jetlib.sec » October 6, 2010

Feeds

225195 items (12525 unread) in 27 feeds

• 0day.today (was: 1337day, Inj3ct0r, 1337db) (2195 unread)
• OSVDB Vulnerabilities
• Exploit-DB (1975 unread)
• SecurityFocus Vulnerabilities (3406 unread)
• Bugtraq (721 unread)
• Full Disclosure (950 unread)
• XSSed
• Packet Storm Security Headlines (1155 unread)
• Packet Storm Security Advisories (1130 unread)
• Packet Storm Security Exploits (642 unread)
• Packet Storm Security Recent Files (309 unread)
• Packet Storm Security Tools (32 unread)
• Packet Storm Security Misc. Files (4 unread)
• Sophos security news (6 unread)
• Sophos product advisories
• Penetration Testing
• SecuriTeam
• BackTrack Linux Forums
• Threatpost
• SecDocs
• carnal0wnage.attackresearch.com
• Carnal0wnage
• Kernel Fun
• Darknet
• The Exploitant
• Hack a Day
• Wirevolution

• October 06, 2010
• 23:51

  Problemas con tarjeta de red Broadcom BCM 43225, ID 14EA-4357.

   » ‎ BackTrack Linux Forums
  Bueno, el caso es que he intentado crackear wi-fi con esta tarjeta de red y para empezar, me detecta la tarjeta como eth0 y no como wlan0, aunque tiene como driver "wl". Al iniciarla se pone en modo monitor pero al usar el airodump-ng salta con este error:
  
  ioctl (SIOCSIWMODE) failed: Invalid argument
  ARP linktype is set to 1 - expected ARPHRD_IEEE80211, ARPHRD_IEEE80211_FULL or ARPHRD_IEEE80211_PRISM instead. Make sure RFMON IS ENABLED: run airmon-ng start eth0.
  Sysfs injection support was not found either.
  
  ¿Hay alguna forma de usar esta tarjeta de red con backtrack?

  Tags:   

• 22:13

  Re: ZDI-10-191: Adobe Reader ICC Parsing Remote Code Execution Vulnerability

   » ‎ Full Disclosure

  Posted by Dan Kaminsky on Oct 06

  No common lineage required; ICC's filled with 32 bit element counts.
  They're always int overflow bait.
  

  Tags:   

• 22:10

  SSH2.0-OpenSSH 4.3

   » ‎ BackTrack Linux Forums
  I am looking for an exploit in regards to the SSH2.0-OpenSSH4.3.
  
  I have used Metasploit to test the one I have settup here (Getting SSH was one of my goals in my early years) but the version does not seem to be vaunerable, then again Metasploit most likely just doesnt have the exploit built in...
  
  Anyone have experience with this SSH version?

  Tags:   

• 22:05

  Re: ZDI-10-191: Adobe Reader ICC Parsing Remote Code Execution Vulnerability

   » ‎ Full Disclosure

  Posted by Chris Evans on Oct 06

  Well, awesome. This sounds near-identical to some issues that the Sun JRE
  had a few years back[1]. I wonder if the code shares a common lineage? :)
  
  Cheers
  Chris
  
  [1] - http://scary.beasts.org/security/CESA-2006-004.html
  http://scary.beasts.org/misc/jdk/badicc.jpg
  (And additional integer problems not released at the time)
  http://scary.beasts.org/misc/jdk/badicc2.jpg
  http://scary.beasts.org/misc/jdk/badicc3.jpg...
  

  Tags:   

• 21:06

  Backtrack and RAIDs

   » ‎ BackTrack Linux Forums
  Hello people!
  I'm quite new here, and my english is not perfect (I'm from Brazil, and english is my second language)... So I apologize for any grammar mistakes...
  Well... I was using Ubuntu 10.4, "installed" with persistence at my pendrive (4 gb), till today, and i left my room, went to the bathroom, came back and noticed some MOFO unplugged my pendrive (and corrupted the data... i was apt-get updating stuff...)...
  So I decided to install the Almighty BackTrack 4 r1, but had no success with the persistence (i used the Universal-USB-Installer-1.8.0.3)...
  By the way, I'm using Windows 7 Professional to download/install stuff...
  Then I decided to INSTALL BT @ my hdd, but i noticed that the installer doesn't recognized my Raid 0...
  Proly because it's not a "true" raid 0... I'm using the Asus p6t "built-in" raid controler...
  Is there anyway to install BT in my HD without screwing with my "raid"? I don't know... maybe making it "see" that it's a raid?
  Also, what is AHCI (i noticed that I can change some options from RAID to IDE (which "disassemble" the RAID) or to this AHCI (which i doesn't know what means/do))?
  Thanks!

  Tags:   

• 21:02

  [Video] Well known vulnerabilities in human brain and behavior – common admin mistakes

   » ‎ SecDocs
  Authors: Wojciech Bojdol
  Tags: vulnerability social engineering
  Event: Confidence 2010 Krakow
  

  Tags:  video brain behavior wojciech-bojdol krakow human-brain social-engineering vulnerabilities  

• 21:02

  [Audio] Analysis of Software Vulnerabilities

   » ‎ SecDocs
  Authors: Celil Ünüver Ulascan Aytlolun
  Tags: vulnerability
  Event: Confidence 2010 Krakow
  

  Tags:  audio analysis Software krakow software-vulnerabilities vulnerability  

• 21:02

  [Video] Analysis of Software Vulnerabilities

   » ‎ SecDocs
  Authors: Celil Ünüver Ulascan Aytlolun
  Tags: vulnerability
  Event: Confidence 2010 Krakow
  

  Tags:  video analysis Software krakow software-vulnerabilities video-analysis vulnerability  

• 21:02

  [Audio] Well known vulnerabilities in human brain and behavior – common admin mistakes

   » ‎ SecDocs
  Authors: Wojciech Bojdol
  Tags: vulnerability social engineering
  Event: Confidence 2010 Krakow
  

  Tags:  brain audio behavior wojciech-bojdol krakow human-brain social-engineering vulnerabilities  

• 21:02

  [Slides] Well known vulnerabilities in human brain and behavior – common admin mistakes

   » ‎ SecDocs
  Authors: Wojciech Bojdol
  Tags: vulnerability social engineering
  Event: Confidence 2010 Krakow
  

  Tags:  brain admin behavior wojciech-bojdol krakow human-brain social-engineering vulnerabilities  

• 20:23

  What type of linux does BackTrack use

   » ‎ BackTrack Linux Forums
  What type of Linux does Backtrack use because i am trying to download something and it is asking if it is 32 bit or 64-86 bit and RPM or DEB. Which is it. Any help is appreciated. Thanks.

  Tags:   

• 18:42

  Aireplay-ng fake authentication not working

   » ‎ BackTrack Linux Forums
  I can't get fake authentication to work for packet injection in cracking WEP
  
  Injaction test works fine:
  
  Code: $ sudo aireplay-ng -9 -e (nome rete) -a (mac address) mon0

00:01:28  Trying broadcast probe requests...
00:01:28  Injection is working!
00:01:29  Found 1 AP

00:01:29  Trying directed probe requests...
00:01:29  (mac address) - channel: 6 - '(nome rete)'
00:01:32  Ping (min/avg/max): 1.121ms/95.251ms/172.564ms Power: -62.63
00:01:32  30/30: 100%
  
  but when i try fake authentication i get:
  Code:
$ sudo aireplay-ng -1 6000 -o 1 -q 10 -e (nome rete) -a (mac address ap) -h (mio mac) mon0
00:09:28  Waiting for beacon frame (BSSID: (mac address)) on channel 6

00:09:29  Sending Authentication Request (Open System) [ACK]
00:09:29  Authentication successful
00:09:29  Sending Association Request [ACK]

00:09:34  Sending Authentication Request (Open System) [ACK]
00:09:34  Authentication successful
00:09:34  Sending Association Request [ACK]

00:09:39  Sending Authentication Request (Open System) [ACK]
00:09:39  Authentication successful
00:09:39  Sending Association Request [ACK]

00:09:44  Sending Authentication Request (Open System) [ACK]
00:09:44  Authentication successful
00:09:44  Sending Association Request [ACK]

 ..................
  I can't get association!
  I read about some AP using MAC filtering, but that way i should get stg like
  "Association refused" or "got deauthentication packet"
  
  Here i just get NOTHING!
  
  Could you help me????????
  
  Thanks!

  Tags:   

• 18:28

  Re: WikiLeaks

   » ‎ Full Disclosure

  Posted by Harry Behrens on Oct 06

  Two days ago I managed to find somebody ("Anny") on their web chat.
  She didn't say much, only that it's supposed to be up in a week or so
  and that the issues are technical vs. political.
  
  I still believe it smells of fish.
  And to kinda paraphrase: Just because J Assange is a raving paranoid
  doesn't mean they aren't out to get him...
  
  -h
  
  Am 06.10.2010 20:06, schrieb Juha-Matti Laurio:
  

  Tags:   

• 18:05

  Not receiving any data packets while cracking WEP key.

   » ‎ BackTrack Linux Forums
  I'm trying to crack a WEP key using backtrack 4.Everything goes well, but after successful association,I get this :-
  
  Read 1140 packets (got 0 ARP requests and 0 ACKS sent 0 packets...0PPS)
  
  Im not even able to receive any 'Data' while using airodump-ng on the network.
  
  Inspite of that I even tried the command, aircrack-ng wep-01.cap but it says 'Got no data packets'.
  
  It clearly means I'm not able to recieve or send any data packets.Does that means my wifi card is not compatible ?
  Someone please help me.

  Tags:   

• 17:41

  Re: WikiLeaks

   » ‎ Full Disclosure

  Posted by Cal Leeming [Simplicity Media Ltd] on Oct 06

  I'm not sure why everyone is so fussed about this tbh..
  
  And surely, full-disclosure is no place for such a discussion either..
  
  </rant>
  

  Tags:   

• 16:00

  FreeRADIUS lib/dhcp.c Relay Agent Information Option Infinite Loop Remote DoS

   » ‎ OSVDB Vulnerabilities
  FreeRADIUS lib/dhcp.c Relay Agent Information Option Infinite Loop Remote DoS

  Tags:   

• 16:00

  FreeRADIUS main/event.c Multiple Queued Requests Handling DoS

   » ‎ OSVDB Vulnerabilities
  FreeRADIUS main/event.c Multiple Queued Requests Handling DoS

  Tags:   

• 15:34

  Problema aireplay-ng

   » ‎ BackTrack Linux Forums
  ho un problema con aireplay-ng quando provo la procedura di injection.
  premetto che sono nuovo a questo genre di procedure.
  il test dell'injection funzione che e' una meraviglia:
  
  Code: $ sudo aireplay-ng -9 -e (nome rete) -a (mac address) mon0

00:01:28  Trying broadcast probe requests...
00:01:28  Injection is working!
00:01:29  Found 1 AP

00:01:29  Trying directed probe requests...
00:01:29  (mac address) - channel: 6 - '(nome rete)'
00:01:32  Ping (min/avg/max): 1.121ms/95.251ms/172.564ms Power: -62.63
00:01:32  30/30: 100% quando invece provo la fake auth non riesco a ottenere l'associazione:
  
  Code: $ sudo aireplay-ng -1 6000 -o 1 -q 10 -e (nome rete) -a (mac address ap) -h (mio mac) mon0
00:09:28  Waiting for beacon frame (BSSID: (mac address)) on channel 6

00:09:29  Sending Authentication Request (Open System) [ACK]
00:09:29  Authentication successful
00:09:29  Sending Association Request [ACK]

00:09:34  Sending Authentication Request (Open System) [ACK]
00:09:34  Authentication successful
00:09:34  Sending Association Request [ACK]

00:09:39  Sending Authentication Request (Open System) [ACK]
00:09:39  Authentication successful
00:09:39  Sending Association Request [ACK]

00:09:44  Sending Authentication Request (Open System) [ACK]
00:09:44  Authentication successful
00:09:44  Sending Association Request [ACK]

.........
  In pratica non ricevo mai l'associazione....MISTERO!!
  Ho letto che qualche AP ufiltra gli indirizzi mac, ma in questo caso dovrebbe rispondermi qcs tipo
  "Association failed"
  invece niente.....
  
  sapreste aiutarmi???
  grazie mille!!!!!

  Tags:   

• 15:14

  Wireless card not detected!

   » ‎ BackTrack Linux Forums
  Hi fellow BackTrack users,
  
  I want to crack my own network (or try so), and i googled a lot and found Backtrack.
  So I downloaded and burned the BackTrack v3 Live cd, and it worked (although i had to use the KDE vesa mode to get an image).
  
  My problem is : it doesn't detect my wireless card! After some searching i found out this has to do with not being supported. I also found how to fix this.
  
  What I did:
  Code: cd Desktop
#i downloaded these drivers, as they will make this card compitable to BackTrack its tools
tar -xzf iwlwifi-5000-ucode-8.24.2.12.gz

mv iwlwifi-5000-ucode-8.24.2.12/iwlwifi-5000-2.ucode /lib/firmware/
#i dont know what the next does, and it also fails
modprobe iwlagn So it copies the right driver to the firmware folder, i know it will be gone at the next reboot but if this works i just run these few commands every boot.
  
  But not it still doesn't detect my wireless card after doing this, do i need to reload or install it or something? If so please tell me how.
  
  I am using a laptop, booting the BackTrack v3 Live cd (working correct), and my wireless card is Intel 5100 AGN.
  
  Sorry for the noobish questions, but im a bit new to Linux, and as I'm not (yet) planning to work a lot with it i just want this to be fixed. It isn't even required for me to understand all the commands, as long as it works.
  
  I hope someone can help me out, would really appreciate it :)
  
  Thanks!

  Tags:   

• 15:12

  Wireless drivers not loading

   » ‎ BackTrack Linux Forums
  Hi fellow BackTrack users,
  
  I want to crack my own network (or try so), and i googled a lot and found Backtrack.
  So I downloaded and burned the BackTrack v3 Live cd, and it worked (although i had to use the KDE vesa mode to get an image).
  
  My problem is : it doesn't detect my wireless card! After some searching i found out this has to do with not being supported. I also found how to fix this.
  
  What I did:
  Code: cd Desktop
#i downloaded these drivers, as they will make this card compitable to BackTrack its tools
tar -xzf iwlwifi-5000-ucode-8.24.2.12.gz

mv iwlwifi-5000-ucode-8.24.2.12/iwlwifi-5000-2.ucode /lib/firmware/
#i dont know what the next does, and it also fails
modprobe iwlagn So it copies the right driver to the firmware folder, i know it will be gone at the next reboot but if this works i just run these few commands every boot.
  
  But not it still doesn't detect my wireless card after doing this, do i need to reload or install it or something? If so please tell me how.
  
  I am using a laptop, booting the BackTrack v3 Live cd (working correct), and my wireless card is Intel 5100 AGN.
  
  Sorry for the noobish questions, but im a bit new to Linux, and as I'm not (yet) planning to work a lot with it i just want this to be fixed. It isn't even required for me to understand all the commands, as long as it works.
  
  I hope someone can help me out, would really appreciate it :)
  
  Thanks!
  
  Hi fellow BackTrack users,
  
  I want to crack my own network (or try so), and i googled a lot and found Backtrack.
  So I downloaded and burned the BackTrack v3 Live cd, and it worked (although i had to use the KDE vesa mode to get an image).
  
  My problem is : it doesn't detect my wireless card! After some searching i found out this has to do with not being supported. I also found how to fix this.
  
  What I did:
  Code: cd Desktop
#i downloaded these drivers, as they will make this card compitable to BackTrack its tools
tar -xzf iwlwifi-5000-ucode-8.24.2.12.gz

mv iwlwifi-5000-ucode-8.24.2.12/iwlwifi-5000-2.ucode /lib/firmware/
#i dont know what the next does, and it also fails
modprobe iwlagn So it copies the right driver to the firmware folder, i know it will be gone at the next reboot but if this works i just run these few commands every boot.
  
  But not it still doesn't detect my wireless card after doing this, do i need to reload or install it or something? If so please tell me how.
  
  I am using a laptop, booting the BackTrack v3 Live cd (working correct), and my wireless card is Intel 5100 AGN.
  
  Sorry for the noobish questions, but im a bit new to Linux, and as I'm not (yet) planning to work a lot with it i just want this to be fixed. It isn't even required for me to understand all the commands, as long as it works.
  
  I hope someone can help me out, would really appreciate it :)
  
  Thanks!

  Tags:   

• 15:02

  DigitalWhisper13.pdf

   » ‎ Packet Storm Security Misc. Files
  Digital Whisper Electronic Magazine issue 13. Written in Hebrew.

  Tags:  digital whisper pdf pdf-digital electronic-magazine  

• 15:02

  TA10-279A.txt

   » ‎ Packet Storm Security Recent Files
  Technical Cyber Security Alert 2010-279A - Adobe has released Security Bulletin APSB10-21, which describes multiple vulnerabilities affecting Adobe Reader and Acrobat.

  Tags:  txt adobe security cyber-security-alert technical-cyber-security-alert adobe-reader  

• 15:02

  joomlaclubmanager-sql.txt

   » ‎ Packet Storm Security Recent Files
  Joomla Club Manager component remote SQL injection exploit.

  Tags:  txt remote manager sql-injection manager-component  

• 15:02

  USN-1001-1.txt

   » ‎ Packet Storm Security Recent Files
  Ubuntu Security Notice 1001-1 - The cluster logical volume manager daemon (clvmd) in LVM2 did not correctly validate credentials. A local user could use this flaw to manipulate logical volumes without root privileges and cause a denial of service in the cluster.

  Tags:  txt cluster usn logical-volume-manager root-privileges denial-of-service  

• 15:01

  DigitalWhisper13.pdf

   » ‎ Packet Storm Security Recent Files
  Digital Whisper Electronic Magazine issue 13. Written in Hebrew.

  Tags:  digital whisper pdf pdf-digital electronic-magazine  

• 15:01

  ZDI-10-191.txt

   » ‎ Packet Storm Security Recent Files
  Zero Day Initiative Advisory 10-191 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Reader. User interaction is required in that a target must be coerced into opening a file or visiting a web page. The specific flaw exists within the ACE.dll module responsible for parsing ICC streams. When processing an ICC stream, the process performs math on two DWORD values from the input file. If these values wrap over the maximum integer value of 0xFFFFFFFF a mis-allocation can occur. Later, the process uses one of the original DWORD values as a size to a copy function. This can be abused by an attacker to overflow a stack buffer and subsequently execute code under the context of the user running the process.

  Tags:  icc file process stack-buffer zero-day adobe-reader  

• 15:01

  joomlabsadv-lfi.txt

   » ‎ Packet Storm Security Recent Files
  The Joomla Bsadv component suffers from local file inclusion and directory traversal vulnerabilities.

  Tags:  txt bsadv joomla lfi directory-traversal inclusion  

• 15:01

  CORE-2010-0701.txt

   » ‎ Packet Storm Security Recent Files
  Core Security Technologies Advisory - Adobe Acrobat Reader is prone to a use-after-free vulnerability due to an invalid usage of a released memory chunk. This vulnerability could be used by a remote attacker to execute arbitrary code, by enticing the user of Adobe Acrobat Reader to open a specially crafted file and click on PAGES thumbnails.

  Tags:  core acrobat adobe adobe-acrobat-reader memory-chunk security-technologies  

• 15:01

  ESA-2010-018.txt

   » ‎ Packet Storm Security Recent Files
  RSA Authentication Client 2.0.x, 3.0, and 3.5.x contain a potential vulnerability that could allow the unintended extraction, by a properly authenticated user, of secret (or symmetric) key objects stored on an RSA SecurID 800 Authenticator. This potential vulnerability is corrected in RSA Authentication Client 3.5.3.

  Tags:  client authentication rsa authentication-client rsa-securid authenticator  

• 15:01

  ZDI-10-192.txt

   » ‎ Packet Storm Security Recent Files
  Zero Day Initiative Advisory 10-192 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Reader. User interaction is required in that a target must be coerced into opening a file or visiting a web page. The specific flaw exists within the ACE.dll module responsible for parsing ICC streams. Within the 'desc' tag there exists an embedded 'mluc' data structure. The code within ACE performs arithmetic on the second DWORD from the mluc structure and a value from the desc structure. The resulting integer is used for an allocation of a heap-based buffer. An attacker can forge these values to force the process to under-allocate this buffer and later overflow it during a copy operation. This leads to remote code execution under the context of the user running the application.

  Tags:  code ace structure code-execution zero-day adobe-reader  

• 15:01

  ZDI-10-193.txt

   » ‎ Packet Storm Security Recent Files
  Zero Day Initiative Advisory 10-193 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Acrobat Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the application explicitly trusting a string's length embedded within a particular file format. The application will duplicate an arbitrarily sized string into a statically sized buffer located on the stack. This can lead to code execution under the context of the application.

  Tags:  vulnerability file application acrobat-reader-user adobe-acrobat-reader target  

• 15:01

  NSENSE-2010-001.txt

   » ‎ Packet Storm Security Exploits
  nSense Vulnerability Research Security Advisory - Adobe Acrobat and Reader are prone to a remote code-execution vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the user running the affected application. Adobe Reader and Acrobat versions prior to and including 9.3.4 and 8.2.4 are affected.

  Tags:  vulnerability nsense adobe vulnerability-research acrobat-versions code-execution  

• 15:01

  hpdataprotector-null.txt

   » ‎ Packet Storm Security Exploits
  HP Data Protector Manager version 6.11 NULL pointer dereference remote denial of service exploit.

  Tags:  txt protector data null-pointer data-protector denial-of-service  

• 15:01

  ms09_053_ftpd_nlst.rb.txt

   » ‎ Packet Storm Security Exploits
  This Metasploit module exploits a stack buffer overflow flaw in the Microsoft IIS FTP service. The flaw is triggered when a special NLST argument is passed while the session has changed into a long directory path. For this exploit to work, the FTP server must be configured to allow write access to the file system (either anonymously or in conjunction with a real account).

  Tags:  ftp nlst flaw stack-buffer buffer-overflow ftp-service  

• 15:01

  hpdp-dos.txt

   » ‎ Packet Storm Security Exploits
  HP Data Protector Media Operations NULL pointer dereference remote denial of service exploit.

  Tags:  txt protector data null-pointer data-protector denial-of-service  

• 15:01

  joomlaclubmanager-sql.txt

   » ‎ Packet Storm Security Exploits
  Joomla Club Manager component remote SQL injection exploit.

  Tags:  txt remote manager sql-injection manager-component  

• 15:01

  joomlabsadv-lfi.txt

   » ‎ Packet Storm Security Exploits
  The Joomla Bsadv component suffers from local file inclusion and directory traversal vulnerabilities.

  Tags:  txt bsadv joomla lfi directory-traversal inclusion  

• 15:01

  ZSL-2010-4968.txt

   » ‎ Packet Storm Security Advisories
  TomatoCart version 1.0.1 suffers from a cross site scripting vulnerability.

  Tags:  txt zsl tomatocart vulnerability  

• 15:01

  MDVSA-2010-197.txt

   » ‎ Packet Storm Security Advisories
  Mandriva Linux Security Advisory 2010-197 - An authenticated database user can manipulate modules and tied variables in some external procedural languages to execute code with enhanced privileges.

  Tags:  txt mandriva mdvsa procedural-languages linux-security mandriva-linux  

• 15:01

  TA10-279A.txt

   » ‎ Packet Storm Security Advisories
  Technical Cyber Security Alert 2010-279A - Adobe has released Security Bulletin APSB10-21, which describes multiple vulnerabilities affecting Adobe Reader and Acrobat.

  Tags:  txt adobe security cyber-security-alert technical-cyber-security-alert adobe-reader  

• 15:01

  USN-1001-1.txt

   » ‎ Packet Storm Security Advisories
  Ubuntu Security Notice 1001-1 - The cluster logical volume manager daemon (clvmd) in LVM2 did not correctly validate credentials. A local user could use this flaw to manipulate logical volumes without root privileges and cause a denial of service in the cluster.

  Tags:  txt cluster usn logical-volume-manager root-privileges denial-of-service  

• 15:01

  ZDI-10-191.txt

   » ‎ Packet Storm Security Advisories
  Zero Day Initiative Advisory 10-191 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Reader. User interaction is required in that a target must be coerced into opening a file or visiting a web page. The specific flaw exists within the ACE.dll module responsible for parsing ICC streams. When processing an ICC stream, the process performs math on two DWORD values from the input file. If these values wrap over the maximum integer value of 0xFFFFFFFF a mis-allocation can occur. Later, the process uses one of the original DWORD values as a size to a copy function. This can be abused by an attacker to overflow a stack buffer and subsequently execute code under the context of the user running the process.

  Tags:  icc file process stack-buffer zero-day adobe-reader  

• 15:01

  CORE-2010-0701.txt

   » ‎ Packet Storm Security Advisories
  Core Security Technologies Advisory - Adobe Acrobat Reader is prone to a use-after-free vulnerability due to an invalid usage of a released memory chunk. This vulnerability could be used by a remote attacker to execute arbitrary code, by enticing the user of Adobe Acrobat Reader to open a specially crafted file and click on PAGES thumbnails.

  Tags:  core acrobat adobe adobe-acrobat-reader memory-chunk security-technologies  

• 15:01

  ESA-2010-018.txt

   » ‎ Packet Storm Security Advisories
  RSA Authentication Client 2.0.x, 3.0, and 3.5.x contain a potential vulnerability that could allow the unintended extraction, by a properly authenticated user, of secret (or symmetric) key objects stored on an RSA SecurID 800 Authenticator. This potential vulnerability is corrected in RSA Authentication Client 3.5.3.

  Tags:  client authentication rsa authentication-client rsa-securid authenticator  

• 15:01

  ZDI-10-192.txt

   » ‎ Packet Storm Security Advisories
  Zero Day Initiative Advisory 10-192 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Reader. User interaction is required in that a target must be coerced into opening a file or visiting a web page. The specific flaw exists within the ACE.dll module responsible for parsing ICC streams. Within the 'desc' tag there exists an embedded 'mluc' data structure. The code within ACE performs arithmetic on the second DWORD from the mluc structure and a value from the desc structure. The resulting integer is used for an allocation of a heap-based buffer. An attacker can forge these values to force the process to under-allocate this buffer and later overflow it during a copy operation. This leads to remote code execution under the context of the user running the application.

  Tags:  code ace structure code-execution zero-day adobe-reader  

• 15:01

  ZDI-10-193.txt

   » ‎ Packet Storm Security Advisories
  Zero Day Initiative Advisory 10-193 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Acrobat Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the application explicitly trusting a string's length embedded within a particular file format. The application will duplicate an arbitrarily sized string into a statically sized buffer located on the stack. This can lead to code execution under the context of the application.

  Tags:  vulnerability file application acrobat-reader-user adobe-acrobat-reader target  

• 14:58

  EXT3-fs (hda1) error

   » ‎ BackTrack Linux Forums
  Need help guys!!!
  
  I booted bt4 from a dvd on to a laptop with windows worked great! But when I boot bt4 on to my laptop that has Ubuntu (peppermint) I get a error message:
  
  EXT3-fs (hda1): couldn't mount because of unsupported optional features (240).
  
  Why is this? And how do I fix it?
  
  Thanks.

  Tags:   

• 14:56

  settaggio alfaawus036h

   » ‎ BackTrack Linux Forums
  ciao a tutti ragazzi ho da chiedere un po d'aiuto da poco tempo ho l'alfa la utilizzo su aircrack-ng su mandriva 2010.1 spring senza toccare nulla uso i driver installati di serie sul kernel,il problema e non riesco a settare la potenza di uscita non me lo permette con il comando iwconfig txpower e settata sui 20 dBm.Leggendo in giro non ho trovato molto, sul vostro forum si parla di settare iw reg set ,ragazzi mi potete dare delle delucidazioni non so se questi comandi funzionano su mandriva mi fate sapere....... ciao vi posto alcune info...............
  [root@localhost jumbo]# iwconfig wlan5
  wlan5 IEEE 802.11bg ESSID:"Alice-35859887"
  Mode:Managed Frequency:2.437 GHz Access Point: 5C:33:8E:0E:EF:AF
  Bit Rate=54 Mb/s Tx-Power=20 dBm
  Retry long limit:7 RTS thr:off Fragment thr:off
  Encryption key:off
  Power Management:off
  Link Quality=58/70 Signal level=-52 dBm
  Rx invalid nwid:0 Rx invalid crypt:0 Rx invalid frag:0
  Tx excessive retries:0 Invalid misc:0 Missed beacon:0
  
  
  
  [root@localhost jumbo]# iwconfig wlan5 txpower NmW
  Error for wireless request "Set Tx Power" (8B26) :
  
  Mandriva Linux release 2010.1 (Official) for i586
  Linux localhost.localdomain 2.6.33.7-desktop586-2mnb #1 SMP Mon Sep 20 18:19:58 UTC 2010 i686 i686 i386 GNU/Linux
  
  QUESTI ALCUNI ESEMPI------ CIAO
  ho visto in giro per info e sul forum di backtrack parlano di settare dei valori di default di altri paesi con iw reg set............... posto il mio......
  [root@localhost jumbo]# iw reg set
  Usage: iw [options] reg set <ISO/IEC 3166-1 alpha2>
  
  Notify the kernel about the current regulatory domain.
  
  Options:
  --debug enable netlink debugging---------
  
  lsusb
  Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
  Bus 001 Device 005: ID 0bda:8187 Realtek Semiconductor Corp. RTL8187 Wireless Adapter
  Bus 001 Device 003: ID 046d:09a4 Logitech, Inc. QuickCam E 3500
  Bus 001 Device 004: ID 058f:6362 Alcor Micro Corp. Hi-Speed 21-in-1 Flash Card Reader/Writer (Internal/External)
  Bus 002 Device 001: ID 1d6b:0001 Linux Foundation 1.1 root hub
  
  Mandriva Linux release 2010.1 (Official) for i586
  Linux localhost.localdomain 2.6.33.7-desktop586-2mnb #1 SMP Mon Sep 20 18:19:58 UTC 2010 i686 i686 i386 GNU/Linux
  intanto grazie.......... CIAO

  Tags:   

• 14:00

  [dos / poc] - Adobe Acrobat and Reader Array Indexing Remote Code Execution

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  [dos / poc] - Adobe Acrobat and Reader Array Indexing Remote Code Execution

  Tags:  poc acrobat adobe code-execution adobe-acrobat  

• 14:00

  [remote exploits] - ASP.NET Padding Oracle Vulnerability (MS10-070)

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  [remote exploits] - ASP.NET Padding Oracle Vulnerability (MS10-070)

  Tags:  padding asp net exploits vulnerability  

• 14:00

  [dos / poc] - HP Data Protector Manager v6.11 / NULL Pointer Dereference DoS

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  [dos / poc] - HP Data Protector Manager v6.11 / NULL Pointer Dereference DoS

  Tags:  poc protector data null-pointer data-protector  

• 13:53

  Questions concerning BT4, Aircrack, and my wireless card

   » ‎ BackTrack Linux Forums
  Before I state the problem let me first give some info about what I am using;
  
  Currently I boot BT4 from a physical DVD when I plan to use it.
  I use Windows 7 64-bit when I am not using BT4.
  My Wireless card is an Atheros AR5009 802.11a
  
  Now then, I'm new with using BT4 and aircrack suite, and was having a problem where I could not get more than 8 IVs when attempting a WEP-key recovery. I learned that I would need to patch my wireless card first before this could be successful.
  
  So I learned that there are two patches for my wireless card, one for Linux(madwifi) and another for Windows(Wildpackets??)
  
  My question now is, do I download the madwifi patch since my main O.S. is windows? Or do I download the patch for Linux since I want to use BT4 for WEP-key recovery?
  
  If I use the windows patch would someone be able to provide a link?
  If it is the Linux patch I want, I would also need a link for that too. Also if it is indeed the Linux patch I want, do I install it while on windows O.S. or do I boot BT4 up from the DVD and install using that OS?

  Tags:   

• 13:52

  alfaawus036h configurazione

   » ‎ BackTrack Linux Forums
  ciao a tutti ragazzi ho da chiedere un po d'aiuto da poco tempo ho l'alfa la utilizzo su aircrack-ng su mandriva 2010.1 spring senza toccare nulla uso i driver installati di serie sul kernel,il problema e non riesco a settare la potenza di uscita non me lo permette con il comando iwconfig txpower e settata sui 20 dBm.Leggendo in giro non ho trovato molto, sul vostro forum si parla di settare iw reg set ,ragazzi mi potete dare delle delucidazioni non so se questi comandi funzionano su mandriva mi fate sapere....... ciao vi posto alcune info...............
  [root@localhost jumbo]# iwconfig wlan5
  wlan5 IEEE 802.11bg ESSID:"Alice-35859887"
  Mode:Managed Frequency:2.437 GHz Access Point: 5C:33:8E:0E:EF:AF
  Bit Rate=54 Mb/s Tx-Power=20 dBm
  Retry long limit:7 RTS thr:off Fragment thr:off
  Encryption key:off
  Power Management:off
  Link Quality=58/70 Signal level=-52 dBm
  Rx invalid nwid:0 Rx invalid crypt:0 Rx invalid frag:0
  Tx excessive retries:0 Invalid misc:0 Missed beacon:0
  
  
  
  [root@localhost jumbo]# iwconfig wlan5 txpower NmW
  Error for wireless request "Set Tx Power" (8B26) :
  
  Mandriva Linux release 2010.1 (Official) for i586
  Linux localhost.localdomain 2.6.33.7-desktop586-2mnb #1 SMP Mon Sep 20 18:19:58 UTC 2010 i686 i686 i386 GNU/Linux
  
  QUESTI ALCUNI ESEMPI------ CIAO
  ho visto in giro per info e sul forum di backtrack parlano di settare dei valori di default di altri paesi con iw reg set............... posto il mio......
  [root@localhost jumbo]# iw reg set
  Usage: iw [options] reg set <ISO/IEC 3166-1 alpha2>
  
  Notify the kernel about the current regulatory domain.
  
  Options:
  --debug enable netlink debugging---------
  
  lsusb
  Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
  Bus 001 Device 005: ID 0bda:8187 Realtek Semiconductor Corp. RTL8187 Wireless Adapter
  Bus 001 Device 003: ID 046d:09a4 Logitech, Inc. QuickCam E 3500
  Bus 001 Device 004: ID 058f:6362 Alcor Micro Corp. Hi-Speed 21-in-1 Flash Card Reader/Writer (Internal/External)
  Bus 002 Device 001: ID 1d6b:0001 Linux Foundation 1.1 root hub
  
  Mandriva Linux release 2010.1 (Official) for i586
  Linux localhost.localdomain 2.6.33.7-desktop586-2mnb #1 SMP Mon Sep 20 18:19:58 UTC 2010 i686 i686 i386 GNU/Linux
  intanto grazie.......... CIAO

  Tags:   

• 13:42

  SWFTools Two Integer Overflow Vulnerabilities

   » ‎ SecuriTeam
  Secunia Research has discovered two vulnerabilities in SWFTools, which can be exploited by malicious people to compromise a user's system.

  -

  Make your website safer. Use external penetration testing service. First report ready in one hour!

  Tags:  integer swftools overflow integer-overflow safer-use s-system  

• 13:42

  IBM Lotus Notes Autonomy KeyView WK3 Parsing Code Execution Vulnerability

   » ‎ SecuriTeam
  This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IBM Lotus Notes Email Client.

  -

  Make your website safer. Use external penetration testing service. First report ready in one hour!

  Tags:  lotus ibm notes code-execution safer-use arbitrary-code  

• 13:42

  IBM Lotus Notes Autonomy KeyView Office Shape Parsing Code Execution Vulnerability

   » ‎ SecuriTeam
  This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IBM Lotus Notes Email Client.

  -

  Make your website safer. Use external penetration testing service. First report ready in one hour!

  Tags:  lotus ibm notes code-execution safer-use arbitrary-code  

• 13:37

  Cisco CDS Internet Streamer Web Server Directory Traversal Vulnerability

   » ‎ SecuriTeam
  The Cisco Internet Streamer application, part of the Cisco Content Delivery System, contains a directory traversal vulnerability on its web server component that allows for arbitrary file access.

  -

  Make your website safer. Use external penetration testing service. First report ready in one hour!

  Tags:  server streamer web cisco-content cisco-cds cisco-internet web-server-component web-server-directory directory-traversal-vulnerability  

• 13:37

  IBM Lotus Notes Autonomy KeyView WK3 Parsing Code Execution Vulnerability

   » ‎ SecuriTeam
  This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IBM Lotus Notes Email Client.

  -

  Make your website safer. Use external penetration testing service. First report ready in one hour!

  Tags:  lotus ibm notes code-execution safer-use arbitrary-code  

• 13:27

  OWASP ZAP

   » ‎ Penetration Testing

  Posted by psiinon on Oct 06

  I'm pleased to announce that the Zed Attack Proxy has been accepted as
  an OWASP project.
  
  Its new homepage is here:
  http://www.owasp.org/index.php/OWASP_Zed_Attack_Proxy_Project
  
  The next release of OWASP ZAP, planned for later this year, is
  expected to include:
  * OWASP rebranding
  * Improvements to the passive and active automated scanners
  * Improvements the Spider
  * The addition a basic port scanner
  * The ability to brute...
  

  Tags:   

• 13:08

  Massive Black Hat Seo Campaign in progress ?

   » ‎ Full Disclosure

  Posted by exploit dev on Oct 06

  Hi to all,
  
  I posted something about a massive black hat seo campaign that seem in
  progress. If you are interested check
  
  http://extraexploit.blogspot.com/2010/10/dollars-javascript-code-yet-another_06.html
  
  and
  
  http://extraexploit.blogspot.com/2010/10/dollars-javascript-code-yet-another.html
  
  Feedback are welcome.
  
  Thank your very much to all for attention.
  

  Tags:   

• 12:57

  Winbox and Dude for Mikrotik RouterOS access and administration

   » ‎ BackTrack Linux Forums
  Hi, I've installed the BackTrack 4 R1 yesterday and I suggest to add Winbox and The Dude from Mikrotik, both Freewares, on the next BackTrack versions.
  Is it possible?
  
  att. Ivan Munix.

  Tags:   

• 12:57

  Winbox and Dude for Mikrotik RouterOS access and administration

   » ‎ BackTrack Linux Forums
  Hi, I've installed the BackTrack 4 R1 yesterday and I suggest to add Winbox and The Dude from Mikrotik, both Freewares, on the next BackTrack versions.
  Is it possible?
  
  att. Ivan Munix.

  Tags:   

• 12:53

  IP fowarding in backtrack

   » ‎ BackTrack Linux Forums
  There is a very strange problem.
  I wanted to inject html into http requests on my network through ettercap using the filter mentioned in this article:
  Tutorial: MITM Browser Injection Attack With Backtrack and Ettercap « CTO, Prolific Solutions, LLC
  
  Testing it on another system on vmware, everything seems okay ( poisoning and even the filter showing messages "ifilter ran".. etc). However, the VM doesnt seem to load the page it requested.
  
  Apparently, to me, this meant that packets were not getting forwarded to the machine. So i checked my configs again and found that /proc/sys/net/ipv4/ip_forward was set to 0. Now the strange thing is when i use the command
  echo 1 > /proc/sys/net/ipv4/ip_forward and cross check it with cat, it shows the output as 1
  
  But gui Kate shows it as empty. Morever, when i try to edit it via Kate, it says "Permission Denied". (im root so sudo isnt a prob here)
  
  Does anyone have a solution?

  Tags:   

• 12:23

  dhcpd3 on backtrack 4 pre final virtual interface issue

   » ‎ BackTrack Linux Forums
  Hi there,
  
  i tried a several times to fix that problem by myself but without any success so i start to post here. i want to start a dhcp server on the at0 interface which airbase creates for me
  Code: airbase-ng -c 1 -P -C 60 -W 1 wlan0
Created tap interface at0 first i modified /etc/default/dhcpd for the at0 interface
  after that i tried following commads to get my dhcp server running on at0
  
  ..i tried this on my eth0 interface with the same configuration and it works fine. just used the commands....
  
  Code: /etc/init.d/dhcp3-server start but that case wont work for my at0 interface becouse i got a permission denied on
  /var/run/dhcpd.pid
  
  so i googled a lot and found that possible solution at the old backtrack forum.
  i tried following commands for getting my dhcp server running
  
  for setting up at0
  Code: ifconfig at0 up
ifconfig at0 10.0.0.1 netmask 255.255.255.0
route add -net 10.0.0.0 netmask 255.255.255.0 gw 10.0.0.1 just fixed the permission denied problem
  
  Code: mkdir -p /var/run/dhcpd && chown dhcpd:dhcpd /var/run/dhcpd starting dhcp.... with the new .pid file destination
  
  Code: dhcpd3 -cf /etc/dhcp3/dhcpd.conf -pf /var/run/dhcpd/dhcpd.pid at0
  after all that long commandlines my dhcp server is up and running
  
  Code: Internet Systems Consortium DHCP Server V3.1.1
Copyright 2004-2008 Internet Systems Consortium.
All rights reserved.
For info, please visit http://www.isc.org/sw/dhcp/
Wrote 2 leases to leases file.
Listening on LPF/at0/00:c0:caxxx/10.0.0/24
Sending on LPF/at0/00:c0:caxxx/10.0.0/24
Sending on Socket/fallback/fallback-net
There's already a DHCP server running.
  but all the connected clients to my airbase accesspoint cant recieve an IP adresses ... I´m at the end of my knowledge and i got most of those different google results ^^ does anybody know the solution ?
  
  ps..
  
  sorry for my bad english ^^

  Tags:   

• 12:16

  ZDI-10-191: Adobe Reader ICC Parsing Remote Code Execution Vulnerability

   » ‎ Bugtraq

  Posted by ZDI Disclosures on Oct 06

  ZDI-10-191: Adobe Reader ICC Parsing Remote Code Execution Vulnerability
  http://www.zerodayinitiative.com/advisories/ZDI-10-191
  October 6, 2010
  
  -- CVE ID:
  CVE-2010-3621
  
  -- CVSS:
  9, (AV:N/AC:L/Au:N/C:P/I:P/A:C)
  
  -- Affected Vendors:
  Adobe
  
  -- Affected Products:
  Adobe Reader
  
  -- Vulnerability Details:
  This vulnerability allows remote attackers to execute arbitrary code on
  vulnerable installations of Adobe Reader. User interaction is required
  in...
  

  Tags:   

• 12:06

  ESA-2010-018: RSA Security Advisory: RSA, The Security Division of EMC, announces a fix for a potential security vulnerability in RSAR Authentication Client when storing secret key objects on an RSA SecurIDR 800 Authenticator

   » ‎ Bugtraq

  Posted by Security_Alert on Oct 06

  ESA-2010-018: RSA Security Advisory: RSA, The Security Division of EMC, announces a fix for a potential security
  vulnerability in RSA® Authentication Client when storing secret key objects on an RSA SecurID® 800 Authenticator
  
  RSA Authentication Client 2.0.x, 3.0, and 3.5.x contain a potential vulnerability that could allow the unintended
  extraction, by a properly authenticated user, of secret (or symmetric) key objects stored on an RSA...
  

  Tags:   

• 12:03

  ZDI-10-193: Adobe Acrobat Reader Multimedia Playing Remote Code Execution Vulnerability

   » ‎ Bugtraq

  Posted by ZDI Disclosures on Oct 06

  ZDI-10-193: Adobe Acrobat Reader Multimedia Playing Remote Code Execution Vulnerability
  http://www.zerodayinitiative.com/advisories/ZDI-10-193
  October 6, 2010
  
  -- CVE ID:
  CVE-2010-3632
  
  -- CVSS:
  9, (AV:N/AC:L/Au:N/C:P/I:P/A:C)
  
  -- Affected Vendors:
  Adobe
  
  -- Affected Products:
  Adobe Acrobat
  
  -- TippingPoint(TM) IPS Customer Protection:
  TippingPoint IPS customers have been protected against this
  vulnerability by Digital Vaccine protection filter...
  

  Tags:   

• 12:00

  Pyrosphere at Burning Man 2010

   » ‎ Hack a Day
  What’s thirty-seven feet tall, has ninety-one flamethrowers, and is controlled by an Arduino? Why it’s Pyrosphere, an interactive art piece at this year’s Burning Man. It lights up the night along to the music in a way that makes us want to set up a lawn-chair and watch the show. You can see for yourself [...]

  Tags:  burning pyrosphere man arduino flamethrowers interactive-art hacks  

• 12:00

  Bugtraq: ESA-2010-018: RSA Security Advisory: RSA, The Security Division of EMC, announces a fix for a potential security vulnerability in RSAR Authentication Client when storing secret key objects on an RSA SecurIDR 800 Authenticator

   » ‎ SecurityFocus Vulnerabilities
  ESA-2010-018: RSA Security Advisory: RSA, The Security Division of EMC, announces a fix for a potential security vulnerability in RSAR Authentication Client when storing secret key objects on an RSA SecurIDR 800 Authenticator

  Tags:  advisory rsa security potential-security-vulnerability authentication-client security-division  

• 12:00

  Bugtraq: ZDI-10-191: Adobe Reader ICC Parsing Remote Code Execution Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  ZDI-10-191: Adobe Reader ICC Parsing Remote Code Execution Vulnerability

  Tags:  icc reader adobe code-execution adobe-reader zdi  

• 12:00

  Bugtraq: ZDI-10-193: Adobe Acrobat Reader Multimedia Playing Remote Code Execution Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  ZDI-10-193: Adobe Acrobat Reader Multimedia Playing Remote Code Execution Vulnerability

  Tags:  acrobat reader adobe adobe-acrobat-reader code-execution zdi  

• 12:00

  Bugtraq: ZDI-10-192: Adobe Acrobat Reader ICC mluc Remote Code Execution Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  ZDI-10-192: Adobe Acrobat Reader ICC mluc Remote Code Execution Vulnerability

  Tags:  acrobat reader adobe adobe-acrobat-reader code-execution zdi  

• 11:57

  (CORE-2010-0701) Adobe Acrobat Reader Acrord32.dll Use After Free Vulnerability

   » ‎ Bugtraq

  Posted by CORE Security Technologies Advisories on Oct 06

  Core Security Technologies - CoreLabs Advisory
  http://corelabs.coresecurity.com/
  
  Adobe Acrobat Reader Acrord32.dll Use After Free Vulnerability
  
  1. *Advisory Information*
  
  Title: Adobe Acrobat Reader Acrord32.dll Use After Free Vulnerability
  Advisory Id: CORE-2010-0701
  Advisory URL:
  [http://www.coresecurity.com/content/adobe-acrobat-acrord23-reader-use-after-free]
  Date published: 2010-10-05
  Date of last update: 2010-10-05...
  

  Tags:   

• 11:52

  Connect my LG Chocolate Touch as an ext hdd

   » ‎ BackTrack Linux Forums
  I am using VMware workstation to run backtrack 4 so there are inherently some issues that come with it but I have been able to manually "connect" my phone to the vm. The problem is mounting the phone as an ext hdd.
  
  I have tried fdisk to view the available drives but only this shows up (abbreviated)
  
  Device boot System
  /dev/sda1 * Linux
  /dev/sda2 Extended
  /dev/sda3 Linux swap / Solaris

  Tags:   

• 11:50

  ZDI-10-192: Adobe Acrobat Reader ICC mluc Remote Code Execution Vulnerability

   » ‎ Bugtraq

  Posted by ZDI Disclosures on Oct 06

  ZDI-10-192: Adobe Acrobat Reader ICC mluc Remote Code Execution Vulnerability
  http://www.zerodayinitiative.com/advisories/ZDI-10-192
  October 6, 2010
  
  -- CVE ID:
  CVE-2010-3622
  
  -- CVSS:
  10, (AV:N/AC:L/Au:N/C:C/I:C/A:C)
  
  -- Affected Vendors:
  Adobe
  
  -- Affected Products:
  Adobe Reader
  
  -- Vulnerability Details:
  This vulnerability allows remote attackers to execute arbitrary code on
  vulnerable installations of Adobe Reader. User interaction is...
  

  Tags:   

• 11:46

  [dos] - HP Data Protector Media Operations NULL Pointer Dereference Remote DoS

   » ‎ Exploit-DB
  [dos] - HP Data Protector Media Operations NULL Pointer Dereference Remote DoS

  Tags:   

• 11:42

  [USN-999-1] Kerberos vulnerability

   » ‎ Bugtraq

  Posted by Kees Cook on Oct 06

  ===========================================================
  Ubuntu Security Notice USN-999-1 October 05, 2010
  krb5 vulnerability
  CVE-2010-1322
  ===========================================================
  
  A security issue affects the following Ubuntu releases:
  
  Ubuntu 10.04 LTS
  Ubuntu 10.10
  
  This advisory also applies to the corresponding versions of
  Kubuntu, Edubuntu, and Xubuntu.
  
  The problem can be corrected by upgrading your system...
  

  Tags:   

• 11:36

  www.paypal.com XSS

   » ‎ XSSed
  d3v1l has discovered a vulnerability in www.paypal.com, which could be exploited by malicious people to conduct XSS attacks.

  Tags:   

• 11:36

  www.sandbox.paypal.com XSS

   » ‎ XSSed
  d3v1l has discovered a vulnerability in www.sandbox.paypal.com, which could be exploited by malicious people to conduct XSS attacks.

  Tags:   

• 11:33

  [USN-1001-1] LVM2 vulnerability

   » ‎ Bugtraq

  Posted by Marc Deslauriers on Oct 06

  ===========================================================
  Ubuntu Security Notice USN-1001-1 October 06, 2010
  lvm2 vulnerability
  CVE-2010-2526
  ===========================================================
  
  A security issue affects the following Ubuntu releases:
  
  Ubuntu 6.06 LTS
  Ubuntu 8.04 LTS
  Ubuntu 9.04
  Ubuntu 9.10
  Ubuntu 10.04 LTS
  
  This advisory also applies to the corresponding versions of
  Kubuntu, Edubuntu, and Xubuntu.
  
  The problem...
  

  Tags:   

• 11:31

  ZDI-10-193: Adobe Acrobat Reader Multimedia Playing Remote Code Execution Vulnerability

   » ‎ Full Disclosure

  Posted by ZDI Disclosures on Oct 06

  ZDI-10-193: Adobe Acrobat Reader Multimedia Playing Remote Code Execution Vulnerability
  http://www.zerodayinitiative.com/advisories/ZDI-10-193
  October 6, 2010
  
  -- CVE ID:
  CVE-2010-3632
  
  -- CVSS:
  9, (AV:N/AC:L/Au:N/C:P/I:P/A:C)
  
  -- Affected Vendors:
  Adobe
  
  -- Affected Products:
  Adobe Acrobat
  
  -- TippingPoint(TM) IPS Customer Protection:
  TippingPoint IPS customers have been protected against this
  vulnerability by Digital Vaccine protection filter...
  

  Tags:   

• 11:30

  ZDI-10-192: Adobe Acrobat Reader ICC mluc Remote Code Execution Vulnerability

   » ‎ Full Disclosure

  Posted by ZDI Disclosures on Oct 06

  ZDI-10-192: Adobe Acrobat Reader ICC mluc Remote Code Execution Vulnerability
  http://www.zerodayinitiative.com/advisories/ZDI-10-192
  October 6, 2010
  
  -- CVE ID:
  CVE-2010-3622
  
  -- CVSS:
  10, (AV:N/AC:L/Au:N/C:C/I:C/A:C)
  
  -- Affected Vendors:
  Adobe
  
  -- Affected Products:
  Adobe Reader
  
  -- Vulnerability Details:
  This vulnerability allows remote attackers to execute arbitrary code on
  vulnerable installations of Adobe Reader. User interaction is...
  

  Tags:   

• 11:28

  ZDI-10-191: Adobe Reader ICC Parsing Remote Code Execution Vulnerability

   » ‎ Full Disclosure

  Posted by ZDI Disclosures on Oct 06

  ZDI-10-191: Adobe Reader ICC Parsing Remote Code Execution Vulnerability
  http://www.zerodayinitiative.com/advisories/ZDI-10-191
  October 6, 2010
  
  -- CVE ID:
  CVE-2010-3621
  
  -- CVSS:
  9, (AV:N/AC:L/Au:N/C:P/I:P/A:C)
  
  -- Affected Vendors:
  Adobe
  
  -- Affected Products:
  Adobe Reader
  
  -- Vulnerability Details:
  This vulnerability allows remote attackers to execute arbitrary code on
  vulnerable installations of Adobe Reader. User interaction is required
  in...
  

  Tags:   

• 11:06

  Re: WikiLeaks

   » ‎ Full Disclosure

  Posted by Juha-Matti Laurio on Oct 06

  It's the newest tweet still.
  
  Juha-Matti
  
  Jeffrey Walton [noloader () gmail com] kirjoitti:
  

  Tags:   

• 11:02

  (CORE-2010-0701) Adobe Acrobat Reader Acrord32.dll Use After Free Vulnerability

   » ‎ Full Disclosure

  Posted by CORE Security Technologies Advisories on Oct 06

  Core Security Technologies - CoreLabs Advisory
  http://corelabs.coresecurity.com/
  
  Adobe Acrobat Reader Acrord32.dll Use After Free Vulnerability
  
  1. *Advisory Information*
  
  Title: Adobe Acrobat Reader Acrord32.dll Use After Free Vulnerability
  Advisory Id: CORE-2010-0701
  Advisory URL:
  [http://www.coresecurity.com/content/adobe-acrobat-acrord23-reader-use-after-free]
  Date published: 2010-10-05
  Date of last update: 2010-10-05...
  

  Tags:   

• 11:00

  Solar powered WiFi repeater

   » ‎ Hack a Day
  For all those times you need to broadcast your own access point where there’s no outlet [Larry] shows us how to make a solar-powered hotspot. He started by slapping a solar panel on the lid of a cigar box and attaching it to five rechargeable AA batteries inside. These power the mainboard from a router which is [...]

  Tags:  solar repeater wifi larry wifi-repeater cigar-box solar-panel Wireless hacks  

• 10:38

  [USN-1001-1] LVM2 vulnerability

   » ‎ Full Disclosure

  Posted by Marc Deslauriers on Oct 06

  ===========================================================
  Ubuntu Security Notice USN-1001-1 October 06, 2010
  lvm2 vulnerability
  CVE-2010-2526
  ===========================================================
  
  A security issue affects the following Ubuntu releases:
  
  Ubuntu 6.06 LTS
  Ubuntu 8.04 LTS
  Ubuntu 9.04
  Ubuntu 9.10
  Ubuntu 10.04 LTS
  
  This advisory also applies to the corresponding versions of
  Kubuntu, Edubuntu, and Xubuntu.
  
  The problem...
  

  Tags:   

• 10:03

  Como lograr que ProxyChains funcione en un BT4 virtual en Vmware?

   » ‎ BackTrack Linux Forums
  Antes que nada quisiera saludar a los miembros del foro ; ahora bien entrando en materia el asunto que se me presenta es el siguiente: tengo instalado BT4 r1 black hat edtion en una maquina virtual vmware y . La situacion conflictiva se me presenta es al intentar modificar el archivo de configuracion de proxychains /etc/proxychains.conf para agregar algunos proxys y lograr que firefox se conecte via dicha secuencia de proxys ya que al modificar dicho archivo y tratar que firefox se conecte , solo se abre la pag principal de firefox sin pasar por la cadena de proxys que indique en el archivo de configuracion de proxy chains, algunos me comentan que el poblema es que estoy detras de un moden y que tengo que abrir el mismo puerto en la maquina anfitriona (win xp) que en la maquina virtual podria ser ese el problema? y si es asi como lo soluciono?
  
  Gracias por su atencion
  
  DrQ777

  Tags:   

• 10:00

  Mini pinball is all-pixels

   » ‎ Hack a Day
  You won’t find those familiar steel balls inside this mini-pinball cabinet. That’s because [Luis'] latest creation is a fun way to play virtual pinball. The playing field is a 10″ LCD screen with an accompanying 8″ screen in the marquee. Inside the well-crafted case you’ll find a mini-ITX motherboard running HyperPin, a frontend software suite [...]

  Tags:  virtual-pinball itx-motherboard mini-itx home entertainment hacks  

• 9:36

  Re: Webserver-Security and Virtualization

   » ‎ Full Disclosure

  Posted by Claudio Criscione on Oct 06

  In data mercoledì 6 ottobre 2010 13:40:49, Marcel Grabher (sallas) ha scritto:
  
  I'm missing the virtualization part here. BTW, I'm not sure a simple box model
  can capture all the complex threats involved...
  
  @paradoxengine
  

  Tags:   

• 9:23

  SCARE - The Source Code Analysis Risk Evaluation

   » ‎ BackTrack Linux Forums
  Very powerful tool for Source Code Analysis Risk Evaluation
  
  
  
  SCARE - The Source Code Analysis Risk Evaluation
  
  The Source Code Analysis Risk Evaluation (SCARE) project is a study to create a security and complexity metric that will analyze any source code and provide a realistic and factual representation of the potential of that source code to create a problematic binary. This metric will not say that the binary will be exploited nor does it do a static analysis for known limitations like buffer overflows. However it will flag code for a particular interaction type or control and allow the developer to understand where Porosity is not protected even if it cannot say the effectiveness of that protection. The level of required effectiveness would require a much more sophisticated analysis tool and not within the scope of this project at this time.
  
  The goal of this project is to apply the OSSTMM research findings for security metrics as the ravs. These metrics define “security” as the separation between an asset and a threat. Therefore, Operational Security are the “holes” in the wall of protection, Controls are the patches for those holes, and Limitations are the problems and failures within OpSec and the Controls.
  
  This computation will provide a final SCARE value made of ravs where 100% is the proper balance between controls to Porosity with no Limitations. Conversely, less than that shows an imbalance where too few Controls protect the Porosity which increases the Attack Surface.
  
  If you are interested in helping with this project please contact us.
  Download SCARE:
  http://www.isecom.org/mirror/scare.0.5.zip
  Link:ISECOM - Making Sense of Security
  
  By firebits

  Tags:   

• 9:13

  [ MDVSA-2010:197 ] postgresql

   » ‎ Bugtraq

  Posted by security on Oct 06

  _______________________________________________________________________
  
  Mandriva Linux Security Advisory MDVSA-2010:197
  http://www.mandriva.com/security/
  _______________________________________________________________________
  
  Package : postgresql
  Date : October 6, 2010
  Affected: 2008.0, 2009.0, 2009.1, 2010.0, 2010.1, Corporate 4.0,
  Enterprise Server 5.0...
  

  Tags:   

• 9:09

  wireless range connection

   » ‎ BackTrack Linux Forums
  hello guys
  well i am troubled with a problem of linux in general not just backtrack but since i tired it and it is like i wanted it to be i am gonna say it here hoping that there is a way to fix it or improve it.
  ok my problem is that when for example i have a wireless network that i barely reach with my wireless card i cant connect to it while i am on backtrack of course but when i try with windows it connects to it so any idea i can improve it or something???

  Tags:   

• 9:03

  Bugtraq: [Suspected Spam]XSS in Squirrelmail plugin 'Virtual Keyboard'

   » ‎ SecurityFocus Vulnerabilities
  [Suspected Spam]XSS in Squirrelmail plugin 'Virtual Keyboard' <= 0.9.1

  Tags:  bugtraq spam suspected virtual-keyboard xss  

• 9:01

  Bugtraq: [ GLSA 201010-01 ] Libpng: Multiple vulnerabilities

   » ‎ SecurityFocus Vulnerabilities
  [ GLSA 201010-01 ] Libpng: Multiple vulnerabilities

  Tags:  vulnerabilities glsa libpng  

• 9:00

  Bugtraq: [ MDVSA-2010:197 ] postgresql

   » ‎ SecurityFocus Vulnerabilities
  [ MDVSA-2010:197 ] postgresql

  Tags:  bugtraq mdvsa postgresql  

• 8:58

  PIC programmable power supply

   » ‎ Hack a Day
  This programmable power supply is the perfect addition to your bench tools. [Debraj Deb], who previously built a whole house power monitor, designed this build around a PIC 18F4520 microcontroller. The desired voltage is set with an attached keypad, resulting in a digital output on the 8-bits of port D. The port connects to another [...]

  Tags:  supply power pic deb d.-the programmable-power-supply bench-tools 8-bits tool hacks  

• 8:48

  [ GLSA 201010-01 ] Libpng: Multiple vulnerabilities

   » ‎ Bugtraq

  Posted by Pierre-Yves Rofes on Oct 06

  - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
  Gentoo Linux Security Advisory GLSA 201010-01
  - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
  http://security.gentoo.org/
  - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
  
  Severity: Normal
  Title: Libpng: Multiple vulnerabilities
  Date: October 05,...
  

  Tags:   

• 8:39

  [Suspected Spam]XSS in Squirrelmail plugin 'Virtual Keyboard'

   » ‎ Bugtraq

  Posted by Moritz Naumann on Oct 06

  Hi,
  
  Squirrelmail plugin 'Virtual Keyboard' version 0.9.1 and lower is
  vulnerable to cross site scripting (XSS).
  
  The vkeyboard.php script fails to sanitize the value of HTTP GET
  parameter 'passformname' which the script stores in a variable of the
  same name and outputs (unmodified) into a HTML document later. As such,
  it is possible to inject client-evaluated HTML and script code into the
  output generated by the application.
  
  For proof of...
  

  Tags:   

• 7:37

  [remote] - ASP.NET Padding Oracle Vulnerability (MS10-070) - [CVE: 2010-3332]

   » ‎ Exploit-DB
  [remote] - ASP.NET Padding Oracle Vulnerability (MS10-070) - [CVE: 2010-3332]

  Tags:   

• 7:29

  Syyn Labs’ Glowing DNA

   » ‎ Hack a Day
  This beautiful music syncronized double helix was made by Syyn labs. Last time we saw them, they had created that amazing rube goldberg style music video for OK Go. This 100 foot long LED DNA strand took over 1000 combined man hours to build. It took 512 LEDs, 32 LED controllers, 4 Arduinos, 4 computers, [...]

  Tags:  dna syyn music rube-goldberg dna-strand double-helix arduino hacks  

• 7:19

  Se queda en grub>

   » ‎ BackTrack Linux Forums
  Antes de nada felicidades por el foro, GENIAL!
  
  Hola probé la v3 en un laptop y la verdad genial (version usb) ahora he grabado en un dvd la version final y la r1 y se queda en Minimal BASH-like......
  
  grub>
  
  deberia de iniciarse solo y pedirme la clave de root, pero nada de nada!
  
  no funciona install... ni startx ni nada... no se que pasa....
  
  Gracias!

  Tags:   

• 6:51

  Problems with TP-WN722n wifi adapter

   » ‎ BackTrack Linux Forums
  Hi
  
  For some weird reason I can't get the WN-722N usb adapter to work in backtrack4. Tried installing compat-wireless 2010-04-21 with no success.
  
  root@bt:~# ifconfig
  eth0 Link encap:Ethernet HWaddr 6c:f0:49:c4:64:57
  inet addr:192.168.1.101 Bcast:192.168.1.255 Mask:255.255.255.0
  inet6 addr: fe80::6ef0:49ff:fec4:6457/64 Scope:Link
  UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
  RX packets:18549 errors:0 dropped:0 overruns:0 frame:0
  TX packets:16962 errors:0 dropped:0 overruns:0 carrier:1
  collisions:0 txqueuelen:1000
  RX bytes:24875176 (24.8 MB) TX bytes:2239912 (2.2 MB)
  Interrupt:29
  
  lo Link encap:Local Loopback
  inet addr:127.0.0.1 Mask:255.0.0.0
  inet6 addr: ::1/128 Scope:Host
  UP LOOPBACK RUNNING MTU:16436 Metric:1
  RX packets:122 errors:0 dropped:0 overruns:0 frame:0
  TX packets:122 errors:0 dropped:0 overruns:0 carrier:0
  collisions:0 txqueuelen:0
  RX bytes:6100 (6.1 KB) TX bytes:6100 (6.1 KB)
  
  oot@bt:~# lsusb
  Bus 004 Device 002: ID 046d:c517 Logitech, Inc. LX710 Cordless Desktop Laser
  Bus 004 Device 001: ID 1d6b:0001 Linux Foundation 1.1 root hub
  Bus 005 Device 002: ID 045e:0040 Microsoft Corp. Wheel Mouse Optical
  Bus 005 Device 001: ID 1d6b:0001 Linux Foundation 1.1 root hub
  Bus 003 Device 001: ID 1d6b:0001 Linux Foundation 1.1 root hub
  Bus 002 Device 001: ID 1d6b:0001 Linux Foundation 1.1 root hub
  Bus 001 Device 007: ID 0cf3:9271 Atheros Communications, Inc. AR9271 802.11n
  Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
  
  root@bt:~# iwconfig
  lo no wireless extensions.
  
  eth0 no wireless extensions.
  
  The same thing over and over going crazy :eek: now. Tried couple of different versions now with no luck at all.
  
  Can anybody give me any idea in what direction to go from here or what to do please?
  
  Thanks

  Tags:   

• 6:43

  [dos] - Adobe Acrobat and Reader Array Indexing Remote Code Execution Vulnerability - [CVE: 2010-3631]

   » ‎ Exploit-DB
  [dos] - Adobe Acrobat and Reader Array Indexing Remote Code Execution Vulnerability - [CVE: 2010-3631]

  Tags:   

• 6:26

  Xplico 0.6.0 update

   » ‎ BackTrack Linux Forums
  Xplico » Xplico 0.6.0: IRC and Paltalk Express

  Tags:   

• 6:04

  [papers] - [Hebrew] Digital Whisper Security Magazine #13

   » ‎ Exploit-DB
  [papers] - [Hebrew] Digital Whisper Security Magazine #13

  Tags:   

• 6:00

  FreeBSD ftpd Malformed DB File Handling Remote DoS

   » ‎ OSVDB Vulnerabilities
  FreeBSD ftpd Malformed DB File Handling Remote DoS

  Tags:   

• 6:00

  Digital Music Pad Path Subversion Arbitrary DLL Injection Code Execution

   » ‎ OSVDB Vulnerabilities
  Digital Music Pad Path Subversion Arbitrary DLL Injection Code Execution

  Tags:   

• 5:47

  Hydra: attacking problem

   » ‎ BackTrack Linux Forums
  Hey,
  i have the last release of BT from this site, using the hydra installed with system (installed on virtual machine). My dictionary's size is 8 MB, I use it both for the password and login (so the statement look like that: hydra -l login.txt -P pass.txt ip_adres ftp ). The message I get is:
  Error: Child with pid 8793 terminating, can not connect.
  and this error continue like:
  Error: Child with pid 8793 terminating, can not connect.
  Error: Child with pid 8794 terminating, can not connect.
  Error: Child with pid 8795 terminating, can not connect.
  Error: Child with pid 8796 terminating, can not connect.
  
  What is the problem and how can i solve it?

  Tags:   

• 5:34

  [ MDVSA-2010:197 ] postgresql

   » ‎ Full Disclosure

  Posted by security on Oct 06

  _______________________________________________________________________
  
  Mandriva Linux Security Advisory MDVSA-2010:197
  http://www.mandriva.com/security/
  _______________________________________________________________________
  
  Package : postgresql
  Date : October 6, 2010
  Affected: 2008.0, 2009.0, 2009.1, 2010.0, 2010.1, Corporate 4.0,
  Enterprise Server 5.0...
  

  Tags:   

• 5:28

  Webserver-Security and Virtualization

   » ‎ Full Disclosure

  Posted by Marcel Grabher (sallas) on Oct 06

  Hi,
  
  i m working on a paper about Webserver-Security (free).
  Objective: One should know about the risks and what can be done to mitigate
  them.
  
  The pictured topics are Threats and Countermeasures structured in Network,
  OS, Service, App
  
  http://webservsec.blogspot.com/2010/10/threats.html
  
  http://webservsec.blogspot.com/2010/10/countermeasures.html
  
  I would really appreciate some comments to the graphics
  Probably I forgot about something.
  
  BG
  MG
  

  Tags:   

• 5:27

  nSense-2010-001: Adobe Reader for Macintosh

   » ‎ Full Disclosure

  Posted by Henri Lindberg on Oct 06

  nSense Vulnerability Research Security Advisory NSENSE-2010-001
  ---------------------------------------------------------------
  
  Affected Vendor: Adobe
  Affected Product: Adobe Reader 9.3.4 for Macintosh
  Platform: OS X
  Impact: User assisted code execution
  Vendor response: Patch
  Credit: Knud / nSense
  
  Technical details...
  

  Tags:   

• 5:12

  Re: JNEXT vulnerability

   » ‎ Full Disclosure

  Posted by Sherwyn on Oct 06

  I say just release it and the will contact you in the future :). On a serious note check the archives maybe the last 4
  or so shows back on www.pauldotcom.com.
  
  The had a guess on that Developed a free disclosure model to help take these type of stress off of you.
  Infolookup
  http://infolookup.securegossip.com
  www.twitter.com/infolookup
  
  -----Original Message-----
  From: Blue Bird <azurebyrd () gmail com>
  Sender: full-disclosure-bounces ()...
  

  Tags:   

• 5:00

  LINGO Path Subversion Arbitrary DLL Injection Code Execution

   » ‎ OSVDB Vulnerabilities
  LINGO Path Subversion Arbitrary DLL Injection Code Execution

  Tags:   

• 5:00

  TuneUp Utilities Path Subversion Arbitrary DLL Injection Code Execution

   » ‎ OSVDB Vulnerabilities
  TuneUp Utilities Path Subversion Arbitrary DLL Injection Code Execution

  Tags:   

• 5:00

  xterm Multiple Argument Local Overflow

   » ‎ OSVDB Vulnerabilities
  xterm Multiple Argument Local Overflow

  Tags:   

• 5:00

  VirIT eXplorer Path Subversion Arbitrary DLL Injection Code Execution

   » ‎ OSVDB Vulnerabilities
  VirIT eXplorer Path Subversion Arbitrary DLL Injection Code Execution

  Tags:   

• 5:00

  Nitro PDF Reader Path Subversion Arbitrary DLL Injection Code Execution

   » ‎ OSVDB Vulnerabilities
  Nitro PDF Reader Path Subversion Arbitrary DLL Injection Code Execution

  Tags:   

• 5:00

  cPanel Local safe_mode Bypass

   » ‎ OSVDB Vulnerabilities
  cPanel Local safe_mode Bypass

  Tags:   

• 5:00

  Nagios XI login.php permalink_base Parameter XSS

   » ‎ OSVDB Vulnerabilities
  Nagios XI login.php permalink_base Parameter XSS

  Tags:   

• 5:00

  ApPHP Calendar calendar.class.php Multiple Parameter XSS

   » ‎ OSVDB Vulnerabilities
  ApPHP Calendar calendar.class.php Multiple Parameter XSS

  Tags:   

• 5:00

  Linux Kernel drivers/block/pktcdvd.c pkt_find_dev_from_minor Function PKT_CTRL_CMD_STATUS IOCTL Local DoS

   » ‎ OSVDB Vulnerabilities
  Linux Kernel drivers/block/pktcdvd.c pkt_find_dev_from_minor Function PKT_CTRL_CMD_STATUS IOCTL Local DoS

  Tags:   

• 5:00

  SmarterMail Main/Calendar/frmEvent.aspx SubjectBox_SettingText Parameter XSS

   » ‎ OSVDB Vulnerabilities
  SmarterMail Main/Calendar/frmEvent.aspx SubjectBox_SettingText Parameter XSS

  Tags:   

• 4:57

  Keeping confguration unchanged after reboot

   » ‎ BackTrack Linux Forums
  Hi guys,
  
  I'm using BackTrack4 in my office to run a MySql server for internal testing purposes and it's working fairly well till now with 1 inconvenience that it doesn't autostart. Sometimes I have to shutdown the server and after booting again certain parameters like ip address, mounting a separate HDD partition etc. get reset and I have to manually assign IP, mount partition, start required services like Mysql, SSH again.
  
  Is there any way to avoid that ? That is, to assign the same network configuration, starting of certain services and auto-mounting the partition ?
  
  For setting ip address I tried editing "/etc/network/interfaces" like this:
  
  Quote: auto lo
  iface lo inet loopback
  
  
  face eth0 inet static
  address 192.168.1.111
  netmask 255.255.255.0
  network 192.168.1.0
  broadcast 192.168.1.255
  gateway 192.168.1.1
  
  auto eth1
  iface eth1 inet dhcp
  
  <snip> For auto start of services, I edited rc.local file and added the commands
  
  Quote: /usr/bin/start-sshd and so on.
  
  But both didn't work. Can someone point out the correct way of doing it ? I read some cryptic (to me) article where they were using scripts to do similar stuff, but all that is beyond me. Even if I could somehow manage to write a script to automatically do all that in case of an unexpected reboot (which I don't know how to ) how'll that script run by itself automatically ?

  Tags:   

• 4:27

  80% against funding cuts to Police Central e-Crime Unit, Sophos poll reveals

   » ‎ Sophos security news
  Metropolitan Police Commissioner warns that the authorities need to be properly funded to respond to rise in cybercrime.

  Tags:  police funding central police-central crime-unit police-commissioner  

• 3:51

  Keeping confguration unchaged after reboot

   » ‎ remote-exploit & backtrack
  Hi guys,
  
  I'm using BackTrack4 in my office to run a MySql server for internal testing purposes and it's working fairly well till now with 1 inconvenience that it doesn't autostart. Sometimes I have to shutdown the server and after booting again certain parameters like ip address, mounting a separate HDD partition etc. get reset and I have to manually assign IP, mount partition, start required services like Mysql, SSH again.
  
  Is there any way to avoid that ? That is, to assign the same network configuration, starting of certain services and auto-mounting the partition ?
  
  For setting ip address I tried editing "/etc/network/interfaces" like this:
  
  Quote:

  auto lo iface lo inet loopback face eth0 inet static address 192.168.1.111 netmask 255.255.255.0 network 192.168.1.0 broadcast 192.168.1.255 gateway 192.168.1.1 auto eth1 iface eth1 inet dhcp <snip>

  For auto start of services, I edited rc.local file and added the commands
  
  Quote:

  /usr/bin/start-sshd

  and so on.
  
  But both didn't work. Can someone point out the correct way of doing it ? I read some cryptic (to me) article where they were using scripts to do similar stuff, but all that is beyond me. Even if I could somehow manage to write a script to automatically do all that in case of an unexpected reboot (which I don't know how to :o) how'll that script run by itself automatically ?

  Tags:  network address partition static-address etc-network network-interfaces BackTrack Software Related Issues  

• 3:00

  Symantec Expands Security Products To Cover Android & iOS

   » ‎ Darknet
  Most of the big companies in the modern age of business are moving to the acquisition model rather than developing new technologies, Symantec has made a few purchases in recent years. Their latest move is to offer security for the hot smartphone platforms Android and iOS, which powers the new iPhone 4 and iPad. The [...]
  
  Read the full post at darknet.org.uk

  
  

  

  Tags:  symantec android security read iphone-4 acquisition-model ipad Countermeasures  

• 2:39

  deinstallation von backtrack 4

   » ‎ BackTrack Linux Forums
  wie kann ich backtrack deinstalliern wenn ich es auf meine C: festplatte installiert habe und nicht die Partition C: formatieren will, weil ja mein windows vista noch drauf ist!!!
  auf der C: partition werden mir eben keine Datein von BT 4 angezeigt die ich löschen könnte!
  leuite helft mir!

  Tags:   

• 1:30

  annunci.ebay.it XSS

   » ‎ XSSed
  d3v1l has discovered a vulnerability in annunci.ebay.it, which could be exploited by malicious people to conduct XSS attacks.

  Tags:   

• 1:27

  Cant get atheros 5001x+ madwifi drivers installed

   » ‎ BackTrack Linux Forums
  Can anyone help Im trying to get mad wifi drivers installed on backtrack 4 with a wireless Atheros 5001x+ card.
  
  Checking the requirements listed on the madwifi-project.org site i have confirmed that i do have these dependancies-
  gcc
  make
  c libraries
  
  (not sure about "perl" and "subversion, but i assume i have them)
  
  Yet when i try to "make" for the madwifi for my wireless chipset it comes up with this output -
  
  
  root@bt:~/madwifi# make
  Checking requirements... ok.
  Checking kernel configuration... ok.
  make -C /lib/modules/2.6.30.9/build SUBDIRS=/root/madwifi modules
  make[1]: Entering directory `/usr/src/linux-source-2.6.30.9'
  
  WARNING: Symbol version dump /usr/src/linux-source-2.6.30.9/Module.symvers
  is missing; modules will have no dependencies and modversions.
  
  CC [M] /root/madwifi/ath/if_ath.o
  In file included from /root/madwifi/ath/../net80211/ieee80211_monitor.h:45,
  from /root/madwifi/ath/if_ath.c:71:
  /root/madwifi/ath/../ath/if_athvar.h:98: error: conflicting types for 'irqreturn
  _t'
  include/linux/irqreturn.h:16: error: previous declaration of 'irqreturn_t' was h
  ere
  /root/madwifi/ath/if_ath.c: In function 'ath_attach':
  /root/madwifi/ath/if_ath.c:402: error: 'struct net_device' has no member named '
  priv'
  /root/madwifi/ath/if_ath.c: In function 'ath_detach':
  
  ----------------------------------------------------------------------------------------------------------------------
  Ive cut down some of the output for the sake of keeping this message short. I assume this is some dependency problem. Im a bit of a linux newb so i have no idea.

  Tags:   

• 1:09

  JNEXT vulnerability

   » ‎ Full Disclosure

  Posted by Blue Bird on Oct 06

  Hi all -
  
  I've been trying to reach the developer of JNEXT for some time now to report
  a security vulnerability, anyone have contact info for Amnon David other
  than the webform on his website? http://www.jnext.org/sphp501/contact.php
  
  Thanks.
  
  BB
  

  Tags:   

• 0:59

  global.ebay.com XSS

   » ‎ XSSed
  Sony has discovered a vulnerability in global.ebay.com, which could be exploited by malicious people to conduct XSS attacks.

  Tags:   

• 0:58

  donations.ebay.com XSS

   » ‎ XSSed
  d3v1l has discovered a vulnerability in donations.ebay.com, which could be exploited by malicious people to conduct XSS attacks.

  Tags:   

• 0:58

  lers.corp.ebay.com XSS

   » ‎ XSSed
  Nemessis has discovered a vulnerability in lers.corp.ebay.com, which could be exploited by malicious people to conduct XSS attacks.

  Tags:   

• 0:58

  members.ebay.com Script Insertion

   » ‎ XSSed
  Sid3effects has discovered a vulnerability in members.ebay.com, which could be exploited by malicious people to conduct Script Insertion attacks.

  Tags:   

• 0:47

  [Audio] The Four Horsemen – Malware for mobile

   » ‎ SecDocs
  Authors: Axelle Apvrille
  Tags: malware phone
  Event: Confidence 2010 Krakow
  

  Tags:  horsemen audio malware krakow four-horsemen confidence  

• 0:47

  [Video] The Four Horsemen – Malware for mobile

   » ‎ SecDocs
  Authors: Axelle Apvrille
  Tags: malware phone
  Event: Confidence 2010 Krakow
  

  Tags:  horsemen video malware krakow four-horsemen confidence  

• 0:17

  [Audio] Anonymity, Privacy, and Circumvention with Tor in the Real World

   » ‎ SecDocs
  Authors: Jacob Appelbaum
  Tags: Tor privacy
  Event: Confidence 2010 Krakow
  

  Tags:  audio privacy anonymity jacob-appelbaum tor krakow anonymity-privacy privacy-event  

• 0:17

  [Video] Anonymity, Privacy, and Circumvention with Tor in the Real World

   » ‎ SecDocs
  Authors: Jacob Appelbaum
  Tags: Tor privacy
  Event: Confidence 2010 Krakow
  

  Tags:  video privacy anonymity jacob-appelbaum tor krakow anonymity-privacy privacy-event  

• 0:14

  SET encription

   » ‎ BackTrack Linux Forums
  hello
  I am clonning a website using social engineering tool kit and can dowload the exploit OK and get a meterpreter session only if my AV is disabled. With AV enabled it gets caught ever time.
  Is it possible to re-encript the file using metersploit and if so which file has been created by SET.
  SET does not seem allow the option to use multi encoders like you can in metersploit unless I have missed something.
  thanks very much

  Tags:   

• 0:00

  Vuln: libpng Memory Corruption and Memory Leak Vulnerabilities

   » ‎ SecurityFocus Vulnerabilities
  libpng Memory Corruption and Memory Leak Vulnerabilities

  Tags:  corruption libpng memory memory-corruption memory-leak  

• 0:00

  Vuln: Libpng 'png_decompress_chunk()' Function Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Libpng 'png_decompress_chunk()' Function Denial of Service Vulnerability

  Tags:  service-vulnerability denial-of-service libpng  

• 0:00

  Vuln: MIT Kerberos KDC 'kdc_authdata.c' NULL Pointer Denial Of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  MIT Kerberos KDC 'kdc_authdata.c' NULL Pointer Denial Of Service Vulnerability

  Tags:  kdc mit kerberos service-vulnerability null-pointer mit-kerberos  

• 0:00

  Vuln: Linux Kernel Ptrace (CVE-2010-3301) Local Privilege Escalation Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Linux Kernel Ptrace (CVE-2010-3301) Local Privilege Escalation Vulnerability

  Tags:  cve escalation linux linux-kernel privilege-escalation-vulnerability local-privilege-escalation  

• 0:00

  Vuln: Git 'gitdir' Remote Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Git 'gitdir' Remote Buffer Overflow Vulnerability

  Tags:  gitdir git remote buffer-overflow-vulnerability remote-buffer-overflow remote-buffer-overflow-vulnerability  

• 0:00

  Vuln: bzip2 'BZ2_decompress' Function Integer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  bzip2 'BZ2_decompress' Function Integer Overflow Vulnerability

  Tags:  integer function bzip integer-overflow-vulnerability bzip2  

• 0:00

  Vuln: Dovecot Access Control List (ACL) Multiple Remote Vulnerabilities

   » ‎ SecurityFocus Vulnerabilities
  Dovecot Access Control List (ACL) Multiple Remote Vulnerabilities

  Tags:  control multiple remote access-control-list vulnerabilities  

• 0:00

  Vuln: Adobe Acrobat and Reader CVE-2010-3627 Remote Code Execution Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Adobe Acrobat and Reader CVE-2010-3627 Remote Code Execution Vulnerability

  Tags:  acrobat reader adobe code-execution adobe-acrobat vulnerability  

• 0:00

  Vuln: Adobe Acrobat and Reader CVE-2010-3628 Remote Memory Corruption Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Adobe Acrobat and Reader CVE-2010-3628 Remote Memory Corruption Vulnerability

  Tags:  acrobat reader adobe memory-corruption adobe-acrobat vulnerability  

• 0:00

  Vuln: Adobe Acrobat and Reader CVE-2010-3658 Remote Memory Corruption Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Adobe Acrobat and Reader CVE-2010-3658 Remote Memory Corruption Vulnerability

  Tags:  acrobat reader adobe memory-corruption adobe-acrobat vulnerability  

• 0:00

  Vuln: Adobe Acrobat and Reader CVE-2010-3657 Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Adobe Acrobat and Reader CVE-2010-3657 Denial of Service Vulnerability

  Tags:  acrobat reader adobe service-vulnerability denial-of-service adobe-acrobat  

• 0:00

  Vuln: PostgreSQL PL/Perl and PL/Tcl Local Privilege Escalation Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  PostgreSQL PL/Perl and PL/Tcl Local Privilege Escalation Vulnerability

  Tags:  tcl perl postgresql privilege-escalation-vulnerability local-privilege-escalation  

• 0:00

  Vuln: KDE Okular PDB File Parsing RLE Decompression Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  KDE Okular PDB File Parsing RLE Decompression Buffer Overflow Vulnerability

  Tags:  okular kde pdb buffer-overflow-vulnerability decompression  

• 0:00

  Vuln: PHP 'SplObjectStorage' Unserializer Arbitrary Code Execution Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  PHP 'SplObjectStorage' Unserializer Arbitrary Code Execution Vulnerability

  Tags:  unserializer splobjectstorage php arbitrary-code-execution vulnerability  

• 0:00

  Vuln: PHP Versions Prior to 5.3.3/5.2.14 Multiple Vulnerabilities

   » ‎ SecurityFocus Vulnerabilities
  PHP Versions Prior to 5.3.3/5.2.14 Multiple Vulnerabilities

  Tags:  multiple versions php php-versions vulnerabilities  

• 0:00

  Vuln: PHP Mysqlnd Extension Information Disclosure and Multiple Buffer Overflow Vulnerabilities

   » ‎ SecurityFocus Vulnerabilities
  PHP Mysqlnd Extension Information Disclosure and Multiple Buffer Overflow Vulnerabilities

  Tags:  php mysqlnd extension multiple-buffer-overflow buffer-overflow-vulnerabilities information-disclosure  

• 0:00

  Vuln: Adobe Acrobat and Reader ICC Parsing Remote Memory Corruption Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Adobe Acrobat and Reader ICC Parsing Remote Memory Corruption Vulnerability

  Tags:  acrobat reader adobe memory-corruption adobe-acrobat parsing  

• 0:00

  Vuln: lvm2-cluster 'clvmd' Local Privilege Escalation Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  lvm2-cluster 'clvmd' Local Privilege Escalation Vulnerability

  Tags:  cluster clvmd lvm privilege-escalation-vulnerability local-privilege-escalation  

• 0:00

  Vuln: Microsoft .NET Framework ASP.NET Padding Oracle Information Disclosure Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Microsoft .NET Framework ASP.NET Padding Oracle Information Disclosure Vulnerability

  Tags:  framework microsoft net information-disclosure-vulnerability microsoft-net-framework padding  

• 0:00

  Vuln: Adobe Acrobat and Reader CVE-2010-3632 Remote Memory Corruption Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Adobe Acrobat and Reader CVE-2010-3632 Remote Memory Corruption Vulnerability

  Tags:  acrobat reader adobe memory-corruption adobe-acrobat vulnerability  

• 0:00

  Vuln: Adobe Acrobat and Reader Thumbnails Use-After-Free Remote Code Execution Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Adobe Acrobat and Reader Thumbnails Use-After-Free Remote Code Execution Vulnerability

  Tags:  acrobat reader adobe code-execution adobe-acrobat vulnerability  

• 0:00

  Vuln: Adobe Acrobat and Reader 'ACE.dll' ICC Streams Remote Memory Corruption Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Adobe Acrobat and Reader 'ACE.dll' ICC Streams Remote Memory Corruption Vulnerability

  Tags:  acrobat reader adobe memory-corruption adobe-acrobat vulnerability  

• 0:00

  Vuln: Kudrsoft AudioPLUS Remote Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Kudrsoft AudioPLUS Remote Buffer Overflow Vulnerability

  Tags:  buffer remote audioplus buffer-overflow-vulnerability remote-buffer-overflow remote-buffer-overflow-vulnerability  

• 0:00

  Vuln: Mozilla Firefox, Thunderbird, and SeaMonkey Crafted Font Remote Code Execution Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Mozilla Firefox, Thunderbird, and SeaMonkey Crafted Font Remote Code Execution Vulnerability

  Tags:  mozilla firefox thunderbird mozilla-firefox code-execution seamonkey  

• 0:00

  Vuln: Mozilla Firefox/Thunderbird/SeaMonkey dwmapi.dll DLL Loading Arbitrary Code Execution Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Mozilla Firefox/Thunderbird/SeaMonkey dwmapi.dll DLL Loading Arbitrary Code Execution Vulnerability

  Tags:  dll mozilla firefox arbitrary-code-execution mozilla-firefox seamonkey  

• 0:00

  Vuln: Openswan 'XAUTH' Remote Buffer Overflow and Command Injection Vulnerabilities

   » ‎ SecurityFocus Vulnerabilities
  Openswan 'XAUTH' Remote Buffer Overflow and Command Injection Vulnerabilities

  Tags:  xauth remote openswan remote-buffer-overflow vulnerabilities  

• 0:00

  Voice-Routing Call Fingerprint System Fights Vishing

   » ‎ Packet Storm Security Headlines
  Voice-Routing Call Fingerprint System Fights Vishing

  Tags:  routing call voice fingerprint-system  

• 0:00

  Security Concerns Prompt D.C. To Suspend Web-Based Overseas Voting

   » ‎ Packet Storm Security Headlines
  Security Concerns Prompt D.C. To Suspend Web-Based Overseas Voting

  Tags:  suspend prompt security d.c.  

• 0:00

  Sick PCs Should Be Banned From The Net Says Microsoft

   » ‎ Packet Storm Security Headlines
  Sick PCs Should Be Banned From The Net Says Microsoft

  Tags:  sick microsoft banned  

• 0:00

  Facebook Unveils Changes To Enhance Privacy

   » ‎ Packet Storm Security Headlines
  Facebook Unveils Changes To Enhance Privacy

  Tags:  facebook unveils enhance  

• 0:00

  Adobe Fixes Reader And Acrobat

   » ‎ Packet Storm Security Headlines
  Adobe Fixes Reader And Acrobat

  Tags:  and reader fixe acrobat adobe  

• 0:00

  Most Infrastructure Firms Feel Ready For Cyberattacks

   » ‎ Packet Storm Security Headlines
  Most Infrastructure Firms Feel Ready For Cyberattacks

  Tags:  feel firms infrastructure  

• 0:00

  New Sighting Of UFO Over China

   » ‎ Packet Storm Security Headlines
  New Sighting Of UFO Over China

  Tags:  sighting ufo new china