SecurityFocus Newsletter # 210
John Boletta <[email protected]> 18 Aug 2003 17:31:18 -0000
| Newsgroups | gmane.comp.security.news.general |
|---|---|
| Message-ID | <[email protected]> |
SecurityFocus Newsletter # 210
------------------------------
This Issue is Sponsored by: eEye Digital Security
Blaster Worm & Variants: Identify & Fix Your Infected Systems
The 'Blaster' worm and its variants are still targeting unpatched
Microsoft systems.
eEye's Retina Network Security Scanner can quickly identify and fix
vulnerable and infected assets. See if you're vulnerable or have been
infected by 'Blaster'.
Get a free trial of Retina Network Security Scanner at:
http://www.securityfocus.com/sponsor/eEYE_sf-news_030818
------------------------------------------------------------------------
I. FRONT AND CENTER
1. MRTG for Intrusion Detection with IIS 6
2. Honeypot Farms
3. Basic IIS Lockdown Using Scripts and Group Policy
4. The Sad Tale of a Security Whistleblower
II. BUGTRAQ SUMMARY
1. Sun One/IPlanet Administration Server Directory Traversal Vu...
2. C-Cart Path Disclosure Vulnerability
3. Novell iChain Session Inheritance Vulnerability
4. Multiple Vendor OSF Distributed Computing Environment Denial...
5. Red Hat Linux Up2Date GPG Signature Validation Vulnerability
6. PostNuke Downloads / Web_Links Modules TTitle Cross-site Scr...
7. Meteor FTP Server USER Memory Corruption Vulnerability
8. Cool Components Testbuddy Plaintext Password Storage Weaknes...
9. Pam-PGSQL Username Logging Remote Format String Vulnerabilit...
10. Multiple geeeekShop Information Disclosure Vulnerabilities
11. Invision Power Board Admin.PHP Cross-Site Scripting Vulnerab...
12. MDaemon SMTP Server Null Password Authentication Vulnerabili...
13. Web ChatServer HTML Injection Vulnerability
14. DCForum+ Subject Field HTML Injection Vulnerability
15. Stellar Docs Path Disclosure Vulnerability
16. Better Basket Pro Store Builder Remote Path Disclosure Vulne...
17. FreeBSD Ptrace/SPIgot Insufficient Signal Verification Denia...
18. PHPOutSourcing Zorum Cross-Site Scripting Vulnerability
19. News Wizard Path Disclosure Vulnerability
20. PHP Website Calendar Module SQL Injection Vulnerabilities
21. Distributed Shell Local HOME Environment Variable Buffer Ove...
22. FreeBSD IBCS2 System Call Translator Kernel Memory Disclosur...
23. PHP Website Multiple Module Cross-Site Scripting Vulnerabili...
24. NetSurf Long URI Buffer Overflow Vulnerability
25. DameWare Mini Remote Control Server Shatter Attack Local Pri...
26. PHPOutsourcing Zorum Path Disclosure Vulnerability
27. Microsoft Windows 2000 Subnet Bandwidth Manager RSVP Server ...
28. Cisco 7900 Series VoIP Phone ARP Spoofing Denial Of Service ...
29. Horde Application Framework Account Hijacking Vulnerability
30. Netris Client-Side Buffer Overrun Vulnerability
31. HostAdmin Path Disclosure Vulnerability
32. DistCC Insecure Temporary File Vulnerability
33. Eudora WorldMail Search Cross-Site Scripting Vulnerability
34. HP Tru64 Unspecified EE Device Driver Local Denial of Servic...
35. PHP DLOpen Arbitrary Web Server Process Memory Vulnerability
36. SurgeLDAP Path Disclosure Vulnerability
37. SurgeLDAP User.CGI Cross-Site Scripting Vulnerability
38. SurgeLDAP HTTP GET Denial Of Service Vulnerability
39. SurgeLDAP Insecure Password Storage Vulnerability
40. CiscoWorks Common Management Foundation Administrative Authe...
41. CiscoWorks Common Management User Field Privileged Informati...
42. CiscoWorks Common Management Foundation Guest Account Passwo...
43. Microsoft MCIWNDX.OCX ActiveX Control Buffer Overflow Vulner...
44. Xoops BBCode HTML Injection Vulnerability
45. SGI IRIX NFSD XDR Decoding Remote Denial of Service Vulnerab...
46. HolaCMS HTMLtags.PHP Local File Include Vulnerability
47. Clickcess ChitChat.NET Message HTML Injection Vulnerability
48. HP Fixes Unspecified Local Denial Of Service Vulnerability
49. Microsoft URLScan / RSA Security SecurID Configuration Enume...
50. ECartis LIScript Arbitrary Variable Viewing Vulnerability
51. Ecartis Multiple Buffer Overrun Vulnerabilities
52. Sun One/IPlanet Web Server Windows Denial Of Service Vulnera...
III. SECURITYFOCUS NEWS ARTICLES
1. The Bright Side of Blaster
2. Hackers Claim New Fingerprint Biometric Attack
3. RPC DCOM Worm Hits the Net
4. Virus will get you if you don't watch out
5. Blaster's Microsoft Attack Fizzles
6. Federal charge filed against Ohio man accused of hacking Acx...
IV. SECURITYFOCUS TOP 6 TOOLS
1. Arno's IPTABLES Firewall Script v1.8.1BETA-3
2. Graphical certification authority v0.4.5
3. Dropbear SSH Server v0.34
4. AIM Sniff v0.9b
5. tinc 1.0.1
6. Anti-Spam SMTP Proxy v1.0.0
V. SECURITYJOBS LIST SUMMARY
1. Security Architecture Manager - Seattle, WA (Thread)
2. NIDS Senior Secruity Engineer Columbia, MD (Thread)
3. Security and Privacy Tools Development Manager - Mi... (Thread)
4. Security Engineers needed - Fairfax, VA (Thread)
5. Is there life after infosec? (Thread)
6. Request for Job Posting... (Thread)
7. Security Researcher/Signature Developer needed (Thread)
8. C & A Security Consultant needed - Fairfax, VA (Thread)
9. SR. SYSTEMS SECURITY ARCHITECT - Santa Clara, CA (mu... (Thread)
10. Intrusion Detection OR Network Forensics / Network P... (Thread)
11. QA - Security - Bay Area (Thread)
12. Vulnerability Detection - SW Engineer - Bay Area (Thread)
13. InfoSec Position Sought (Thread)
14. Looking for side work (Thread)
15. System Security Analyst - Washington, DC (Thread)
16. IT Audit - Michigan (Thread)
17. Sr. IT Auditor - Wisconsin (Thread)
18. Sr. IT Auditor - Northern, VA (Thread)
19. Security Product Line Manager #720JC - NJ - $95k - $... (Thread)
20. Sr. IT Auditor - Atlanta (Thread)
21. Software Engineer (Python/C++): San Mateo, CA (Thread)
22. Seeking Information Technology Position in the Washi... (Thread)
23. NJ-Liberty Corner-Manager of Information Security En... (Thread)
24. Security Delivery Lead needed - Fairfax, VA (Thread)
25. Seeking Information Security position in Austin, TX (Thread)
26. Mid-Level Security Administrator 2 (Thread)
27. Symantec Looking for On-Site AV Administrator - Miam... (Thread)
28. Pre-sales Engineer, Benelux (Thread)
29. Pre-sales Engineer, Germany (Thread)
30. Account Manager, Amsterdam (Thread)
31. Account Manager, Munich (Thread)
32. Sales Manager, Germany (Thread)
33. Channel Account Manager, Germany (Thread)
34. Security Systems Administrator/Architect with auditi... (Thread)
35. Inside Sales- early stage WLAN Security Company in t... (Thread)
36. RE-POST - Director of IT Security, North Wales, PA (Thread)
37. Security and Privacy Tools Development Manager - Mi... (Thread)
38. Director of IT Security, North Wales, PA (Thread)
39. Seeking a Information Security Position in the Washi... (Thread)
40. CCTV, Access Control, Physical Security Engineer Los... (Thread)
41. Information Security Engineering Manager (Thread)
VI. INCIDENTS LIST SUMMARY
1. Software vendor clueless (Thread)
2. possible 0-day exploit for latest Real-/Helixserver ... (Thread)
3. mod to "killblast.vbs" script (Thread)
4. FTimes 3.3.0 Release (Thread)
5. WebJob 1.3.0 Release (Thread)
6. msblast and RFC 1918 addresses (Thread)
7. rpc dcom worm and windowsupdate (Thread)
8. MSBlast and other known exploits.. (Thread)
9. Microsoft 'extinguishes' windowsupdate.com (Thread)
10. Mass-mail from Microsoft re Blaster worm? (Thread)
11. Tools for monitoring port scans / connection attmemp... (Thread)
12. MSBLASTER Infecting despite 03-026 patch? (Thread)
13. Heads up! distributed scans and attacks targeting n... (Thread)
14. msblast.exe worm FINDINGS (DDoS) ---> Can someone pl... (Thread)
15. Blaster Variant - W32.Blaster.B.Worm (Thread)
16. Analysis/decompilation of main() of the msblast worm (Thread)
17. Weird HTTP Requests. (Thread)
18. msblast.exe --> DDoS against windowsupdate.com (rese... (Thread)
19. MS03-026 Update Problems? (fwd) (Thread)
20. new msblaster on the loose? (Thread)
21. FW: rpc dcom worm and windowsupdate (Thread)
22. Blaster Worm Rebooting Patched Machines! (Thread)
23. MsBlast (Thread)
24. msblast.exe available (Thread)
25. Blasting Blaster.Worm (aka LovSan Virus) (Thread)
26. DCOM worm analysis report: W32.Blaster.Worm (Thread)
27. updated partial analysis of msblast.exe (Thread)
28. Connections on ports 2023/tcp and 1803/tcp (Thread)
VII. VULN-DEV RESEARCH LIST SUMMARY
1. HOON & shellcode (again) (Thread)
2. Rolf Rolles analysis (Thread)
3. MSBlast complete recode / analysis (Thread)
4. DCOM & Win 2003 Server (Thread)
5. Portcullis Security Advisory: CiscoWorks 2000 Privil... (Thread)
6. Oracle xdb ftp service? (Thread)
7. Bug in Norton FireWall 2003 (Thread)
8. Overflowing an interactive app (Thread)
9. Analyze binary for holes (Thread)
10. quick question (Thread)
VIII. MICROSOFT FOCUS LIST SUMMARY
1. scan of domain logon reveals unknown port (Thread)
2. Account Lockout -- ARGH (Thread)
3. DNS (Thread)
4. Account Lockuout --ARGH (Thread)
5. Detecting Blaster (Thread)
6. New variant. Blast.b (Thread)
7. FW: Actions for the Blaster Worm - Special Edition, ... (Thread)
8. MS03-029 ?-Download link (Thread)
9. Why the shutdown if infected with blaster? (Thread)
10. FW: Blaster vs. Kaht2, detecting Windows root kits (Thread)
11. DCOM patch + Exchange (Thread)
12. Administrivia: Blaster (Thread)
13. attempt to launch a DCOM server? (Thread)
14. What the heck is this msblast.exe (Thread)
15. W32.Blaster.C.Worm (Thread)
16. 3 Comprehensive links in combat with MSBlaster Worm (Thread)
17. Error Message: User Interface Failu The Logon User I... (Thread)
18. Blaster vs. Kaht2 (Thread)
19. DCOM Worm (Thread)
20. DCOM Exploit / Worm Signatures (Thread)
21. FW: Blaster vs. Kaht2 (Thread)
22. msblast and IIS (Thread)
23. [msblast/LovSan] Detection (Thread)
24. Article Announcement: Basic IIS Lockdown Using Scrip... (Thread)
25. DCOM worm is out (Thread)
IX. SUN FOCUS LIST SUMMARY
NO NEW POSTS FOR THE WEEK 2003-08-11 to 2003-08-18.
X. LINUX FOCUS LIST SUMMARY
NO NEW POSTS FOR THE WEEK 2003-08-11 to 2003-08-18.
XI. SPONSOR INFORMATION
I. FRONT AND CENTER
-------------------
1. MRTG for Intrusion Detection with IIS 6
By Mark Burnett
This article explains how to use a Multi Router Traffic Grapher (MRTG) to
see the big picture of your network traffic and to help visually spot
attacks.
http://www.securityfocus.com/infocus/1721
2. Honeypot Farms
By Lance Spitzner
This article is about deploying and managing honeypots in large,
distributed environments through the use of Honeypot Farms.
http://www.securityfocus.com/infocus/1720
3. Basic IIS Lockdown Using Scripts and Group Policy
by Mark Squire
Microsoft Active Directory and Group Policy have a feature-rich set of
tools and processes to help save an administrator time and energy in
maintaining security within the domain.
http://www.securityfocus.com/infocus/1719
4. The Sad Tale of a Security Whistleblower
By Mark Rasch
Federal prosecutors in California went too far when they put a man in
prison for warning people about a website security hole.
http://www.securityfocus.com/columnists/179
II. BUGTRAQ SUMMARY
-------------------
1. Sun One/IPlanet Administration Server Directory Traversal Vu...
BugTraq ID: 8367
Remote: Yes
Date Published: Aug 08 2003 12:00A
Relevant URL: http://www.securityfocus.com/bid/8367
Summary:
The Administration Server is a software package distributed and maintained
by Sun Microsystems. It has been distributed under the brand names Sun ONE
and iPlanet.
A problem in the checking of input by the Sun ONE Administration Server may
lead to remote users escaping into restricted directories. This may allow
an attacker to gain access to information that is sensitive in nature.
The problem is in the handling of input by the ViewLog file of the
administrative interface. When an attacker accesses the ViewLog file and
passes directory traversal sequences to the admin-serv variable, it is
possible to gain access to files outside of the log directory. As the
Administration Server runs with administrative access, the attacker could
then view files that require administrative access to open.
2. C-Cart Path Disclosure Vulnerability
BugTraq ID: 8368
Remote: Yes
Date Published: Aug 08 2003 12:00A
Relevant URL: http://www.securityfocus.com/bid/8368
Summary:
C-Cart is an online shopping cart system that is implemented in PHP. C-Cart
harnesses a back end MySQL database to store information.
C-Cart is prone to a path disclosure vulnerability. Passing invalid data as
the 'q' URI parameter to either 'show.php' or 'search.php' scripts, will
cause an error message to be displayed, which contains installation path
information. Other pages may also be affected by this issue.
Exploitation may be dependant on web server and PHP configuration.
This type of information may aid an attacker in mapping out the file system
for further attacks against the host.
3. Novell iChain Session Inheritance Vulnerability
BugTraq ID: 8369
Remote: Yes
Date Published: Aug 07 2003 12:00A
Relevant URL: http://www.securityfocus.com/bid/8369
Summary:
Novell iChain Server is a web-based security product designed to implement
and maintain various network-based access controls.
Novell has announced an issue in iChain that may permit a user to inherit
another user's session. This may reportedly occur in circumstances where a
new user's session is opened on the same port as another user. This could
allow unauthorized access to another user's session, potentially exposing
sensitive information or compromising other security properties associated
with a user's access rights for the inherited session.
Exact technical details are not available at this time, but it is believed
that this could happen inadvertently. It is not known if there is a
deliberate way to exploit this issue. This BID will be updated
appropriately if more details are made available.
4. Multiple Vendor OSF Distributed Computing Environment Denial...
BugTraq ID: 8371
Remote: Yes
Date Published: Aug 08 2003 12:00A
Relevant URL: http://www.securityfocus.com/bid/8371
Summary:
The DCE (Distributed Computer Environment) is a set of distributed
computing standards maintained by Open Software Foundation. Numerous
vendors provide DCE client and server implementations.
A vulnerability has been announced that may be exploited to cause a denial
of services in multiple vendor implementations based on the OSF DCE
standards. The consequences of this vulnerability are that a remote
attacker may cause a server implementation to hang or crash. Exploitation
of this issue can deny availability of DCE services to legitimate clients.
Exact technical details are not known at this time but the issue is
believed to be caused by a null pointer deference, which would not be
exploitable to execute arbitrary code. This BID will be updated
appropriately if further details become available.
This issue can be exposed via RPC services with some implementations.
It should be noted that some of the vendors reported side-effects of
exploitation attempts for BID 8205 "Microsoft Windows DCOM RPC Interface
Buffer Overrun Vulnerability" may potentially trigger this issue in
affected implementations. IBM also reported that this issue is an issue in
their RPC runtime implementation of DCE that can occur whenever a RPC
packet with invalid presentation context ID is received by a server.
Scanning utilities for BID 8205 have also been reported to trigger this
issue in some implementations. It is not known if this issue can also be
caused by attempts to exploit BID 8234 "Microsoft Windows 2000 RPC DCOM
Interface Denial of Service Vulnerability".
5. Red Hat Linux Up2Date GPG Signature Validation Vulnerability
BugTraq ID: 8372
Remote: No
Date Published: Aug 08 2003 12:00A
Relevant URL: http://www.securityfocus.com/bid/8372
Summary:
up2date is the Red Hat Update Agent software that allows Red Hat Linux
users to connect to the Red Hat Network and download official updates and
fixes. up2date it intended to restrict installation of packages, it is
designed to allow installation of packages that are signed with the Red Hat
package signing key only.
It has been reported that the up2date tool does not sufficiently validate
GPG signatures on rpm packages downloaded from the Red Hat Network. This
issue may provide for the installation of a package, which does not posses
a GPG signature.
It is not believed, however, that this vulnerability is easily exploited.
It has been illustrated that a local attacker would require that the
malicious package be hosted on the Red Hat Network, prior to installation.
To accomplish this the attacker would need to compromise Red Hat Network
servers.
6. PostNuke Downloads / Web_Links Modules TTitle Cross-site Scr...
BugTraq ID: 8374
Remote: Yes
Date Published: Aug 08 2003 12:00A
Relevant URL: http://www.securityfocus.com/bid/8374
Summary:
PostNuke is a content management system implemented in PHP. It is available
for Windows, Linux and other Unix based systems.
A vulnerability concerning unsanitized data has been reported in the
software. This problem is related to the Downloads and Web_Links modules,
specifically in the TTitle variable. HTML and script code will not be
filtered from input to this variable before being displayed by the
vulnerable module. Therefore it may be possible for an attacker to
construct a malicious link containing script code that could be executed on
the browser of a user who visits the link. This would occur in the
security context of the site running PostNuke.
The vulnerability allows a victim to be prone to theft of cookie-based
credentials. Other attacks can be possible as well.
7. Meteor FTP Server USER Memory Corruption Vulnerability
BugTraq ID: 8376
Remote: Yes
Date Published: Aug 08 2003 12:00A
Relevant URL: http://www.securityfocus.com/bid/8376
Summary:
Meteor FTP Server is a personal file server for Microsoft Windows operating
systems.
Meteor FTP Server is prone to a memory corruption vulnerability that can be
triggered by a malicious client via an overly value for the FTP USER
command. The issue is exposed prior to the client authenticating with the
server, so may be exploited by remote attackers without valid FTP
credentials.
This could be exploited to cause a server crash. Due to the nature of
vulnerabilities that result in memory corruption, it is likely that this
could also be exploited to execute arbitrary code, however, this has not
been confirmed.
8. Cool Components Testbuddy Plaintext Password Storage Weaknes...
BugTraq ID: 8378
Remote: No
Date Published: Aug 08 2003 12:00A
Relevant URL: http://www.securityfocus.com/bid/8378
Summary:
Testbuddy is an administrative client for AOL Instant Messenger. It is not
available to the public.
Testbuddy stores usernames and associated passwords using plaintext format,
in the Windows registry. Specifically, Testbuddy stores authentication
credentials in the following registry entry:
HKEY_CURRENT_USER\Software\America Online\TestBuddy\[screen name]
With the key 'Password=[password]'
As a result, these credentials could be exposed to other local users who
have the permissions to access the registry. This may compromise the screen
name.
9. Pam-PGSQL Username Logging Remote Format String Vulnerabilit...
BugTraq ID: 8379
Remote: Yes
Date Published: Aug 09 2003 12:00A
Relevant URL: http://www.securityfocus.com/bid/8379
Summary:
Leon J Breedt's 'pam-pgsql' is a PAM authentication module to be used with
PostgreSQL.
pam-pgsql has been reported prone to a remote format string vulnerability.
It has been reported that a remote attacker may supply malicious format
string specifiers as a username, to a program that is requesting PAM
authentication (HTTP, SSH, telnet, etc). The username will be later
processed, during logging procedures in pam-pgsql.
When logging the malicious username data, the format specifiers embedded in
the username, may be interpreted literally by an erroneous implementation
of a format function. This issue may be leveraged by the attacker to
corrupt arbitrary memory and potentially execute arbitrary instructions in
the context of the program that is requesting PAM authentication.
10. Multiple geeeekShop Information Disclosure Vulnerabilities
BugTraq ID: 8380
Remote: Yes
Date Published: Aug 09 2003 12:00A
Relevant URL: http://www.securityfocus.com/bid/8380
Summary:
geeeekShop is an online shopping cart system that is implemented in PHP.
geeeekShop is prone to multiple information disclosure vulnerabilities.
Passing invalid data as URI parameters to geeeekShop scripts, will cause an
error message to be displayed, which contains installation path
information. Additionally it has been reported that a remote attacker may
access the 'site.config.php' script, which may lead to the disclosure of
potentially sensitive information.
Exploitation may be dependant on web server and PHP configuration.
This type of information may aid an attacker in mapping out the file system
for further attacks against the host.
It should be noted that while this vulnerability has been reported to
affect geeeekShop version 1.4.0, other versions might also be affected.
11. Invision Power Board Admin.PHP Cross-Site Scripting Vulnerab...
BugTraq ID: 8381
Remote: Yes
Date Published: Aug 09 2003 12:00A
Relevant URL: http://www.securityfocus.com/bid/8381
Summary:
Invision Board is web forum software. It is implemented in PHP and is
available for Unix and Linux variants and Microsoft Windows operating systems.
Invision Power Board admin.php script reported prone to a cross-site
scripting vulnerability.
The issue presents itself due to a lack of sufficient sanitization
performed by functions in the admin.php script on user-influenced 'adsess'
URI parameters. It has been reported that a remote attacker may construct a
malicious link to the admin.php script hosted on a remote site, and supply
arbitrary HTML code as a value for the 'adsess' URI parameter. If this link
is followed, the content of the 'adsess' parameter will be rendered in the
browser of the user who followed the link.
This could permit the theft of cookie authentication credentials; other
attacks may also be possible.
12. MDaemon SMTP Server Null Password Authentication Vulnerabili...
BugTraq ID: 8382
Remote: Yes
Date Published: Aug 09 2003 12:00A
Relevant URL: http://www.securityfocus.com/bid/8382
Summary:
MDaemon is a Microsoft Windows based mail server product.
A vulnerability has been reported to affect the MDaemon SMTP authentication
handler.
It has been reported that any valid username or account can be used in
conjunction with a null password, to access the MDaemon SMTP server. This
issue may be exaggerated, because a default MDaemon account 'MDaemon' is
well known.
A remote attacker may exploit this vulnerability, to use the affected SMTP
server as an open relay for e-mail Spam. Other attacks may also be possible.
It should be noted that although this vulnerability has been reported to
affect MDaemon version 5.0.5, other versions might also be affected.
13. Web ChatServer HTML Injection Vulnerability
BugTraq ID: 8383
Remote: Yes
Date Published: Aug 11 2003 12:00A
Relevant URL: http://www.securityfocus.com/bid/8383
Summary:
Web ChatServer is a web-based chat system. It is available for Microsoft
Windows operating systems.
Web ChatServer is prone to a HTML injection vulnerability. The source of
this issue is that HTML and script code are not filtered from chat messages
before being displayed to other users. An attacker may embed malicious
HTML and script code into a chat message and send that message to another
user of the chat system. The attacker's code may be rendered in the web
browser of the user viewing the malicious message. This would occur in the
context of the site hosting the chat system.
14. DCForum+ Subject Field HTML Injection Vulnerability
BugTraq ID: 8384
Remote: Yes
Date Published: Aug 11 2003 12:00A
Relevant URL: http://www.securityfocus.com/bid/8384
Summary:
DCForum+ is a web based conferencing system, designed to facilitate online
discussion. It is implemented in Perl and has few system dependencies,
making it available on most operating systems, including Linux, Windows and
most Unix variants.
DCForum+ is prone to an HTML injection vulnerability. This issue is exposed
through the dcboard.php script. An attacker may exploit this issue by
including hostile HTML and script code in the subject field of posts to the
bulletin board. This is because the script that processes posts does not
sufficiently sanitize user input, allowing attackers to embed HTML and
script commands within the post. This code may be rendered in the web
browser of a user who views these areas of the site. This would occur in
the security context of the site hosting DCForum+.
The attacker-supplied HTML and script code would be able to access
properties of the site, potentially allowing for theft of cookie-based
authentication credentials. An attacker could also exploit this issue to
control how the site is rendered to the user.
It should be noted that although this vulnerability has been reported for
DCForum+ version 1.2, other versions might also be affected.
15. Stellar Docs Path Disclosure Vulnerability
BugTraq ID: 8385
Remote: Yes
Date Published: Aug 11 2003 12:00A
Relevant URL: http://www.securityfocus.com/bid/8385
Summary:
Stellar Docs is a commercial web-based documentation management system. It
is available for Unix and Linux variants.
Stellar Docs will disclose path information in an error page in response to
a request for an invalid request for a web resource. This could disclose
information about the layout of the file system that could be useful in
further attacks against the system. It should be noted the error output
indicates that a database function has failed, which may be due to a more
serious issue, such as SQL injection.
Though unconfirmed, this issue could be due to configuration, for example,
the software may output this information if debugging directives are enabled.
16. Better Basket Pro Store Builder Remote Path Disclosure Vulne...
BugTraq ID: 8386
Remote: Yes
Date Published: Aug 11 2003 12:00A
Relevant URL: http://www.securityfocus.com/bid/8386
Summary:
Store Builder is an add-on program for the Better Basket Pro e-commerce
package. It is available for the Unix and Linux platforms.
It has been reported that Better Basket Pro (BBPro) Store Builder may
reveal path information under some circumstances. This may result a
directed attack against system resources.
The problem is in the error responses generated by the program. When an
invalid request is placed to the program, Store Builder reveals information
about the installation path of the software. This may give an attacker
information necessary in launching a more directed attack against system
resources.
17. FreeBSD Ptrace/SPIgot Insufficient Signal Verification Denia...
BugTraq ID: 8387
Remote: No
Date Published: Aug 11 2003 12:00A
Relevant URL: http://www.securityfocus.com/bid/8387
Summary:
The ptrace() system call is a debugging function designed to allow a parent
process to access the core memory image and registers of a child process.
This function is useful for debugging a process and tracing its execution.
The spigot device driver is a video capture driver developed for the
FreeBSD operating system. The spigot driver is specifically designed to
support Creative Labs video cards, however, support for spigot is not
enabled within the FreeBSD kernel by default.
A vulnerability has been discovered in the FreeBSD implementation of the
ptrace() system call, as well as the spigot driver, which could result in a
local denial of service. The problem lies in the fact that both mechanisms
fail to sufficiently verify the integrity of signal numbers. As a result,
under some circumstances, an out-of-bounds or negative signal number may be
delivered by one of the affected mechanisms. This will typically result in
an assertion failure or system panic, effectively causing the system to crash.
This issue could be exploited by an unprivileged attacker to crash a system
to which they have local access.
The described vulnerability affects all releases of FreeBSD including
4.8-RELEASE-p1 and 5.1-RELEASE.
It should be noted that FreeBSD 5.x kernels by default do not enable the
'INVARIANTS' option, which when enabled includes assertion code within the
kernel. Under such configurations as the default FreeBSD 5.x kernels, it
may be possible for an attacker to control kernel memory, and as such
potentially influence execution in such a way that complete system
compromise becomes possible. This possibility is not present in FreeBSD 4.x
kernels.
18. PHPOutSourcing Zorum Cross-Site Scripting Vulnerability
BugTraq ID: 8388
Remote: Yes
Date Published: Aug 11 2003 12:00A
Relevant URL: http://www.securityfocus.com/bid/8388
Summary:
Zorum is a commercially-available forum software package distributed and
maintained by PHPOutSourcing. It is available for the Unix, Linux, and
Microsoft Windows platforms.
A cross-site scriping vulnerability has been reported in the index.php
script of PHPOutSourcing Zorum. Because of this, an attacker may be able
to execute hostile HTML and script code in the browsers of target users who
follow a malicious link.
The problem is in the filtering of HTML and client-side script code by
index.php. When attacker-supplied HTML or script code is passed to the
method variable of index.php in a malicious link, the code may be rendered
in the context of the site. This could make it possible for an attacker to
steal cookie authentication credentials, or perform other malicious activities.
19. News Wizard Path Disclosure Vulnerability
BugTraq ID: 8389
Remote: Yes
Date Published: Aug 11 2003 12:00A
Relevant URL: http://www.securityfocus.com/bid/8389
Summary:
News Wizard is a content management system. It is implemented in PHP and
available for Linux/Unix variants.
News Wizard will disclose path information in an error page in response to
a request for an invalid request for a web resource. This could disclose
information about the layout of the file system that could be useful in
further attacks against the system.
Though unconfirmed, this issue could be due to configuration. For example,
the software may output this information if debugging directives are enabled.
20. PHP Website Calendar Module SQL Injection Vulnerabilities
BugTraq ID: 8390
Remote: Yes
Date Published: Aug 11 2003 12:00A
Relevant URL: http://www.securityfocus.com/bid/8390
Summary:
PHP Website is a web site content management system that allows for easy
maintenance and administration of interactive community-driven websites.
PHP Website may be prone to vulnerabilities that will allow an attacker to
inject malicious SQL syntax into database queries. The source of these
issues is insufficient sanitization of user-supplied input before including
this input in database queries.
The first issue occurs when the SQL query contains the value '2003[%00 =
null]-1'. It is possible to cause this issue to occur by submitting a
malicious request to the calendar script.
A similar issue was also reported that may be exploited by sending a '+'
symbol with a specific URI variable value hence allowing for further
attacks in order to gain access to confidential or sensitive data.
A malicious user may influence database queries in order to view or modify
sensitive information, potentially compromising the software or the database.
21. Distributed Shell Local HOME Environment Variable Buffer Ove...
BugTraq ID: 8391
Remote: No
Date Published: Aug 11 2003 12:00A
Relevant URL: http://www.securityfocus.com/bid/8391
Summary:
The Distributed Shell (dsh) is a shell designed to execute single commands
across multiple systems. It was developed for use on clustered systems and
is available for the Linux operating system.
A vulnerability has been discovered in dsh. The problem occurs due to
incorrect bounds checking within the programmer-defined 'asprintf()'
function. A call is made to the function as shown in the following piece of
code:
asprintf (&buf, "%s/.dsh/dsh.conf", getenv("HOME")
The bounds checking is then carried out by the following code snippet:
ssize_t buflen = 50 * strlen(fmt);
At this point of execution the 'fmt' variable, passed via a call to
'asprintf()' still contains "%s/.dsh/dsh.conf". However, by examining the
bounds checking code, it appears that the author incorrectly assumed that
the '%s' format specifier would have been interpreted, which is not the case.
As a result, the 'buflen' variable, later used as the size argument for
dynamically allocating the storage buffer, will only contain the length of
'50 * "%s/.dsh/dsh.conf"'. As such, if a HOME environment variable exists
which is greater in size then the aforementioned length, when the data is
copied into the buffer the dynamically allocated memory buffer via
vsnprintf(), it will be overrun, effectively resulting in the corruption of
heap-based memory management structures.
If the dsh utility were installed with the setuid bit enabled, it may be
possible for an attacker to exploit this issue to execute arbitrary
instructions with elevated privileges.
This vulnerability is said to affected dsh 0.24.
*** New information has been posted to bugtraq which suggests that this
issue is in fact not a legitimate vulnerability. As such, this BID will
subsequently be retired.
22. FreeBSD IBCS2 System Call Translator Kernel Memory Disclosur...
BugTraq ID: 8392
Remote: No
Date Published: Aug 11 2003 12:00A
Relevant URL: http://www.securityfocus.com/bid/8392
Summary:
Intel Binary Compatibility Specification 2 is a kernel level suite of tools
for FreeBSD that allows the execution of IBCS2 compliant binaries.
A problem has been reported in the iBCS2 code distributed with FreeBSD that
may result in the disclosure of sensitive kernel memory. Because of this,
an attacker may be able to gain access to sensitive information.
The problem is in the system call translator implemented with the iBCS2
code. The translator uses a flawed version of the statfs system call that
permits a user to supply an unchecked length variable. By doing so, an
attacker can view large portions of kernel memory space, which may contain
sensitive information such as user credentials.
It should be noted that iBCS2 code is not compiled into the kernel by default.
23. PHP Website Multiple Module Cross-Site Scripting Vulnerabili...
BugTraq ID: 8393
Remote: Yes
Date Published: Aug 11 2003 12:00A
Relevant URL: http://www.securityfocus.com/bid/8393
Summary:
PHP Website may be prone to a vulnerability that may allow an attacker to
execute malicious script code on a legitimate user's browser due to
unsanitized user input.
The issue is related to the Calendar, PageMaster, Search and Fatcat modules
in the software. HTML and script code may not be filtered from user
supplied input before being displayed. Therefore it may be possible to
construct a malicious link containing script code that may be executed in
the browser of a user who visits the link. This would occur in the context
of the vulnerable site.
This vulnerability may expose users to theft of cookie-based credentials or
other attacks.
24. NetSurf Long URI Buffer Overflow Vulnerability
BugTraq ID: 8394
Remote: Yes
Date Published: Aug 11 2003 12:00A
Relevant URL: http://www.securityfocus.com/bid/8394
Summary:
NetSurf is a web browser for Microsoft Windows operating systems.
NetSurf is prone to a buffer overflow. This is due to insufficient bounds
checking of URIs. A URI of sufficient length to trigger the condition will
cause adjacent regions of memory to be corrupted with specific,
attacker-supplied values. This could potentially allow for execution of
malicious code in the security context of the web client. It is possible
to trigger this condition by following a malicious link that specifies a
URI of excessive length.
25. DameWare Mini Remote Control Server Shatter Attack Local Pri...
BugTraq ID: 8395
Remote: No
Date Published: Aug 11 2003 12:00A
Relevant URL: http://www.securityfocus.com/bid/8395
Summary:
DameWare Mini Remote Control Server (DWMRCS) is a utility that allows
administrators to remotely or locally configure their server. It is
available for the Windows Operating system and runs with SYSTEM privileges.
It has been discovered that DWMRCS runs on the desktop with a
user-accessible Dialog box. Due to a flaw in the Windows API, an attacker
can effectively trigger this vulnerability by passing a specially crafted
Windows Message to the target DWMRCS window. As a result, a local
unprivileged user may be capable of interacting with the window in such a
way that the execution of user-supplied instructions may become possible.
This vulnerability affects DWMRCS versions prior to 3.71.0.0.
26. PHPOutsourcing Zorum Path Disclosure Vulnerability
BugTraq ID: 8396
Remote: Yes
Date Published: Aug 11 2003 12:00A
Relevant URL: http://www.securityfocus.com/bid/8396
Summary:
Zorum is a freely available, open source PHP forum. It is available for
UNIX, Linux, and Microsoft operating systems.
It has been reported that the software is prone to a path disclosure
vulnerability. This issue can be triggered by sending a malformed request
to the software, resulting in an error message that may disclose sensitive
information about the installation path to the attacker.
This information may aid an attacker in mapping out of the file system,
which can then be used to launch further attacks.
Though Zorum version 3.4 has been reported to be prone to this issue,
earlier versions may also be vulnerable.
27. Microsoft Windows 2000 Subnet Bandwidth Manager RSVP Server ...
BugTraq ID: 8397
Remote: Yes
Date Published: Aug 11 2003 12:00A
Relevant URL: http://www.securityfocus.com/bid/8397
Summary:
The Microsoft RSVP Server is an implementation of the RFC 2814 defined
protocol. It is available for Microsoft Windows.
A problem has been identified in the RSVP Server for Microsoft Windows 2000
that may allow an attacker to hijack management of the network. This could
allow an attacker control of network Quality of Service.
The problem is in the handling of priority by the RSVP Server. If the
server is executing with a lower RSVP service priority, it is overruled by
the new RSVP server. An attacker that has gained access to the network as
the RSVP Server could lower quality of service on specific hosts.
It should be noted that this vulnerability generally can only be exploited
on isolated segments of network. Because of the level of network
communication at which this vulnerability occurs, it is difficult to
exploit remotely.
28. Cisco 7900 Series VoIP Phone ARP Spoofing Denial Of Service ...
BugTraq ID: 8398
Remote: Yes
Date Published: Aug 12 2003 12:00A
Relevant URL: http://www.securityfocus.com/bid/8398
Summary:
The 7900 series VoIP Phones are a Voice-Over-IP solution distributed by
Cisco Systems.
The Cisco 7900 Series of Voice-Over-IP phones have been reported prone to a
vulnerability where a spoofed ARP message may crash the phone.
It has been reported that an attacker that is connected to the same segment
as the affected phones may send spoofed ARP messages to a phone, causing
the target phone to be disconnected from the switch. This will result in
the phone becoming unstable and crashing. Power cycling the phone to regain
normal functionality is required. It has also been reported that such an
attack performed on a switchboard phone may deny all incoming calls.
Other attacks including man in the middle style attacks, for example packet
injection and data interception, have also been reported possible.
29. Horde Application Framework Account Hijacking Vulnerability
BugTraq ID: 8399
Remote: Yes
Date Published: Aug 12 2003 12:00A
Relevant URL: http://www.securityfocus.com/bid/8399
Summary:
The Horde Application Framework is a series of web applications,
implemented in PHP. Included in the framework is a mail transfer agent.
The Horde Application Framework is prone to a vulnerability that may allow
remote attackers to hijack mail accounts. This can reportedly be exploited
via a malicious link in an e-mail. When the link is visited, the software
appears to leak a session ID to the site that is visited. An attacker
could then use these credentials to access a user's Horde mail account.
This appears to be a problem with session fixation.
30. Netris Client-Side Buffer Overrun Vulnerability
BugTraq ID: 8400
Remote: Yes
Date Published: Aug 12 2003 12:00A
Relevant URL: http://www.securityfocus.com/bid/8400
Summary:
Netris is a freely available network "Tetris" clone. It is available for
Unix and Linux variants.
A client-side buffer overrun vulnerability has been reported for Netris.
The issue is said to occur due to insufficient bounds checking when copying
a server greeting into an internal memory buffer. As a result, an attacker
could theoretically pose as a Netris server, and upon connection pass
excessive data to the client program. When this occurs, internal program
memory will be corrupted, potentially allowing for the execution of
arbitrary code with the privileges of the user invoking Netris.
This vulnerability affects Netris 0.5 and earlier.
31. HostAdmin Path Disclosure Vulnerability
BugTraq ID: 8401
Remote: Yes
Date Published: Aug 12 2003 12:00A
Relevant URL: http://www.securityfocus.com/bid/8401
Summary:
HostAdmin is a web-based tool designed to automate web-hosting operations.
HostAdmin is prone to a path disclosure vulnerability. Passing invalid data
to the HostAdmin site will cause an error message to be displayed, which
contains installation path information.
Exploitation may be dependant on web server and PHP configuration.
This type of information may aid an attacker in mapping out the file system
for further attacks against the host.
32. DistCC Insecure Temporary File Vulnerability
BugTraq ID: 8402
Remote: No
Date Published: Aug 12 2003 12:00A
Relevant URL: http://www.securityfocus.com/bid/8402
Summary:
distcc is a distributed compiler application for Linux/Unix variants.
distcc acts as a compiler front-end that can distribute software builds
across multiple hosts.
distcc is reported to handle temporary files insecurely. This could permit
attacks which cause sensitive files to be corrupted. A local user may be
able to exploit this issue by creating malicious symbolic links.
Exploitation could result in destruction of critical files, causing a
denial of service. Though unconfirmed, if a local attacker can corrupt
files with custom data, they may be able to gain elevated privileges.
33. Eudora WorldMail Search Cross-Site Scripting Vulnerability
BugTraq ID: 8403
Remote: Yes
Date Published: Aug 12 2003 12:00A
Relevant URL: http://www.securityfocus.com/bid/8403
Summary:
Eudora WorldMail is a Java-based mail server.
A vulnerability has been reported in the software that may allow
unsanitized user input to be displayed to the user. This problem is
related to the search utility for countries, which does not properly filter
HTML and script code. It may be possible for an attacker to construct a
link containing malicious script code that could be executed in a user's
browser upon following that link. This would occur in the security context
of the host running Eudora WorldMail.
This vulnerability exposes web users to cookie-based credential theft as
well as other attacks.
It should also be noted that this issue is also exposed via the search
form. If search input is logged, this issue could be more persistent and
potentially expose users with the ability to view search logs to HTML
injection attacks.
34. HP Tru64 Unspecified EE Device Driver Local Denial of Servic...
BugTraq ID: 8404
Remote: No
Date Published: Aug 13 2003 12:00A
Relevant URL: http://www.securityfocus.com/bid/8404
Summary:
Systems running the Tru64 operating system, in conjunction with DE60x
series adapters and/or DS15 onboard 10/100 ports, implement the use of the
ee device driver.
HP has announced that an unspecified local denial of service vulnerability
has been discovered in the ee device driver. Although it has been reported
that what causes this condition is currently unknown, and the likelihood of
triggering the issue is believed to be low, successful exploitation of this
issue can potentially cause system instability, possibly causing it to
crash. It is believed that the root of this problem lies in a rarely used
error control path within the driver.
This vulnerability affects the ee device driver included in HP Tru64 4.0f
through 5.1.
35. PHP DLOpen Arbitrary Web Server Process Memory Vulnerability
BugTraq ID: 8405
Remote: No
Date Published: Aug 13 2003 12:00A
Relevant URL: http://www.securityfocus.com/bid/8405
Summary:
PHP is the Personal Home Page web application development suite. It is
available for the Unix, Linux, and Microsoft platforms.
A problem has been reported in the dlopen function of PHP when used with
the Apache web server. Because of this, an attacker may be able to gain
unauthorized access to potentially sensitive information.
The problem is in the ability to access the memory of the calling process.
When a PHP script is executed by an Apache process, it is possible to dump
the contents of the Apache process memory to a text file. This could be
used by an attacker to gain access to potentially sensitive information
which could include authentication credentials. The function may also
permit other attacks, such as allowing an attacker to deliver different
content other than what the server is configured to serve.
36. SurgeLDAP Path Disclosure Vulnerability
BugTraq ID: 8406
Remote: Yes
Date Published: Aug 13 2003 12:00A
Relevant URL: http://www.securityfocus.com/bid/8406
Summary:
SurgeLDAP is an LDAP server implementation. It is available for a number
of platforms including Microsoft Windows and Linux/Unix variants.
SurgeLDAP is prone to a path disclosure vulnerability. It is possible to
gain access to sensitive path information by issuing an HTTP GET request
for an invalid resource. This could help a remote attacker enumerate the
layout of the file system of the host running the vulnerable software,
which may be useful in further attacks against the host.
This issue exists in the web server component of SurgeLDAP.
37. SurgeLDAP User.CGI Cross-Site Scripting Vulnerability
BugTraq ID: 8407
Remote: Yes
Date Published: Aug 13 2003 12:00A
Relevant URL: http://www.securityfocus.com/bid/8407
Summary:
SurgeLDAP is an LDAP server implementation. It is available for a number
of platforms including Microsoft Windows and Linux/Unix variants.
SurgeLDAP is prone to cross-site scripting attacks. The issue exists in
the user.cgi script and is due to insufficient sanitization of data
supplied via URI parameters, which will be echoed back to users. Remote
attackers may exploit this issue by enticing a user to visit a malicious
link that specifies hostile HTML and script code as a value for the 'cmd'
parameter of the vulnerable script. This code may be rendered in the
user's browser when the link is visited. This would occur in the context
of the server.
Successful exploitation may allow theft of cookie-based authentication
credentials or other attacks.
This issue exists in the web server component of SurgeLDAP.
38. SurgeLDAP HTTP GET Denial Of Service Vulnerability
BugTraq ID: 8408
Remote: Yes
Date Published: Aug 13 2003 12:00A
Relevant URL: http://www.securityfocus.com/bid/8408
Summary:
SurgeLDAP is an LDAP server implementation. It is available for a number
of platforms including Microsoft Windows and Linux/Unix variants.
SurgeLDAP is prone to a denial of service vulnerability that may occur when
an overly long HTTP GET request is sent to the server. Though unconfirmed,
this may result in memory corruption, which may be further exploitable to
execute arbitrary code. It is reported that an HTTP GET request of 501 or
more characters will trigger this condition.
This issue exists in the web server component of SurgeLDAP.
39. SurgeLDAP Insecure Password Storage Vulnerability
BugTraq ID: 8409
Remote: No
Date Published: Aug 13 2003 12:00A
Relevant URL: http://www.securityfocus.com/bid/8409
Summary:
SurgeLDAP is an LDAP server implementation. It is available for a number
of platforms including Microsoft Windows and Linux/Unix variants.
SurgeLDAP does not adequately secure password credentials. These
credentials will be stored on the system hosting the server in plaintext
and could be exposed to users with local access to the system. On
Microsoft Windows, these credentials are reported to be stored in the
'user.dat' file in the program directory.
40. CiscoWorks Common Management Foundation Administrative Authe...
BugTraq ID: 8410
Remote: Yes
Date Published: Aug 13 2003 12:00A
Relevant URL: http://www.securityfocus.com/bid/8410
Summary:
CiscoWorks Common Management Foundation is the suite of network management
tools distributed and maintained by Cisco.
A problem has been reported in the CiscoWorks Common Management Foundation
that may allow an attacker to circumvent authentication to gain
administrative access. This may give a remote attacker unauthorized access
to resources.
The problem is in the handling of certain URLs. By passing a maliciously
crafted URL to the CiscoWorks Common Management Foundation application, it
is possible to bypass the requirement for authentication. The attacker
must have access as a minimum of guest user.
41. CiscoWorks Common Management User Field Privileged Informati...
BugTraq ID: 8411
Remote: Yes
Date Published: Aug 13 2003 12:00A
Relevant URL: http://www.securityfocus.com/bid/8411
Summary:
CiscoWorks Common Management Foundation is the suite of network management
tools distributed and maintained by Cisco.
A problem has been reported in the CiscoWorks Common Management Foundation
that may allow an attacker to gain access to sensitive information. This
may give a remote attacker information necessary in launching a more
directed attack against resources.
The problem is an error in the handling of user names. The device accepts
user names from web forms, but does not perform adequate checking on the
submitted names. A user logged in as an application user of lower
privilege could change the user name contained within the web form and
resubmit it as the user 'admin' to read privileged information on the device.
42. CiscoWorks Common Management Foundation Guest Account Passwo...
BugTraq ID: 8412
Remote: Yes
Date Published: Aug 13 2003 12:00A
Relevant URL: http://www.securityfocus.com/bid/8412
Summary:
CiscoWorks Common Management Foundation is the suite of network management
tools distributed and maintained by Cisco.
A problem has been reported in default accounts of the CiscoWorks Common
Management Foundation. This may result in an attacker gaining unintended
access to the application.
The problem is the Guest account. By default, the application does not
require setting a password for this account. Because of this, it is
possible that the application may be deployed with an account that is not
password protected.
43. Microsoft MCIWNDX.OCX ActiveX Control Buffer Overflow Vulner...
BugTraq ID: 8413
Remote: Yes
Date Published: Aug 13 2003 12:00A
Relevant URL: http://www.securityfocus.com/bid/8413
Summary:
The 'mciwndx.ocx' ActiveX control is included in Microsoft Visual Studio 6
and supports multimedia programming.
'mciwndx.ocx' has been reported prone to a buffer overflow vulnerability.
The issue reportedly presents itself when excessive data (more than 640 kB)
is passed to the "filename" property.
It has been conjectured that this issue could potentially lead to the
execution of code with the privileges of the user executing the web
browser. This problem requires that a user with the vulnerable control
installed visit a web page that invokes the control in a manner sufficient
to trigger the issue. Upon doing so, it may be possible to create a
remotely exploitable stack overflow condition that results in the
overwriting of sensitive process memory. This, however, has not been confirmed.
It should be noted, that ActiveX controls by nature might contain latent
vulnerabilities. Caution should be employed if installing ActiveX controls.
44. Xoops BBCode HTML Injection Vulnerability
BugTraq ID: 8414
Remote: Yes
Date Published: Aug 13 2003 12:00A
Relevant URL: http://www.securityfocus.com/bid/8414
Summary:
Xoops is open-source, freely available web portal software written in
object-oriented PHP. It is back-ended by a MySQL database and will run on
most Unix and Linux distributions.
BBCode is a basic restricted implementation of HTML that is used to control
the appearance of text in user-supplied Xoops entries.
Xoops BBCode has been reported prone to an HTML injection vulnerability. It
has been reported that an attacker may inject malicious script into areas
of Xoops where BBCode is rendered, for example News entries, bulletin board
posts or private messages. This issue is due to a lack of sufficient
sanitization performed on user supplied BBCode tags. The [color], [size]
and [font] BBCode tags are reported vulnerable. Injected code may be
rendered in the web browser of a user who views vulnerable areas of the
site. This would occur in the security context of the site hosting Xoops
and its related modules.
Redirection attacks using CSS and vbscript, exploiting this vulnerability
have been demonstrated. Although unconfirmed, theft of cookie-based
authentication credentials and other attacks may also be possible.
Although this vulnerability has been reported to affect Xoops version <=
1.3.x. The issue has been reported exploitable via the News, Private
Messages and NewBB Xoops modules.
45. SGI IRIX NFSD XDR Decoding Remote Denial of Service Vulnerab...
BugTraq ID: 8415
Remote: Yes
Date Published: Aug 13 2003 12:00A
Relevant URL: http://www.securityfocus.com/bid/8415
Summary:
XDR (External Data Representation) is a protocol governing the platform
independent description and encoding of data, in this particular case it is
used in conjunction with the SGI IRIX nfsd daemon, used to share system
based resources across a network. NFS uses XDR to describe the format of
its data.
SGI has announced a vulnerability in the IRIX nfsd daemon which may make it
prone to remote denial of service attacks. The issue is said to occur when
nfsd attempts to handle malformed packets which cause XDR decoding errors.
Although it has not been confirmed, there is a possibility that this
vulnerability is in someway related to the
Linux Kernel 2.4 XDR Packet Handler For NFSv3 Remote Denial Of Service
Vulnerability described in BID 8298.
Successful exploitation of this vulnerability would allow a remote attacker
to trigger a system panic on an affected host.
46. HolaCMS HTMLtags.PHP Local File Include Vulnerability
BugTraq ID: 8416
Remote: Yes
Date Published: Aug 13 2003 12:00A
Relevant URL: http://www.securityfocus.com/bid/8416
Summary:
holaCMS is a content management system that is implemented in PHP.
It has been reported that an information disclosure issue exists in the
htmltags.php module of the software. The issue could be exploited by a
remote attacker to gain unauthorized access to potentially sensitive
information. It has also been reported that some files included via
exploitation may allow for information to be edited.
This issue may allow an attacker to access confidential data such as the
password file. It is not known if this may also be exploited to include
remote files. If this is the case, this issue could also lead to remote
command execution.
47. Clickcess ChitChat.NET Message HTML Injection Vulnerability
BugTraq ID: 8417
Remote: Yes
Date Published: Aug 13 2003 12:00A
Relevant URL: http://www.securityfocus.com/bid/8417
Summary:
Clickcess ChitChat.NET is a discussion forum designed specifically for use
with SQL Server and implemented in ASP.NET. It is available for Microsoft
Windows.
A vulnerability has been reported in the software that may allow
unsanitized user input to be injected into the website. This problem is
related to the Name and Topic Title input fields, which fail to properly
filter HTML and script code. Injected HTML code may be rendered in the web
browser of a victim who views vulnerable areas of the site. This would
occur in the security context of the site hosting ChitChat.NET.
This vulnerability could be exploited to steal cookie-based credential from
a host. Other attacks may well be possible.
48. HP Fixes Unspecified Local Denial Of Service Vulnerability
BugTraq ID: 8418
Remote: No
Date Published: Aug 14 2003 12:00A
Relevant URL: http://www.securityfocus.com/bid/8418
Summary:
HP-UX is the UNIX Operating System distributed and maintained by HP.
Reliability problems have been reported in some HP-UX systems when patches
are applied. This may allow an attacker to make the system unstable and crash.
The problem is in two patches released by HP. Patches PHNE_26413 and
PHNE_27128 have a denial of service vulnerability that, when applied, can
allow a local attacker to crash a host with the patches applied. The exact
details of this vulnerability is not presently known, and this Bugtraq ID
will be updated when additional details become available.
49. Microsoft URLScan / RSA Security SecurID Configuration Enume...
BugTraq ID: 8419
Remote: Yes
Date Published: Aug 14 2003 12:00A
Relevant URL: http://www.securityfocus.com/bid/8419
Summary:
Microsoft URLScan is an Internet Server API (ISAPI) filter that can be
configured to block a variety of HTTP methods, file extension access, and
other queries.
SecurID, a two-factor authentication mechanism developed by RSA Security,
can also be used to prevent unauthorized access to a website.
A weakness has been discovered in Microsoft URLScan and RSA Security
SecurID when used in conjunction on a web server. The problem is said to
occur due to the order in which the products are placed within the global
ISAPI filter list.
When the vulnerable configuration is in place, an attacker may be capable
of enumerating the Microsoft URLScan extension filtering list, by making
repeated requests to files with differing extensions. This is due to the
web server incorrectly returning a page, containing a hidden form field
that includes a 'referrer' NAME, and VALUE containing
'Rejected-By-UrlScan'. It should be noted that if the default configuration
has been changed, the rejection string may differ.
The enumeration of this type of information could potentially aid an
attacker when launching further attacks against the target web server.
50. ECartis LIScript Arbitrary Variable Viewing Vulnerability
BugTraq ID: 8420
Remote: Yes
Date Published: Aug 14 2003 12:00A
Relevant URL: http://www.securityfocus.com/bid/8420
Summary:
ECartis is a freely available, open source mailing list manager. It is
available for the Unix and Linux platforms.
A problem in the handling of user-supplied input has been reported in
ECartis. Because of this, an attacker may be able to gain access to
unauthorized and potentially sensitive information.
The problem is in the handling of requests sent via e-mail for specific
functions and variables. By supplying specially malformed requests, it is
possible to make ECartis disclose data or perform actions that may be
restricted and sensitive in nature. Multiple instances of this type of
issue were reported to exist in the software.
51. Ecartis Multiple Buffer Overrun Vulnerabilities
BugTraq ID: 8421
Remote: Yes
Date Published: Aug 14 2003 12:00A
Relevant URL: http://www.securityfocus.com/bid/8421
Summary:
ECartis is a freely available, open source mailing list manager. It is
available for the Unix and Linux platforms.
Multiple buffer overrun vulnerabilities have been reported for Ecartis 1.0.
The problems occur due to a variety of problems within the code, and each
appears to be a result of insufficient bounds checking when copying the
contents of e-mail into internal memory buffers.
One such problem occurs within the smtp_body_822bis() function, located in
the stmp.c source file, which is designed to copy data from a src buffer
into a destination buffer. However, the function does not include a size
parameter, which may allow for the destination to be overrun. As a result
of this issue, any later implementation of this function may result in a,
potentially exploitable, buffer overrun.
Other issues have been reported within the unhtml.c and unmime.c source
files. All issues located in these files appear to occur due insufficient
bounds checking before transferring data between pointers.
Successful exploitation of this vulnerabilities may result in a remote
denial of service. Also, although it has not yet been confirmed, due to the
nature of these vulnerabilities, it is theoretically possible that an
attacker may be capable of exploiting the overruns to execute arbitrary
instructions. It should be noted that due to the nature of e-mail
protocols, successfully exploiting this issue may be difficult due to a
restricted character set.
52. Sun One/IPlanet Web Server Windows Denial Of Service Vulnera...
BugTraq ID: 8423
Remote: Yes
Date Published: Aug 14 2003 12:00A
Relevant URL: http://www.securityfocus.com/bid/8423
Summary:
Sun ONE Web Server is a web server implementation that is maintained by Sun
Microsystems. It has been rebranded from iPlanet.
Sun has reported the Sun ONE and iPlanet Web Servers on Windows platforms
are prone to a remotely exploitable denial of service vulnerability.
Exploitation of this issue will cause the server to exit unexpectedly.
This could be exploited to deny the availability of services to legitimate
users of an affected server.
Sun has not released further technical details about this issue. If
additional details are made available, this BID will be updated accordingly.
III. SECURITYFOCUS NEWS ARTICLES
--------------------------------
1. The Bright Side of Blaster
By: Kevin Poulsen
Experts predict the worm will leave a more secure Internet in its wake
http://www.securityfocus.com/news/6728
2. Hackers Claim New Fingerprint Biometric Attack
By: Ann Harrison
Presenters at the Chaos Computer Camp say thin invisible latex can fool
advanced fingerprint scanners.
http://www.securityfocus.com/news/6717
3. RPC DCOM Worm Hits the Net
By: Kevin Poulsen
If you had Monday, August 11, noon Pacific time in the pool-- congratulations.
http://www.securityfocus.com/news/6689
4. Virus will get you if you don't watch out
By: Larry Blasko, The Associated Press
http://www.securityfocus.com/news/6741
5. Blaster's Microsoft Attack Fizzles
By: Helen Jung, The Associated Press
http://www.securityfocus.com/news/6736
6. Federal charge filed against Ohio man accused of hacking Acx...
By: Caryn Rousseau, The Associated Press
http://www.securityfocus.com/news/6733
IV. SECURITYFOCUS TOP 6 TOOLS
-----------------------------
1. Arno's IPTABLES Firewall Script v1.8.1BETA-3
By: Arno
Relevant URL: http://rocky.molphys.leidenuniv.nl
Platforms: Linux, POSIX
Summary:
Arno's Iptables firewall is a script which was originally derived from
Seven's iptables script. One of the biggest differences is that this script
also has support for ADSL modems. It also features stealth scan detection,
extensive user-definable logging with rate limiting to prevent log
flooding, masquerading and port forwarding (NAT), optimizing the throughput
of your connection, protection against SYN/ICMP flooding, and much more.
It's easy to configure and highly customizable. It includes a filter script
(fwfilter) to make your firewall log more readable.
2. Graphical certification authority v0.4.5
By: chris
Relevant URL: http://www.hohnstaedt.de/xca.html
Platforms: Linux, POSIX
Summary:
Graphical certification authority is an interface for managing RSA keys and
certificates, and the creation and signing of PKCS#10 requests. It uses the
OpenSSL library and a Berkeley DB for key and certificate storage. It
supports importing and exporting keys and PEM DER PKCS8 certificates,
signing and revoking of PEM DER PKCS12, and the selection of x509v3
extensions. A tree view of certificates is presented.
3. Dropbear SSH Server v0.34
By: Matt Johnston
Relevant URL: http://matt.ucc.asn.au/dropbear/dropbear.html
Platforms: POSIX
Summary:
Dropbear is an SSH2 server, designe-d to be usable in small memory
environments.
4. AIM Sniff v0.9b
By: Shawn Grimes
Relevant URL: http://www.aimsniff.com/
Platforms: UNIX
Summary:
AIM Sniff is a utility for monitoring and archiving AOL Instant Messenger
messages across a network. It can be used to monitor for cases of
harassment or warez trading. It has the ability to do a live dump (actively
sniff the network) or read a PCAP file and parse the file for IM messages.
You also have the option of dumping the information to a MySQL database or
STDOUT. AIM Sniff will also monitor for an AIM login and then perform an
SMB lookup on the originating computer in order to match NT Domain names
with AIM login names (handles). A very basic Web frontend is included.
5. tinc 1.0.1
By: guus <[email protected]>
Relevant URL: http://tinc.nl.linux.org/
Platforms: Linux
Summary:
tinc is a Virtual Private Network (VPN) daemon that uses tunneling and
encryption to create a secure private network between multiple hosts on the
Internet. This tunneling allows VPN sites to share information with each
other over the Internet without exposing any information.
6. Anti-Spam SMTP Proxy v1.0.0
By: John Hanna
Relevant URL: http://assp.sourceforge.net/
Platforms: BSDI, Linux, MacOS, Os Independent, OS/2, Perl (any system
supporting perl), POSIX, Windows 2000, Windows NT
Summary:
The Anti-Spam SMTP Proxy (ASSP) Server project aims to create an open
source platform independent SMTP Proxy server which implements whitelists
and Bayesian filtering to help stop unsolicited commercial email (UCE).
Anti-spam tools should be adaptive to new spam and customized for each
site?s email patterns. This easy to use tool works with any mail transport
and achieves these goals requiring no operator intervention after the
initial setup phase.
V. SECURITYJOBS LIST SUMMARY
----------------------------
1. Security Architecture Manager - Seattle, WA (Thread)
Relevant URL:
http://www.securityfocus.com/archive/77/333549
2. NIDS Senior Secruity Engineer Columbia, MD (Thread)
Relevant URL:
http://www.securityfocus.com/archive/77/333544
3. Security and Privacy Tools Development Manager - Mi... (Thread)
Relevant URL:
http://www.securityfocus.com/archive/77/333536
4. Security Engineers needed - Fairfax, VA (Thread)
Relevant URL:
http://www.securityfocus.com/archive/77/333531
5. Is there life after infosec? (Thread)
Relevant URL:
http://www.securityfocus.com/archive/77/333524
6. Request for Job Posting... (Thread)
Relevant URL:
http://www.securityfocus.com/archive/77/333522
7. Security Researcher/Signature Developer needed (Thread)
Relevant URL:
http://www.securityfocus.com/archive/77/333328
8. C & A Security Consultant needed - Fairfax, VA (Thread)
Relevant URL:
http://www.securityfocus.com/archive/77/333327
9. SR. SYSTEMS SECURITY ARCHITECT - Santa Clara, CA (mu... (Thread)
Relevant URL:
http://www.securityfocus.com/archive/77/333326
10. Intrusion Detection OR Network Forensics / Network P... (Thread)
Relevant URL:
http://www.securityfocus.com/archive/77/333324
11. QA - Security - Bay Area (Thread)
Relevant URL:
http://www.securityfocus.com/archive/77/333238
12. Vulnerability Detection - SW Engineer - Bay Area (Thread)
Relevant URL:
http://www.securityfocus.com/archive/77/333231
13. InfoSec Position Sought (Thread)
Relevant URL:
http://www.securityfocus.com/archive/77/333221
14. Looking for side work (Thread)
Relevant URL:
http://www.securityfocus.com/archive/77/333119
15. System Security Analyst - Washington, DC (Thread)
Relevant URL:
http://www.securityfocus.com/archive/77/333112
16. IT Audit - Michigan (Thread)
Relevant URL:
http://www.securityfocus.com/archive/77/333108
17. Sr. IT Auditor - Wisconsin (Thread)
Relevant URL:
http://www.securityfocus.com/archive/77/333106
18. Sr. IT Auditor - Northern, VA (Thread)
Relevant URL:
http://www.securityfocus.com/archive/77/333105
19. Security Product Line Manager #720JC - NJ - $95k - $... (Thread)
Relevant URL:
http://www.securityfocus.com/archive/77/333102
20. Sr. IT Auditor - Atlanta (Thread)
Relevant URL:
http://www.securityfocus.com/archive/77/333101
21. Software Engineer (Python/C++): San Mateo, CA (Thread)
Relevant URL:
http://www.securityfocus.com/archive/77/333100
22. Seeking Information Technology Position in the Washi... (Thread)
Relevant URL:
http://www.securityfocus.com/archive/77/333032
23. NJ-Liberty Corner-Manager of Information Security En... (Thread)
Relevant URL:
http://www.securityfocus.com/archive/77/333031
24. Security Delivery Lead needed - Fairfax, VA (Thread)
Relevant URL:
http://www.securityfocus.com/archive/77/333030
25. Seeking Information Security position in Austin, TX (Thread)
Relevant URL:
http://www.securityfocus.com/archive/77/333027
26. Mid-Level Security Administrator 2 (Thread)
Relevant URL:
http://www.securityfocus.com/archive/77/333026
27. Symantec Looking for On-Site AV Administrator - Miam... (Thread)
Relevant URL:
http://www.securityfocus.com/archive/77/332808
28. Pre-sales Engineer, Benelux (Thread)
Relevant URL:
http://www.securityfocus.com/archive/77/332795
29. Pre-sales Engineer, Germany (Thread)
Relevant URL:
http://www.securityfocus.com/archive/77/332794
30. Account Manager, Amsterdam (Thread)
Relevant URL:
http://www.securityfocus.com/archive/77/332793
31. Account Manager, Munich (Thread)
Relevant URL:
http://www.securityfocus.com/archive/77/332792
32. Sales Manager, Germany (Thread)
Relevant URL:
http://www.securityfocus.com/archive/77/332791
33. Channel Account Manager, Germany (Thread)
Relevant URL:
http://www.securityfocus.com/archive/77/332790
34. Security Systems Administrator/Architect with auditi... (Thread)
Relevant URL:
http://www.securityfocus.com/archive/77/332684
35. Inside Sales- early stage WLAN Security Company in t... (Thread)
Relevant URL:
http://www.securityfocus.com/archive/77/332683
36. RE-POST - Director of IT Security, North Wales, PA (Thread)
Relevant URL:
http://www.securityfocus.com/archive/77/332581
37. Security and Privacy Tools Development Manager - Mi... (Thread)
Relevant URL:
http://www.securityfocus.com/archive/77/332580
38. Director of IT Security, North Wales, PA (Thread)
Relevant URL:
http://www.securityfocus.com/archive/77/332557
39. Seeking a Information Security Position in the Washi... (Thread)
Relevant URL:
http://www.securityfocus.com/archive/77/332556
40. CCTV, Access Control, Physical Security Engineer Los... (Thread)
Relevant URL:
http://www.securityfocus.com/archive/77/332539
41. Information Security Engineering Manager (Thread)
Relevant URL:
http://www.securityfocus.com/archive/77/332538
VI. INCIDENTS LIST SUMMARY
--------------------------
1. Software vendor clueless (Thread)
Relevant URL:
http://www.securityfocus.com/archive/75/333649
2. possible 0-day exploit for latest Real-/Helixserver ... (Thread)
Relevant URL:
http://www.securityfocus.com/archive/75/333645
3. mod to "killblast.vbs" script (Thread)
Relevant URL:
http://www.securityfocus.com/archive/75/333587
4. FTimes 3.3.0 Release (Thread)
Relevant URL:
http://www.securityfocus.com/archive/75/333585
5. WebJob 1.3.0 Release (Thread)
Relevant URL:
http://www.securityfocus.com/archive/75/333584
6. msblast and RFC 1918 addresses (Thread)
Relevant URL:
http://www.securityfocus.com/archive/75/333583
7. rpc dcom worm and windowsupdate (Thread)
Relevant URL:
http://www.securityfocus.com/archive/75/333582
8. MSBlast and other known exploits.. (Thread)
Relevant URL:
http://www.securityfocus.com/archive/75/333566
9. Microsoft 'extinguishes' windowsupdate.com (Thread)
Relevant URL:
http://www.securityfocus.com/archive/75/333564
10. Mass-mail from Microsoft re Blaster worm? (Thread)
Relevant URL:
http://www.securityfocus.com/archive/75/333563
11. Tools for monitoring port scans / connection attmemp... (Thread)
Relevant URL:
http://www.securityfocus.com/archive/75/333378
12. MSBLASTER Infecting despite 03-026 patch? (Thread)
Relevant URL:
http://www.securityfocus.com/archive/75/333376
13. Heads up! distributed scans and attacks targeting n... (Thread)
Relevant URL:
http://www.securityfocus.com/archive/75/333374
14. msblast.exe worm FINDINGS (DDoS) ---> Can someone pl... (Thread)
Relevant URL:
http://www.securityfocus.com/archive/75/333373
15. Blaster Variant - W32.Blaster.B.Worm (Thread)
Relevant URL:
http://www.securityfocus.com/archive/75/333372
16. Analysis/decompilation of main() of the msblast worm (Thread)
Relevant URL:
http://www.securityfocus.com/archive/75/333287
17. Weird HTTP Requests. (Thread)
Relevant URL:
http://www.securityfocus.com/archive/75/333286
18. msblast.exe --> DDoS against windowsupdate.com (rese... (Thread)
Relevant URL:
http://www.securityfocus.com/archive/75/333285
19. MS03-026 Update Problems? (fwd) (Thread)
Relevant URL:
http://www.securityfocus.com/archive/75/333157
20. new msblaster on the loose? (Thread)
Relevant URL:
http://www.securityfocus.com/archive/75/333145
21. FW: rpc dcom worm and windowsupdate (Thread)
Relevant URL:
http://www.securityfocus.com/archive/75/333138
22. Blaster Worm Rebooting Patched Machines! (Thread)
Relevant URL:
http://www.securityfocus.com/archive/75/333137
23. MsBlast (Thread)
Relevant URL:
http://www.securityfocus.com/archive/75/332990
24. msblast.exe available (Thread)
Relevant URL:
http://www.securityfocus.com/archive/75/332981
25. Blasting Blaster.Worm (aka LovSan Virus) (Thread)
Relevant URL:
http://www.securityfocus.com/archive/75/332973
26. DCOM worm analysis report: W32.Blaster.Worm (Thread)
Relevant URL:
http://www.securityfocus.com/archive/75/332933
27. updated partial analysis of msblast.exe (Thread)
Relevant URL:
http://www.securityfocus.com/archive/75/332920
28. Connections on ports 2023/tcp and 1803/tcp (Thread)
Relevant URL:
http://www.securityfocus.com/archive/75/332916
VII. VULN-DEV RESEARCH LIST SUMMARY
-----------------------------------
1. HOON & shellcode (again) (Thread)
Relevant URL:
http://www.securityfocus.com/archive/82/333571
2. Rolf Rolles analysis (Thread)
Relevant URL:
http://www.securityfocus.com/archive/82/333490
3. MSBlast complete recode / analysis (Thread)
Relevant URL:
http://www.securityfocus.com/archive/82/333313
4. DCOM & Win 2003 Server (Thread)
Relevant URL:
http://www.securityfocus.com/archive/82/333213
5. Portcullis Security Advisory: CiscoWorks 2000 Privil... (Thread)
Relevant URL:
http://www.securityfocus.com/archive/82/333041
6. Oracle xdb ftp service? (Thread)
Relevant URL:
http://www.securityfocus.com/archive/82/333040
7. Bug in Norton FireWall 2003 (Thread)
Relevant URL:
http://www.securityfocus.com/archive/82/332837
8. Overflowing an interactive app (Thread)
Relevant URL:
http://www.securityfocus.com/archive/82/332836
9. Analyze binary for holes (Thread)
Relevant URL:
http://www.securityfocus.com/archive/82/332631
10. quick question (Thread)
Relevant URL:
http://www.securityfocus.com/archive/82/332551
VIII. MICROSOFT FOCUS LIST SUMMARY
----------------------------------
1. scan of domain logon reveals unknown port (Thread)
Relevant URL:
http://www.securityfocus.com/archive/88/333761
2. Account Lockout -- ARGH (Thread)
Relevant URL:
http://www.securityfocus.com/archive/88/333757
3. DNS (Thread)
Relevant URL:
http://www.securityfocus.com/archive/88/333755
4. Account Lockuout --ARGH (Thread)
Relevant URL:
http://www.securityfocus.com/archive/88/333753
5. Detecting Blaster (Thread)
Relevant URL:
http://www.securityfocus.com/archive/88/333545
6. New variant. Blast.b (Thread)
Relevant URL:
http://www.securityfocus.com/archive/88/333539
7. FW: Actions for the Blaster Worm - Special Edition, ... (Thread)
Relevant URL:
http://www.securityfocus.com/archive/88/333529
8. MS03-029 ?-Download link (Thread)
Relevant URL:
http://www.securityfocus.com/archive/88/333516
9. Why the shutdown if infected with blaster? (Thread)
Relevant URL:
http://www.securityfocus.com/archive/88/333507
10. FW: Blaster vs. Kaht2, detecting Windows root kits (Thread)
Relevant URL:
http://www.securityfocus.com/archive/88/333498
11. DCOM patch + Exchange (Thread)
Relevant URL:
http://www.securityfocus.com/archive/88/333483
12. Administrivia: Blaster (Thread)
Relevant URL:
http://www.securityfocus.com/archive/88/333482
13. attempt to launch a DCOM server? (Thread)
Relevant URL:
http://www.securityfocus.com/archive/88/333311
14. What the heck is this msblast.exe (Thread)
Relevant URL:
http://www.securityfocus.com/archive/88/333259
15. W32.Blaster.C.Worm (Thread)
Relevant URL:
http://www.securityfocus.com/archive/88/333234
16. 3 Comprehensive links in combat with MSBlaster Worm (Thread)
Relevant URL:
http://www.securityfocus.com/archive/88/333232
17. Error Message: User Interface Failu The Logon User I... (Thread)
Relevant URL:
http://www.securityfocus.com/archive/88/333229
18. Blaster vs. Kaht2 (Thread)
Relevant URL:
http://www.securityfocus.com/archive/88/333073
19. DCOM Worm (Thread)
Relevant URL:
http://www.securityfocus.com/archive/88/333071
20. DCOM Exploit / Worm Signatures (Thread)
Relevant URL:
http://www.securityfocus.com/archive/88/332977
21. FW: Blaster vs. Kaht2 (Thread)
Relevant URL:
http://www.securityfocus.com/archive/88/332975
22. msblast and IIS (Thread)
Relevant URL:
http://www.securityfocus.com/archive/88/332853
23. [msblast/LovSan] Detection (Thread)
Relevant URL:
http://www.securityfocus.com/archive/88/332834
24. Article Announcement: Basic IIS Lockdown Using Scrip... (Thread)
Relevant URL:
http://www.securityfocus.com/archive/88/332832
25. DCOM worm is out (Thread)
Relevant URL:
http://www.securityfocus.com/archive/88/332755
IX. SUN FOCUS LIST SUMMARY
--------------------------
NO NEW POSTS FOR THE WEEK 2003-08-11 to 2003-08-18.
X. LINUX FOCUS LIST SUMMARY
---------------------------
NO NEW POSTS FOR THE WEEK 2003-08-11 to 2003-08-18.
XI. SPONSOR INFORMATION
-----------------------
This Issue is Sponsored by: eEye Digital Security
Blaster Worm & Variants: Identify & Fix Your Infected Systems
The 'Blaster' worm and its variants are still targeting unpatched
Microsoft systems.
eEye's Retina Network Security Scanner can quickly identify and fix
vulnerable and infected assets. See if you're vulnerable or have been
infected by 'Blaster'.
Get a free trial of Retina Network Security Scanner at:
http://www.securityfocus.com/sponsor/eEYE_sf-news_030818
------------------------------------------------------------------------