Security

Security news, and notes, from security at Tipsdr and from all corners of the Internet. Get continuous protection for your PC with Windows Live OneCare Download the free trial.

Free Performance scan
Windows Support
Remote Desktop Access

Jul
23rd

Wed

AST-2008-010: Asterisk IAX 'POKE' resource exhaustion Asterisk Project Security Advisory - AST-2008-010 Product Asterisk Summary Asterisk IAX ‘POKE’ resource exhaustion Nature of Advisory Denial of service Susceptibility Remote Unauthenticated Sessions…

[ MDVSA-2008:152 ] - Updated wireshark packages fix denial of service vulnerability Mandriva Linux Security Advisory MDVSA-2008:152 Package : wireshark Date : July 22, 2008 Affected: 2007.1, 2008.0, 2008.1, Corporate 4.0 Problem Description: A vulnerability was found in Wireshark,…

AST-2008-011: Traffic amplification in IAX2 firmware provisioning system Asterisk Project Security Advisory - AST-2008-011 Product Asterisk Summary Traffic amplification in IAX2 firmware provisioning system Nature of Advisory Traffic amplification attack Susceptibility…

RE: Windows Vista Power Management & Local Security Policy Correct. Power management in Windows Vista is apparently given a pass to bypass local security policy, which is a bad thing, and sets a bad precedence. I will leave it to others to exploit this…

RIM patches PDF security hole RIM has released a patch for a security flaw in BlackBerry Enterprise Server, which exposed corporate networks to hackers via a maliciously crafted PDF document .

With DNS flaw now public, attack code imminent Hackers say that they will soon develop attack code that exploits a recently published, critical DNS bug.

Microsoft's DNS Fix Leads to More Problems The blogosphere is awash with talk about the possible overall weakness of the Domain Name System architecture.

Jul
22nd

Tue

Details of DNS Flaw Leaked; Exploit Expected by End of Today Despite Dan Kaminsky’s efforts to keep a lid on the details of the critical DNS vulnerability he found, someone at the security firm Matasano leaked the information on its blog yesterday, then…

RE: Windows Vista Power Management & Local Security Policy …

PR08-13: Persistent Cross-site Scripting (XSS) on Moodle via blog entry title PR08-13: Persistent Cross-site Scripting (XSS) on Moodle via blog entry title Vulnerability found: 20/06/2008 Vendor informed: 25/06/2008 Vulnerability fixed: 16/07/2008 Advisory publicly released:…

[DSECRG-08-032] Claroline 1.8.10 Multiple XSS Vulnerabilities Digital Security Research Group [DSecRG] Advisory #DSECRG-08-032 Application: Claroline eLearning and eWorking platform Versions Affected: 1.8.10 Vendor URL: Bug: Multiple Linked XSS Exploits: YES…

PR08-15: Several Webroot Disclosures on Moodle PR08-15: Several Webroot Disclosures on Moodle Vulnerability found: 20/06/2008 Vendor informed: 25/06/2008 Vulnerability fixed: 16/07/2008 Advisory publicly released: 22/07/2008 Severity: Low…

PR08-16: CSRF (Cross-site Request Forgery) on Moodle edit profile page PR08-16: CSRF (Cross-site Request Forgery) on Moodle edit profile page Vulnerability found: 25/06/2008 Vendor informed: 28/06/2008 Vulnerability fixed: 16/07/2008 Advisory publicly released:…

[USN-627-1] Dnsmasq vulnerability Ubuntu Security Notice USN-627-1 July 22, 2008 dnsmasq vulnerability CVE-2008-1447 A security issue affects the following Ubuntu releases: Ubuntu 8.04 LTS This advisory also applies to the…

Outpost Security Suite Pro ver. 2009 Multiple vulnerabilities Application: Outpost Security Suite Pro ver. 2009 OS: Windows Xp (All patches a day) 1 - Description 2 - Vulnerability 3 - POC/EXPLOIT Description Outpost Security Suite is a software application…