SecurityFocus Newsletter #259

Peter Laborge <[email protected]> 27 Jul 2004 23:10:47 -0000

Newsgroups	gmane.comp.security.news.general
Message-ID	<[email protected]>

SecurityFocus Newsletter #259
------------------------------

This issue sponsored by: OSP Global, LLC - Your Offshore Security Partners

Outsourced operations in India? Need to extend your risk assessments
offshore? OSP Global focuses on offshore risk assessment services related
to privacy and security of data and information systems, including
adherence to regulatory standards. Whether it's outsourcing of call
centers, software development or financial processes, OSP Global has
certified professionals based in the US and India prepared to assess your
privacy and security risk.

Visit us at: http://www.securityfocus.com/sponsor/OSPGlobal_sf-news_040727

------------------------------------------------------------------------
I. FRONT AND CENTER
1. Wireless Attacks and Penetration Testing (part 3 of 3)
2. A Promise Falls in the Forest
3. Mac OS X ? Unix? Secure?
II. BUGTRAQ SUMMARY
1. OllyDbg Debugger Messages Format String Vulnerability
2. Medal Of Honor Allied Assault Remote Buffer Overflow Vulnera...
3. Extropia WebStore Remote Command Execution Vulnerability
4. Computer Associates Common Services Multiple Denial Of Servi...
5. Artmedic Webdesign Kleinanzeigen Script File Include Vulnera...
6. Sun Solaris Volume Manager Denial Of Service Vulnerability
7. MIT Software I-CAFE Multiple Vulnerabilities
8. PHPNuke Multiple Input Validation Vulnerabilities
9. CuteNews Comment HTML Injection Vulnerability
10. Anton Raharja PlaySMS Unspecified SQL Injection Vulnerabilit...
11. Anton Raharja PlaySMS Unspecified File Include Vulnerability
12. PHPBB Multiple HTTP Response Splitting Vulnerabilities
13. PHPBB Search.PHP "search_author" Cross-Site Scripting Vulner...
14. PHP-Nuke Reviews Module "title" Parameter Cross-Site Scripti...
15. Outblaze Webmail HTML Injection Vulnerability
16. Adam Ismay Print Topic Mod SQL Injection Vulnerability
17. SCO Multi-channel Memorandum Distribution Facility Multiple ...
18. Sysinternals PsTools Remote Unauthorized Access Vulnerabilit...
19. Nucleus CMS/Blog:CMS/PunBB Unspecified Remote File Include V...
20. SnapFiles Whisper FTP Surfer Long File Name Remote Buffer Ov...
21. Opera Web Browser Cross-Domain Frame Loading Vulnerability
22. Opera Web Browser Unspecified Certificate Verification Vulne...
23. Lexmark Network Printer HTTP Server Denial Of Service Vulner...
24. Moodle Language Setting Unspecified Vulnerability
25. Novell iChain Multiple Unspecified Potential Vulnerabilities
26. Cisco ONS Multiple Vulnerabilities
27. Conceptronic CADSLR1 ADSL Router Denial Of Service Vulnerabi...
28. Serena TeamTrack Remote Authentication Bypass Vulnerability
29. Internet Software Sciences Web+Center Cookie Object SQL Inje...
30. NetSupport DNA HelpDesk Problist Script SQL Injection Vulner...
31. Leigh Business Enterprises Web HelpDesk SQL Injection Vulner...
32. Mensajeitor Tag Board Authentication Bypass Vulnerability
33. Polar Helpdesk Cookie Based Authentication System Bypass Vul...
34. Layton Technology HelpBox Multiple SQL Injection Vulnerabili...
35. APC PowerChute Business Edition Unspecified Denial Of Servic...
36. Imatix Xitami Server Side Includes Cross-Site Scripting Vuln...
37. Linux Kernel Multiple Unspecified Local Privilege Escalation...
38. Samba Web Administration Tool Base64 Decoder Buffer Overflow...
39. Samba Filename Mangling Method Buffer Overrun Vulnerability
40. PSCS VPOP3 Email Server Remote Denial of Service Vulnerabili...
41. Linux Kernel Unspecified Local Denial of Service Vulnerabili...
42. Nessus Insecure Temporary File Creation Vulnerabiliry
43. Imatix Xitami Malformed Header Remote Denial of Service Vuln...
44. Sun Java System Calendar Server Authentication Proxy Privile...
45. HP-UX XFS Remote Unauthorized Access Vulnerability
46. HP-UX SMTKFONT Remote Unauthorized Access Vulnerability
III. SECURITYFOCUS NEWS ARTICLES
1. ATM keypads get a security boost
2. Companies adapt to a zero day world
3. VoIP hacks gut Caller I.D.
4. eBay denies South Africa 419 hacking report
5. We're all MyDoomed
6. Google goes gimpy from MyDoom infection
IV. SECURITYFOCUS TOP 6 TOOLS
1. Lepton's Crack 20031130
2. ModemWall 1.2
3. Clam Antivirus v0.75
4. popa3d v0.6.4.1
5. tinysofa enterprise server 2.0-rc1
6. BitCrypt Free 2.1
V. SECURITYJOBS LIST SUMMARY
1. [SJ-JOB] Manager, Information Security, Washington D... (Thread)
2. [SJ-JOB] Account Manager, Westerville, US (Thread)
3. [SJ-RESUME] Security System Administrator (Thread)
4. [SJ-RESUME] Sr. Product Manager (Thread)
5. [SJ-RESUME] Security Consultant (Thread)
6. [SJ-JOB] Security Architect, San Francisco, US (Thread)
7. [SJ-JOB] Security Product Manager, Edison, US (Thread)
8. [SJ-JOB] Security System Administrator, Richmond, US (Thread)
9. [SJ-RESUME] Manager, Information Security (Thread)
10. [SJ-JOB] Sales Engineer, Bloomington, US (Thread)
11. [SJ-JOB] Security Product Manager, San Diego, US (Thread)
12. [SJ-JOB] Management, San Antonio, US (Thread)
13. [SJ-JOB] Chief Scientist, Richland, US (Thread)
14. [SJ-JOB] Sales Engineer, Hong Kong, HK (Thread)
15. [SJ-JOB] Security Consultant, Chicago suburbs, US (Thread)
16. [SJ-JOB] Manager, Information Security, Clearwater, ... (Thread)
17. [SJ-JOB] Security Product Manager, San Jose, US (Thread)
18. [SJ-JOB] Sales Engineer, New York, US (Thread)
19. [SJ-RESUME] Security Director (Thread)
20. [SJ-RESUME] Security Researcher (Thread)
21. [SJ-JOB] Security Architect, Los Angeles, US (Thread)
22. [SJ-JOB] Security Product Manager, Cupertino, US (Thread)
23. [SJ-JOB] Quality Assurance, Cupertino, US (Thread)
24. [SJ-JOB] Security Consultant, Cupertino, US (Thread)
25. [SJ-JOB] Technical Writer, Cupertino, US (Thread)
26. [SJ-JOB] Developer, Cupertino, US (Thread)
27. [SJ-JOB] Account Manager, Chicago, US (Thread)
28. [SJ-JOB] Security Consultant, Dallas, US (Thread)
29. [SJ-JOB] Account Manager, Dallas, US (Thread)
30. [SJ-JOB] Account Manager, Raleigh/Durham, US (Thread)
31. [SJ-JOB] CSO, Baton Rouge, US (Thread)
32. [SJ-RESUME] Jr. Security Analyst (Thread)
33. [SJ-RESUME] Security Engineer (Thread)
34. [SJ-JOB] Security Engineer, Washington DC, US (Thread)
35. [SJ-JOB] Security System Administrator, Dhahran, SA (Thread)
36. [SJ-JOB] Quality Assurance, Columbia, US (Thread)
37. [SJ-JOB] Sr. Security Analyst, San Francisco, US (Thread)
38. [SJ-JOB] Application Security Engineer, San Francisc... (Thread)
39. [SJ-JOB] Security Architect, Washington DC, US (Thread)
40. [SJ-JOB] Developer, Santa Clara, US (Thread)
VI. INCIDENTS LIST SUMMARY
1. SSH attacks? (Thread)
2. Re[2]: New Virus / Trojan ? (Thread)
3. New Virus / Trojan ? (Thread)
4. More Webserver / IE Exploits (Thread)
VII. VULN-DEV RESEARCH LIST SUMMARY
1. Call for Open Source Privacy and Security Projects a... (Thread)
2. Announcing Pak Con 1st (Thread)
3. samba base64 encode vulnerability (Thread)
4. Inappropriate methods exposed in XML -what's the es... (Thread)
VIII. MICROSOFT FOCUS LIST SUMMARY
1. Proxy Server/ISA (Thread)
2. Windows Update v5 and XPSP2RC2 (Thread)
3. Browser Vulns (Thread)
4. VPN (Thread)
5. Microsoft Audit Collection System (Thread)
6. SecurityFocus Microsoft Newsletter #198 (Thread)
7. real world security though, was Browser Vulns (Thread)
IX. SUN FOCUS LIST SUMMARY
NO NEW POSTS FOR THE WEEK 2004-07-20 to 2004-07-27.
X. LINUX FOCUS LIST SUMMARY
1. Hack attempt (Thread)
2. Access to nfs server, Part 2 (Thread)
3. SSO on linux (Thread)
4. Access control for a NFS server (Thread)
XI. UNSUBSCRIBE INSTRUCTIONS
XII. SPONSOR INFORMATION

I. FRONT AND CENTER
-------------------
1. Wireless Attacks and Penetration Testing (part 3 of 3)
By Jonathan Hassell

This third and final part of the wireless pen-test series looks at how to
mitigate the security risks outlined in the previous articles, and then
looks at some proposed solutions currently in front of the IETF.

http://www.securityfocus.com/infocus/1792

2. A Promise Falls in the Forest
By Mark Rasch

A federal court recently ruled that website privacy policies aren't
binding, because nobody reads them. The implications are far reaching for
contract law and the Internet.

http://www.securityfocus.com/columnists/257

3. Mac OS X ? Unix? Secure?
By Daniel Hanson

Apple's OS X is not safer or less susceptible to vulnerabilities and
viruses than other OSes, and Apple's secretive culture is bad for the
security world.

http://www.securityfocus.com/columnists/256

II. BUGTRAQ SUMMARY
-------------------
1. OllyDbg Debugger Messages Format String Vulnerability
BugTraq ID: 10742
Remote: Yes
Date Published: Jul 17 2004
Relevant URL: http://www.securityfocus.com/bid/10742
Summary:
OllyDbg is prone to a format string vulnerability.

This issue is exposed when the application handles debugger messages that contain format specifiers.

Debugging a malicious program that is designed to exploit this issue could lead to an application crash or execution of arbitrary code in the context of the user running the debugger.

2. Medal Of Honor Allied Assault Remote Buffer Overflow Vulnera...
BugTraq ID: 10743
Remote: Yes
Date Published: Jul 17 2004
Relevant URL: http://www.securityfocus.com/bid/10743
Summary:
A remote buffer overflow vulnerability was reported in Medal of Honor Allied Assault.

This issue may permit remote code execution in vulnerable game servers and clients. However, it is reported that clients will only be affected in LAN games as Internet games use the Gamespy protocol. The issue also affects various expansion packs for the game.

3. Extropia WebStore Remote Command Execution Vulnerability
BugTraq ID: 10744
Remote: Yes
Date Published: Jul 17 2004
Relevant URL: http://www.securityfocus.com/bid/10744
Summary:
eXtropia WebStore is prone to a remote command execution vulnerability.

This issue is due to insufficient input validation and may permit execution of commands in the context of the hosting Web server.

4. Computer Associates Common Services Multiple Denial Of Servi...
BugTraq ID: 10745
Remote: Yes
Date Published: Jul 19 2004
Relevant URL: http://www.securityfocus.com/bid/10745
Summary:
Reportedly Computer Associates Common Services is affected by multiple denial of service vulnerabilities. Theses issues are due to a failure of the application to handle various exceptional conditions.

An attacker might leverage these issues to cause the affected application to crash, and failing to provide the protection that was promised.

5. Artmedic Webdesign Kleinanzeigen Script File Include Vulnera...
BugTraq ID: 10746
Remote: Yes
Date Published: Jul 19 2004
Relevant URL: http://www.securityfocus.com/bid/10746
Summary:
Kleinanzeigen is prone to a file include vulnerability. This issue could allow a remote attacker to include malicious files containing arbitrary code to be executed on a vulnerable computer.

If successful, the malicious script supplied by the attacker will be executed in the context of the web server hosting the vulnerable software.

6. Sun Solaris Volume Manager Denial Of Service Vulnerability
BugTraq ID: 10747
Remote: No
Date Published: Jul 19 2004
Relevant URL: http://www.securityfocus.com/bid/10747
Summary:
Reportedly the Sun Solaris Volume Manager is affected by a local denial of service vulnerability. This issue is due to a failure of the application to properly handle exceptional conditions.

An attacker might leverage this issue to cause a kernel panic in the affected computer, effectively denying service to legitimate users.

7. MIT Software I-CAFE Multiple Vulnerabilities
BugTraq ID: 10748
Remote: No
Date Published: Jul 19 2004
Relevant URL: http://www.securityfocus.com/bid/10748
Summary:
I-Cafe is prone to multiple vulnerabilities that may allow local users to gain unauthorized access to a vulnerable computer.

Successful exploitation of various issues can allow the attacker to disable the application, gain access to the local disk, and gain administrative access to the computer.

These issues were reported in I-Cafe version 2.6 revision 2004.72. Other versions may be vulnerable as well.

8. PHPNuke Multiple Input Validation Vulnerabilities
BugTraq ID: 10749
Remote: Yes
Date Published: Jul 19 2004
Relevant URL: http://www.securityfocus.com/bid/10749
Summary:
It is reported that PHPNuke is susceptible to multiple cross-site scripting and SQL injection vulnerabilities.

This can allow for theft of cookie-based authentication credentials and other attacks. Attackers may supply malicious parameters to manipulate the structure and logic of SQL queries.

These vulnerabilities were reported in version 7.3 of PHPNuke. Other versions may also be affected.

9. CuteNews Comment HTML Injection Vulnerability
BugTraq ID: 10750
Remote: Yes
Date Published: Jul 19 2004
Relevant URL: http://www.securityfocus.com/bid/10750
Summary:
CutePHP is reported prone to an HTML injection vulnerability.

The vulnerability exists due to insufficient sanitization of user-supplied input. Specifically, user-supplied input to comment posts are not sufficiently sanitized of malicious HTML code.

An attacker can exploit this vulnerability by adding HTML code within URI arguments. The hostile code may be rendered in the user's browser when the user views the entry.

Exploitation could permit an attacker to steal cookie-based authentication credentials or launch other attacks.

10. Anton Raharja PlaySMS Unspecified SQL Injection Vulnerabilit...
BugTraq ID: 10751
Remote: Yes
Date Published: Jul 19 2004
Relevant URL: http://www.securityfocus.com/bid/10751
Summary:
An SQL injection vulnerability is identified in the application that may allow attackers to pass malicious input to database queries, resulting in the modification of query logic or other attacks.

This vulnerability exists due to insufficient sanitization of user-supplied input. It may be possible for a remote user to inject arbitrary SQL queries into the underlying database used by the application. This could permit remote attackers to pass malicious input to database queries, resulting in modification of query logic or other attacks.

This issue is reported to exist in PlaySMS 0.6. Other versions may be affected as well.

11. Anton Raharja PlaySMS Unspecified File Include Vulnerability
BugTraq ID: 10752
Remote: Yes
Date Published: Jul 19 2004
Relevant URL: http://www.securityfocus.com/bid/10752
Summary:
A vulnerability is reported to exist in the software that may allow an attacker to include malicious files containing arbitrary code to be executed on a vulnerable computer. The issue exists due to improper validation of user-supplied data. Remote attackers could potentially exploit this issue via a vulnerable variable to include a remote malicious script, which will be executed in the context of the server hosting the vulnerable software.

This issue is reported to exist in PlaySMS 0.6. Other versions may be affected as well.

12. PHPBB Multiple HTTP Response Splitting Vulnerabilities
BugTraq ID: 10753
Remote: Yes
Date Published: Jul 19 2004
Relevant URL: http://www.securityfocus.com/bid/10753
Summary:
phpBB is reported prone to multiple HTTP response splitting vulnerabilities. The issues exist in the "privmsg.php" script and the "login.php" script. The vulnerabilities present themselves due to a flaw in the affected scripts that will allow an attacker to manipulate how GET requests are handled.

A remote attacker may exploit these vulnerabilities to influence or misrepresent how web content is served, cached or interpreted.

13. PHPBB Search.PHP "search_author" Cross-Site Scripting Vulner...
BugTraq ID: 10754
Remote: Yes
Date Published: Jul 19 2004
Relevant URL: http://www.securityfocus.com/bid/10754
Summary:
It is reported that one of the scripts included with phpBB is prone to a cross-site scripting vulnerability. According to the author of the report, the script "search.php" returns the value of the HTML variable "search_author" to the client as its output without encoding it or otherwise removing potentially hostile content.

It is reported that gpc magic quotes must be turned off in php.ini for this vulnerability to exist.

14. PHP-Nuke Reviews Module "title" Parameter Cross-Site Scripti...
BugTraq ID: 10755
Remote: Yes
Date Published: Jul 19 2004
Relevant URL: http://www.securityfocus.com/bid/10755
Summary:
PHP-Nuke 'reviews' module is prone to a cross-site scripting vulnerability. This issue could allow an attacker to steal cookie-based authentication credentials.

An attacker can exploit this issue by creating a malicious link containing HTML and script code. The attacker sends this link to a vulnerable user. When the user follows the link, HTML and script renders in the user's browser.

15. Outblaze Webmail HTML Injection Vulnerability
BugTraq ID: 10756
Remote: Yes
Date Published: Jul 19 2004
Relevant URL: http://www.securityfocus.com/bid/10756
Summary:
It is reported that Outblaze Webmail is susceptible to an HTML injection vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied HTML email content.

It is possible to inject HTML and script code into the application through HTML email as it is not properly sanitized.

An attacker can exploit this issue to gain access to an unsuspecting user's cookie based authentication credentials; disclosure of personal email is possible. Other attacks are also possible.

16. Adam Ismay Print Topic Mod SQL Injection Vulnerability
BugTraq ID: 10757
Remote: Yes
Date Published: Jul 19 2004
Relevant URL: http://www.securityfocus.com/bid/10757
Summary:
Print Topic Mod is reportedly affected by a remote SQL injection vulnerability in the 'printview.php' script. This issue is due to a failure of the application to properly sanitize user-supplied URI parameter input before using it in an SQL query.

Print Topic Mod version 1.0 is reported to be affected by this issue.

17. SCO Multi-channel Memorandum Distribution Facility Multiple ...
BugTraq ID: 10758
Remote: Yes
Date Published: Jul 20 2004
Relevant URL: http://www.securityfocus.com/bid/10758
Summary:
It has been reported that the SCO Multi-channel Memorandum Distribution Facility (MMDF) is affected by multiple vulnerabilities. These issues are due to a failure of the utility to properly validate buffer boundaries when copying user-supplied input.

These issues are known to be exploitable locally, however due to the nature of the application it is likely that remote exploitation is possible as well, although this is not confirmed.

An attacker might leverage these issues to execute arbitrary code in the context of the vulnerable utility; many of the affected utilities are setuid binaries by default. These issues might also be leveraged to cause the affected utility to crash, denying service to legitimate users.

18. Sysinternals PsTools Remote Unauthorized Access Vulnerabilit...
BugTraq ID: 10759
Remote: Yes
Date Published: Jul 20 2004
Relevant URL: http://www.securityfocus.com/bid/10759
Summary:
Reportedly Sysinternals PsTools are affected by a remote unauthorized access vulnerability. This issue is due to a design error that causes a failure of the utilities to properly secure the affected computer.

A remote attacker might leverage this issue to gain administrator access to the affected computer.

19. Nucleus CMS/Blog:CMS/PunBB Unspecified Remote File Include V...
BugTraq ID: 10760
Remote: Yes
Date Published: Jul 20 2004
Relevant URL: http://www.securityfocus.com/bid/10760
Summary:
Nucleus CMS, Blog:CMS, and PunBB are vulnerable to an unspecified remote file include vulnerability that may allow an attacker to include malicious files containing arbitrary code to be executed on a vulnerable computer.

All three applications are vulnerable because they have a similar or identical code base.

20. SnapFiles Whisper FTP Surfer Long File Name Remote Buffer Ov...
BugTraq ID: 10761
Remote: Yes
Date Published: Jul 20 2004
Relevant URL: http://www.securityfocus.com/bid/10761
Summary:
Whisper FTP Surfer is reported prone to a remote buffer overflow vulnerability. This issue presents itself due to insufficient boundary checks performed by the application when handling long file names.

This issue affects Whisper FTP Surfer 1.0.7, however, other versions may be vulnerable as well.

21. Opera Web Browser Cross-Domain Frame Loading Vulnerability
BugTraq ID: 10763
Remote: Yes
Date Published: Jul 20 2004
Relevant URL: http://www.securityfocus.com/bid/10763
Summary:
Opera Web Browser is reported prone to a cross-domain frame loading vulnerability. It is reported that if the name of a frame rendered in a target site is known, then an attacker may potentially render arbitrary HTML in the frame of the target site.

Opera Web Browser versions 7.51 and prior are reported to be affected by this issue.

This issue was originally reported in Microsoft Internet Explorer in BID 10627 (Microsoft Internet Explorer Cross-Domain Frame Loading Vulnerability), however, further information has shown that Opera is affected by the same vulnerability.

22. Opera Web Browser Unspecified Certificate Verification Vulne...
BugTraq ID: 10764
Remote: Yes
Date Published: Jul 20 2004
Relevant URL: http://www.securityfocus.com/bid/10764
Summary:
Opera Web Browser is reported prone to an unspecified certificate verification vulnerability. This issue may allow improper certificates to be used when authenticating connections. An attacker may use forged certificates to carry out various attacks.

It is conjectured that a malicious Web site could take advantage of this by posing as a site that may be trusted. Users may believe a malicious site is trusted as a result. This could lead to the user taking further actions under the assumption the site is trusted, such as authenticating or submitting sensitive or private information.

Further information about this issue and its impacts are not currently available. This BID will be updated as more information becomes available.

Opera versions 7.51 and prior are affected by this issue.

23. Lexmark Network Printer HTTP Server Denial Of Service Vulner...
BugTraq ID: 10765
Remote: Yes
Date Published: Jul 20 2004
Relevant URL: http://www.securityfocus.com/bid/10765
Summary:
Several Lexmark network printers that contain a built-in web server have been reported to contain a buffer overflow vulnerability.

This vulnerability is reported to exist in the printers HTTP header parsing code.

The vulnerability can be exploited to crash the printers web server, denying service to legitimate users. The possibility to execute arbitrary code on the printer may also be present.

Model T522 was reported to be affected by this vulnerability. Due to code sharing across products, other printer models are likely affected as well. It is reported that some Dell branded printers also use the same firmware, implying that other vendors may also be vulnerable.

This BID will be updated with further vendor, model, and version information as new information is disclosed.

It is conjectured that this BID is related to BID 1290. Lexmark printers may use a vulnerable version of the Allegro RomPager embedded web server.

24. Moodle Language Setting Unspecified Vulnerability
BugTraq ID: 10766
Remote: Yes
Date Published: Jul 21 2004
Relevant URL: http://www.securityfocus.com/bid/10766
Summary:
It has been reported that Moodle is affected by an unspecified vulnerability in its language setting feature.

Information currently available is not sufficient to outline the possible affects of this issue with any certainty.

This BID will be updated as more information becomes available.

25. Novell iChain Multiple Unspecified Potential Vulnerabilities
BugTraq ID: 10767
Remote: Yes
Date Published: Jul 21 2004
Relevant URL: http://www.securityfocus.com/bid/10767
Summary:
Novell iChain Server is a web-based security product designed to implement and maintain various network-based access controls. iChain implements a web server with limited functionality.

Novell has released iChain Server Support Pack 3. This release includes fixes for various issues that may pose a security threat. It is not confirmed whether these issues are security related or can be exploited successfully. Some of these issues may allow an attacker to carry out denial of service and information disclosure attacks against a vulnerable server.

Due to a lack of details, further information is not currently available. This BID will be updated as more information becomes available.

26. Cisco ONS Multiple Vulnerabilities
BugTraq ID: 10768
Remote: Yes
Date Published: Jul 21 2004
Relevant URL: http://www.securityfocus.com/bid/10768
Summary:
Cisco ONS platforms are prone to multiple vulnerabilities. Most of the reported issues are related to handling of malformed packets, resulting in a denial of service condition. However, an authentication bypass vulnerability has also been reported to affect some platforms.

27. Conceptronic CADSLR1 ADSL Router Denial Of Service Vulnerabi...
BugTraq ID: 10769
Remote: Yes
Date Published: Jul 21 2004
Relevant URL: http://www.securityfocus.com/bid/10769
Summary:
The Conseptronic CADSLR1 router is reported to contain a denial of service vulnerability.

This vulnerability reportedly presents itself in the embedded HTTP server used for web-based administration of the router. When presented a large malformed request, the device will reportedly crash and reboot.

This vulnerability could be exploited by a remote attacker to deny service to legitimate users.

Due to code reuse across products, other Conseptronic devices may also be vulnerable to similar issues.

28. Serena TeamTrack Remote Authentication Bypass Vulnerability
BugTraq ID: 10770
Remote: Yes
Date Published: Jul 21 2004
Relevant URL: http://www.securityfocus.com/bid/10770
Summary:
It has been reported that Serena TeamTrack is affected by remote authentication bypass vulnerability. This issue is due to a design error that allows unauthenticated users to access sensitive scripts.

Successful exploitation of this issue will allow an attacker to gain access to sensitive information such as user names, software versions, user contact information, issues information and resolution information. This issue can also be exploited to carry out cross-site scripting attacks.

29. Internet Software Sciences Web+Center Cookie Object SQL Inje...
BugTraq ID: 10771
Remote: Yes
Date Published: Jul 21 2004
Relevant URL: http://www.securityfocus.com/bid/10771
Summary:
An SQL injection vulnerability is identified in the application that may allow attackers to pass malicious input to database queries, resulting in the modification of query logic or other attacks.

This issue exists due to insufficient sanitization of user-supplied input through the Cookie object.

Successful exploitation could result in compromise of the application, disclosure or modification of data or may permit an attacker to exploit vulnerabilities in the underlying database implementation. An attacker may gain access to the administrative username and password and execute arbitrary database commands as well.

Web+Center version 4.0.1 is affected by this vulnerability. Other versions may be affected as well.

30. NetSupport DNA HelpDesk Problist Script SQL Injection Vulner...
BugTraq ID: 10772
Remote: Yes
Date Published: Jul 21 2004
Relevant URL: http://www.securityfocus.com/bid/10772
Summary:
An SQL injection vulnerability is identified in the application that may allow attackers to pass malicious input to database queries, resulting in the modification of query logic or other attacks.

This vulnerability exists due to insufficient sanitization of user-supplied input through the 'where' parameter of 'problist.asp' script.

DNA HelpDesk version 1.01 is affected by this vulnerability. Other versions may be affected as well.

31. Leigh Business Enterprises Web HelpDesk SQL Injection Vulner...
BugTraq ID: 10773
Remote: Yes
Date Published: Jul 21 2004
Relevant URL: http://www.securityfocus.com/bid/10773
Summary:
LBE Web HelpDesk is reported susceptible to an SQL injection vulnerability. This issue is due to improper sanitization of user-supplied data.

This issue may allow a remote attacker to manipulate query logic, potentially leading to unauthorized access to sensitive information or corruption of database data. SQL injection attacks may also potentially be used to exploit latent vulnerabilities in the underlying database implementation.

Versions 4.0.0.80 and prior are reported vulnerable to this issue.

32. Mensajeitor Tag Board Authentication Bypass Vulnerability
BugTraq ID: 10774
Remote: Yes
Date Published: Jul 21 2004
Relevant URL: http://www.securityfocus.com/bid/10774
Summary:
It has been reported that Mensajeitor Tag Board is affected by an authentication bypass vulnerability. This issue is due to a failure of the application to properly handle authentication controls.

Successful exploitation of this issue will allow an attacker to post messages to the affected tag board as an administrator, reportedly facilitating HTML injection and attacks.

33. Polar Helpdesk Cookie Based Authentication System Bypass Vul...
BugTraq ID: 10775
Remote: Yes
Date Published: Jul 21 2004
Relevant URL: http://www.securityfocus.com/bid/10775
Summary:
Polar Helpdesk is reported prone to a cookie based authentication system bypass vulnerability. It is reported that the authentication and privilege system for Polar Helpdesk is based entirely on the values read from a cookie that is saved on the client system. An attacker may modify values in the appropriate cookie to gain administrative access to the affected software.

34. Layton Technology HelpBox Multiple SQL Injection Vulnerabili...
BugTraq ID: 10776
Remote: Yes
Date Published: Jul 21 2004
Relevant URL: http://www.securityfocus.com/bid/10776
Summary:
It is reported that HelpBox is susceptible to multiple SQL injection vulnerabilities. This issue is due to improper sanitization of user-supplied data.

These problems present themselves when malicious SQL statements are passed to certain scripts.

Some scripts require administrative privileges to HelpBox. One script reportedly allows exporting any table in the SQL server.

These issues may allow a remote attacker to manipulate query logic, potentially leading to unauthorized access to sensitive information or corruption of database data. SQL injection attacks may also potentially be used to exploit latent vulnerabilities in the underlying database implementation.

HelpBox version 3.0.1 is reported vulnerable to these issues.

35. APC PowerChute Business Edition Unspecified Denial Of Servic...
BugTraq ID: 10777
Remote: Unknown
Date Published: Jul 21 2004
Relevant URL: http://www.securityfocus.com/bid/10777
Summary:
It is reported that APC PowerChute Business Edition is susceptible to an unspecified denial of service vulnerability.

Reportedly, all versions of the software between 6.0 and 7.0.1 contain a denial of service vulnerability that affects servers and agents. It does not affect the ability of the software to shutdown computers in the event of a power failure.

APC has released version 7.0.2 addressing this issue.

This BID will be updated as further information is disclosed.

36. Imatix Xitami Server Side Includes Cross-Site Scripting Vuln...
BugTraq ID: 10778
Remote: Yes
Date Published: Jul 22 2004
Relevant URL: http://www.securityfocus.com/bid/10778
Summary:
It is reported that Imatix Xitami is affected by a cross-site scripting vulnerability in the server side includes test script. This issue is due to a failure of the application to properly sanitize user-supplied input.

Successful exploitation of this issue will allow an attacker to execute arbitrary script code in the browser of an unsuspecting user. This may potentially be exploited to hijack web content or steal cookie-based authentication credentials from legitimate users.

37. Linux Kernel Multiple Unspecified Local Privilege Escalation...
BugTraq ID: 10779
Remote: No
Date Published: Jul 22 2004
Relevant URL: http://www.securityfocus.com/bid/10779
Summary:
Linux Kernel is reported prone to multiple unspecified privilege escalation vulnerabilities. These vulnerabilities may allow a local attacker to gain elevated privileges or disclose kernel memory.

These vulnerabilities were referenced in a SuSe advisory, however, further details are not currently available. It is possible that these issues are related to BID 10566 (Linux Kernel Multiple Device Driver Vulnerabilities). This BID will be updated or retired as more information becomes available.

It is reported that these issues present themselves in Linux kernel 2.6.

38. Samba Web Administration Tool Base64 Decoder Buffer Overflow...
BugTraq ID: 10780
Remote: Yes
Date Published: Jul 22 2004
Relevant URL: http://www.securityfocus.com/bid/10780
Summary:
It has been reported that Samba Web Administration Tool (SWAT) is affected by a base64 decoder buffer overflow vulnerability. This issue is due to a failure of the application to properly validate buffer boundaries when copying user-supplied input into a finite buffer.

Successful exploitation of this issue will allow a remote, unauthenticated attacker to execute arbitrary code on the affected computer with the privileges of the affected process; Samba typically runs with superuser privileges.

39. Samba Filename Mangling Method Buffer Overrun Vulnerability
BugTraq ID: 10781
Remote: Yes
Date Published: Jul 22 2004
Relevant URL: http://www.securityfocus.com/bid/10781
Summary:
Samba is reported prone to an undisclosed buffer overrun vulnerability, the buffer overrun is reported to exist when Samba is handling file name mangling with the "hash" method.

It is conjectured that this vulnerability may present itself when the affected server handles a filename that is sufficient to trigger the vulnerability. To exploit this vulnerability, an attacker may require sufficient access so that they may write a file to a published samba share.

It is reported that the vulnerability does not exist in default Samba configurations; by default, Samba is configured to employ "hash2" name mangling. The "hash2" method is not vulnerable.

This vulnerability is reported to affect Samba version 3.0.0 and later.

40. PSCS VPOP3 Email Server Remote Denial of Service Vulnerabili...
BugTraq ID: 10782
Remote: Yes
Date Published: Jul 22 2004
Relevant URL: http://www.securityfocus.com/bid/10782
Summary:
It is reported that VPOP3 is reported prone to a remote denial of service vulnerability. This issue presents itself when an attacker issues a URI request containing a large value for the 'msglistlen' parameter to the web mail interface.

VPOP3 2.0.0k is reported prone to this issue, however, it is likely that other versions are affected as well.

41. Linux Kernel Unspecified Local Denial of Service Vulnerabili...
BugTraq ID: 10783
Remote: No
Date Published: Jul 22 2004
Relevant URL: http://www.securityfocus.com/bid/10783
Summary:
Linux kernel is reported prone to an unspecified local denial of service vulnerability. It is reported that issue only affects ia64 systems. A local attacker can exploit this issue by dereferencing a NULL pointer and causing a kernel panic. Successful exploitation will lead to a denial of service condition in a vulnerable computer.

No further details are available at this time. This issue will be updated as more information becomes available.

42. Nessus Insecure Temporary File Creation Vulnerabiliry
BugTraq ID: 10784
Remote: No
Date Published: Jul 22 2004
Relevant URL: http://www.securityfocus.com/bid/10784
Summary:
Nessus is reported to be vulnerable to an insecure temporary file creation vulnerability.

This vulnerability presents itself in the 'nessus-adduser' script. This script is used to add users to the Nessus application. These users are independent of the system user database, and are used to define access roles and limits in the application.

When creating new users, Nessus insecurely creates a temporary file.

A non-privileged user with interactive access could overwrite any file on the system with superuser privileges. The attacker does not control the data being written, just the location of the file.

An attacker could also exploit this issue to modify the rules assigned to the new nessus user, allowing or denying access to scan hosts within Nessus.

Versions of 2.0.x prior to 2.0.12 and the experimental version 2.1.0 are reported to be vulnerable to this issue.

43. Imatix Xitami Malformed Header Remote Denial of Service Vuln...
BugTraq ID: 10785
Remote: Yes
Date Published: Jul 22 2004
Relevant URL: http://www.securityfocus.com/bid/10785
Summary:
A vulnerability is identified in the handling of certain types of requests by Xitami. Because of this, it is possible for a remote attacker to deny service to legitimate users of a vulnerable server.

Xitami 2.5c1 is reported prone to this issue, however, other versions may be affected as well.

44. Sun Java System Calendar Server Authentication Proxy Privile...
BugTraq ID: 10788
Remote: Yes
Date Published: Jul 23 2004
Relevant URL: http://www.securityfocus.com/bid/10788
Summary:
It has been reported that Sun Java System Portal Server is affected by a privilege escalation vulnerability in the calendar server when an authentication proxy is used. This issue is due to a failure of the application to validate access credentials.

This issue will allow an attacker to gain administrator access to the affected calendar server, allowing them to create, modify and delete users as well as calendar information. Other attacks are also possible.

45. HP-UX XFS Remote Unauthorized Access Vulnerability
BugTraq ID: 10790
Remote: Yes
Date Published: Jul 23 2004
Relevant URL: http://www.securityfocus.com/bid/10790
Summary:
HP has reported an unauthorized access vulnerability in HP-UX. Specifically, this issue presents itself in HP-UX running 'xfs'. It is reported that an unspecified vulnerability in 'xfs' may allow a remote attacker to gain unauthorized access to a vulnerable computer.

Due to a lack of details, further information is not available at the moment. This issue may be related to other vulnerabilities, however this cannot be confirmed at the moment. This BID will be updated as more information becomes available.

HP-UX versions B11.00, B11.11, B.11.22, and B11.23 are vulnerable to this issue.

46. HP-UX SMTKFONT Remote Unauthorized Access Vulnerability
BugTraq ID: 10791
Remote: Yes
Date Published: Jul 23 2004
Relevant URL: http://www.securityfocus.com/bid/10791
Summary:
HP has reported an unauthorized access vulnerability in HP-UX. Specifically, this issue presents itself in HP-UX running 'stmkfont'. It is reported that an unspecified vulnerability in 'stmkfont' may allow a remote attacker to gain unauthorized access to a vulnerable computer.

HP-UX versions B11.00, B11.11, B.11.22, and B11.23 are vulnerable to this issue.

III. SECURITYFOCUS NEWS ARTICLES
--------------------------------
1. ATM keypads get a security boost
By: Kevin Poulsen

Credit card companies are responding to a host of high and low-tech attacks on the sanctity of your ATM code.
http://www.securityfocus.com/news/9161

2. Companies adapt to a zero day world
By: Deborah Radcliff

Financial institutions with critical systems and cash on the line are reorganizing to deal with the closing gap between the hole and the patch.
http://www.securityfocus.com/news/9100

3. VoIP hacks gut Caller I.D.
By: Kevin Poulsen

Implementation quirks in Voice over IP are making it easy for hackers to spoof Caller I.D., and to unmask blocked numbers.

http://www.securityfocus.com/news/9061

4. eBay denies South Africa 419 hacking report
By: John Leyden, The Register

Auction site eBay has denied South African reports that a database of customer credit card numbers it maintains has been compromised by a Nigerian 419 syndicate.

http://www.securityfocus.com/news/9221

5. We're all MyDoomed
By: John Leyden, The Register

A computer virus which affected the operation of Google yesterday is spreading like wildfire.

http://www.securityfocus.com/news/9220

6. Google goes gimpy from MyDoom infection
By: Ashlee Vance , The Register

A variant of the MyDoom worm this morning triggered an unfortunate mini denial of service attack on a number of search engines - most notably Google.

http://www.securityfocus.com/news/9211

IV. SECURITYFOCUS TOP 6 TOOLS
-----------------------------
1. Lepton's Crack 20031130
By: Lepton and Nekromancer
Relevant URL: http://www.nestonline.com/lcrack/lcrack-20031130-beta.zip
Platforms: Linux, MacOS, Os Independent, UNIX, Windows 2000, Windows NT, Windows XP
Summary:

Lepton's Crack is a generic password cracker. It is easily-customizable with a simple plugin system and allows system administrators to review the quality of the passwords being used on their systems. It can perform a dictionary-based (wordlist) attack as well as a brute force (incremental) password scan. It supports standard MD4 hash, standard MD5 hash, NT MD4/Unicode, Lotus Domino HTTP password (R4), and SHA-1 hash formats. LM (LAN Manager) plus appending and prepending

2. ModemWall 1.2
By: Egemen Tas
Relevant URL: http://www.modemwall.com
Platforms: Windows 2000, Windows XP
Summary:

ModemWall is a dialing number filtering system for Windows 2000/XP (or later) operating systems. It is an agent designed to combat with unauthorized dialers (mostly known as porn dialers). ModemWall cuts off the problems caused by these dialers at the source : Prevent unauthorized numbers from being dialed regardless of the dialer which/who is trying to dial. With ModemWall, users can specify Authorized/Unauthorized numbers logically by using easy firewall like rules.

3. Clam Antivirus v0.75
By: Tomasz Kojm
Relevant URL: http://www.clamav.net
Platforms: UNIX
Summary:

Clam AntiVirus is an anti-virus toolkit for Unix. The main purpose of this software is the integration with mail servers (attachment scanning). The package provides a flexible and scalable multi-threaded daemon, a commandline scanner, and a tool for automatic updating via Internet. The programs are based on a shared library distributed with the Clam AntiVirus package, which you can use in your own software.

4. popa3d v0.6.4.1
By: Solar Designer, [email protected]
Relevant URL: http://www.openwall.com/popa3d/
Platforms: Linux, Solaris
Summary:

popa3d is a POP3 daemon which attempts to be extremely secure, reliable, RFC compliant, and fast (in that order).

5. tinysofa enterprise server 2.0-rc1
By: Omar Kilani
Relevant URL: http://www.tinysofa.org
Platforms: Linux, POSIX
Summary:

tinysofa enterprise server is a secure server targeted enterprise grade operating system. It is based on Trustix Secure Linux and includes a complete distribution port to Python 2.3 and RPM 4.2, an overhauled PAM authentication system providing system-wide authentication configuration, the latest upstream packages, the replacement of ncftp with lftp, the addition of gdb and screen, feature additions to the swup updater that provide multiple configuration file support, user login FTP support, enable/disable support, variable expansion support (allows multiple architectures), and many enhancements.

6. BitCrypt Free 2.1
By: Moshe Szweizer
Relevant URL: http://www.geocities.com/moshe_szweizer/index.html
Platforms: Windows 2000, Windows 95/98, Windows NT, Windows XP
Summary:

BitCrypt Free is a sophisticated tool allowing for encryption of plain text within bitmap image. While encrypting it modifies the individual pixel shadings of the image, and in this way incorporates the information related to the text being encoded. The modifications of the image are so small that the effect is not perceptible to the human eye.

V. SECURITYJOBS LIST SUMMARY
----------------------------
1. [SJ-JOB] Manager, Information Security, Washington D... (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/370027

2. [SJ-JOB] Account Manager, Westerville, US (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/370002

3. [SJ-RESUME] Security System Administrator (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/369973

4. [SJ-RESUME] Sr. Product Manager (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/369971

5. [SJ-RESUME] Security Consultant (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/369964

6. [SJ-JOB] Security Architect, San Francisco, US (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/369962

7. [SJ-JOB] Security Product Manager, Edison, US (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/369961

8. [SJ-JOB] Security System Administrator, Richmond, US (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/369935

9. [SJ-RESUME] Manager, Information Security (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/369928

10. [SJ-JOB] Sales Engineer, Bloomington, US (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/369916

11. [SJ-JOB] Security Product Manager, San Diego, US (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/369907

12. [SJ-JOB] Management, San Antonio, US (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/369905

13. [SJ-JOB] Chief Scientist, Richland, US (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/369827

14. [SJ-JOB] Sales Engineer, Hong Kong, HK (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/369770

15. [SJ-JOB] Security Consultant, Chicago suburbs, US (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/369719

16. [SJ-JOB] Manager, Information Security, Clearwater, ... (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/369708

17. [SJ-JOB] Security Product Manager, San Jose, US (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/369702

18. [SJ-JOB] Sales Engineer, New York, US (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/369701

19. [SJ-RESUME] Security Director (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/369654

20. [SJ-RESUME] Security Researcher (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/369653

21. [SJ-JOB] Security Architect, Los Angeles, US (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/369652

22. [SJ-JOB] Security Product Manager, Cupertino, US (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/369651

23. [SJ-JOB] Quality Assurance, Cupertino, US (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/369650

24. [SJ-JOB] Security Consultant, Cupertino, US (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/369649

25. [SJ-JOB] Technical Writer, Cupertino, US (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/369648

26. [SJ-JOB] Developer, Cupertino, US (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/369647

27. [SJ-JOB] Account Manager, Chicago, US (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/369646

28. [SJ-JOB] Security Consultant, Dallas, US (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/369645

29. [SJ-JOB] Account Manager, Dallas, US (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/369644

30. [SJ-JOB] Account Manager, Raleigh/Durham, US (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/369643

31. [SJ-JOB] CSO, Baton Rouge, US (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/369607

32. [SJ-RESUME] Jr. Security Analyst (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/369517

33. [SJ-RESUME] Security Engineer (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/369516

34. [SJ-JOB] Security Engineer, Washington DC, US (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/369515

35. [SJ-JOB] Security System Administrator, Dhahran, SA (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/369513

36. [SJ-JOB] Quality Assurance, Columbia, US (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/369505

37. [SJ-JOB] Sr. Security Analyst, San Francisco, US (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/369504

38. [SJ-JOB] Application Security Engineer, San Francisc... (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/369487

39. [SJ-JOB] Security Architect, Washington DC, US (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/369484

40. [SJ-JOB] Developer, Santa Clara, US (Thread)
Relevant URL:

http://www.securityfocus.com/archive/77/369483

VI. INCIDENTS LIST SUMMARY
--------------------------
1. SSH attacks? (Thread)
Relevant URL:

http://www.securityfocus.com/archive/75/370099

2. Re[2]: New Virus / Trojan ? (Thread)
Relevant URL:

http://www.securityfocus.com/archive/75/370093

3. New Virus / Trojan ? (Thread)
Relevant URL:

http://www.securityfocus.com/archive/75/370087

4. More Webserver / IE Exploits (Thread)
Relevant URL:

http://www.securityfocus.com/archive/75/369501

VII. VULN-DEV RESEARCH LIST SUMMARY
-----------------------------------
1. Call for Open Source Privacy and Security Projects a... (Thread)
Relevant URL:

http://www.securityfocus.com/archive/82/370058

2. Announcing Pak Con 1st (Thread)
Relevant URL:

http://www.securityfocus.com/archive/82/369877

3. samba base64 encode vulnerability (Thread)
Relevant URL:

http://www.securityfocus.com/archive/82/369846

4. Inappropriate methods exposed in XML -what's the es... (Thread)
Relevant URL:

http://www.securityfocus.com/archive/82/369510

VIII. MICROSOFT FOCUS LIST SUMMARY
----------------------------------
1. Proxy Server/ISA (Thread)
Relevant URL:

http://www.securityfocus.com/archive/88/370117

2. Windows Update v5 and XPSP2RC2 (Thread)
Relevant URL:

http://www.securityfocus.com/archive/88/370015

3. Browser Vulns (Thread)
Relevant URL:

http://www.securityfocus.com/archive/88/369937

4. VPN (Thread)
Relevant URL:

http://www.securityfocus.com/archive/88/369677

5. Microsoft Audit Collection System (Thread)
Relevant URL:

http://www.securityfocus.com/archive/88/369558

6. SecurityFocus Microsoft Newsletter #198 (Thread)
Relevant URL:

http://www.securityfocus.com/archive/88/369553

7. real world security though, was Browser Vulns (Thread)
Relevant URL:

http://www.securityfocus.com/archive/88/369551

IX. SUN FOCUS LIST SUMMARY
--------------------------
NO NEW POSTS FOR THE WEEK 2004-07-20 to 2004-07-27.

X. LINUX FOCUS LIST SUMMARY
---------------------------
1. Hack attempt (Thread)
Relevant URL:

http://www.securityfocus.com/archive/91/369855

2. Access to nfs server, Part 2 (Thread)
Relevant URL:

http://www.securityfocus.com/archive/91/369850

3. SSO on linux (Thread)
Relevant URL:

http://www.securityfocus.com/archive/91/369843

4. Access control for a NFS server (Thread)
Relevant URL:

http://www.securityfocus.com/archive/91/369508

XI. UNSUBSCRIBE INSTRUCTIONS
----------------------------
To unsubscribe send an e-mail message to [email protected] from the subscribed address. The contents of the subject or message body do not matter. You will receive a confirmation request message to which you will have to answer. Alternatively you can also visit http://www.securityfocus.com/newsletters and unsubscribe via the website.

If your email address has changed email [email protected] and ask to be manually removed.

XII. SPONSOR INFORMATION
-----------------------

This issue sponsored by: OSP Global, LLC - Your Offshore Security Partners

Visit us at: http://www.securityfocus.com/sponsor/OSPGlobal_sf-news_040727

------------------------------------------------------------------------