http://security.tipsdr.com/Security news, and notes, from security at Tipsdr and from all corners of the Internet. Get continuous protection for your PC with Windows Live OneCare Download the free trial.Free Performance scanWindows SupportRemote Desktop AccessTumblr (security)<a href="http://www.topix.net/tech/computer-security/2008/05/neighbor-indicted-in-myspace-suicide-case?fromrss=1">Neighbor indicted in MySpace suicide case</a>: <p class="lede_quote">“They exploited a young girl’s weaknesses”</p> <p> After Missouri prosecutors said they couldn’t find grounds for charges in the case of a 13-year-old who killed herself after being bullied online, there…</p>http://security.tipsdr.com/post/35001723http://security.tipsdr.com/post/35001723Fri, 16 May 2008 05:02:13 -0400<a href="http://www.topix.net/tech/computer-security/2008/05/hacker-shuts-down-government-computers?fromrss=1">'Hacker shuts down government computers'</a>: <p class="lede_quote">“We believe it may have occurred”</p> <p> Royal Darwin Hospital … a hacker allegedly took down servers for hospitals, a prison and a supreme court / Amy Brabin AN EXPERT hacker allegedly shut down the…</p>http://security.tipsdr.com/post/34982910http://security.tipsdr.com/post/34982910Fri, 16 May 2008 00:48:29 -0400<a href="http://www.topix.net/tech/computer-security/2008/05/re-re-re-apache-server-html-injection-and-utf-7-xss-vulnerability?fromrss=1">Re: Re: Re: Apache Server HTML Injection and UTF-7 XSS Vulnerability</a>: <p class="lede_quote">“As all ISO, UTF-8 and related charsets were 7-bit clean, it’s clear that Microsoft err’ed on the side of accepting UTF-7 charset for automatic detection in violation of RFC 2616.”</p> <p> Hello, Please…</p>http://security.tipsdr.com/post/34956567http://security.tipsdr.com/post/34956567Thu, 15 May 2008 19:31:34 -0400<a href="http://www.seclists.org/lists/bugtraq/2008/May/0177.html">ZDI-08-025: Symantec Altiris Deployment Solution Domain Credential Disclosure Vulnerability</a>: ZDI-08-025: Symantec Altiris Deployment Solution Domain Credential Disclosure Vulnerability May 15, 2008 — Affected Vendors: Symantec — Affected Products: Symantec Altiris Deployment Solution —…http://security.tipsdr.com/post/34952347http://security.tipsdr.com/post/34952347Thu, 15 May 2008 18:46:47 -0400<a href="http://www.seclists.org/lists/bugtraq/2008/May/0176.html">ZDI-08-024: Symantec Altiris Deployment Solution SQL Injection Vulnerability</a>: ZDI-08-024: Symantec Altiris Deployment Solution SQL Injection Vulnerability May 15, 2008 — Affected Vendors: Symantec — Affected Products: Symantec Altiris Deployment Solution — TippingPoint(TM)…http://security.tipsdr.com/post/34952348http://security.tipsdr.com/post/34952348Thu, 15 May 2008 18:46:47 -0400<a href="http://www.seclists.org/lists/bugtraq/2008/May/0175.html">SunShop Version 3.5.1 Remote Blind Sql Injection</a>: #!/usr/bin/perl -w use LWP::UserAgent; # scripts : SunShop Version 3.5.1 Remote Blind Sql Injection # scripts site : # Discovered # By : irvian # site : # email : irvian.infoatgmail.com print…http://security.tipsdr.com/post/34936611http://security.tipsdr.com/post/34936611Thu, 15 May 2008 15:29:56 -0400<a href="http://www.topix.net/tech/computer-security/2008/05/legal-victory-against-spammers-as-myspace-wins-record-payout-of-usd-234-million-sophos-reports?fromrss=1">Legal victory against spammers as MySpace wins record payout of USD 234 million, Sophos reports</a>: <p class="lede_quote">“In the war against spam it is right that large companies should have a heavy stick like this to hit the spammers with”</p> <p> IT security and control firm Sophos has applauded a legal judgment that has…</p>http://security.tipsdr.com/post/34934940http://security.tipsdr.com/post/34934940Thu, 15 May 2008 15:09:58 -0400<a href="http://www.seclists.org/lists/bugtraq/2008/May/0174.html">RE: Cisco Security Advisory: Cisco Unified Presence Denial of Service Vulnerabilities (UNCLASSIFIED)</a>: Classification: UNCLASSIFIED Caveats: NONE Please advise Theresa Original Message From: nobodyatcisco.com] On Behalf Of Cisco Systems Product Security Incident Response Team Sent: Wednesday, May 14,…http://security.tipsdr.com/post/34923859http://security.tipsdr.com/post/34923859Thu, 15 May 2008 13:23:36 -0400<a href="http://www.seclists.org/lists/bugtraq/2008/May/0173.html">Re: Re: Re: Apache Server HTML Injection and UTF-7 XSS Vulnerability</a>: Setting the HTTP response header: Content-Type: text/html; charset=iso-8859-1 or adding the tag: or even both - still does not deter IE from scanning the contents and interpreting them as UTF-7 when…http://security.tipsdr.com/post/34923860http://security.tipsdr.com/post/34923860Thu, 15 May 2008 13:23:36 -0400<a href="http://www.infoworld.com/cgi-bin/redirect?source=rss&url=http://www.infoworld.com/article/08/05/15/EBay-seller-pleads-guilty-to-software-piracy-charges_1.html">EBay seller pleads guilty to software piracy charges</a>: A 23-year-old Oregon man has pleaded guilty to charges that he used identity theft to set up bogus accounts on eBay, where he sold counterfeit software with a retail value of more than $1 million,…http://security.tipsdr.com/post/34922081http://security.tipsdr.com/post/34922081Thu, 15 May 2008 13:02:57 -0400<a href="http://www.infoworld.com/cgi-bin/redirect?source=rss&url=http://www.infoworld.com/article/08/05/15/EU-raises-privacy-issue-for-Google-Street-View_1.html">EU raises privacy issue for Google Street View</a>: Europe’s data protection supervisor, Peter Hustinx, urged Google Thursday to respect local privacy rules  as it prepares to launch its Street View function this side of the Atlantic.http://security.tipsdr.com/post/34922082http://security.tipsdr.com/post/34922082Thu, 15 May 2008 13:02:57 -0400<a href="http://www.infoworld.com/cgi-bin/redirect?source=rss&url=http://www.infoworld.com/article/08/05/15/Verizon-snares-678-million-federal-contract_1.html">Verizon snares $678 million federal network contract</a>: Verizon Business has captured one of the largest federal network deals of 2008: a 10-year contract to provide managed network and security services to the U.S. Department of Homeland Security that is…http://security.tipsdr.com/post/34922083http://security.tipsdr.com/post/34922083Thu, 15 May 2008 13:02:57 -0400<a href="http://www.infoworld.com/cgi-bin/redirect?source=rss&url=http://www.infoworld.com/article/08/05/15/Non-tech-criminals-can-now-rent-a-botnet_1.html">Non-tech criminals can now rent-a-botnet</a>: Online fraudsters that aren’t highly skilled in the arts of cybercrime can now rent a service that offers an all-in-one hosting server with a built-in Zeus Trojan administration panel and infecting…http://security.tipsdr.com/post/34922084http://security.tipsdr.com/post/34922084Thu, 15 May 2008 13:02:57 -0400<a href="http://www.seclists.org/lists/bugtraq/2008/May/0170.html">Kostenloses Linkmanagementscript SQL Injection Vulnerabilities</a>: # # # …::::Kostenloses Linkmanagementscript SQL Injection Vulnerabilities ::::… # Virangar Security Team <a href="http://www.virangar.net">www.virangar.net</a> Discoverd By :virangar security team(hadihadi) special tnx…http://security.tipsdr.com/post/34917543http://security.tipsdr.com/post/34917543Thu, 15 May 2008 12:20:08 -0400<a href="http://www.seclists.org/lists/bugtraq/2008/May/0171.html">Debian generated SSH-Keys working exploit</a>: Hi Securityfocus, the debian openssl issue leads that there are only 65.536 possible ssh keys generated, cause the only entropy is the pid of the process generating the key. …http://security.tipsdr.com/post/34917540http://security.tipsdr.com/post/34917540Thu, 15 May 2008 12:20:07 -0400<a href="http://www.seclists.org/lists/bugtraq/2008/May/0172.html">Aruba Mobility Controller TACACS User Authentication and Cross Site Scripting Vulnerabilities (Aruba Advisory ID: AID-051408)</a>: Aruba Networks Security Advisory Title: Aruba Mobility Controller TACACS User Authentication and Cross Site Scripting Vulnerabilities Aruba Advisory ID: AID-051408 Revision: 1.0 For Public Release on…http://security.tipsdr.com/post/34917538http://security.tipsdr.com/post/34917538Thu, 15 May 2008 12:20:06 -0400<a href="http://www.topix.net/tech/computer-security/2008/05/phishing-botnet-expands-by-hacking-legit-sites?fromrss=1">Phishing botnet expands by hacking legit sites</a>: <p class="lede_quote">“The tool does not spread on its own but relies on the Asprox botnet to propagate to new hosts”</p> <p> A botnet is now using a SQL-injection attack tool designed to hack legitimate Web sites, a move…</p>http://security.tipsdr.com/post/34908558http://security.tipsdr.com/post/34908558Thu, 15 May 2008 10:56:28 -0400<a href="http://www.seclists.org/lists/bugtraq/2008/May/0169.html">Re: Re: Re: Apache Server HTML Injection and UTF-7 XSS Vulnerability</a>: Hello, Please try to understand what we did here. You might be right in here: “As all ISO, UTF-8 and related charsets were 7-bit clean, it’s clear that Microsoft err’ed on the side of accepting UTF-7…http://security.tipsdr.com/post/34903897http://security.tipsdr.com/post/34903897Thu, 15 May 2008 10:12:31 -0400<a href="http://www.topix.net/tech/computer-security/2008/05/colonel-suggests-using-hackers-tool-against-them?fromrss=1">Colonel suggests using hackers' tool against them</a>: <p class="lede_quote">“To me it’s a silly solution to a problem that has much simpler solutions”</p> <p> By JORDAN ROBERTSON Thursday, May 15, 2008 Hackers often harness the combined power of thousands of virus-infected…</p>http://security.tipsdr.com/post/34886194http://security.tipsdr.com/post/34886194Thu, 15 May 2008 06:43:12 -0400<a href="http://www.topix.net/tech/computer-security/2008/05/hacker-writes-rootkit-for-ciscos-routers?fromrss=1">Hacker writes rootkit for Cisco's routers</a>: <p class="lede_quote">“We’re still in the process of putting the whole presentation together, and we also need to work with Cisco before we talk to anybody”</p> <p> A security researcher has developed malicious rootkit…</p>http://security.tipsdr.com/post/34867474http://security.tipsdr.com/post/34867474Thu, 15 May 2008 02:30:22 -0400