SecurityFocus Newsletter #423
[email protected] 17 Oct 2007 00:10:31 -0000
| Newsgroups | gmane.comp.security.news.general |
|---|---|
| Message-ID | <[email protected]> |
SecurityFocus Newsletter #423
----------------------------------------
This issue is Sponsored by: CSI
CSI 2007, November 3-9 in Washington, DC, is the only conference that del=
ivers a business-focused overview of enterprise security.=20
It will convene 2,000+ delegates, 80 exhibitors and features 100+ session=
s/seminars providing a roadmap for integrating policies and procedures wi=
th new tools and techniques. =20
Register now for savings on conference fees and/or free exhibits admissio=
n. =20
http://www.csiannual.com
SECURITY BLOGS
SecurityFocus has selected a few syndicated sources that stand out as con=
veying topics of interest for our community. We are proud to offer conten=
t from Matasano at this time and will be adding more in the coming weeks.
http://www.securityfocus.com/blogs
------------------------------------------------------------------
I. FRONT AND CENTER
1.Starting up with Aspect-Oriented Programming
2.Of Hackers and Ego
II. BUGTRAQ SUMMARY
1. Microsoft Internet Explorer Script Error Handling Memory Corrup=
tion Vulnerability
2. Microsoft Internet Explorer Address Bar Spoofing Vulnerability
3. DB Software Laboratory VImpX ActiveX Control RejectedRecordsFil=
e Buffer Overflow Vulnerability
4. Softbiz Recipes Portal Searchresult.PHP SQL Injection Vulnerabi=
lity
5. Sylpheed and Sylpheed-Claws POP3 Format String Vulnerability
6. Lighttpd Mod_FastCGI Request Headers Remote Header Overflow Vul=
nerability
7. Tcl/Tk ReadImage Buffer Overflow Vulnerability
8. Linux Kernel i965 Chipsets Insecure Batchbuffer Local Privilege=
Escalation Vulnerability
9. Linux Kernel ALSA snd-page-alloc Local Proc File Information Di=
sclosure Vulnerability
10. Live for Speed Skin Name Buffer Overflow Vulnerability
11. Linux PowerPC Kernel Restore_Sigcontext Local Denial of Servic=
e Vulnerability
12. Linux Kernel 64-Bit SMP Routing_ioctl() Local Denial of Servic=
e Vulnerability
13. IBM DB2 Universal Database Multiple Denial of Service Vulnerab=
ilities
14. Linux Kernel Bluetooth CAPI Packet Remote Buffer Overflow Vuln=
erability
15. Google Urchin Report.CGI Authorization Bypass Vulnerability
16. PHP File Sharing System Index.PHP Directory Traversal Vulnerab=
ility
17. Cisco IOS LPD Remote Buffer Overflow Vulnerability
18. DenyHosts Client Protocol Version Identification Remote Denial=
of Service Vulnerability
19. Ampache Albums.PHP SQL Injection Vulnerability
20. Linux Kernel EFLAGS NT Local Denial of Service Vulnerability
21. Linux Kernel HugeTLB Local Denial Of Service Vulnerability
22. Linux Kernel USB PWC Driver Local Denial Of Service Vulnerabil=
ity
23. Joomla! Com_Colorlab Component MosConfig_Live_Site Remote File=
Include Vulnerability
24. T1lib intT1_Env_GetCompletePath Buffer Overflow Vulnerability
25. X.Org XFS Init Script Insecure Temporary File Creation Vulnera=
bility
26. PBEmail ActiveX Edition SaveSenderToXml Arbitrary File Overwri=
te Vulnerability
27. Microsoft Windows Kodak Image Viewer Remote Code Execution Vul=
nerability
28. Apache Tomcat Multiple Remote Information Disclosure Vulnerabi=
lities
29. Apache Tomcat Host Manager Servlet Cross Site Scripting Vulner=
ability
30. Microsoft Outlook Express And Windows Mail NNTP Protocol Heap =
Buffer Overflow Vulnerability
31. Microsoft Windows RPC NTLMSSP Remote Denial Of Service Vulnera=
bility
32. Trolltech Qt UTF-8 Sequences Input Validation Vulnerability
33. Trolltech Qt ToUnicode Function Off By One Buffer Overflow Vul=
nerability
34. HP Select Identity Unspecified Remote Unauthorized Access Vuln=
erability
35. KDE KPDF/KWord/XPDF StreamPredictor Function Stack Buffer Over=
flow Vulnerability
36. Cyrus SASL Remote Digest-MD5 Denial of Service Vulnerability
37. IrfanView .PAL Importing Remote Stack Based Buffer Overflow Vu=
lnerability
38. WWWISIS IsisScript Local File Disclosure Vulnerability
39. Adobe Acrobat Mailto Unspecified PDF File Security Vulnerabili=
ty
40. phpMyAdmin Setup.PHP Cross-Site Scripting Vulnerability
41. WWWISIS Lang Parameter Cross-Site Scripting Vulnerability
42. Kerio Personal Firewall Remote Authentication Packet Buffer Ov=
erflow Vulnerability
43. Artmedic CMS Index.PHP Local File Include Vulnerability
44. LibPNG Graphics Library Chunk Error Processing Buffer Overflow=
Vulnerability
45. Trolltech Qt QTextEdit Multiple Format String Vulnerabilities
46. LibTIFF TIFFFindFieldInfo Remote Buffer Overflow Vulnerability
47. LibPNG Graphics Library PNG_SET_SPLT Remote Denial of Service =
Vulnerability
48. Libvorbis Denial Of Service And Memory Corruption Vulnerabilit=
ies
49. Distributed Checksum Clearinghouse SOCKS Unspecified Denial Of=
Service Vulnerability
50. WebMod AUTH.W Cross-Site Scripting Vulnerability
51. Microsoft Windows URI Handler Command Execution Vulnerability
52. Sun StorEdge 3510 FC Array FTP Service Denial of Service Vulne=
rability
53. VirtueMart Unspecified Arbitrary PHP Code Execution Vulnerabil=
ity
54. Sun Java Runtime Environment Font Parsing Remote Privilege Esc=
alation Vulnerability
55. Sun JavaDoc Tool Cross-Site Scripting Vulnerability
56. Sun Java RunTime Environment GIF Images Buffer Overflow Vulner=
ability
57. Sun JSSE SSL/TLS Handshake Processing Denial Of Service Vulner=
ability
58. Sun JDK JPG/BMP Parser Multiple Vulnerabilities
59. OpenSSL SSL_Get_Shared_Ciphers Off-by-One Buffer Overflow Vuln=
erability
60. ISC BIND 8 Remote Cache Poisoning Vulnerability
61. OpenSSL DTLS Heap Buffer Overflow Vulnerability
62. util-linux mount umount Local Privilege Escalation Vulnerabili=
ty
63. Linux Kernel Ptrace Local Privilege Escalation Vulnerability
64. Linux Kernel AACRAID Driver Local Security Bypass Vulnerabilit=
y
65. Linux Kernel USBLCD Memory Consumption Denial Of Service Vulne=
rability
66. Linux Kernel Parent Process Death Signal Local Security Bypass=
Weakness
67. Linux Kernel Random Number Generator Local Denial of Service a=
nd Privilege Escalation Vulnerability
68. Linux Kernel Decode_Choices Function Remote Denial Of Service =
Vulnerability
69. Linux Kernel CPUSet Tasks Memory Leak Information Disclosure V=
ulnerability
70. Linux Kernel SCTP Connection Denial Of Service Vulnerability
71. Linux Kernel PPPoE Socket Local Denial of Service Vulnerabilit=
y
72. Linux Kernel PRNG Entropy Weakness
73. Linux Kernel Fib_Semantics.C Out Of Bounds Access Vulnerabilit=
y
74. IPv6 Protocol Type 0 Route Header Denial of Service Vulnerabil=
ity
75. Linux Kernel Netfilter nf_conntrack IPv6 Packet Reassembly Rul=
e Bypass Vulnerability
76. HP-UX OpenSSL Unspecified Local Denial Of Service Vulnerabilit=
y
77. TIBCO SmartPGM FX Multiple Remote Vulnerabilities
78. InnovaShop Multiple Cross-Site Scripting Vulnerabilities
79. Stringbeans Portal Projects Script Cross-Site Scripting Vulner=
ability
80. MIT Kerberos 5 KAdminD Server SVCAuth_GSS_Validate Stack Buffe=
r Overflow Vulnerability
81. Microsoft ActiveSync Weak Password Obfuscation Information Dis=
closure Vulnerability
82. KwsPHP MG2 Module SQL Injection Vulnerability
83. Counter-Strike 1.6 Multiple Remote Vulnerabilities
84. NSSBoard Multiple HTML Injection Vulnerabilities
85. eXtremail Multiple Remote Buffer Overflow Vulnerabilities
86. dotProject Companies Module Security Bypass Vulnerability
87. IBM WebSphere Application Server Administrative Scripting Tool=
s Unspecified Vulnerability
88. doop Index.php Local File Include Vulnerability
89. Novell SUSE ISC BIND Named LibGSSAPI Denial Of Service Vulnera=
bility
90. TRAMP Extension For Emacs Multiple Insecure Temporary File Cre=
ation Vulnerabilities
91. NETGEAR SSL312 PROSAFE SSL VPN-Concentrator 25 Error Page Cros=
s Site Scripting Vulnerability
92. Microsoft Internet Explorer Extension Filter Bypass Arbitrary =
File Download Vulnerability
93. GNU Tar Dot_Dot Function Remote Directory Traversal Vulnerabil=
ity
94. Sun Solaris RPC Services Library librpcsvc(3LIB) Denial of Ser=
vice Vulnerability
95. HP Linux Imaging and Printing System HSSPD.PY Daemon Arbitrary=
Command Execution Vulnerability
96. Apache Tomcat WebDav Remote Information Disclosure Vulnerabili=
ty
97. COWON America jetAudio M3U File Processing Remote Buffer Overf=
low Vulnerability
98. Sun Java WebStart Multiple File Access And Information Disclos=
ure Vulnerabilities
99. Sun Java Runtime Environment Multiple Weaknesses
100. KDE KDM Unspecified Password Authentication Bypass Vulnerabil=
ity
III. SECURITYFOCUS NEWS
1. Retailers look to exorcise credit-card data
2. DHS, Unisys scrutinized after data breach
3. Customers: TD Ameritrade failed to warn of breach
4. Max Vision charged with hacking -- again
IV. SECURITY JOBS LIST SUMMARY
1. [SJ-JOB] Security Consultant, Hertfordshire
2. [SJ-JOB] Security Researcher, Kolkata
3. [SJ-JOB] Application Security Engineer, London
4. [SJ-JOB] Account Manager, Toronto
5. [SJ-JOB] Information Assurance Analyst, Miami
6. [SJ-JOB] Quality Assurance, Mountain View
7. [SJ-JOB] Sr. Security Analyst, Eden Prairie
8. [SJ-JOB] Security Engineer, Washington
9. [SJ-JOB] Sales Engineer, Herndon
10. [SJ-JOB] Security Engineer, Washington
11. [SJ-JOB] Application Security Engineer, Boston
12. [SJ-JOB] Security Engineer, Baltimore
13. [SJ-JOB] Customer Service, Mountain View
14. [SJ-JOB] Database Security Engineer, King of Prussia
15. [SJ-JOB] Application Security Engineer, Denver
16. [SJ-JOB] Security Engineer, Carpinteria
17. [SJ-JOB] Security Engineer, Atlanta
18. [SJ-JOB] Security Consultant, Charlotte
19. [SJ-JOB] Security Consultant, Charlotte
20. [SJ-JOB] Security Architect, Woodbridge
21. [SJ-JOB] Technical Marketing Engineer, Berkshire
22. [SJ-JOB] Sr. Security Engineer, Edison
23. [SJ-JOB] VP, Information Security, Berkshire
24. [SJ-JOB] Application Security Engineer, Houston
25. [SJ-JOB] Director, Information Security, Fairfax (Metro Area)
26. [SJ-JOB] Director, Information Security, Herndon
27. [SJ-JOB] Security Product Marketing Manager, Hopkinton
28. [SJ-JOB] Security Consultant, Singapore
29. [SJ-JOB] Sales Engineer, Boston
30. [SJ-JOB] Sr. Security Engineer, Chicago Area
31. [SJ-JOB] Security Consultant, Atlanta
32. [SJ-JOB] Information Assurance Analyst, New York
33. [SJ-JOB] Software Engineer, Mountain View
34. [SJ-JOB] Certification & Accreditation Engineer, Chantilly
V. INCIDENTS LIST SUMMARY
VI. VULN-DEV RESEARCH LIST SUMMARY
1. IRM Demonstrates Multiple Cisco IOS Exploitation Techniques
VII. MICROSOFT FOCUS LIST SUMMARY
1. SecurityFocus Microsoft Newsletter #363
VIII. SUN FOCUS LIST SUMMARY
IX. LINUX FOCUS LIST SUMMARY
1. Linux Hardening
X. UNSUBSCRIBE INSTRUCTIONS
XI. SPONSOR INFORMATION
I. FRONT AND CENTER
---------------------
1.Starting up with Aspect-Oriented Programming
By Rohit Sethi
Aspect-oriented programming (AOP) is a paradigm that is quickly gaining t=
raction in the development world. At least partially spurred by the popul=
arity of the Java Spring framework [1], people are beginning to understan=
d the substantial benefits that AOP brings to development.
http://www.securityfocus.com/infocus/1895
2.Of Hackers and Egos
By Don Parker
The world of computer security can often be a strange and compelling one.=
Many outsiders, or those with little knowledge of computers, just don't =
understand the whole uproar over various issues, such as whether Microsof=
t Vista is more secure then Linux or Mac. It's all moot as far as the gen=
eral population is concerned. But, for those of use who work in the indus=
try, it is just more grist for the mill.=20
http://www.securityfocus.com/columnists/454
II. BUGTRAQ SUMMARY
--------------------
1. Microsoft Internet Explorer Script Error Handling Memory Corruption Vu=
lnerability
BugTraq ID: 25916
Remote: Yes
Last Updated: 2007-10-16
Relevant URL: http://www.securityfocus.com/bid/25916
Summary:
Microsoft Internet Explorer is prone to a remote code-execution vulnerabi=
lity.
An attacker may exploit this issue by enticing victims into viewing malic=
iously crafted HTML content.
Successfully exploiting this issue allows arbitrary machine code to execu=
te in the context of the affected application. This facilitates the remot=
e compromise of affected computers.
2. Microsoft Internet Explorer Address Bar Spoofing Vulnerability
BugTraq ID: 25915
Remote: Yes
Last Updated: 2007-10-16
Relevant URL: http://www.securityfocus.com/bid/25915
Summary:
Microsoft Internet Explorer is prone to a vulnerability that lets attacke=
rs spoof the address bar of a trusted site.
Attackers may exploit this vulnerability via a malicious webpage to spoof=
the contents and origin of a page that the victim may trust. Attackers m=
ay find this issue useful in phishing or other attacks that rely on conte=
nt spoofing.
3. DB Software Laboratory VImpX ActiveX Control RejectedRecordsFile Buffe=
r Overflow Vulnerability
BugTraq ID: 26064
Remote: Yes
Last Updated: 2007-10-15
Relevant URL: http://www.securityfocus.com/bid/26064
Summary:
The 'VImpX.ocx' ActiveX control shipped with the VImpX application is pro=
ne to a buffer-overflow vulnerability. The software fails to perform suff=
icient boundary checks of user-supplied input before copying it to an ins=
ufficiently sized memory buffer.
=20
VImpX 4.7.3.0 is reported vulnerable to this issue; other products may be=
vulnerable as well.
4. Softbiz Recipes Portal Searchresult.PHP SQL Injection Vulnerability
BugTraq ID: 26063
Remote: Yes
Last Updated: 2007-10-15
Relevant URL: http://www.securityfocus.com/bid/26063
Summary:
Softbiz Recipes Portal is prone to an SQL-injection vulnerability because=
it fails to sufficiently sanitize user-supplied data before using it in =
an SQL query.
Exploiting this issue could allow an attacker to compromise the applicati=
on, access or modify data, or exploit latent vulnerabilities in the under=
lying database.
5. Sylpheed and Sylpheed-Claws POP3 Format String Vulnerability
BugTraq ID: 25430
Remote: Yes
Last Updated: 2007-10-15
Relevant URL: http://www.securityfocus.com/bid/25430
Summary:
Sylpheed and Sylpheed-Claws are prone to a format-string vulnerability.=20
This issue presents itself because the applications fail to properly sani=
tize POP3 server error responses that contain format specifiers.
A successful attack may crash the application or possibly lead to arbitra=
ry code execution. This may facilitate unauthorized access or privilege e=
scalation in the context of the user running the application.
Sylpheed 2.4.4, Sylpheed-Claws 1.9.100, and Sylpheed-Claws 'Claws Mail' 2=
.10.0 are vulnerable to this issue; other versions may also be affected.
6. Lighttpd Mod_FastCGI Request Headers Remote Header Overflow Vulnerabil=
ity
BugTraq ID: 25622
Remote: Yes
Last Updated: 2007-10-15
Relevant URL: http://www.securityfocus.com/bid/25622
Summary:
Lighttpd is prone to a remote header-overflow vulnerability because the a=
pplication fails to properly bounds-check user-supplied data before copyi=
ng it.
An attacker may exploit this issue to overwrite PHP headers such as 'SCRI=
PT_FILENAME'. This may allow the attacker to execute to script code, obta=
in sensitive information, and launch other attacks. Exploiting this issue=
may also aid in the remote compromise of an affected computer.
Lighttpd 1.4.17 is vulnerable; prior versions may also be affected.
7. Tcl/Tk ReadImage Buffer Overflow Vulnerability
BugTraq ID: 25826
Remote: Yes
Last Updated: 2007-10-15
Relevant URL: http://www.securityfocus.com/bid/25826
Summary:
Tcl/Tk is prone to a buffer-overflow vulnerability that resides in the Tk=
library shipped with Tcl.
An attacker can exploit this issue to execute arbitrary code or cause den=
ial-of-service conditions in applications implementing the affected libra=
ry.=20
Versions prior to Tcl/Tk 8.4.16 are vulnerable to this issue.
8. Linux Kernel i965 Chipsets Insecure Batchbuffer Local Privilege Escala=
tion Vulnerability
BugTraq ID: 25263
Remote: No
Last Updated: 2007-10-15
Relevant URL: http://www.securityfocus.com/bid/25263
Summary:
The Linux kernel is prone to a local privilege-escalation vulnerability.
Exploiting this issue may allow local attackers to gain elevated privileg=
es, facilitating the complete compromise of affected computers.
Versions of Linux kernel prior to 2.6.22.2 are vulnerable to this issue.
9. Linux Kernel ALSA snd-page-alloc Local Proc File Information Disclosur=
e Vulnerability
BugTraq ID: 25807
Remote: No
Last Updated: 2007-10-15
Relevant URL: http://www.securityfocus.com/bid/25807
Summary:
The Linux kernel is prone to an information-disclosure vulnerability.
Successful exploits will allow attackers to obtain portions of kernel mem=
ory. Information harvested may aid in further attacks.
Versions of the Linux kernel prior to 2.6.22.8 are vulnerable.
10. Live for Speed Skin Name Buffer Overflow Vulnerability
BugTraq ID: 26066
Remote: Yes
Last Updated: 2007-10-15
Relevant URL: http://www.securityfocus.com/bid/26066
Summary:
Live for Speed is prone to a buffer-overflow vulnerability because the ap=
plication fails to properly bounds-check user-supplied data before copyin=
g it into an insufficiently sized buffer.=20
An attacker can exploit this issue to execute arbitrary code with the pri=
vileges of the user running the vulnerable application. Successfully expl=
oiting this issue will allow remote attackers to compromise affected comp=
uters. Failed exploit attempts will likely cause denial-of-service condit=
ions.
11. Linux PowerPC Kernel Restore_Sigcontext Local Denial of Service Vulne=
rability
BugTraq ID: 24845
Remote: No
Last Updated: 2007-10-15
Relevant URL: http://www.securityfocus.com/bid/24845
Summary:
The PowerPC Linux kernel is prone to a denial-of-service vulnerability.
Exploiting this issue allows local attackers to corrupt floating-point re=
gisters, denying further service to legitimate users.=20
Note that this issue affects only the Linux kernel on PowerPC architectur=
es.
12. Linux Kernel 64-Bit SMP Routing_ioctl() Local Denial of Service Vulne=
rability
BugTraq ID: 14902
Remote: No
Last Updated: 2007-10-15
Relevant URL: http://www.securityfocus.com/bid/14902
Summary:
A local denial-of-service vulnerability affects the Linux kernel on 64-bi=
t Symmetric Multi-Processor (SMP) platforms.=20
Specifically, the vulnerability presents itself due to an omitted call to=
the 'sockfd_put()' function in the 32-bit-compatible 'routing_ioctl()' f=
unction.=20
The 32-bit-compatible 'tiocgdev ioctl()' function on x86-64 platforms is =
affected by this issue as well.
13. IBM DB2 Universal Database Multiple Denial of Service Vulnerabilities
BugTraq ID: 26010
Remote: Yes
Last Updated: 2007-10-15
Relevant URL: http://www.securityfocus.com/bid/26010
Summary:
IBM DB2 Universal Database is prone to two denial-of-service vulnerabilit=
ies.
Successfully exploiting these issues allows attackers to cause server cra=
shes, denying service to legitimate users.
IBM DB2 Universal Database 8.1 and 8.2 are vulnerable to these issues.
NOTE: Information regarding the buffer-overflow vulnerability previously =
documented in this BID has been removed. That vulnerability is documented=
in a separate record: BID 23890 (IBM DB2 Universal Database JDBC Applet =
Server Unspecified Code Execution Vulnerability).
14. Linux Kernel Bluetooth CAPI Packet Remote Buffer Overflow Vulnerabili=
ty
BugTraq ID: 21604
Remote: Yes
Last Updated: 2007-10-15
Relevant URL: http://www.securityfocus.com/bid/21604
Summary:
The Linux kernel is prone to a remote buffer-overflow vulnerability becau=
se the kernel fails to bounds-check user-supplied data before copying it =
into an insufficiently sized buffer.=20
An attacker may exploit this issue to execute arbitrary code with kernel-=
level privileges, facilitating the complete compromise of affected comput=
ers. Failed exploit attempts will result in denial-of-service conditions.=
=20
Versions prior to 2.4.33.5 are vulnerable to this issue.
15. Google Urchin Report.CGI Authorization Bypass Vulnerability
BugTraq ID: 26037
Remote: Yes
Last Updated: 2007-10-15
Relevant URL: http://www.securityfocus.com/bid/26037
Summary:
Google Urchin is prone to an authentication-bypass vulnerability.
An attacker can exploit this issue to gain administrative access to the v=
ulnerable application. This may lead to other attacks.=20
Urchin 5.7.03 is vulnerable to this issue; other versions may also be aff=
ected.
NOTE: Further reports suggest that this is not a vulnerability, but a doc=
umented feature of the application.
16. PHP File Sharing System Index.PHP Directory Traversal Vulnerability
BugTraq ID: 26065
Remote: Yes
Last Updated: 2007-10-15
Relevant URL: http://www.securityfocus.com/bid/26065
Summary:
PHP File Sharing System is prone to a directory-traversal vulnerability b=
ecause it fails to sufficiently sanitize user-supplied input data.
Exploiting this issue may allow an attacker to access sensitive informati=
on, delete files, and create new directories.
This issue affects PHP File Sharing System 1.5.1; other versions may also=
be vulnerable.
17. Cisco IOS LPD Remote Buffer Overflow Vulnerability
BugTraq ID: 26001
Remote: Yes
Last Updated: 2007-10-15
Relevant URL: http://www.securityfocus.com/bid/26001
Summary:
Cisco IOS is prone to a remote buffer-overflow vulnerability in its LPD s=
ervice because it fails to perform adequate boundary checks on user-suppl=
ied data.
Attackers can exploit this issue to execute arbitrary code in the context=
of the affected component. Attackers could also restart the device, resu=
lting in denial-of-service conditions.
To exploit this issue, an attacker must be able to change the hostname of=
affected routers. SNMP write access may allow attackers to change the ro=
uter's hostname.
Versions prior to Cisco IOS 12.2(18)SXF11, 12.4(16a), and 12.4(2)T6 are v=
ulnerable.
This issue is being tracked by Cisco bug ID CSCsj86725.
NOTE: This issue is related to the vulnerabilities described in BID 25994=
(Cisco IOS Multiple Unspecified Stack Overflow Vulnerabilities).
18. DenyHosts Client Protocol Version Identification Remote Denial of Ser=
vice Vulnerability
BugTraq ID: 26061
Remote: Yes
Last Updated: 2007-10-15
Relevant URL: http://www.securityfocus.com/bid/26061
Summary:
DenyHosts is prone to a remote denial-of-service vulnerability becaus the=
application fails to properly ensure the source of authentication-failur=
e messages.
Successfully exploiting this issue allows remote attackers to add arbitra=
ry IP addresses to the block list used by the application. Exploiting thi=
s allows attackers to deny further SSH network access to arbitrary IP add=
resses, denying service to legitimate users.
This issue is a variant of the vulnerability discussed in BID 21468 (Deny=
Hosts Remote Denial of Service Vulnerability).
19. Ampache Albums.PHP SQL Injection Vulnerability
BugTraq ID: 25362
Remote: Yes
Last Updated: 2007-10-15
Relevant URL: http://www.securityfocus.com/bid/25362
Summary:
Ampache is prone to an SQL-injection vulnerability because the applicatio=
n fails to properly sanitize user-supplied input before using it in an SQ=
L query.=20
=20
A successful exploit could allow an attacker to compromise the applicatio=
n, access or modify data, or exploit vulnerabilities in the underlying da=
tabase.
Versions prior to Ampache 3.3.3.5 are vulnerable.
20. Linux Kernel EFLAGS NT Local Denial of Service Vulnerability
BugTraq ID: 26060
Remote: No
Last Updated: 2007-10-15
Relevant URL: http://www.securityfocus.com/bid/26060
Summary:
The Linux kernel is prone to a local denial-of-service vulnerability.=20
A local attacker can exploit this issue to crash processes belonging to =
other users.
Versions prior to 2.6.18 are vulnerable to this issue.
21. Linux Kernel HugeTLB Local Denial Of Service Vulnerability
BugTraq ID: 25904
Remote: No
Last Updated: 2007-10-15
Relevant URL: http://www.securityfocus.com/bid/25904
Summary:
The Linux Kernel is prone to a local denial-of-service vulnerability caus=
ed by a design error in the 'hugetlbfs' handling procedures.
This issue affects kernel 2.6.x versions prior to 2.6.18.
22. Linux Kernel USB PWC Driver Local Denial Of Service Vulnerability
BugTraq ID: 25504
Remote: No
Last Updated: 2007-10-15
Relevant URL: http://www.securityfocus.com/bid/25504
Summary:
The Linux Kernel is prone to a local denial-of-service vulnerability beca=
use it fails to properly free resources of USB PWC devices.
Attackers can exploit this issue to block the USB subsystem, resulting in=
denial-of-service conditions.
Versions prior to 2.6.22.6 are vulnerable.
23. Joomla! Com_Colorlab Component MosConfig_Live_Site Remote File Includ=
e Vulnerability
BugTraq ID: 26059
Remote: Yes
Last Updated: 2007-10-15
Relevant URL: http://www.securityfocus.com/bid/26059
Summary:
The Joomla! Com_Colorlab component is prone to a remote file-include vuln=
erability because it fails to sufficiently sanitize user-supplied input.
Exploiting this issue may allow an attacker to compromise the application=
and the underlying system; other attacks are also possible.
24. T1lib intT1_Env_GetCompletePath Buffer Overflow Vulnerability
BugTraq ID: 25079
Remote: Yes
Last Updated: 2007-10-15
Relevant URL: http://www.securityfocus.com/bid/25079
Summary:
T1lib is prone to a buffer-overflow vulnerability because the library fai=
ls to perform boundary checks before copying user-supplied data to insuff=
iciently sized memory buffers.
=20
An attacker can exploit this issue to execute arbitrary machine code in t=
he context of applications that use the affected library. Failed exploit =
attempts will likely trigger crashes, denying service to legitimate users=
. =20
We do not know which versions of T1lib are affected.
25. X.Org XFS Init Script Insecure Temporary File Creation Vulnerability
BugTraq ID: 24888
Remote: No
Last Updated: 2007-10-15
Relevant URL: http://www.securityfocus.com/bid/24888
Summary:
The X Font Server (XFS) creates temporary files in an insecure manner.
An attacker with local access could potentially exploit this issue to per=
form symlink attacks to alter the permissions of an arbitrary attacker-su=
pplied file.
26. PBEmail ActiveX Edition SaveSenderToXml Arbitrary File Overwrite Vuln=
erability
BugTraq ID: 26058
Remote: Yes
Last Updated: 2007-10-15
Relevant URL: http://www.securityfocus.com/bid/26058
Summary:
PBEmail ActiveX Edition is prone to a vulnerability that lets attackers o=
verwrite arbitrary local files. This may aid in further attacks.
This issue affects PBEmail ActiveX Edition 7; other versions may also be =
affected.
27. Microsoft Windows Kodak Image Viewer Remote Code Execution Vulnerabil=
ity
BugTraq ID: 25909
Remote: Yes
Last Updated: 2007-10-16
Relevant URL: http://www.securityfocus.com/bid/25909
Summary:
Microsoft Windows Kodak Image Viewer is prone to a remote code-execution =
vulnerability because it fails to properly bounds-check user-supplied dat=
a.
Remote attackers can exploit this issue to execute arbitrary machine code=
in the context of a user running the application. Successful exploits wi=
ll compromise the user's account and possibly the underlying computer. Fa=
iled attacks will likely cause denial-of-service conditions.
NOTE: Affected versions of Windows XP are vulnerable only if they have be=
en upgraded from Windows 2000.
28. Apache Tomcat Multiple Remote Information Disclosure Vulnerabilities
BugTraq ID: 25316
Remote: Yes
Last Updated: 2007-10-16
Relevant URL: http://www.securityfocus.com/bid/25316
Summary:
Apache Tomcat is prone to multiple information-disclosure vulnerabilities=
because it fails to adequately sanitize user-supplied data.
Attackers can exploit these issues to access potentially sensitive data t=
hat may aid in further attacks.
Versions prior to Apache Tomcat 6.0.14 are vulnerable.
29. Apache Tomcat Host Manager Servlet Cross Site Scripting Vulnerability
BugTraq ID: 25314
Remote: Yes
Last Updated: 2007-10-16
Relevant URL: http://www.securityfocus.com/bid/25314
Summary:
Apache Tomcat Host Manager Servlet is prone to a cross-site scripting vul=
nerability because the application fails to properly sanitize user-suppli=
ed input. =20
=20
An attacker can exploit this vulnerability to inject HTML and script code=
into the browser of an unsuspecting victim. The attacker may then steal =
cookie-based authentication credentials and launch other attacks.
Apache Tomcat 5.5.0 through 5.5.24 and 6.0.0 through 6.0.13 are affected.
30. Microsoft Outlook Express And Windows Mail NNTP Protocol Heap Buffer =
Overflow Vulnerability
BugTraq ID: 25908
Remote: Yes
Last Updated: 2007-10-16
Relevant URL: http://www.securityfocus.com/bid/25908
Summary:
Microsoft Outlook Express and Windows Mail are prone to a remote heap-bas=
ed buffer-overflow vulnerability. This issue occurs because the applicati=
ons fail to perform adequate boundary-checks on user-supplied data.
Successfully exploiting this issue will allow an attacker to execute arbi=
trary code with the privileges of the currently logged-in user.
31. Microsoft Windows RPC NTLMSSP Remote Denial Of Service Vulnerability
BugTraq ID: 25974
Remote: Yes
Last Updated: 2007-10-16
Relevant URL: http://www.securityfocus.com/bid/25974
Summary:
Microsoft Windows is prone to a remote denial-of-service vulnerability be=
cause it fails to adequately handle specially crafted RPC packets.
Attackers can exploit this issue to cause an affected computer to stop re=
sponding or to restart. Successful attacks will deny service to legitimat=
e users.
32. Trolltech Qt UTF-8 Sequences Input Validation Vulnerability
BugTraq ID: 23269
Remote: Yes
Last Updated: 2007-10-16
Relevant URL: http://www.securityfocus.com/bid/23269
Summary:
Trolltech Qt is prone to an input-validation vulnerability because the ap=
plication fails to properly sanitize user-supplied input.=20
An attacker may leverage this issue to exploit other issues in applicatio=
ns that employ the affected library. A successful attack may allow the at=
tacker to execute arbitrary HTML and script code in the browser of an uns=
uspecting user in the context of the affected site. This may help the att=
acker steal cookie-based authentication credentials and launch other atta=
cks. =20
=20
Qt 3.3.8 and 4.2.3 are known to be vulnerable to this issue; other versio=
ns may be affected as well.
33. Trolltech Qt ToUnicode Function Off By One Buffer Overflow Vulnerabil=
ity
BugTraq ID: 25657
Remote: Yes
Last Updated: 2007-10-16
Relevant URL: http://www.securityfocus.com/bid/25657
Summary:
Qt is prone to a buffer-overflow vulnerability because the framework fail=
s to perform adequate boundary checks on user-supplied data.=20
An attacker can exploit this issue to execute arbitrary code within the c=
ontext of applications that use the affected framework. Failed exploit at=
tempts will result in a denial-of-service condition.
34. HP Select Identity Unspecified Remote Unauthorized Access Vulnerabili=
ty
BugTraq ID: 26023
Remote: Yes
Last Updated: 2007-10-16
Relevant URL: http://www.securityfocus.com/bid/26023
Summary:
HP Select Identity is prone to an unauthorized-access vulnerability.
An attacker can exploit this issue to gain remote unauthorized access to =
affected computers.
Select Identity 4.01 to 4.01.010 and 4.10 to 4.13.001 are vulnerable.
35. KDE KPDF/KWord/XPDF StreamPredictor Function Stack Buffer Overflow Vu=
lnerability
BugTraq ID: 25124
Remote: Yes
Last Updated: 2007-10-16
Relevant URL: http://www.securityfocus.com/bid/25124
Summary:
KDE kpdf, kword, and xpdf are prone to a stack-based buffer-overflow vuln=
erability because the applications fail to bounds-check user-supplied dat=
a before copying it into an insufficiently sized buffer.=20
An attacker can exploit this issue to execute arbitrary code within the c=
ontext of the affected application or cause the affected application to c=
rash, denying service to legitimate users.
36. Cyrus SASL Remote Digest-MD5 Denial of Service Vulnerability
BugTraq ID: 17446
Remote: Yes
Last Updated: 2007-10-16
Relevant URL: http://www.securityfocus.com/bid/17446
Summary:
Cyrus SASL is affected by a remote denial-of-service vulnerability. This =
issue occurs before successful authentication, allowing anonymous remote =
attackers to trigger it.
This vulnerability allows remote attackers to crash services using the af=
fected SASL library, denying service to legitimate users.
This issue reportedly affects version 2.1.18 of Cyrus SASL; other version=
s may also be affected.
37. IrfanView .PAL Importing Remote Stack Based Buffer Overflow Vulnerabi=
lity
BugTraq ID: 26089
Remote: Yes
Last Updated: 2007-10-16
Relevant URL: http://www.securityfocus.com/bid/26089
Summary:
IrfanView is prone to a remote stack-based buffer-overflow vulnerability =
because the software fails to properly bounds-check user-supplied input b=
efore copying it to an insufficiently sized memory buffer.
Successful exploits allow remote attackers to execute arbitrary machine c=
ode in the context of the vulnerable application. Failed exploit attempts=
likely result in denial-of-service conditions.
IrfanView 4.00 is vulnerable; other versions may also be affected.
38. WWWISIS IsisScript Local File Disclosure Vulnerability
BugTraq ID: 26079
Remote: Yes
Last Updated: 2007-10-16
Relevant URL: http://www.securityfocus.com/bid/26079
Summary:
WWWISIS is prone to a vulnerability that allows remote attackers to displ=
ay the contents of arbitrary local files in the context of the webserver =
process.
An attacker may be able to exploit this issue to retrieve potentially sen=
sitive information that may aid in further attacks.
This issue affects WWWISIS 7.1; other versions may also be vulnerable.
39. Adobe Acrobat Mailto Unspecified PDF File Security Vulnerability
BugTraq ID: 25748
Remote: Yes
Last Updated: 2007-10-16
Relevant URL: http://www.securityfocus.com/bid/25748
Summary:
Adobe Acrobat is prone to an unspecified vulnerability when handling mali=
cious PDF files.
No further technical details are currently available. We will update this=
BID as more information emerges.
This issue reportedly allows remote attackers to compromise affected comp=
uters.
40. phpMyAdmin Setup.PHP Cross-Site Scripting Vulnerability
BugTraq ID: 26020
Remote: Yes
Last Updated: 2007-10-16
Relevant URL: http://www.securityfocus.com/bid/26020
Summary:
phpMyAdmin is prone to a cross-site scripting vulnerability because it fa=
ils to properly sanitize user-supplied input.
An attacker may leverage this issue to execute arbitrary script code in t=
he browser of an unsuspecting user in the context of the affected site. T=
his may help the attacker steal potentially sensitive information and lau=
nch other attacks.
This issue affects phpMyAdmin 2.11.1; other versions may also be vulnerab=
le.
41. WWWISIS Lang Parameter Cross-Site Scripting Vulnerability
BugTraq ID: 26067
Remote: Yes
Last Updated: 2007-10-16
Relevant URL: http://www.securityfocus.com/bid/26067
Summary:
WWWISIS is prone to a cross-site scripting vulnerability because the appl=
ication fails to properly sanitize user-supplied input.=20
An attacker may leverage this issue to execute arbitrary script code in t=
he browser of an unsuspecting user in the context of the affected site. T=
his may help the attacker steal cookie-based authentication credentials a=
nd launch other attacks.
42. Kerio Personal Firewall Remote Authentication Packet Buffer Overflow =
Vulnerability
BugTraq ID: 7180
Remote: Yes
Last Updated: 2007-10-16
Relevant URL: http://www.securityfocus.com/bid/7180
Summary:
A buffer-overflow vulnerability has been discovered in Kerio Personal Fir=
ewall. The problem occurs during the administration authentication proces=
s. An attacker could exploit this vulnerability by forging a malicious pa=
cket containing an excessive data size. The application then reads this d=
ata into a static memory buffer without first performing sufficient boun=
ds checking.=20
Successful exploits of this vulnerability may allow an attacker to execut=
e arbitrary commands on a target system, with the privileges of the firew=
all.=20
Note that this vulnerability affects Kerio Personal Firewall 2.1.4 and ea=
rlier.
43. Artmedic CMS Index.PHP Local File Include Vulnerability
BugTraq ID: 26090
Remote: Yes
Last Updated: 2007-10-16
Relevant URL: http://www.securityfocus.com/bid/26090
Summary:
Artmedic CMS is prone to a local file-include vulnerability because it fa=
ils to properly sanitize user-supplied input.
Exploiting this issue may allow an unauthorized user to execute local scr=
ipts or to view arbitrary files that may contain sensitive information th=
at can aid in further attacks.=20
Artmedic CMS 3.5 is vulnerable to this issue; other versions may also be =
affected.
44. LibPNG Graphics Library Chunk Error Processing Buffer Overflow Vulner=
ability
BugTraq ID: 18698
Remote: Yes
Last Updated: 2007-10-16
Relevant URL: http://www.securityfocus.com/bid/18698
Summary:
LibPNG is reported prone to a buffer-overflow vulnerability. The library =
fails to perform proper bounds-checking of user-supplied input before cop=
ying it to an insufficiently sized memory buffer.
This vulnerability may be exploited to execute attacker-supplied code in =
the context of an application that relies on the affected library.
45. Trolltech Qt QTextEdit Multiple Format String Vulnerabilities
BugTraq ID: 25154
Remote: Yes
Last Updated: 2007-10-16
Relevant URL: http://www.securityfocus.com/bid/25154
Summary:
Trolltech Qt is prone to multiple format-string vulnerabilities because i=
t fails to securely display error messages.
Exploiting these issues can allow remote attackers to execute arbitrary c=
ode in the context of the application using the framework or to cause den=
ial-of-service conditions.
These issues affect only Qt 3; other versions of Qt are not affected. Not=
e that KDE and other applications that use the affected framework are inh=
erently affected.
46. LibTIFF TIFFFindFieldInfo Remote Buffer Overflow Vulnerability
BugTraq ID: 19793
Remote: Yes
Last Updated: 2007-10-16
Relevant URL: http://www.securityfocus.com/bid/19793
Summary:
LibTIFF is prone to a buffer-overflow vulnerability because the library f=
ails to do proper boundary checks before copying user-supplied data into =
a finite-sized buffer.
This issue allows remote attackers to execute arbitrary machine code in t=
he context of appications using the affected library. Failed exploit atte=
mpts will likely crash the application, denying service to legitimate use=
rs.
This issue is known to affect versions of LibTIFF included with Sony PSP =
devices running firmware versions 2.0 through 2.8.
=20
Specific information regarding affected versions of LibTIFF is currently =
unavailable. We will update this BID as more information emerges.
47. LibPNG Graphics Library PNG_SET_SPLT Remote Denial of Service Vulnera=
bility
BugTraq ID: 21078
Remote: Yes
Last Updated: 2007-10-16
Relevant URL: http://www.securityfocus.com/bid/21078
Summary:
LibPNG is reported prone to a denial-of-service vulnerability. The librar=
y fails to perform proper bounds-checking of user-supplied input, which l=
eads to an out-of-bounds read error.
Attackers may exploit this vulnerability to crash an application that rel=
ies on the affected library.
48. Libvorbis Denial Of Service And Memory Corruption Vulnerabilities
BugTraq ID: 25082
Remote: Yes
Last Updated: 2007-10-16
Relevant URL: http://www.securityfocus.com/bid/25082
Summary:
Applications that use the libvorbis library are prone to multiple remote =
vulnerabilities, including multiple denial-of-service issues and memory-c=
orruption issues.
An attacker can exploit these issues to execute arbitrary code within the=
context of the affected application or cause the application to crash.=20
These issues affect libvorbis 1.1.2; other versions of the library may al=
so be affected.
49. Distributed Checksum Clearinghouse SOCKS Unspecified Denial Of Servic=
e Vulnerability
BugTraq ID: 26088
Remote: Yes
Last Updated: 2007-10-16
Relevant URL: http://www.securityfocus.com/bid/26088
Summary:
Distributed Checksum Clearinghouse (DCC) is prone to an unspecified denia=
l-of-service vulnerability.
An attacker can exploit this issue to deny access to legitimate users.
This issue affects DCC 1.3.65; other versions may also be vulnerable.
50. WebMod AUTH.W Cross-Site Scripting Vulnerability
BugTraq ID: 26087
Remote: Yes
Last Updated: 2007-10-16
Relevant URL: http://www.securityfocus.com/bid/26087
Summary:
WebMod is prone to a cross-site scripting vulnerability because the appli=
cation fails to properly sanitize user-supplied input.=20
An attacker may leverage this issue to execute arbitrary script code in t=
he browser of an unsuspecting user in the context of the affected site. T=
his may help the attacker steal cookie-based authentication credentials a=
nd launch other attacks.
The issue affects WebMod 0.48; other versions may also be vulnerable.
51. Microsoft Windows URI Handler Command Execution Vulnerability
BugTraq ID: 25945
Remote: Yes
Last Updated: 2007-10-16
Relevant URL: http://www.securityfocus.com/bid/25945
Summary:
Microsoft Windows XP and Server 2003 with Internet Explorer 7 is prone to=
a command-execution vulnerability because it fails to properly sanitize =
input.
Successfully exploiting this issue allows remote attackers to execute arb=
itrary commands in the context of users that follow malicious URIs.
Known attack vectors include following URIs in these applications:
- Mozilla Firefox in versions prior to 2.0.0.6
- Skype in versions prior to 3.5.0.239
- Adobe Acrobat Reader 8.1
- Miranda 0.7
- Netscape 7.1
- mIRC.
NOTE: BID 25543 (Mozilla Firefox 2.0.0.6 Unspecified Protocol Handling Co=
mmand Injection Vulnerability) is an attack vector for this issue.
52. Sun StorEdge 3510 FC Array FTP Service Denial of Service Vulnerabilit=
y
BugTraq ID: 26086
Remote: Yes
Last Updated: 2007-10-16
Relevant URL: http://www.securityfocus.com/bid/26086
Summary:
Sun StorEdge 3510 FC Array is prone to a denial-of-service vulnerability =
that stems from an unspecified error in the FTP service. Remote attackers=
may exploit this issue to deny service to legitimate users.=20
Sun StorEdge 3510 FC Array with firmware version 4.21 is affected.
53. VirtueMart Unspecified Arbitrary PHP Code Execution Vulnerability
BugTraq ID: 26085
Remote: Yes
Last Updated: 2007-10-16
Relevant URL: http://www.securityfocus.com/bid/26085
Summary:
VirtueMart is prone to a vulnerability that lets attackers execute arbitr=
ary PHP code because the application fails to properly sanitize user-supp=
lied input.
An attacker can exploit this issue to execute arbitrary malicious PHP cod=
e in the context of the webserver process. This may help the attacker com=
promise the application and the underlying system; other attacks are also=
possible.
This issue affects these versions:
VirtueMart prior to 1.0.13
VirtueMart Joomla! eCommerce Edition prior to 1.0.13
54. Sun Java Runtime Environment Font Parsing Remote Privilege Escalation=
Vulnerability
BugTraq ID: 25340
Remote: Yes
Last Updated: 2007-10-16
Relevant URL: http://www.securityfocus.com/bid/25340
Summary:
The Sun Java Runtime Environment is prone to a remote privilege-escalatio=
n vulnerability.=20
An attacker can exploit this issue to execute arbitrary code within the c=
ontext of the user who invoked the Java applet. Successfully exploiting t=
his issue may result in the remote compromise of affected computers.
55. Sun JavaDoc Tool Cross-Site Scripting Vulnerability
BugTraq ID: 24690
Remote: Yes
Last Updated: 2007-10-16
Relevant URL: http://www.securityfocus.com/bid/24690
Summary:
Sun JavaDoc Tool is prone to a cross-site scripting vulnerability.=20
An attacker may leverage this issue to execute arbitrary script code in t=
he browser of an unsuspecting user in the context of the affected site. T=
his may help the attacker steal cookie-based authentication credentials a=
nd launch other attacks.
56. Sun Java RunTime Environment GIF Images Buffer Overflow Vulnerability
BugTraq ID: 22085
Remote: Yes
Last Updated: 2007-10-16
Relevant URL: http://www.securityfocus.com/bid/22085
Summary:
The Java Runtime Environment is prone to a buffer-overflow vulnerability =
because the application fails to bounds-check user-supplied data before c=
opying it into an insufficiently sized memory buffer.=20
An attacker may exploit this issue by enticing a victim into opening a ma=
liciously crafted Java applet.
The attacker can exploit these issues to execute arbitrary code with the =
privileges of the victim. Failed exploit attempts will likely result in d=
enial-of-service conditions.
This issue is being tracked by BugID: 6445518
57. Sun JSSE SSL/TLS Handshake Processing Denial Of Service Vulnerability
BugTraq ID: 24846
Remote: Yes
Last Updated: 2007-10-16
Relevant URL: http://www.securityfocus.com/bid/24846
Summary:
The Sun JSSE (Java Secure Socket Extension) is prone to a denial-of-servi=
ce vulnerability.
An attacker can exploit this issue to crash the computer, denying access =
to legitimate users.
58. Sun JDK JPG/BMP Parser Multiple Vulnerabilities
BugTraq ID: 24004
Remote: Yes
Last Updated: 2007-10-16
Relevant URL: http://www.securityfocus.com/bid/24004
Summary:
Sun JDK is prone to a multiple vulnerabilities.=20
An attacker can exploit these issues to crash the affected application, e=
ffectively denying service. The attacker may also be able to execute arbi=
trary code, which may facilitate a compromise of the underlying system.
Sun JDK 1.5.0_07-b03 is vulnerable to these issues; other versions may al=
so be affected.
59. OpenSSL SSL_Get_Shared_Ciphers Off-by-One Buffer Overflow Vulnerabili=
ty
BugTraq ID: 25831
Remote: Yes
Last Updated: 2007-10-16
Relevant URL: http://www.securityfocus.com/bid/25831
Summary:
OpenSSL is prone to an off-by-one buffer-overflow vulnerability because t=
he library fails to properly bounds-check user-supplied input before copy=
ing it to an insufficiently sized memory buffer.
Successfully exploiting this issue may allow attackers to execute arbitra=
ry machine code in the context of applications that use the affected libr=
ary, but this has not been confirmed. Failed exploit attempts may crash a=
pplications, denying service to legitimate users.
=20
NOTE: This issue was introduced in the fix for the vulnerability describe=
d in BID 20249 (OpenSSL SSL_Get_Shared_Ciphers Buffer Overflow Vulnerabil=
ity).
60. ISC BIND 8 Remote Cache Poisoning Vulnerability
BugTraq ID: 25459
Remote: Yes
Last Updated: 2007-10-16
Relevant URL: http://www.securityfocus.com/bid/25459
Summary:
BIND 8 is prone to a remote cache-poisoning vulnerability because of weak=
nesses in its random-number generator.
=20
An attacker may leverage this issue to manipulate cache data, potentially=
facilitating man-in-the-middle, site-impersonation, or denial-of-service=
attacks.
Versions of BIND from 8.2.0 through to 8.4.7 are vulnerable to this issue=
.
61. OpenSSL DTLS Heap Buffer Overflow Vulnerability
BugTraq ID: 26055
Remote: Yes
Last Updated: 2007-10-16
Relevant URL: http://www.securityfocus.com/bid/26055
Summary:
OpenSSL is prone to a heap buffer-overflow vulnerability because the libr=
ary fails to perform adequate boundary checks on user-supplied data.=20
Successfully exploiting this issue may allow attackers to execute arbitra=
ry machine code in the context of applications that use the affected libr=
ary, but this has not been confirmed. Failed exploit attempts may crash a=
pplications, denying service to legitimate users.
62. util-linux mount umount Local Privilege Escalation Vulnerability
BugTraq ID: 25973
Remote: No
Last Updated: 2007-10-16
Relevant URL: http://www.securityfocus.com/bid/25973
Summary:
The 'util-linux' package is prone to a local privilege-escalation vulnera=
bility that stems from a design error.
Exploiting this issue could allow attackers to execute arbitrary code wit=
h elevated privileges by using mount helpers such as the 'mount.nfs' appl=
ication.
This vulnerability affects util-linux 2.12r; other versions may also be a=
ffected.
63. Linux Kernel Ptrace Local Privilege Escalation Vulnerability
BugTraq ID: 25774
Remote: No
Last Updated: 2007-10-16
Relevant URL: http://www.securityfocus.com/bid/25774
Summary:
The Linux kernel is prone to a local privilege-escalation vulnerability.
Exploiting this issue may allow local attackers to gain elevated privileg=
es, facilitating the complete compromise of affected computers.
Versions of Linux kernel prior to 2.4.35.3 and 2.6.22.7 are vulnerable to=
this issue.
64. Linux Kernel AACRAID Driver Local Security Bypass Vulnerability
BugTraq ID: 25216
Remote: No
Last Updated: 2007-10-16
Relevant URL: http://www.securityfocus.com/bid/25216
Summary:
The Linux kernel is prone to a security-bypass vulnerability.
A local attacker may exploit this vulnerability to issue IOCTL commands t=
o AACRAID devices. This may lead to denial-of-service conditions, includi=
ng data loss and computer crashes.
Versions prior to 2.6.23-rc2 are vulnerable.
65. Linux Kernel USBLCD Memory Consumption Denial Of Service Vulnerabilit=
y
BugTraq ID: 24734
Remote: No
Last Updated: 2007-10-16
Relevant URL: http://www.securityfocus.com/bid/24734
Summary:
The Linux Kernel is prone to a denial-of-service vulnerability because it=
fails to limit memory consumption by 'fast writers'.
Attackers can exploit this issue to consume memory, resulting in denial-o=
f-service conditions.
Versions prior to 2.6.22-rc7 are vulnerable.
66. Linux Kernel Parent Process Death Signal Local Security Bypass Weakne=
ss
BugTraq ID: 25387
Remote: No
Last Updated: 2007-10-16
Relevant URL: http://www.securityfocus.com/bid/25387
Summary:
The Linux kernel is prone to a security-bypass weakness when dealing with=
signal handling.
This issue occurs because the software fails to properly validate access =
when the parent process tries to deliver its death signal to the child th=
at registered it via 'prctl'.
A local attacker may exploit this issue to bypass certain security restri=
ctions, which may lead to other attacks.
Linux kernel versions prior to 2.6.22.4 are vulnerable.
67. Linux Kernel Random Number Generator Local Denial of Service and Priv=
ilege Escalation Vulnerability
BugTraq ID: 25348
Remote: No
Last Updated: 2007-10-16
Relevant URL: http://www.securityfocus.com/bid/25348
Summary:
The Linux kernel is prone to a local vulnerability that may result in a d=
enial of service or privilege escalation. This issue stems from a stack-b=
ased overflow in kernel memory.
Successfully exploiting this issue allows local attackers to trigger kern=
el crashes, denying service to legitimate users. In certain circumstances=
, attackers may also gain elevated privileges. The attacker may require p=
artial administrative access via granular assignments of superuser privil=
eges.
Linux kernel versions prior to 2.6.22.3 are affected by this issue.
68. Linux Kernel Decode_Choices Function Remote Denial Of Service Vulnera=
bility
BugTraq ID: 24818
Remote: Yes
Last Updated: 2007-10-16
Relevant URL: http://www.securityfocus.com/bid/24818
Summary:
The Linux kernel is prone to a remote denial-of-service vulnerability bec=
ause it fails to handle certain H.323 data.
Attackers can exploit this issue to crash the affected operating system, =
denying access to legitimate users.
Versions prior to 2.6.21.6, 2.6.20.15, and 2.6.22 are vulnerable.
69. Linux Kernel CPUSet Tasks Memory Leak Information Disclosure Vulnerab=
ility
BugTraq ID: 24389
Remote: No
Last Updated: 2007-10-16
Relevant URL: http://www.securityfocus.com/bid/24389
Summary:
The Linux kernel is prone to an information-disclosure vulnerability beca=
use it fails to handle unexpected user-supplied input.
Successful exploits will allow attackers to obtain portions of kernel mem=
ory. Information harvested may aid in further attacks.
Versions of the Linux kernel prior to 2.6.21.4 and 2.6.20.13 are vulnerab=
le.
This issue was initially reported in BID 24376 Linux Kernel Multiple Wea=
knesses and Vulnerabilities, but has been assigned its own record.
70. Linux Kernel SCTP Connection Denial Of Service Vulnerability
BugTraq ID: 24376
Remote: Yes
Last Updated: 2007-10-16
Relevant URL: http://www.securityfocus.com/bid/24376
Summary:
The Linux kernel is prone to a denial-of-service vulnerability.
Linux kernel versions prior to 2.6.21.4 are vulnerable to this issue.
This BID initially discussed three weaknesses/vulnerabilities in the Linu=
x kernel. These issues have been separated into the following individual =
records:
24389 Linux Kernel CPUSet Tasks Memory Leak Information Disclosure Vulner=
ability
24390 Linux Kernel PRNG Entropy Weakness
24376 Linux Kernel SCTP Connection Denial Of Service Vulnerability
71. Linux Kernel PPPoE Socket Local Denial of Service Vulnerability
BugTraq ID: 23870
Remote: No
Last Updated: 2007-10-16
Relevant URL: http://www.securityfocus.com/bid/23870
Summary:
The Linux kernel is prone to a denial-of-service vulnerability.
Exploiting this issue allows local attackers to exhaust memory resources =
and eventually cause the kernel to crash, effectively denying service to =
legitimate users.=20
=20
This issue affects the Linux kernel 2.6 series prior to 2.6.21-git8.
72. Linux Kernel PRNG Entropy Weakness
BugTraq ID: 24390
Remote: No
Last Updated: 2007-10-16
Relevant URL: http://www.securityfocus.com/bid/24390
Summary:
The Linux kernel is prone to a weakness that may result in weaker cryptog=
raphic security.
Linux kernel versions prior to 2.6.21.4 are vulnerable to this issue.
This weakness was initially discussed in BID 24376 (Linux Kernel Multiple=
Weaknesses and Vulnerabilities), but has been assigned its own record.
73. Linux Kernel Fib_Semantics.C Out Of Bounds Access Vulnerability
BugTraq ID: 23447
Remote: Yes
Last Updated: 2007-10-16
Relevant URL: http://www.securityfocus.com/bid/23447
Summary:
The Linux kernel is prone to an out-of-bounds-access vulnerability. This =
issue occurs because the semantics for IPv4 Forwarding Information Base f=
ail to adequately bounds-check user-supplied data before accessing an arr=
ay.
An attacker can exploit this issue to cause denial-of-service conditions.=
Arbitrary code execution may also be possible, but this has not been con=
firmed.
Versions prior to 2.6.21-rc6 are vulnerable.
74. IPv6 Protocol Type 0 Route Header Denial of Service Vulnerability
BugTraq ID: 23615
Remote: Yes
Last Updated: 2007-10-16
Relevant URL: http://www.securityfocus.com/bid/23615
Summary:
IPv6 protocol implementations are prone to a denial-of-service vulnerabil=
ity due to a design error.
Exploiting this issue allows attackers to cause denial-of-service condit=
ions.
This issue is related to the issue discussed in BID 22210 (Cisco IOS IPv6=
Source Routing Remote Memory Corruption Vulnerability).
75. Linux Kernel Netfilter nf_conntrack IPv6 Packet Reassembly Rule Bypas=
s Vulnerability
BugTraq ID: 23976
Remote: Yes
Last Updated: 2007-10-16
Relevant URL: http://www.securityfocus.com/bid/23976
Summary:
The Linux kernel is prone to a vulnerability that lets attackers bypass f=
irewall rules. This issue occurs because the Linux 'netfilter' code fails=
to properly classify network packets.
Successfully exploiting this issue allows attackers to bypass firewall ru=
les, potentially aiding them in further network-based attacks.
Linux kernel versions in the 2.6 series prior to 2.6.20.3 are vulnerable =
to this issue.
76. HP-UX OpenSSL Unspecified Local Denial Of Service Vulnerability
BugTraq ID: 26093
Remote: No
Last Updated: 2007-10-16
Relevant URL: http://www.securityfocus.com/bid/26093
Summary:
HP-UX running OpenSSL software is prone to a local denial-of-service vuln=
erability.
=20
Exploiting this issue allows local attackers to deny service to legitimat=
e users.
This issue affects HP-UX versions B.11.11, B.11.23, B.11.31 when running =
OpenSSL versions prior to vA.00.09.07l.
77. TIBCO SmartPGM FX Multiple Remote Vulnerabilities
BugTraq ID: 26092
Remote: Yes
Last Updated: 2007-10-16
Relevant URL: http://www.securityfocus.com/bid/26092
Summary:
TIBCO SmartPGM FX is prone to multiple remote vulnerabilities including:
- four unspecified stack-based buffer-overflow vulnerabilities.
- one unspecified format-string vulnerability.
- one unspecified denial-of-service vulnerability.
An attacker can exploit these issues to execute arbitrary code or cause d=
enial-of-service conditions.
78. InnovaShop Multiple Cross-Site Scripting Vulnerabilities
BugTraq ID: 26084
Remote: Yes
Last Updated: 2007-10-15
Relevant URL: http://www.securityfocus.com/bid/26084
Summary:
InnovaShop is prone to multiple cross-site scripting vulnerabilities beca=
use the application fails to properly sanitize user-supplied input.=20
An attacker may leverage these issues to execute arbitrary script code in=
the browser of an unsuspecting user in the context of the affected site.=
This may help the attacker steal cookie-based authentication credentials=
and launch other attacks.
79. Stringbeans Portal Projects Script Cross-Site Scripting Vulnerability
BugTraq ID: 26082
Remote: Yes
Last Updated: 2007-10-15
Relevant URL: http://www.securityfocus.com/bid/26082
Summary:
Stringbeans Portal is prone to a cross-site scripting vulnerability becau=
se the application fails to properly sanitize user-supplied input.=20
An attacker may leverage this issue to execute arbitrary script code in t=
he browser of an unsuspecting user in the context of the affected site. T=
his may help the attacker steal cookie-based authentication credentials a=
nd launch other attacks.
Stringbeans Portal 3.2 is vulnerable; other versions may also be affected=
.
80. MIT Kerberos 5 KAdminD Server SVCAuth_GSS_Validate Stack Buffer Overf=
low Vulnerability
BugTraq ID: 25534
Remote: Yes
Last Updated: 2007-10-15
Relevant URL: http://www.securityfocus.com/bid/25534
Summary:
Kerberos 5 'kadmind' (Kerberos Administration Daemon) server is prone to =
a stack-based buffer-overflow vulnerability because the software fails to=
adequately bounds-check user-supplied data before copying it to an insuf=
ficiently sized buffer.
An attacker can exploit this issue to execute arbitrary code with superus=
er privileges. A successful attack can result in the complete compromise =
of the application. Failed attempts will likely result in denial-of-servi=
ce conditions.
All 'kadmind' servers run on the master Kerberos server. Since the maste=
r server holds the KDC principal and policy database, an attack may not =
only compromise the affected computer, but could also compromise multipl=
e hosts that use the server for authentication.
Kerberos 5 'kadmind' 1.4 through 1.6.2 are vulnerable; third-party applic=
ations using the affected RPC library are also affected.
81. Microsoft ActiveSync Weak Password Obfuscation Information Disclosure=
Vulnerability
BugTraq ID: 25976
Remote: No
Last Updated: 2007-10-15
Relevant URL: http://www.securityfocus.com/bid/25976
Summary:
Microsoft ActiveSync is prone to an information-disclosure vulnerability =
because it fails to adequately obfuscate sensitive information.
Attackers can exploit this issue to gain PIN or password data for devices=
docked via USB.
Software that uses ActiveSync 4.1 is vulnerable; other versions may also =
be affected.
82. KwsPHP MG2 Module SQL Injection Vulnerability
BugTraq ID: 26083
Remote: Yes
Last Updated: 2007-10-15
Relevant URL: http://www.securityfocus.com/bid/26083
Summary:
KwsPHP is prone to an SQL-injection vulnerability because it fails to suf=
ficiently sanitize user-supplied data before using it in an SQL query.
Exploiting this issue could allow an attacker to compromise the applicati=
on, access or modify data, or exploit latent vulnerabilities in the under=
lying database.
KwsPHP 1.0 is vulnerable; other versions may also be affected.
83. Counter-Strike 1.6 Multiple Remote Vulnerabilities
BugTraq ID: 26077
Remote: Yes
Last Updated: 2007-10-15
Relevant URL: http://www.securityfocus.com/bid/26077
Summary:
Counter-Strike is prone to a multiple remote vulnerabilities, including m=
ultiple information-disclosure issues and a cross-site scripting issue.
An attacker can exploit these issues to execute arbitrary code, steal coo=
kie-based authentication credentials, and obtain sensitive information.
This issue affects Counter-Strike 1.6; other versions may also be affecte=
d.
84. NSSBoard Multiple HTML Injection Vulnerabilities
BugTraq ID: 26081
Remote: Yes
Last Updated: 2007-10-15
Relevant URL: http://www.securityfocus.com/bid/26081
Summary:
NSSBoard is prone to multiple HTML-injection vulnerabilities because the =
application fails to properly sanitize user-supplied input before using i=
t in dynamically generated content.=20
Attacker-supplied HTML and script code could execute in the context of th=
e affected site, potentially allowing the attacker to steal cookie-based =
authentication credentials or to control how the site is rendered to the =
user; other attacks are also possible.
These issues affect NSSBoard 0.6.1; other versions may also be affected.
85. eXtremail Multiple Remote Buffer Overflow Vulnerabilities
BugTraq ID: 26074
Remote: Yes
Last Updated: 2007-10-15
Relevant URL: http://www.securityfocus.com/bid/26074
Summary:
eXtremail is prone to an integer-underflow vulnerability and multiple rem=
ote buffer-overflow vulnerabilities because it fails to perform adequate =
boundary checks on user-supplied input.
Attackers can exploit these issues to execute arbitrary code with superus=
er privileges or to cause denial-of-service conditions. Successful attac=
ks will completely compromise affected computers or will deny access to l=
egitimate users.
These issues affect eXtremail 2.1.0 and 2.1.1; other versions may also be=
affected.
86. dotProject Companies Module Security Bypass Vulnerability
BugTraq ID: 26080
Remote: Yes
Last Updated: 2007-10-15
Relevant URL: http://www.securityfocus.com/bid/26080
Summary:
dotProject is prone to a vulnerability that allows attackers to access a =
restricted module of the application.
Successful exploits may result in a complete compromise of vulnerable app=
lications.
This issue affects versions prior to dotProject 2.1.
87. IBM WebSphere Application Server Administrative Scripting Tools Unspe=
cified Vulnerability
BugTraq ID: 26078
Remote: Yes
Last Updated: 2007-10-15
Relevant URL: http://www.securityfocus.com/bid/26078
Summary:
IBM WebSphere Application Server is prone to an unspecified vulnerability=
.
Very little is known about this issue at this time. We will update this B=
ID as more information emerges.
WebSphere Application Server 5.1.1 and 6.0.2 are vulnerable. Other versio=
ns may also be affected.
88. doop Index.php Local File Include Vulnerability
BugTraq ID: 26075
Remote: Yes
Last Updated: 2007-10-15
Relevant URL: http://www.securityfocus.com/bid/26075
Summary:
The 'doop' CMS is prone to a local file-include vulnerability because it =
fails to properly sanitize user-supplied input.
Exploiting this issue may allow an unauthorized remote user to view files=
and execute local scripts in the context of the webserver process.
This issue affects doop 1.3.7; other versions may also be affected.
89. Novell SUSE ISC BIND Named LibGSSAPI Denial Of Service Vulnerability
BugTraq ID: 26076
Remote: Yes
Last Updated: 2007-10-15
Relevant URL: http://www.securityfocus.com/bid/26076
Summary:
Novell SUSE Linux Enterprise Server is prone to a denial-of-service vulne=
rability becuase it fails to adequately handle certain GSS-TSIG requests =
that require the 'libgssapi' library.
Attackers can exploit this issue to cause denial-of-service conditions.
Versions prior to 'libgssapi' 0.6-13.17 as found in Enterprise Server 10 =
SP1 are vulnerable.
90. TRAMP Extension For Emacs Multiple Insecure Temporary File Creation V=
ulnerabilities
BugTraq ID: 26072
Remote: No
Last Updated: 2007-10-15
Relevant URL: http://www.securityfocus.com/bid/26072
Summary:
The TRAMP extension for Emacs creates temporary files in an insecure mann=
er.
An attacker with local access could potentially exploit these issues to p=
erform symlink attacks, overwriting arbitrary files in the context of the=
affected application.=20
Successfully mounting a symlink attack may allow the attacker to overwrit=
e or corrupt sensitive files, which may result in a denial of service. Ot=
her attacks may also be possible.
Versions prior to TRAMP 2.1.11 are vulnerable.
91. NETGEAR SSL312 PROSAFE SSL VPN-Concentrator 25 Error Page Cross Site =
Scripting Vulnerability
BugTraq ID: 26073
Remote: Yes
Last Updated: 2007-10-15
Relevant URL: http://www.securityfocus.com/bid/26073
Summary:
NETGEAR ProSafe SSL VPN Concentrator 25-SSL312 is prone to a cross-site s=
cripting vulnerability because it fails to properly sanitize user-supplie=
d input.
Exploiting this vulnerability may allow an attacker to perform cross-site=
scripting attacks on unsuspecting users in the context of the affected w=
ebsite. As a result, the attacker may be able to steal cookie-based authe=
ntication credentials and to launch other attacks.
92. Microsoft Internet Explorer Extension Filter Bypass Arbitrary File Do=
wnload Vulnerability
BugTraq ID: 26062
Remote: Yes
Last Updated: 2007-10-15
Relevant URL: http://www.securityfocus.com/bid/26062
Summary:
Internet Explorer is prone to an arbitrary-file-download vulnerability be=
cause it fails to adequately sanitize user-supplied input.=20
An attacker can exploit this vulnerability to download arbitrary 'exe' fi=
les to an unsuspecting victim's computer. This may facilitate a remote co=
mpromise of an affected computer.
NOTE: Further investigation suggests that this issue cannot be exploited =
to cause the malicious file to run. Since the file has an alternate exten=
sion, it will be processed only by the application specified for that ext=
ension. When the file is processed, an error will likely occur because of=
an invalid format.
93. GNU Tar Dot_Dot Function Remote Directory Traversal Vulnerability
BugTraq ID: 25417
Remote: Yes
Last Updated: 2007-10-15
Relevant URL: http://www.securityfocus.com/bid/25417
Summary:
GNU Tar is prone to a directory-traversal vulnerability because the appli=
cation fails to validate user-supplied data.
A successful attack can allow the attacker to overwrite files on a comput=
er in the context of the user running the affected application. Successfu=
l exploits may aid in further attacks.
94. Sun Solaris RPC Services Library librpcsvc(3LIB) Denial of Service Vu=
lnerability
BugTraq ID: 26071
Remote: Yes
Last Updated: 2007-10-15
Relevant URL: http://www.securityfocus.com/bid/26071
Summary:
Sun Solaris is prone to a denial-of-service vulnerability that stems from=
an unspecified error in Solaris RPC Services Library 'librpcsvc(3LIB)'. =
Remote and local attackers may exploit this issue to deny service to legi=
timate users.=20
Sun Solaris 8, 9, and 10 for SPARC and x86 architectures are affected.
95. HP Linux Imaging and Printing System HSSPD.PY Daemon Arbitrary Comman=
d Execution Vulnerability
BugTraq ID: 26054
Remote: Yes
Last Updated: 2007-10-15
Relevant URL: http://www.securityfocus.com/bid/26054
Summary:
HP Linux Imaging and Printing System (HPLIP) is prone to an arbitrary com=
mand-execution vulnerability because it fails to adequately sanitize user=
-supplied input.
Attackers can exploit this issue to execute arbitrary commands with super=
user privileges. Successful attacks will completely compromise affected c=
omputers.
NOTE: By default the application's 'hpssd' daemon listens only on localho=
st, but it can be configured (via /etc/hp/hplip.conf) to listen to remot=
e requests as well.
HPLIP versions in the 1.0 and 2.0 series are vulnerable.
96. Apache Tomcat WebDav Remote Information Disclosure Vulnerability
BugTraq ID: 26070
Remote: Yes
Last Updated: 2007-10-15
Relevant URL: http://www.securityfocus.com/bid/26070
Summary:
Apache Tomcat is prone to a remote information-disclosure vulnerability
Remote attackers can exploit this issue to obtain the contents of sensiti=
ve files stored on the server.
97. COWON America jetAudio M3U File Processing Remote Buffer Overflow Vul=
nerability
BugTraq ID: 26069
Remote: Yes
Last Updated: 2007-10-15
Relevant URL: http://www.securityfocus.com/bid/26069
Summary:
jetAudio is prone to a remote buffer-overflow vulnerability because the a=
pplication fails to properly bounds-check user-supplied data before copyi=
ng it to an insufficiently sized buffer while processing M3U files.
Exploiting this issue allows attackers to execute arbitrary machine code =
in the context of users running the affected application.
jetAudio 7.0.3 is reported vulnerable; prior versions may also be affecte=
d.
98. Sun Java WebStart Multiple File Access And Information Disclosure Vul=
nerabilities
BugTraq ID: 25920
Remote: Yes
Last Updated: 2007-10-15
Relevant URL: http://www.securityfocus.com/bid/25920
Summary:
Sun Java Web Start is prone to multiple local file-access vulnerabilities=
and an information-disclosure vulnerability.=20
An attacker could exploit these issues to obtain sensitive information an=
d to read and write arbitrary files on the affected computer with the pri=
vileges of the user running the untrusted Java application.
99. Sun Java Runtime Environment Multiple Weaknesses
BugTraq ID: 25918
Remote: Yes
Last Updated: 2007-10-15
Relevant URL: http://www.securityfocus.com/bid/25918
Summary:
Sun Java Runtime Environment is prone to multiple weaknesses that may all=
ow JavaScript code or applets to connect to resources other than the one =
the scripts or applets were downloaded from. One of the weaknesses may al=
low an attacker to obscure a Java warning about an untrusted applet from =
the user.
These issues affect the following packages for Windows, Solaris, and Linu=
x:
JDK and JRE 6 Update 2 and earlier
JDK and JRE 5.0 Update 12 and earlier
SDK and JRE 1.4.2_15 and earlier
SDK and JRE 1.3.1_20 and earlier
100. KDE KDM Unspecified Password Authentication Bypass Vulnerability
BugTraq ID: 25730
Remote: No
Last Updated: 2007-10-15
Relevant URL: http://www.securityfocus.com/bid/25730
Summary:
KDM is prone to an authentication-bypass vulnerability under certain circ=
umstances.
Attackers can exploit this issue to gain superuser privileges, resulting =
in the complete compromise of affected computers.=20
This issue affects KDM shipped with KDE 3.3.0 up to and including 3.5.7.
III. SECURITYFOCUS NEWS ARTICLES
--------------------------------
1. Retailers look to exorcise credit-card data
By: Robert Lemos
The National Retail Federation sends a letter asking that its members be =
allowed to decide what credit-card data to keep.
http://www.securityfocus.com/news/11491
2. DHS, Unisys scrutinized after data breach
By: Robert Lemos
A Congressional committee claims that Unisys allowed malicious code to in=
fect federal systems.
http://www.securityfocus.com/news/11489
3. Customers: TD Ameritrade failed to warn of breach
By: Robert Lemos
Numerous account holders complained over the past year that the consumer =
brokerage had sold or leaked e-mail addresses to pump-and-dump spammers.
http://www.securityfocus.com/news/11488
4. Max Vision charged with hacking -- again
By: Robert Lemos
Federal prosecutors charge former security consultant Max Butler, better =
known amongst security researchers as "Max Vision," alleging that he supp=
lied and managed a ring of identity thieves.
http://www.securityfocus.com/news/11487
IV. SECURITY JOBS LIST SUMMARY
-------------------------------
1. [SJ-JOB] Security Consultant, Hertfordshire
http://www.securityfocus.com/archive/77/482289
2. [SJ-JOB] Security Researcher, Kolkata
http://www.securityfocus.com/archive/77/482278
3. [SJ-JOB] Application Security Engineer, London
http://www.securityfocus.com/archive/77/482291
4. [SJ-JOB] Account Manager, Toronto
http://www.securityfocus.com/archive/77/482277
5. [SJ-JOB] Information Assurance Analyst, Miami
http://www.securityfocus.com/archive/77/482279
6. [SJ-JOB] Quality Assurance, Mountain View
http://www.securityfocus.com/archive/77/482177
7. [SJ-JOB] Sr. Security Analyst, Eden Prairie
http://www.securityfocus.com/archive/77/482183
8. [SJ-JOB] Security Engineer, Washington
http://www.securityfocus.com/archive/77/482184
9. [SJ-JOB] Sales Engineer, Herndon
http://www.securityfocus.com/archive/77/482185
10. [SJ-JOB] Security Engineer, Washington
http://www.securityfocus.com/archive/77/482174
11. [SJ-JOB] Application Security Engineer, Boston
http://www.securityfocus.com/archive/77/482175
12. [SJ-JOB] Security Engineer, Baltimore
http://www.securityfocus.com/archive/77/482176
13. [SJ-JOB] Customer Service, Mountain View
http://www.securityfocus.com/archive/77/482173
14. [SJ-JOB] Database Security Engineer, King of Prussia
http://www.securityfocus.com/archive/77/482030
15. [SJ-JOB] Application Security Engineer, Denver
http://www.securityfocus.com/archive/77/482035
16. [SJ-JOB] Security Engineer, Carpinteria
http://www.securityfocus.com/archive/77/482036
17. [SJ-JOB] Security Engineer, Atlanta
http://www.securityfocus.com/archive/77/482029
18. [SJ-JOB] Security Consultant, Charlotte
http://www.securityfocus.com/archive/77/482032
19. [SJ-JOB] Security Consultant, Charlotte
http://www.securityfocus.com/archive/77/482034
20. [SJ-JOB] Security Architect, Woodbridge
http://www.securityfocus.com/archive/77/482037
21. [SJ-JOB] Technical Marketing Engineer, Berkshire
http://www.securityfocus.com/archive/77/481928
22. [SJ-JOB] Sr. Security Engineer, Edison
http://www.securityfocus.com/archive/77/481929
23. [SJ-JOB] VP, Information Security, Berkshire
http://www.securityfocus.com/archive/77/481930
24. [SJ-JOB] Application Security Engineer, Houston
http://www.securityfocus.com/archive/77/481931
25. [SJ-JOB] Director, Information Security, Fairfax (Metro Area)
http://www.securityfocus.com/archive/77/481923
26. [SJ-JOB] Director, Information Security, Herndon
http://www.securityfocus.com/archive/77/481925
27. [SJ-JOB] Security Product Marketing Manager, Hopkinton
http://www.securityfocus.com/archive/77/481926
28. [SJ-JOB] Security Consultant, Singapore
http://www.securityfocus.com/archive/77/481919
29. [SJ-JOB] Sales Engineer, Boston
http://www.securityfocus.com/archive/77/481920
30. [SJ-JOB] Sr. Security Engineer, Chicago Area
http://www.securityfocus.com/archive/77/481922
31. [SJ-JOB] Security Consultant, Atlanta
http://www.securityfocus.com/archive/77/481924
32. [SJ-JOB] Information Assurance Analyst, New York
http://www.securityfocus.com/archive/77/481916
33. [SJ-JOB] Software Engineer, Mountain View
http://www.securityfocus.com/archive/77/481917
34. [SJ-JOB] Certification & Accreditation Engineer, Chantilly
http://www.securityfocus.com/archive/77/481918
V. INCIDENTS LIST SUMMARY
---------------------------
VI. VULN-DEV RESEARCH LIST SUMMARY
-----------------------------------
1. IRM Demonstrates Multiple Cisco IOS Exploitation Techniques
http://www.securityfocus.com/archive/82/481987
VII. MICROSOFT FOCUS LIST SUMMARY
---------------------------------
1. SecurityFocus Microsoft Newsletter #363
http://www.securityfocus.com/archive/88/482193
VIII. SUN FOCUS LIST SUMMARY
----------------------------
IX. LINUX FOCUS LIST SUMMARY
----------------------------
1. Linux Hardening
http://www.securityfocus.com/archive/91/482082
X. UNSUBSCRIBE INSTRUCTIONS
-----------------------------
To unsubscribe send an e-mail message to sf-news-unsubscribe@securityfocu=
s.com from the subscribed address. The contents of the subject or message=
body do not matter. You will receive a confirmation request message to w=
hich you will have to answer. Alternatively you can also visit http://www=
.securityfocus.com/newsletters and unsubscribe via the website.
If your email address has changed email [email protected] and a=
sk to be manually removed.
XI. SPONSOR INFORMATION
------------------------
This issue is Sponsored by: CSI
CSI 2007, November 3-9 in Washington, DC, is the only conference that del=
ivers a business-focused overview of enterprise security.=20
It will convene 2,000+ delegates, 80 exhibitors and features 100+ session=
s/seminars providing a roadmap for integrating policies and procedures wi=
th new tools and techniques. =20
Register now for savings on conference fees and/or free exhibits admissio=
n. =20
http://www.csiannual.com