SecurityFocus Newsletter #258

Peter Laborge <[email protected]> 20 Jul 2004 19:14:29 -0000

Newsgroups	gmane.comp.security.news.general
Message-ID	<[email protected]>

SecurityFocus Newsletter #258
------------------------------

This Issue is Sponsored By: SecurityFocus

Want to keep up on the latest security vulnerabilities? Don't have time to
visit a myriad of mailing lists and websites to read the news? Just add the
new SecurityFocus RSS feeds to your freeware RSS reader, and see all the
latest posts for Bugtraq and the SF Vulnernability database in one
convenient place. Or, pull in the latest news, columnists and feature
articles in the SecurityFocus aggregated news feed, and stay on top of
what's happening in the community!

http://www.securityfocus.com/rss/index.shtml

------------------------------------------------------------------------
I. FRONT AND CENTER
1. Metasploit Framework (Part 2 of 3)
2. Packet Crafting for Firewall & IDS Audits (Part 2 of 2)
3. The Pied Piper Syndrome
II. BUGTRAQ SUMMARY
1. Microsoft JVM Cross-Domain Applet Unauthorized Communication...
2. Microsoft Internet Explorer JavaScript Method Assignment Cro...
3. Microsoft Internet Explorer Popup.show Mouse Event Hijacking...
4. Microsoft Outlook Express Message Window Script Execution Vu...
5. Microsoft Windows 2000 Media Player Control Media Preview Sc...
6. Microsoft Internet Explorer JavaScript Null Pointer Exceptio...
7. Code-Crafters Ability Mail Server Multiple Vulnerabilities
8. Adobe Acrobat/Reader File Name Handler Buffer Overflow Vulne...
9. Moodle CMS Unspecified Vulnerability
10. Multiple Mozilla Bugzilla Vulnerabilities
11. wvWare Library Field.c WVHANDLEDATETIMEPICTURE Function Remo...
12. Valve Software Half-Life Engine Remote Denial of Service Vul...
13. Opti3 EasyDisk Portable USB Hard Drive Unauthorized Access V...
14. Mozilla Personal Security Manager Certificate Handling Denia...
15. IBM Lotus Notes Multiple Unspecified Vulnerabilities
16. Microsoft Windows HTML Help Heap Overflow Vulnerability
17. Microsoft IIS 4 Redirect Remote Buffer Overflow Vulnerabilit...
18. Microsoft Windows Utility Manager Local Privilege Escalation...
19. Microsoft Windows Task Scheduler Remote Buffer Overflow Vuln...
20. Mozilla Browser Cache File Multiple Vulnerabilities
21. Microsoft Windows POSIX Subsystem Buffer Overflow Local Priv...
22. Microsoft Outlook Express Malformed Email Header Denial Of S...
23. 4D WebStar Symbolic Link Vulnerability
24. IM-Switch Insecure Temporary File Handling Symbolic Link Vul...
25. Moodle Help Script Cross Site Scripting Vulnerability
26. INweb Mail Server Remote Denial Of Service Vulnerability
27. 4D WebStar Remote FTP Buffer Overflow Vulnerability
28. 4D WebStar Multiple Remote Information Disclosure Vulnerabil...
29. PHPBB Multiple Unspecified SQL Injection Vulnerabilities
30. Aterm Terminal Permission Weakness
31. PHP Strip_Tags() Function Bypass Vulnerability
32. PHP memory_limit Remote Code Execution Vulnerability
33. Microsoft Systems Management Server Remote Denial Of Service...
34. Novell BorderManager Remote Denial Of Service Vulnerability
35. Gattaca Server 2003 Multiple Denial Of Service Vulnerabiliti...
36. Gattaca Server 2003 Multiple Path Disclosure Vulnerabilities
37. Linux Kernel Equalizer Load Balancer Device Driver Local Den...
38. Gattaca Server 2003 Cross-Site Scripting Vulnerability
39. AnomicHTTPProxy Directory Traversal Vulnerability
40. AnomicHTTPProxy Administrative Interface Authentication Bypa...
41. BoardPower Forum ICQ.CGI Cross-Site Scripting Vulnerability
42. AnomicHTTPProxy Administrative Interface Denial Of Service V...
43. Apache Mod_SSL Log Function Format String Vulnerability
44. PHPBB Multiple Cross-Site Scripting Vulnerabilities
45. Multiple PHPNuke SQL Injection And Cross-Site Scripting Vuln...
III. SECURITYFOCUS NEWS ARTICLES
1. Companies adapt to a zero day world
2. VoIP hacks gut Caller I.D.
3. Gates Defends Microsoft Patch Efforts
4. Filipino phone phreakers foiled
5. Hacker charged with US gov attack
6. Oxford Uni hacks-to-hackers land in hot water
IV. SECURITYFOCUS TOP 6 TOOLS
1. CryptoHeaven v2.4.1
2. Hardening TCP/IP 1.0
3. Xintegrity 1.4
4. Anti-Cracker Shield 1.10
5. cenfw 0.2 beta
6. tenshi 0.3
V. SECURITYJOBS LIST SUMMARY
1. [SJ-JOB] Jr. Security Analyst, New York, US (Thread)
2. [SJ-JOB] Auditor, Arcadia, US (Thread)
3. [SJ-JOB] Auditor, Atlanta, US (Thread)
4. [SJ-JOB] Security Architect, Chicago, US (Thread)
5. [SJ-JOB] Account Manager, Minneapolis, US (Thread)
6. [SJ-JOB] Sr. Security Analyst, Alexandria, US (Thread)
7. [SJ-JOB] Security Engineer, McLean, US (Thread)
8. [SJ-JOB] Jr. Security Analyst, St.Louis, US (Thread)
9. [SJ-JOB] Security Researcher, Carlsbad, US (Thread)
10. [SJ-JOB] Security Consultant, Riyadh, SA (Thread)
11. [SJ-JOB] Security Engineer, Hanover, US (Thread)
12. [SJ-RESUME] Security Consultant (Thread)
13. [SJ-RESUME] Security Engineer (Thread)
14. [SJ-RESUME] Security Researcher (Thread)
15. [SJ-JOB] Security Consultant, Franklin/Nashville, US (Thread)
16. [SJ-JOB] Developer, Springfield, US (Thread)
17. [SJ-JOB] Sr. Security Analyst, Redwood City, US (Thread)
18. [SJ-JOB] Auditor, San Jose, US (Thread)
19. [SJ-JOB] Security Engineer, Redwood City, US (Thread)
20. [SJ-RESUME] Manager, Information Security (Thread)
21. [SJ-RESUME] Security System Administrator (Thread)
22. [SJ-JOB] Security Architect, American Forks, US (Thread)
23. [SJ-RESUME] Auditor (Thread)
24. [SJ-JOB] Sales Engineer, Reston, US (Thread)
25. [SJ-JOB] Application Security Engineer, Schaumburg, ... (Thread)
26. [SJ-JOB] Developer, San Francisco, US (Thread)
27. [SJ-RESUME] Evangelist (Thread)
28. [SJ-JOB] Information Assurance Engineer, Anaheim, US (Thread)
29. [SJ-RESUME] Security Architect (Thread)
30. [SJ-JOB] Quality Assurance, Redwood City, US (Thread)
31. [SJ-JOB] Security Architect, Bay area, US (Thread)
32. [SJ-JOB] Forensics Engineer, Sacramento, US (Thread)
33. [SJ-JOB] Security Consultant, Cambridge, US (Thread)
34. [SJ-JOB] Security Consultant, Houston, US (Thread)
35. [SJ-JOB] Application Security Engineer, Chicago, US (Thread)
36. [SJ-JOB] CHECK Team Leader, Edinburgh, GB (Thread)
37. [SJ-JOB] Sr. Security Engineer, Bala Cynwyd, US (Thread)
38. [SJ-JOB] Sales Engineer, New York, US (Thread)
39. [SJ-JOB] Jr. Security Analyst, Jersey City, US (Thread)
40. [SJ-JOB] Security Consultant, London, GB (Thread)
41. [SJ-JOB] Sr. Product Manager, American Forks, US (Thread)
42. [SJ-JOB] Sales Engineer, Washington D.C. Metro Area,... (Thread)
43. [SJ-JOB] Security Consultant, Herndon, US (Thread)
44. [SJ-JOB] Security Engineer, New York, US (Thread)
45. [SJ-JOB] Security Engineer, Jersey City, US (Thread)
46. [SJ-JOB] Security Architect, Baltimore, US (Thread)
47. [SJ-JOB] Security Architect, Boston, US (Thread)
48. [SJ-JOB] Sr. Security Engineer, New York, US (Thread)
49. [SJ-JOB] Sales Engineer, Chicago, US (Thread)
50. [SJ-JOB] Technical Writer, Palo Alto, US (Thread)
51. [SJ-JOB] Management, Newport News, US (Thread)
52. [SJ-JOB] Sales Engineer, San Jose, US (Thread)
53. [SJ-JOB] Auditor, Houston, US (Thread)
54. [SJ-RESUME] Customer Support (Thread)
55. [SJ-JOB] Customer Support, San Francisco, US (Thread)
56. [SJ-RESUME] Sr. Security Engineer (Thread)
57. [SJ-JOB] Security Engineer, San Francisco, US (Thread)
58. [SJ-JOB] Security Consultant, Louisville, US (Thread)
59. [SJ-RESUME] Security Product Manager (Thread)
60. [SJ-RESUME] Sales Engineer (Thread)
61. [SJ-JOB] Sales Engineer, Singapore, SG (Thread)
62. [SJ-JOB] Account Manager, London, GB (Thread)
63. [SJ-JOB] Account Manager, Singapore, SG (Thread)
64. [SJ-JOB] Auditor, Plano, US (Thread)
65. [SJ-JOB] Sales Engineer, London, GB (Thread)
66. [SJ-JOB] Developer, Omaha, US (Thread)
VI. INCIDENTS LIST SUMMARY
1. More Webserver / IE Exploits (Thread)
2. Strange log in Apache after webdav-like exploit (Thread)
3. spyware and iframe trojans == dead threads (Thread)
4. IE default Page (Thread)
5. Malware(?) inserting porn links into registration/pr... (Thread)
6. Backdoor-CGT (Thread)
7. Interesting webserver intrusion (apache 1.3.31, mod_... (Thread)
8. Interesting webserver intrusion (apache 1.3.31,mod_s... (Thread)
9. Interesting webserver intrusion (apache 1.3.31, mod_... (Thread)
VII. VULN-DEV RESEARCH LIST SUMMARY
1. Norton Anti Virus Script Blocker bypass using script... (Thread)
2. Norton Anti Virus Script Blocker bypass using script... (Thread)
3. Microsoft Window Utility Manager Local Elevation of ... (Thread)
4. FW: Windows XP Prof and shdoclc.dll - zone-pass and ... (Thread)
5. Unchecked buffer in mstask.dll (Thread)
6. HtmlHelp - .CHM File Heap Overflow (Thread)
7. IE Shell URI Download and Execute, POC (Thread)
8. Windows XP Prof and shdoclc.dll - zone-pass and site... (Thread)
9. phrack #62 has been released (Thread)
10. White Paper: 0x00 vs ASP file upload scripts (Thread)
VIII. MICROSOFT FOCUS LIST SUMMARY
1. Windows Update v5 and XPSP2RC2 (Thread)
2. Browser Vulns (Thread)
3. Microsoft Audit Collection System (Thread)
4. Article Announcement: The Pied Piper Syndrome (Thread)
5. security M$ exchange2003 imap4 (Thread)
6. Tool to view effective AD settings (Thread)
7. MS to dump NT 4.0 Wkstn. Patches (Thread)
8. [security] Tool to view effective AD settings (Thread)
9. SecurityFocus Microsoft Newsletter #197 (Thread)
IX. SUN FOCUS LIST SUMMARY
NO NEW POSTS FOR THE WEEK 2004-07-13 to 2004-07-20.
X. LINUX FOCUS LIST SUMMARY
1. Access control for a NFS server (Thread)
2. Certifying a RedHat Install (Thread)
3. Visited by a cracker (Thread)
4. Administrivia (Thread)
5. Fwd: Certifying a RedHat Install (Thread)
6. Weird! (Thread)
XI. UNSUBSCRIBE INSTRUCTIONS
XII. SPONSOR INFORMATION

I. FRONT AND CENTER
-------------------
1. Metasploit Framework (Part 2 of 3)
By Pukhraj Singh and K.K. Mookhey

This article provides an elaborate insight into the Open Source exploit
framework, the Metasploit Framework, which is meant to change the future of
penetration testing once and for all. Part two of three.

http://www.securityfocus.com/infocus/1790

2. Packet Crafting for Firewall & IDS Audits (Part 2 of 2)
By Don Parker

This article is the second of a two-part series that will discuss various
methods to test the integrity of your firewall and IDS using low-level
TCP/IP packet crafting tools and techniques.

http://www.securityfocus.com/infocus/1791

3. The Pied Piper Syndrome
By Tim Mullen

Making electronic voting terminals more like slot machines won't keep
elections secure from tampering.

http://www.securityfocus.com/columnists/255

II. BUGTRAQ SUMMARY
-------------------
1. Microsoft JVM Cross-Domain Applet Unauthorized Communication...
BugTraq ID: 10688
Remote: Yes
Date Published: Jul 10 2004
Relevant URL: http://www.securityfocus.com/bid/10688
Summary:
It has been reported that applets running in the Microsoft JVM share a common data structure that can be both written to and read from by any applet, regardless of domain association. This is in violation of the above security policy.

2. Microsoft Internet Explorer JavaScript Method Assignment Cro...
BugTraq ID: 10689
Remote: Yes
Date Published: Jul 12 2004
Relevant URL: http://www.securityfocus.com/bid/10689
Summary:
A vulnerability exists in Microsoft Internet Explorer that may allow cross-domain scripting.

It is reported that the vulnerability presents itself due to a failure to properly validate trust relationships between method calls that are made in separate Internet Explorer windows. This may make it possible for script code to access properties of a foreign domain.

This issue may also potentially be exploited to cross Security Zone boundaries, though this has not been confirmed.

3. Microsoft Internet Explorer Popup.show Mouse Event Hijacking...
BugTraq ID: 10690
Remote: Yes
Date Published: Jul 12 2004
Relevant URL: http://www.securityfocus.com/bid/10690
Summary:
A vulnerability exists in Microsoft Internet Explorer that may permit a malicious Web page to hijack mouse events. This could potentially be exploited to trick an unsuspecting user into performing unintended actions such as approving pop-up dialogs.

The method caching variant of this attack is also reported to work.

This is similar to the vulnerability described in BID 9108.

4. Microsoft Outlook Express Message Window Script Execution Vu...
BugTraq ID: 10692
Remote: Yes
Date Published: Jul 12 2004
Relevant URL: http://www.securityfocus.com/bid/10692
Summary:
Microsoft Outlook Express is reported prone to a vulnerability that may allow unauthorized execution of script code.

It is reported that Outlook Express filters user-supplied input such as script code in the in the 'window.document' object, however, fails to filter script code in any other components of the window object. This may aid in attacks that occur through HTML email.

Microsoft Outlook Express version 6.0 is currently known to be vulnerable to this issue, however, it is possible that other versions are affected as well.

5. Microsoft Windows 2000 Media Player Control Media Preview Sc...
BugTraq ID: 10693
Remote: Yes
Date Published: Jul 12 2004
Relevant URL: http://www.securityfocus.com/bid/10693
Summary:
Microsoft Windows 2000 is reported prone to a script code execution vulnerability. Specifically, this issue arises when a user previews media in Windows Explorer.

It is reported that malicious script code can be executed in the local zone when files in a specially crafted play list are previewed. This can be exploited by specifying the 'javascript:' protocol for one or more of the files.

This issue can be leveraged to carry out various attacks.

6. Microsoft Internet Explorer JavaScript Null Pointer Exceptio...
BugTraq ID: 10694
Remote: Yes
Date Published: Jul 12 2004
Relevant URL: http://www.securityfocus.com/bid/10694
Summary:
A denial of service vulnerability is reported to affect Internet Explorer. The issue is reported to present itself when Internet Explorer attempts to render JavaScript that contains an invalid for statement.

A remote attacker may exploit this vulnerability to cause the running instance of Internet Explorer to crash.

This vulnerability is reported to affect Internet Explorer version 6.0 (SP1), other versions might also be affected.

7. Code-Crafters Ability Mail Server Multiple Vulnerabilities
BugTraq ID: 10695
Remote: Yes
Date Published: Jul 12 2004
Relevant URL: http://www.securityfocus.com/bid/10695
Summary:
Ability Mail Server is reported prone to multiple vulnerabilities that may allow a remote attacker to carry out cross-site scripting and denial of service attacks.

The server is prone to a cross-site scripting vulnerability that may allow an attacker to execute arbitrary HTML and script code in the browser of a vulnerable user.

It is reported that the mail server is also prone to a denial of service vulnerability. This issue presents itself when an attacker establishes about 150-200 connections to various services such as SMTP, POP3, View FeaturesIMAP4, WebMail etc.

These issue are reported to affect Ability Mail Server version 1.18, however, other versions may be affected as well.

8. Adobe Acrobat/Reader File Name Handler Buffer Overflow Vulne...
BugTraq ID: 10696
Remote: Yes
Date Published: Jul 12 2004
Relevant URL: http://www.securityfocus.com/bid/10696
Summary:
Adobe Acrobat and Reader are prone to a stack-based buffer overflow vulnerability.

This issue exists in routines that parse document filenames. A malformed file name may trigger this condition when the file is opened.

If a user could be enticed to open an appropriately named document, this could potentially allow for remote code execution.

This issue appears to affect Adobe Acrobat and Reader 6.x releases on Microsoft Windows platforms.

9. Moodle CMS Unspecified Vulnerability
BugTraq ID: 10697
Remote: Yes
Date Published: Jul 09 2004
Relevant URL: http://www.securityfocus.com/bid/10697
Summary:
The vendor has reported an unspecified vulnerability in Moodle. It is reported that this issue arises when Moodle servers on PHP versions 4.3 and prior are used with Front page. The consequences of this vulnerability and further details were not provided. This BID will be updated as more information becomes available.

Moodle versions 1.3.1 and prior are affected by this issue.

10. Multiple Mozilla Bugzilla Vulnerabilities
BugTraq ID: 10698
Remote: Yes
Date Published: Jul 12 2004
Relevant URL: http://www.securityfocus.com/bid/10698
Summary:
Multiple vulnerabilities are reported to exist in the Bugzilla software. The issues include cross-site scripting, SQL injection, privilege escalation, and information disclosure.

An information disclosure vulnerability is reported to affect Bugzilla installations under certain circumstances. It is reported that when the SQL server is halted, and the HTTP server continues to run, a remote attacker may disclosure the database password.

An attacker, may employ the harvested password information to authenticate to the SQL database.

A privilege escalation vulnerability is reported to affect Bugzilla.

A privileged attacker may exploit this vulnerability to gain membership to other Bugzilla groups.

An additional information disclosure vulnerability is reported to affect Bugzilla. It is reported that hidden products may be revealed using vulnerable CGI scripts.

An attacker may employ the vulnerable scripts in order to disclose product listings that are marked as confidential.

Bugzilla is reported prone to multiple cross-site scripting vulnerabilities. These issues exist due to a lack of sanitization performed on user supplied URI data before this data is incorporated into dynamically generated error messages.

These cross-site scripting issues could permit a remote attacker to create a malicious URI link that includes hostile HTML and script code. If a user follows the malicious link, the attacker-supplied code executes in the web browser of the victim computer.

An additional information disclosure vulnerability is reported to affect Bugzilla. It is reported that a Bugzilla user's password may be embedded as a part of an image URI, the password may be saved into and be visible in web server or web proxy logs.

An attacker who has access to the web server logs may harvest credentials.

Finally, Bugzilla is reported prone to an SQL injection vulnerability. The issue is due to a failure of the application to properly sanitize user-supplied input.

As a result of this issue a privileged attacker could modify the logic and structure of database queries.

11. wvWare Library Field.c WVHANDLEDATETIMEPICTURE Function Remo...
BugTraq ID: 10699
Remote: Yes
Date Published: Jul 09 2004
Relevant URL: http://www.securityfocus.com/bid/10699
Summary:
wvWare is reported prone to a remote buffer overflow vulnerability that may allow attackers to execute arbitrary code on a vulnerable system in order to gain unauthorized access.

Successful exploit of this issue can allow a remote attacker to execute arbitrary code in the context of a vulnerable application.

This issue affects wvWare 0.7.4. Versions 0.7.5, 0.7.6 and 1.0.0 are also affected by a variant of this issue.

12. Valve Software Half-Life Engine Remote Denial of Service Vul...
BugTraq ID: 10700
Remote: Yes
Date Published: Jul 12 2004
Relevant URL: http://www.securityfocus.com/bid/10700
Summary:
Half-Life is reported prone to a remote denial of service vulnerability. This issue presents itself when the application receives a malformed TCP packet.

All versions of Half-Life released before July 7, 2004 are reported to be vulnerable to this issue.

13. Opti3 EasyDisk Portable USB Hard Drive Unauthorized Access V...
BugTraq ID: 10702
Remote: No
Date Published: Jul 12 2004
Relevant URL: http://www.securityfocus.com/bid/10702
Summary:
EasyDisk is reported prone to an unauthorized access vulnerability. It is reported that a local user can gain access to password protected files without supplying a valid 'Passid'.

14. Mozilla Personal Security Manager Certificate Handling Denia...
BugTraq ID: 10703
Remote: Yes
Date Published: Jul 12 2004
Relevant URL: http://www.securityfocus.com/bid/10703
Summary:
Mozilla Internet Browser Personal Security Manager (PSM) is reported prone to a vulnerability that may permit a remote malicious attacker to silently import an invalid certificate into the Mozilla Personal Security Manager certificate store.

An attacker may exploit this vulnerability to corrupt the Mozilla PSM certificate store and as a result deny HTTPS service.

15. IBM Lotus Notes Multiple Unspecified Vulnerabilities
BugTraq ID: 10704
Remote: Yes
Date Published: Jul 13 2004
Relevant URL: http://www.securityfocus.com/bid/10704
Summary:
It has been reported that IBM Lotus Notes is affected by three unspecified vulnerabilities. The cause of the vulnerabilities is currently unknown.

It is currently unknown what the affects and impacts of these issues are. This BID will be updated when more information becomes available.

16. Microsoft Windows HTML Help Heap Overflow Vulnerability
BugTraq ID: 10705
Remote: Yes
Date Published: Jul 13 2004
Relevant URL: http://www.securityfocus.com/bid/10705
Summary:
The Microsoft Windows HTML Help facility is prone to a remotely exploitable heap overflow vulnerability. This vulnerability could be exploited from a malicious Web page or through HTML email to execute arbitrary code with the privileges of the currently logged in user.

17. Microsoft IIS 4 Redirect Remote Buffer Overflow Vulnerabilit...
BugTraq ID: 10706
Remote: Yes
Date Published: Jul 13 2004
Relevant URL: http://www.securityfocus.com/bid/10706
Summary:
Microsoft IIS 4.0 is reported prone to a buffer overflow vulnerability when handling redirects.

It is reported that an attacker may exploit this vulnerability by issuing a large request to an affected IIS Web server. An attacker may exploit this issue to execute arbitrary code in the context of IIS. This could lead to complete compromise of an affected computer.

18. Microsoft Windows Utility Manager Local Privilege Escalation...
BugTraq ID: 10707
Remote: No
Date Published: Jul 13 2004
Relevant URL: http://www.securityfocus.com/bid/10707
Summary:
Microsoft Utility Manager is prone to a local privilege escalation vulnerability. It is reported that a local user may influence the Utility Manager into executing an attacker-supplied application with elevated privileges. The cause of this issue is that the Utility Manager will attempt to load context sensitive help without dropping privileges.

A local attacker may exploit this vulnerability to gain SYSTEM level privileges on the computer.

This vulnerability is similar to the issue reported in BID 10124. The vendor fixes for BID 10124 addressed the issue by removing access to context sensitive help from the Utility Manager GUI. However, the functionality to access context sensitive help is still present in the Utility Manager application itself.

19. Microsoft Windows Task Scheduler Remote Buffer Overflow Vuln...
BugTraq ID: 10708
Remote: Yes
Date Published: Jul 13 2004
Relevant URL: http://www.securityfocus.com/bid/10708
Summary:
Microsoft Task Scheduler is reported prone to a remote stack-based buffer overflow vulnerability. The source of the vulnerability is that data in '.job' files is copied into an internal buffer without sufficient bounds checking.

It is reported that a remote attacker may exploit this vulnerability through Internet Explorer or Windows Explorer when the '.job' file is opened or a directory containing the file is rendered. The file could also be hosted on a share. Other attack vectors may also exist.

It should be noted that while this issue does not affect Windows NT 4.0 SP6a, it may affect this platform if Internet Explorer 6 SP1 is installed.

20. Mozilla Browser Cache File Multiple Vulnerabilities
BugTraq ID: 10709
Remote: Yes
Date Published: Jul 13 2004
Relevant URL: http://www.securityfocus.com/bid/10709
Summary:
Mozilla Browser is reported prone to multiple vulnerabilities that could eventually allow for code execution on the local computer.

These vulnerabilities do not represent a significant threat on their own, however, code execution in the context of the user is possible if the two issues are combined.

By combining these issues, an attacker can eventually execute arbitrary HTML or script code in the local zone. The attacker would likely exploit these issues by crafting a malicious Web site containing HTML and script code and entice a user to visit the site. If a user visits the site, the malicious page will be cached in a known directory with a known file name. The attacker may then craft a link to this cached local file and entice a user to follow this link. Due to a flaw in Mozilla that allows cached files to be opened in the local zone as HTML documents the attack may lead to arbitrary code execution in the local zone.

It should be noted that this issue is reported to exist in all versions of Mozilla and Firefox browsers, however, Symantec was not able to reproduce this on Firefox 0.9.2. Furthermore, the directory names may vary with different platforms.

Update: New reports have stated that the Mozilla Browser is not vulnerable to the first issue as it uses random names for cache directories. This issue does however affect Firefox. It is also reported that an attacker does not have to use a file extension for the second vulnerability as long as a NULL byte is placed after the file name. Arbitrary extensions may be applied as well.

21. Microsoft Windows POSIX Subsystem Buffer Overflow Local Priv...
BugTraq ID: 10710
Remote: No
Date Published: Jul 13 2004
Relevant URL: http://www.securityfocus.com/bid/10710
Summary:
The Microsoft POSIX subsystem implementation is prone to a local buffer overflow vulnerability.

A local attacker may exploit this vulnerability in order to run code with elevated privileges, fully compromising the vulnerable computer.

22. Microsoft Outlook Express Malformed Email Header Denial Of S...
BugTraq ID: 10711
Remote: Yes
Date Published: Jul 13 2004
Relevant URL: http://www.securityfocus.com/bid/10711
Summary:
Microsoft Outlook Express is prone to a security vulnerability when processing emails with malformed header data. A remote attacker may potentially exploit this issue to cause a persistent denial of service in the email client.

This issue is only reported to affect Outlook Express 6.0 on Windows XP platforms.

23. 4D WebStar Symbolic Link Vulnerability
BugTraq ID: 10714
Remote: No
Date Published: Jul 13 2004
Relevant URL: http://www.securityfocus.com/bid/10714
Summary:
4D WebStar is reportedly vulnerable to a symbolic link vulnerability. This issue is due to a design error that causes the application to open files without properly verifying their existence or their absolute location.

Successful exploitation of this issue will allow an attacker to write to arbitrary files writable by the affected application, facilitating privilege escalation.

24. IM-Switch Insecure Temporary File Handling Symbolic Link Vul...
BugTraq ID: 10717
Remote: No
Date Published: Jul 13 2004
Relevant URL: http://www.securityfocus.com/bid/10717
Summary:
It is reported that im-switch is prone to a local insecure temporary file handling symbolic link vulnerability. This issue is due to a design error that allows the application to insecurely write to a temporary file that is created with a predictable file name.

The im-switch utility will write to this temporary file before verifying its existence; this would facilitate a symbolic link attack.

An attacker may exploit this issue to corrupt arbitrary files. This corruption may potentially result in the elevation of privileges, or in a system wide denial of service.

25. Moodle Help Script Cross Site Scripting Vulnerability
BugTraq ID: 10718
Remote: Yes
Date Published: Jul 13 2004
Relevant URL: http://www.securityfocus.com/bid/10718
Summary:
It is reported that Moodle is susceptible to a cross-site scripting vulnerability in the 'help.php' script. This issue is due to a failure of the application to properly sanitize user-supplied input prior to including it in dynamic web content.

This issue may allow for theft of cookie-based authentication credentials. Other attacks are also possible.

26. INweb Mail Server Remote Denial Of Service Vulnerability
BugTraq ID: 10719
Remote: Yes
Date Published: Jul 13 2004
Relevant URL: http://www.securityfocus.com/bid/10719
Summary:
It is reported that INweb Mail Server contains a denial of service vulnerability in its connection handling code.

A remote attacker is able to crash the application, denying service to legitimate users.

Version 2.40 is reported vulnerable to this issue. Other versions may also be vulnerable.

27. 4D WebStar Remote FTP Buffer Overflow Vulnerability
BugTraq ID: 10720
Remote: Yes
Date Published: Jul 13 2004
Relevant URL: http://www.securityfocus.com/bid/10720
Summary:
It is reported that 4D WebStar is affected by a remote, pre-authentication FTP buffer overflow vulnerability. This issue is due to a failure of the application to properly verify buffer boundaries when storing user supplied input into internal, static buffers.

Successful exploitation will allow attackers to execute arbitrary code in the context of the affected application; the application typically runs as the user 'webstar' in group 'wheel'. This issue may also trigger a denial of service condition in the affected service.

28. 4D WebStar Multiple Remote Information Disclosure Vulnerabil...
BugTraq ID: 10721
Remote: Yes
Date Published: Jul 13 2004
Relevant URL: http://www.securityfocus.com/bid/10721
Summary:
4D WebStar is reportedly affected by multiple information disclosure vulnerabilities. These issues are due to a failure of the application to properly validate user-supplied requests.

Successful exploitation of the first issue will allow an attacker to list arbitrary directories on the affected computer. This might facilitate further attacks against the affected computer.

Successful exploitation of the second issue will allow an attacker to gain access to the 'php.ini' file on the affected computer. This file contains sensitive PHP configuration details and may be used to carry out further attacks against the affected computer.

29. PHPBB Multiple Unspecified SQL Injection Vulnerabilities
BugTraq ID: 10722
Remote: Yes
Date Published: Jul 13 2004
Relevant URL: http://www.securityfocus.com/bid/10722
Summary:
It is reported that phpBB contains multiple unspecified SQL injection vulnerabilities.

One vulnerability is reported to exist in 'admin_board.php'. The other pertains to improper characters in the session id variable.

These issues are due to a failure of the application to properly sanitize user-supplied URI parameters before using them to construct SQL queries to be issued to the underlying database.

Version 2.0.9 has been released addressing these, and other issues. This BID will be updated when further information is known.

30. Aterm Terminal Permission Weakness
BugTraq ID: 10723
Remote: No
Date Published: Jul 13 2004
Relevant URL: http://www.securityfocus.com/bid/10723
Summary:
It is reported that aterm incorrectly sets the permission on the users terminal device.

This flaw may allow an attacker with local interactive access to sent arbitrary data to aterm. An attacker may use this ability to exploit vulnerabilities in aterm, such as BID 6949 (ATerm Menu Bar Escape Sequence Command Execution Vulnerability).

31. PHP Strip_Tags() Function Bypass Vulnerability
BugTraq ID: 10724
Remote: Yes
Date Published: Jul 14 2004
Relevant URL: http://www.securityfocus.com/bid/10724
Summary:
It is reported that it is possible to bypass PHPs strip_tags() function.

It is reported that under certain circumstances, PHPs strip_tags() function will improperly leave malformed tags in place.

This vulnerability may mean that previously presumed-safe web applications could contain multiple cross-site scripting and HTML injection vulnerabilities when viewed by Microsoft Internet Explorer or Apple Safari web browsers.

It is reported that 'magic_quotes_gpc' must be off for PHP to be vulnerable to this issue.

32. PHP memory_limit Remote Code Execution Vulnerability
BugTraq ID: 10725
Remote: Yes
Date Published: Jul 14 2004
Relevant URL: http://www.securityfocus.com/bid/10725
Summary:
Reportedly PHP modules compiled with memory_limit support are affected by a remote code execution vulnerability. This issue is due to a failure of the PHP module to properly handle memory_limit request termination.

This issue is reportedly exploitable by exploiting the Apache ap_escape_html Memory Allocation Denial Of Service Vulnerability (BID 10619); an attacker can cause premature termination during critical code execution. It should be noted that although the above-mentioned Apache vulnerability is the only known attack vector, there might be other attack vectors that are currently unknown.

An attacker can exploit this issue to execute arbitrary code on an affected computer within the context of the vulnerable application, facilitating unauthorized access.

33. Microsoft Systems Management Server Remote Denial Of Service...
BugTraq ID: 10726
Remote: Yes
Date Published: Jul 14 2004
Relevant URL: http://www.securityfocus.com/bid/10726
Summary:
Reportedly Microsoft Systems Management Server is vulnerable to a remote denial of service vulnerability. This issue is due to a failure of the affected server to handle exceptional conditions.

Successful exploitation of this issue will allow an attacker to trigger a denial of service condition in the affected server. Code execution might be possible but is unlikely and unconfirmed.

34. Novell BorderManager Remote Denial Of Service Vulnerability
BugTraq ID: 10727
Remote: Yes
Date Published: Jul 15 2004
Relevant URL: http://www.securityfocus.com/bid/10727
Summary:
It has been reported that Novell BorderManager is affected by a remote denial of service vulnerability. This issue is due to a failure of the application to properly handle exceptional network input.

This issue will allow an attacker to cause the affected client computer hang, denying service to legitimate users. It has been reported that the computer must be restarted to return to a usable state.

35. Gattaca Server 2003 Multiple Denial Of Service Vulnerabiliti...
BugTraq ID: 10728
Remote: Yes
Date Published: Jul 15 2004
Relevant URL: http://www.securityfocus.com/bid/10728
Summary:
It is reported that Gattaca Server 2003 contains multiple denial of service vulnerabilities.

These vulnerabilities allow a remote attacker to crash the application, denying service to legitimate users.

Version 1.1.10.0 is reported vulnerable. Prior versions may also contain these vulnerabilities as well.

36. Gattaca Server 2003 Multiple Path Disclosure Vulnerabilities
BugTraq ID: 10729
Remote: Yes
Date Published: Jul 15 2004
Relevant URL: http://www.securityfocus.com/bid/10729
Summary:
It is reported that Gattaca Server 2003 contains multiple path disclosure vulnerabilities.

By sending HTTP requests to Gattaca's web server, it is reportedly possible to cause the application to return error pages that contain the full installation path of the application and the web document root path.

These vulnerabilities could be used by an attacker to aid them in further attacks against the server.

Version 1.1.10.0 is reported vulnerable. Prior versions may also contain these vulnerabilities as well.

37. Linux Kernel Equalizer Load Balancer Device Driver Local Den...
BugTraq ID: 10730
Remote: No
Date Published: Jul 15 2004
Relevant URL: http://www.securityfocus.com/bid/10730
Summary:
The Linux kernel is reported to be prone to a local denial of service vulnerability. The issue is reported to exist in the 'eql.c' source file.

An unprivileged local attacker may exploit this issue by crafting a program that calls the vulnerable functions on a slave device name that does not exist.

This vulnerability is reported to exist in version 2.6.7 of the Linux kernel. It is likely that other versions are also affected.

38. Gattaca Server 2003 Cross-Site Scripting Vulnerability
BugTraq ID: 10731
Remote: Yes
Date Published: Jul 15 2004
Relevant URL: http://www.securityfocus.com/bid/10731
Summary:
Gattaca Server 2003 is reported prone to a cross-site scripting vulnerability. This issue presents itself due to insufficient sanitization of user-supplied data.

A remote attacker can exploit this issue by creating a malicious link to the vulnerable application that includes hostile HTML and script code. If a user follows this link, the hostile code renders in the web browser of the victim user. This would occur in the security context of the web server and may allow for theft of cookie-based authentication credentials or other attacks.

Cattaca Server 2003 version 1.1.10.0 is reported prone to this issue. Other versions may also be vulnerable.

39. AnomicHTTPProxy Directory Traversal Vulnerability
BugTraq ID: 10732
Remote: Yes
Date Published: Jul 15 2004
Relevant URL: http://www.securityfocus.com/bid/10732
Summary:
It is reported that AnomicHTTPProxy is prone to a directory traversal vulnerability.

This issue would allow an attacker to view arbitrary files on the affected computer that the UID of AnomicHTTPProxy is running as. This may aid an attacker in conducting further attacks against the vulnerable computer.

Version 0.21_build20040627 is reported vulnerable. Prior versions may also be affected.

40. AnomicHTTPProxy Administrative Interface Authentication Bypa...
BugTraq ID: 10733
Remote: Yes
Date Published: Jul 15 2004
Relevant URL: http://www.securityfocus.com/bid/10733
Summary:
It is reported that AnomicHTTPProxy is prone to an administrative interface authentication bypass vulnerability.

An attacker can exploit this issue to gain full administrative access to AnomicHTTPProxy.

Version 0.21_build20040627 is reported vulnerable. Prior versions may also be affected.

41. BoardPower Forum ICQ.CGI Cross-Site Scripting Vulnerability
BugTraq ID: 10734
Remote: Yes
Date Published: Jul 15 2004
Relevant URL: http://www.securityfocus.com/bid/10734
Summary:
BoardPower Forum is reportedly affected by a cross-site scripting vulnerability in the icq.cgi script. This issue is due to a failure of the application to properly sanitize user-supplied URI input.

A remote attacker can exploit this issue by creating a malicious link to the vulnerable application that includes hostile HTML and script code. If this link were followed, the hostile code may be rendered in the web browser of the victim user. This would occur in the security context of the web server and may allow for theft of cookie-based authentication credentials or other attacks.

42. AnomicHTTPProxy Administrative Interface Denial Of Service V...
BugTraq ID: 10735
Remote: Yes
Date Published: Jul 15 2004
Relevant URL: http://www.securityfocus.com/bid/10735
Summary:
It is reported that AnomicHTTPProxy is prone to an administrative interface denial of service vulnerability.

In certain circumstances, the web-based administrative interface can reportedly be blocked. This denies service to the administrator of the application.

Version 0.21_build20040627 is reported vulnerable. Prior versions may also be affected.

43. Apache Mod_SSL Log Function Format String Vulnerability
BugTraq ID: 10736
Remote: Yes
Date Published: Jul 16 2004
Relevant URL: http://www.securityfocus.com/bid/10736
Summary:
Reportedly mod_ssl is affected by a format string vulnerability within its logging function. This issue is due to a failure of the application to properly implement a formatted string function.

Successful exploitation of this issue will most likely allow an attacker to gain control of the execution flow of the affected process and execute arbitrary code on the affect computer. It should be noted that although this quite likely, it has not been verified.

44. PHPBB Multiple Cross-Site Scripting Vulnerabilities
BugTraq ID: 10738
Remote: Yes
Date Published: Jul 16 2004
Relevant URL: http://www.securityfocus.com/bid/10738
Summary:
It is reported that phpBB is affected by multiple cross-site scripting vulnerabilities. These issues are due to a failure of the application to properly sanitize user-supplied URI input.

The problems present themselves in the 'index.php' and 'faq.php' scripts.

These issues could permit a remote attacker to create a malicious URI link that includes hostile HTML and script code. If this link were followed, the hostile code may be rendered in the web browser of the victim user.

45. Multiple PHPNuke SQL Injection And Cross-Site Scripting Vuln...
BugTraq ID: 10741
Remote: Yes
Date Published: Jul 16 2004
Relevant URL: http://www.securityfocus.com/bid/10741
Summary:
It is reported that PHPNuke is susceptible to a cross-site scripting vulnerability and an SQL injection vulnerability.

Both of these vulnerabilities are due to improper sanitization of user-supplied data.

Attackers may supply malicious parameters to manipulate the structure and logic of SQL queries. This may result in unauthorized operations being performed on the underlying database. This issue may be exploited to cause sensitive information to be disclosed to a remote attacker.

The cross-site scripting vulnerability is reported to exist in the same script. As a result of this deficiency, it is possible for a remote attacker to create a malicious link containing script code that will be executed in the browser of a legitimate user.

This may allow for theft of cookie-based authentication credentials and other attacks.

These vulnerabilities were reported in version 7.3 of PHPNuke. Other versions may also be affected.

III. SECURITYFOCUS NEWS ARTICLES
--------------------------------
1. Companies adapt to a zero day world
By: Deborah Radcliff

Financial institutions with critical systems and cash on the line are reorganizing to deal with the closing gap between the hole and the patch.
http://www.securityfocus.com/news/9100

2. VoIP hacks gut Caller I.D.
By: Kevin Poulsen

Implementation quirks in Voice over IP are making it easy for hackers to spoof Caller I.D., and to unmask blocked numbers.

http://www.securityfocus.com/news/9061

3. Gates Defends Microsoft Patch Efforts
By: Patrick Gray

Microsoft chairman downplays the role that unpatched vulnerabilities played in last week's Russian hack attacks.
http://www.securityfocus.com/news/9004

4. Filipino phone phreakers foiled
By: John Leyden, The Register

A gang of eight suspected of ripping off the Philippines' main phone company and its customers of millions over the last six years have been arrested by local authorities.

http://www.securityfocus.com/news/9159

5. Hacker charged with US gov attack
By: John Oates, The Register

A US man has been charged with hacking into government computers, including Department of Defense machines.
http://www.securityfocus.com/news/9150

6. Oxford Uni hacks-to-hackers land in hot water
By: John Leyden, The Register

Two Oxford University student hacks who turned hackers to expose IT security shortcomings at the University face possible suspension for their efforts.

http://www.securityfocus.com/news/9130

IV. SECURITYFOCUS TOP 6 TOOLS
-----------------------------
1. CryptoHeaven v2.4.1
By: Marcin Kurzawa <[email protected]>
Relevant URL: http://www.cryptoheaven.com/
Platforms: UNIX, Windows 2000, Windows 95/98, Windows NT, Windows XP
Summary:

CryptoHeaven offers secure email and online file sharing/storage. Its main features are secure and highly encrypted services such as group collaboration, file sharing, email, online storage, and instant messaging. It integrates multi-user based security into email, instant messaging, and file storage and sharing in one unique package. It provides real time communication for text and data transfers in a multi-user secure environment. The security and usability of CryptoHeaven is well-balanced; even the no-so-technically oriented computer users can enjoy this crypto product with very high level of encryption.

2. Hardening TCP/IP 1.0
By: D'Amato Luigi
Relevant URL: http://www.securitywireless.info/download/hardtcp.exe
Platforms: Windows 2000, Windows XP
Summary:

Hardening stack TCP/IP tool for Windows. It is designed for all versions of Windows XP, and all version of Windows 2000. The tool supplies a simple GUI for Hardening Stack Tcp/ip os Windows againg many Dos attack.

3. Xintegrity 1.4
By: Global Data Integrity
Relevant URL: http://www.xintegrity.com
Platforms: Windows 2000, Windows 95/98, Windows XP
Summary:

Xintegrity makes it virtually impossible for anybody or anything to modify your files without being detected. When Xintegrity detects a modified file it will show exactly how and when the file was modified and display the contents of the modified file in comparison with an optionally backed up copy of the file. All your files [including operating system files] can be protected. Xintegrity can automatically create protected backup files [optionally encrypted with 256 bit]

4. Anti-Cracker Shield 1.10
By: SoftSphere
Relevant URL: http://www.softsphere.com/cgi-bin/redirect.pl?Name=ACSHIELD
Platforms: Windows 2000, Windows NT, Windows XP
Summary:

Protect your computer from Internet worms and hackers' attacks, which become possible due to the operational system and software vulnerabilities ("exploits"). Neither antiviruses, nor firewalls can protect from exploits.
Only Anti-Cracker Shield, a multilevel security system is able to cope with all known and unknown versions of "exploits". It is possible and is necessary to protect from hackers!

5. cenfw 0.2 beta
By: Peter Robinson
Relevant URL: http://www.securegateway.org
Platforms: Linux, Windows 2000, Windows 95/98, Windows CE, Windows NT, Windows XP
Summary:

The Centron IPTables Firewall Gui is an object oriented, database driven, windows interface to linux IPtables firewall rules.

6. tenshi 0.3
By: Andrea Barisani
Relevant URL: http://www.gentoo.org/proj/en/infrastructure/tenshi
Platforms: Perl (any system supporting perl)
Summary:

tenshi is a log monitoring program, designed to watch a log file for lines matching user defined regular expressions and report on the matches. The regular expressions are assigned to queues which have an alert interval and a list of mail recipients.

Queues can be set to send a notification as soon as there is a log line assigned to it, or to send periodic reports.

This tool was formerly known as wasabi, named was changed due to trademark infringement issues.

V. SECURITYJOBS LIST SUMMARY
----------------------------
1. [SJ-JOB] Jr. Security Analyst, New York, US (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/369328

2. [SJ-JOB] Auditor, Arcadia, US (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/369318

3. [SJ-JOB] Auditor, Atlanta, US (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/369311

4. [SJ-JOB] Security Architect, Chicago, US (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/369292

5. [SJ-JOB] Account Manager, Minneapolis, US (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/369287

6. [SJ-JOB] Sr. Security Analyst, Alexandria, US (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/369267

7. [SJ-JOB] Security Engineer, McLean, US (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/369262

8. [SJ-JOB] Jr. Security Analyst, St.Louis, US (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/369258

9. [SJ-JOB] Security Researcher, Carlsbad, US (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/369257

10. [SJ-JOB] Security Consultant, Riyadh, SA (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/369250

11. [SJ-JOB] Security Engineer, Hanover, US (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/369249

12. [SJ-RESUME] Security Consultant (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/369155

13. [SJ-RESUME] Security Engineer (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/369106

14. [SJ-RESUME] Security Researcher (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/369101

15. [SJ-JOB] Security Consultant, Franklin/Nashville, US (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/369100

16. [SJ-JOB] Developer, Springfield, US (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/369069

17. [SJ-JOB] Sr. Security Analyst, Redwood City, US (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/369068

18. [SJ-JOB] Auditor, San Jose, US (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/369062

19. [SJ-JOB] Security Engineer, Redwood City, US (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/369035

20. [SJ-RESUME] Manager, Information Security (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/369025

21. [SJ-RESUME] Security System Administrator (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/369018

22. [SJ-JOB] Security Architect, American Forks, US (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/369013

23. [SJ-RESUME] Auditor (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/369012

24. [SJ-JOB] Sales Engineer, Reston, US (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/369006

25. [SJ-JOB] Application Security Engineer, Schaumburg, ... (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/369005

26. [SJ-JOB] Developer, San Francisco, US (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/369003

27. [SJ-RESUME] Evangelist (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/369002

28. [SJ-JOB] Information Assurance Engineer, Anaheim, US (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/369001

29. [SJ-RESUME] Security Architect (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/369000

30. [SJ-JOB] Quality Assurance, Redwood City, US (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/368999

31. [SJ-JOB] Security Architect, Bay area, US (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/368998

32. [SJ-JOB] Forensics Engineer, Sacramento, US (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/368992

33. [SJ-JOB] Security Consultant, Cambridge, US (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/368982

34. [SJ-JOB] Security Consultant, Houston, US (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/368980

35. [SJ-JOB] Application Security Engineer, Chicago, US (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/368976

36. [SJ-JOB] CHECK Team Leader, Edinburgh, GB (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/368969

37. [SJ-JOB] Sr. Security Engineer, Bala Cynwyd, US (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/368958

38. [SJ-JOB] Sales Engineer, New York, US (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/368945

39. [SJ-JOB] Jr. Security Analyst, Jersey City, US (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/368943

40. [SJ-JOB] Security Consultant, London, GB (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/368935

41. [SJ-JOB] Sr. Product Manager, American Forks, US (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/368934

42. [SJ-JOB] Sales Engineer, Washington D.C. Metro Area,... (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/368933

43. [SJ-JOB] Security Consultant, Herndon, US (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/368931

44. [SJ-JOB] Security Engineer, New York, US (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/368895

45. [SJ-JOB] Security Engineer, Jersey City, US (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/368891

46. [SJ-JOB] Security Architect, Baltimore, US (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/368889

47. [SJ-JOB] Security Architect, Boston, US (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/368888

48. [SJ-JOB] Sr. Security Engineer, New York, US (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/368886

49. [SJ-JOB] Sales Engineer, Chicago, US (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/368885

50. [SJ-JOB] Technical Writer, Palo Alto, US (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/368884

51. [SJ-JOB] Management, Newport News, US (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/368879

52. [SJ-JOB] Sales Engineer, San Jose, US (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/368832

53. [SJ-JOB] Auditor, Houston, US (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/368808

54. [SJ-RESUME] Customer Support (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/368806

55. [SJ-JOB] Customer Support, San Francisco, US (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/368802

56. [SJ-RESUME] Sr. Security Engineer (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/368800

57. [SJ-JOB] Security Engineer, San Francisco, US (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/368798

58. [SJ-JOB] Security Consultant, Louisville, US (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/368797

59. [SJ-RESUME] Security Product Manager (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/368790

60. [SJ-RESUME] Sales Engineer (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/368788

61. [SJ-JOB] Sales Engineer, Singapore, SG (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/368715

62. [SJ-JOB] Account Manager, London, GB (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/368714

63. [SJ-JOB] Account Manager, Singapore, SG (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/368713

64. [SJ-JOB] Auditor, Plano, US (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/368712

65. [SJ-JOB] Sales Engineer, London, GB (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/368711

66. [SJ-JOB] Developer, Omaha, US (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/368710

VI. INCIDENTS LIST SUMMARY
--------------------------
1. More Webserver / IE Exploits (Thread)
Relevant URL:

http://www.securityfocus.com/archive/75/369378

2. Strange log in Apache after webdav-like exploit (Thread)
Relevant URL:

http://www.securityfocus.com/archive/75/369229

3. spyware and iframe trojans == dead threads (Thread)
Relevant URL:

http://www.securityfocus.com/archive/75/369169

4. IE default Page (Thread)
Relevant URL:

http://www.securityfocus.com/archive/75/369131

5. Malware(?) inserting porn links into registration/pr... (Thread)
Relevant URL:

http://www.securityfocus.com/archive/75/369119

6. Backdoor-CGT (Thread)
Relevant URL:

http://www.securityfocus.com/archive/75/369088

7. Interesting webserver intrusion (apache 1.3.31, mod_... (Thread)
Relevant URL:

http://www.securityfocus.com/archive/75/368869

8. Interesting webserver intrusion (apache 1.3.31,mod_s... (Thread)
Relevant URL:

http://www.securityfocus.com/archive/75/368867

9. Interesting webserver intrusion (apache 1.3.31, mod_... (Thread)
Relevant URL:

http://www.securityfocus.com/archive/75/368815

VII. VULN-DEV RESEARCH LIST SUMMARY
-----------------------------------
1. Norton Anti Virus Script Blocker bypass using script... (Thread)
Relevant URL:

http://www.securityfocus.com/archive/82/369079

2. Norton Anti Virus Script Blocker bypass using script... (Thread)
Relevant URL:

http://www.securityfocus.com/archive/82/369077

3. Microsoft Window Utility Manager Local Elevation of ... (Thread)
Relevant URL:

http://www.securityfocus.com/archive/82/368907

4. FW: Windows XP Prof and shdoclc.dll - zone-pass and ... (Thread)
Relevant URL:

http://www.securityfocus.com/archive/82/368906

5. Unchecked buffer in mstask.dll (Thread)
Relevant URL:

http://www.securityfocus.com/archive/82/368905

6. HtmlHelp - .CHM File Heap Overflow (Thread)
Relevant URL:

http://www.securityfocus.com/archive/82/368904

7. IE Shell URI Download and Execute, POC (Thread)
Relevant URL:

http://www.securityfocus.com/archive/82/368872

8. Windows XP Prof and shdoclc.dll - zone-pass and site... (Thread)
Relevant URL:

http://www.securityfocus.com/archive/82/368871

9. phrack #62 has been released (Thread)
Relevant URL:

http://www.securityfocus.com/archive/82/368777

10. White Paper: 0x00 vs ASP file upload scripts (Thread)
Relevant URL:

http://www.securityfocus.com/archive/82/368750

VIII. MICROSOFT FOCUS LIST SUMMARY
----------------------------------
1. Windows Update v5 and XPSP2RC2 (Thread)
Relevant URL:

http://www.securityfocus.com/archive/88/369386

2. Browser Vulns (Thread)
Relevant URL:

http://www.securityfocus.com/archive/88/369383

3. Microsoft Audit Collection System (Thread)
Relevant URL:

http://www.securityfocus.com/archive/88/369382

4. Article Announcement: The Pied Piper Syndrome (Thread)
Relevant URL:

http://www.securityfocus.com/archive/88/369347

5. security M$ exchange2003 imap4 (Thread)
Relevant URL:

http://www.securityfocus.com/archive/88/369305

6. Tool to view effective AD settings (Thread)
Relevant URL:

http://www.securityfocus.com/archive/88/369238

7. MS to dump NT 4.0 Wkstn. Patches (Thread)
Relevant URL:

http://www.securityfocus.com/archive/88/369107

8. [security] Tool to view effective AD settings (Thread)
Relevant URL:

http://www.securityfocus.com/archive/88/369103

9. SecurityFocus Microsoft Newsletter #197 (Thread)
Relevant URL:

http://www.securityfocus.com/archive/88/368878

IX. SUN FOCUS LIST SUMMARY
--------------------------
NO NEW POSTS FOR THE WEEK 2004-07-13 to 2004-07-20.

X. LINUX FOCUS LIST SUMMARY
---------------------------
1. Access control for a NFS server (Thread)
Relevant URL:

http://www.securityfocus.com/archive/91/369388

2. Certifying a RedHat Install (Thread)
Relevant URL:

http://www.securityfocus.com/archive/91/369156

3. Visited by a cracker (Thread)
Relevant URL:

http://www.securityfocus.com/archive/91/369117

4. Administrivia (Thread)
Relevant URL:

http://www.securityfocus.com/archive/91/369089

5. Fwd: Certifying a RedHat Install (Thread)
Relevant URL:

http://www.securityfocus.com/archive/91/368985

6. Weird! (Thread)
Relevant URL:

http://www.securityfocus.com/archive/91/368773

XI. UNSUBSCRIBE INSTRUCTIONS
----------------------------
To unsubscribe send an e-mail message to [email protected] from the subscribed address. The contents of the subject or message body do not matter. You will receive a confirmation request message to which you will have to answer. Alternatively you can also visit http://www.securityfocus.com/newsletters and unsubscribe via the website.

If your email address has changed email [email protected] and ask to be manually removed.

XII. SPONSOR INFORMATION
-----------------------

This Issue is Sponsored By: SecurityFocus

http://www.securityfocus.com/rss/index.shtml

------------------------------------------------------------------------