jetlib.sec » Full Disclosure » February 9, 2012

Feeds

133098 items (0 unread) in 27 feeds

• 1337day (was: Inj3ct0r, 1337db)
• OSVDB Vulnerabilities
• Exploit-DB
• SecurityFocus Vulnerabilities
• Bugtraq
• Full Disclosure
• XSSed
• Packet Storm Security Headlines
• Packet Storm Security Advisories
• Packet Storm Security Exploits
• Packet Storm Security Recent Files
• Packet Storm Security Tools
• Packet Storm Security Misc. Files
• Sophos security news
• Sophos product advisories
• Penetration Testing
• SecuriTeam
• BackTrack Linux Forums
• Threatpost
• SecDocs
• carnal0wnage.attackresearch.com
• Carnal0wnage
• Kernel Fun
• Darknet
• The Exploitant
• Hack a Day
• Wirevolution

Full Disclosure

• February 09, 2012
• 

  Re: Bug 718066 - [meta] Add feature to submit anonymous product metrics to Mozilla

  Posted: February 9th, 2012, 7:52pm PST

  Tags:   

  Posted by Nick Boyce on Feb 09

  I'll bite ... (I know your question was rhetorical)
  
  It's a very bad idea IMO.
  
  (https://wiki.mozilla.org/MetricsDataPing)
  
  "Mozilla has a critical need to be able to understand
  the factors that cause installations of Firefox to no
  longer be used. The system must have some way to
  detect an abandoned installation."
  
  Their proposed solution seems to be (from the bug and wiki) to include
  code in Firefox to submit a lot...
  
• 

  What's up with the ImmunityInc forums?

  Posted: February 9th, 2012, 3:45pm PST

  Tags:   

  Posted by Byron L. Sonne on Feb 09

  Hey, anyone know why it's taking so long for the ImmunityInc forums to
  come back up? It's been weeks, man.
  
• 

  eFront Community++ v3.6.10 - Multiple Web Vulnerabilities

  Posted: February 9th, 2012, 11:05am PST

  Tags:   

  Posted by research () vulnerability-lab com on Feb 09

  Title:
  ======
  eFront Community++ v3.6.10 - Multiple Web Vulnerabilities
  
  Date:
  =====
  2012-02-09
  
  References:
  ===========
  http://www.vulnerability-lab.com/get_content.php?id=421
  
  VL-ID:
  =====
  421
  
  Introduction:
  =============
  Tailored with larger organizations in mind, eFront Community ++ offers solutions for the management of companies most
  valued asset - the people. Based on a coherent approach to human capital management which keeps the...
  
• 

  [SECURITY] CVE-2011-4367 Apache MyFaces information disclosure vulnerability

  Posted: February 9th, 2012, 8:01am PST

  Tags:   

  Posted by Leonardo Uribe on Feb 09

  --------------------------------------------------------------------------------------------------
  
  CVE-2011-4367: Apache MyFaces information disclosure vulnerability
  
  Severity: Important
  
  Vendor: The Apache Software Foundation
  
  Versions Affected:
  MyFaces Core 2.0.1 to 2.0.11
  MyFaces Core 2.1.0 to 2.1.5
  Earlier versions are not affected
  
  Description:
  
  MyFaces JavaServer Faces (JSF) allows relative paths in the...
  
• 

  List Charter

  Posted: February 9th, 2012, 7:46am PST

  Tags:   

  Posted by John Cartwright on Feb 09

  [Full-Disclosure] Mailing List Charter
  John Cartwright <johnc () grok org uk>
  
  - Introduction & Purpose -
  
  This document serves as a charter for the [Full-Disclosure] mailing
  list hosted at lists.grok.org.uk.
  
  The list was created on 9th July 2002 by Len Rose, and is primarily
  concerned with security issues and their discussion. The list is
  administered by John Cartwright.
  
  The Full-Disclosure list is hosted and sponsored by...
  
• 

  Creating backdoors using SQL Injection

  Posted: February 9th, 2012, 7:40am PST

  Tags:   

  Posted by Adam Behnke on Feb 09

  An InfoSec Institute Review on Creating backdoors using SQL Injection:
  
  http://resources.infosecinstitute.com/backdoor-sql-injection/
  
  A novel technique that highlights the risk of not chrooting your SQL
  servers.
  
  
  
• 

  [ MDVSA-2012:015 ] wireshark

  Posted: February 9th, 2012, 6:33am PST

  Tags:   

  Posted by security on Feb 09

  _______________________________________________________________________
  
  Mandriva Linux Security Advisory MDVSA-2012:015
  http://www.mandriva.com/security/
  _______________________________________________________________________
  
  Package : wireshark
  Date : February 9, 2012
  Affected: 2011.
  _______________________________________________________________________
  
  Problem Description:
  
  Multiple file parser and NULL...
  
• 

  Drupal Finder Module Multiple Vulnerabilities

  Posted: February 9th, 2012, 6:05am PST

  Tags:   

  Posted by Justin Klein Keane on Feb 09

  Vulnerability Report
  
  Description of Vulnerability:
  -----------------------------
  Drupal (http://drupal.org) is a robust content management system (CMS)
  written in PHP and MySQL. The Drupal Finder module
  (https://drupal.org/project/finder) "allows Drupal site administrators
  to create flexible faceted search forms to find entities such as nodes
  or users based on the values of fields and database attributes." The
  Finder module contains...
  
• 

  Bug 718066 - [meta] Add feature to submit anonymous product metrics to Mozilla

  Posted: February 9th, 2012, 5:18am PST

  Tags:   

  Posted by . . on Feb 09

  https://bugzilla.mozilla.org/show_bug.cgi?id=718066
  
  what the hell is this?!
  
• 

  [SECURITY] [DSA 2407-1] cvs security update

  Posted: February 9th, 2012, 5:05am PST

  Tags:   

  Posted by Florian Weimer on Feb 09

  -------------------------------------------------------------------------
  Debian Security Advisory DSA-2407-1 security () debian org
  http://www.debian.org/security/ Florian Weimer
  February 09, 2012 http://www.debian.org/security/faq
  -------------------------------------------------------------------------
  
  Package : cvs
  Vulnerability : heap overflow
  Problem type : remote...
  
• 

  [SECURITY] [DSA 2406-1] icedove security update

  Posted: February 9th, 2012, 4:08am PST

  Tags:   

  Posted by Florian Weimer on Feb 09

  -------------------------------------------------------------------------
  Debian Security Advisory DSA-2406-1 security () debian org
  http://www.debian.org/security/ Florian Weimer
  February 09, 2012 http://www.debian.org/security/faq
  -------------------------------------------------------------------------
  
  Package : icedove
  Vulnerability : several
  Problem type : remote...
  
• 

  Vulnerability in Novell website.

  Posted: February 9th, 2012, 2:22am PST

  Tags:   

  Posted by Team on Feb 09

  
  
  Hello :-)
  
  I sent email stating the problem for the company,
  waited a few days and got no response, so I'm making the vulnerability
  public:
  
  Scan date: 2-2-2012
  13:33:54
  ===================================================================================================
  |
  Domain: http://www.novell.com/ [1]
  | Server: Apache
  | IP:
  130.57.5.25...