Security Watch


Are you surfing safely? Try Better and Safer Computing

TrendMicro.com


ISS Threat Index page

SecurityFocus.com
Vuln: Multiple Vendor TLS Protocol Session Renegotiation Security Vulnerability
Multiple Vendor TLS Protocol Session Renegotiation Security Vulnerability 2010-02-08

Vuln: Sun Java SE November 2009 Multiple Security Vulnerabilities
Sun Java SE November 2009 Multiple Security Vulnerabilities 2010-02-08

Vuln: Oracle 11gR2 Remote Command Execution Vulnerability
Oracle 11gR2 Remote Command Execution Vulnerability 2010-02-08

Vuln: Linux Kernel 'drivers/scsi/gdth.c' Local Privilege Escalation Vulnerability
Linux Kernel 'drivers/scsi/gdth.c' Local Privilege Escalation Vulnerability 2010-02-08

Bugtraq: [security bulletin] HPSBUX02503 SSRT100019 rev.1 - HP-UX Running Java, Remote Increase in Privilege, Denial of Service and Other
[security bulletin] HPSBUX02503 SSRT100019 rev.1 - HP-UX Running Java, Remote Increase in Privilege, Denial of Service and Other

Bugtraq: RE: Samba Remote Zero-Day Exploit
RE: Samba Remote Zero-Day Exploit



News: Twitter attacker had proper credentials
Twitter attacker had proper credentials

News: PhotoDNA scans images for child abuse
PhotoDNA scans images for child abuse

News: Conficker data highlights infected networks
Conficker data highlights infected networks

>> Advertisement <<


News: Popular apps need better patching, says report
Popular apps need better patching, says report

Brief: Google offers bounty on browser bugs
Google offers bounty on browser bugs

Brief: Cyberattacks from U.S. "greatest concern"
Cyberattacks from U.S. "greatest concern"

>> Advertisement <<



ISTS Dartmouth News


Incidents.org
Oracle has an unscheduled security alert and patch for CVE-2010-0073. The issue affects WebLogic Server and is remotely exploitable. Details and patch are here http://www.oracle.com/technology/deploy/security/alerts/alert-cve-2010-0073.html, (Tue, Feb 9th)
...(more)... Tue, 09 Feb 2010 00:43:23 GMT


When is a 0day not a 0day? When the exploit ends up being just a poor default configuration issue. I ...(more)... Tue, 09 Feb 2010 00:23:31 GMT


When is a 0day in OpenSSH not a 0day? When it's local exploit code. Not the kind that exploits a vul ...(more)... Mon, 08 Feb 2010 14:58:46 GMT


Once again a lazy weekend to catch up on some reading. One of the items that came across my em ...(more)... Sun, 07 Feb 2010 14:56:08 GMT


LANDesk has released a security fix for a vulnerability reported for the LANDesk Management Gateway ...(more)... Sat, 06 Feb 2010 20:30:23 GMT


------ Johannes B. Ullrich, Ph ...(more)... Sat, 06 Feb 2010 02:04:59 GMT


Insecure.org
[CORE-2010-0121] Multiple Vulnerabilities with 8.3 Filename Pseudonyms in Web Servers
<p>Posted by CORE Security Technologies Advisories on Feb 08</p> Core Security Technologies - CoreLabs Advisory<br> <a rel="nofollow" href="http://www.coresecurity.com/corelabs/">http://www.coresecurity.com/corelabs/</a><br>Date of last update: 2010-02-05...<br> Tue, 09 Feb 2010 00:33:30 GMT

[Hacking Event] Night Da Hack 2010 : Call For Proposals
<p>Posted by m . mahdjoub on Feb 08</p>- Night Da Hack 2010<br><br>Around computer security related talks, workshops and contests, Night da Hack aims at bringing...<br> Tue, 09 Feb 2010 00:29:11 GMT

JDownloader Remote Code Execution
<p>Posted by Matthias -apoc- Hecker on Feb 08</p>-- Product<br><br>localhost port 9666 (default port,...<br> Tue, 09 Feb 2010 00:24:00 GMT

Re: Samba Remote Zero-Day Exploit
<p>Posted by Stefan Kanthak on Feb 08</p>Dan Kaminsky wrote on February 06, 2010 6:43 PM:<br><br>Stefan<br> Tue, 09 Feb 2010 00:10:10 GMT

Re: Samba Remote Zero-Day Exploit
<p>Posted by Dan Kaminsky on Feb 08</p>You need admin rights to create junctions. At that point, path <br>constraints aren't relevant, just psexec and get not only arbitrary <br>share's range. (Still allow navigation to such symlinks if one exists,...<br> Mon, 08 Feb 2010 23:29:35 GMT

Re: Samba Remote Zero-Day Exploit
<p>Posted by Kingcope on Feb 08</p>Hello Paul,<br><br>only allow...<br> Mon, 08 Feb 2010 22:55:21 GMT



US-CERT.gov
TA10-021A: Microsoft Internet Explorer Vulnerabilities
Microsoft Internet Explorer Vulnerabilities

TA10-013A: Adobe Reader and Acrobat Vulnerabilities
Adobe Reader and Acrobat Vulnerabilities

TA10-012B: Microsoft Windows EOT Font and Adobe Flash Player 6 Vulnerabilities
Microsoft Windows EOT Font and Adobe Flash Player 6 Vulnerabilities

TA10-012A: Oracle Updates for Multiple Vulnerabilities
Oracle Updates for Multiple Vulnerabilities

TA09-343A: Adobe Flash Vulnerabilities Affect Flash Player and Adobe AIR
Adobe Flash Vulnerabilities Affect Flash Player and Adobe AIR


Error
Links to resources

TropTech.com home page
Security by nsfetcu
[ Join Now | Ring Hub | Random | << Prev | Next >> ]