)
Relevant URL:

http://www.securityfocus.com/archive/75/368110

VII. VULN-DEV RESEARCH LIST SUMMARY
-----------------------------------
1. Norton AntiVirus Remote Denial Of Service Vulnerabil... (Thread)
Relevant URL:

http://www.securityfocus.com/archive/82/368680

2. DHCPing 0.90 (Thread)
Relevant URL:

http://www.securityfocus.com/archive/82/368662

3. Norton AntiVirus Remote Denial Of Service Vulnerabil... (Thread)
Relevant URL:

http://www.securityfocus.com/archive/82/368629

4. help:// protocol in Windows XP Prof (Thread)
Relevant URL:

http://www.securityfocus.com/archive/82/368627

5. Shell: (Thread)
Relevant URL:

http://www.securityfocus.com/archive/82/368564

6. status-bar SHATTER attack (Thread)
Relevant URL:

http://www.securityfocus.com/archive/82/368336

VIII. MICROSOFT FOCUS LIST SUMMARY
----------------------------------
1. SecurityFocus Microsoft Newsletter #196 (Thread)
Relevant URL:

http://www.securityfocus.com/archive/88/368178

2. supressing IE (Thread)
Relevant URL:

http://www.securityfocus.com/archive/88/368133

3. Betr.: supressing IE (Thread)
Relevant URL:

http://www.securityfocus.com/archive/88/368103

IX. SUN FOCUS LIST SUMMARY
--------------------------
NO NEW POSTS FOR THE WEEK 2004-07-06 to 2004-07-13.

X. LINUX FOCUS LIST SUMMARY
---------------------------
1. Visited by a cracker (Thread)
Relevant URL:

http://www.securityfocus.com/archive/91/368736

2. Weird! (Thread)
Relevant URL:

http://www.securityfocus.com/archive/91/368598

3. Re[2]: Weird! (Thread)
Relevant URL:

http://www.securityfocus.com/archive/91/368597

4. Last login missing (Thread)
Relevant URL:

http://www.securityfocus.com/archive/91/368070

XI. UNSUBSCRIBE INSTRUCTIONS
----------------------------
To unsubscribe send an e-mail message to [email protected] from the subscribed address. The contents of the subject or message body do not matter. You will receive a confirmation request message to which you will have to answer. Alternatively you can also visit http://www.securityfocus.com/newsletters and unsubscribe via the website.

If your email address has changed email [email protected] and ask to be manually removed.

XII. SPONSOR INFORMATION
-----------------------

This issue sponsored by: FaceTime

View the webinar now!
http://www.securityfocus.com/sponsor/FaceTime_sf-news_040713

------------------------------------------------------------------------