Blu-ray's Reward: It Becomes A Hacker Target :: Hack In The Box

Packet Storm Security Latest

· MDVSA-2008-235.txt
Mandriva Linux Security Advisory 2008-235 - A number of security vulnerabilities have been discovered and corrected in the latest Mozilla Thunderbird program, version 2.0.0.18. This update provides the latest Thunderbird to correct these issues.
· cambridge-sql.txt
VisitCambridge.org suffers from a remote SQL injection vulnerability.
· verlihub-exec.txt
Verlihub versions 0.9.8d-RC2 and below suffer from a remote command execution vulnerability due to a lack of input sanitization.
· DDIVRT-2008-15.txt
The iPhone Configuration Web Utility 1.0 for Windows web interface is vulnerable to a common web directory traversal attack. Successful exploitation will result in arbitrary read-onlyfile access outside of the iPhone Configuration Web Utility 1.0 web root.
· openssh-cbc-adv.txt
The OpenSSH team has been made aware of an attack against the SSH protocol version 2 by researchers at the University of London. Unfortunately, due to the report lacking any detailed technical description of the attack and CPNI's unwillingness to share necessary information, they are unable to properly assess its impact.
· joomlathyme-sql.txt
The Joomla Thyme component version 1.0 suffers from a remote SQL injection vulnerability.
· BitDefenderDOS.zip
Proof of concept malicious pdf file that causes a denial of service and infinite loop in BitDefender using the pdf.xmd module.
· fwknop-1.9.9.tar.gz
fwknop implements an authorization scheme that requires only a single encrypted packet to communicate various pieces of information, including desired access through a Netfilter policy and/or specific commands to execute on the target system. The main application of this program is to protect services such as SSH with an additional layer of security in order to make the exploitation of vulnerabilities much more difficult. The authorization server works by passively monitoring authorization packets via libpcap. Added support to fwknop for the Linux 'any' interface. Added support for interfacing fwknop with third party software through the addition of three new variables in the access.conf file.Various other fixes and additions.

Topics

· All topics
· AMD News (Oct 07, 2008)
· Apple News (Nov 21, 2008)
· Articles (Feb 13, 2006)
· Ask Us (Feb 01, 2003)
· Audio/Video (Nov 12, 2008)
· Encryption (Nov 10, 2008)
· Games (Nov 13, 2008)
· Hardware (Nov 21, 2008)
· HITB News (Sep 25, 2008)
· Industry News (Nov 21, 2008)
· Intel News (Nov 13, 2008)
· Law and Order (Nov 21, 2008)
· Linux (Nov 19, 2008)
· Microsoft (Nov 21, 2008)
· Networking (Nov 12, 2008)
· PDAs (Feb 09, 2007)
· Privacy (Nov 21, 2008)
· Red Hat (Sep 29, 2008)
· Science (Nov 21, 2008)
· Security (Nov 21, 2008)
· Software & Programming (Nov 21, 2008)
· Spam (Nov 21, 2008)
· Technology (Nov 18, 2008)
· Transmeta (Jul 07, 2007)
· Viruses & Malware (Nov 19, 2008)
· Wireless (Nov 12, 2008)