jetlib.sec » Full Disclosure » February 12, 2012

Feeds

133098 items (0 unread) in 27 feeds

• 1337day (was: Inj3ct0r, 1337db)
• OSVDB Vulnerabilities
• Exploit-DB
• SecurityFocus Vulnerabilities
• Bugtraq
• Full Disclosure
• XSSed
• Packet Storm Security Headlines
• Packet Storm Security Advisories
• Packet Storm Security Exploits
• Packet Storm Security Recent Files
• Packet Storm Security Tools
• Packet Storm Security Misc. Files
• Sophos security news
• Sophos product advisories
• Penetration Testing
• SecuriTeam
• BackTrack Linux Forums
• Threatpost
• SecDocs
• carnal0wnage.attackresearch.com
• Carnal0wnage
• Kernel Fun
• Darknet
• The Exploitant
• Hack a Day
• Wirevolution

Full Disclosure

• February 12, 2012
• 

  Re: Linksys Routers still Vulnerable to Wps vulnerability.

  Posted: February 12th, 2012, 2:42pm PST

  Tags:   

  Posted by Sanguinarious Rose on Feb 12

  I can't see someone sitting outside my house for 7 months let alone 2
  years trying to get my PIN for my router.
  
  A valid point and easy security improvement
  
  People are lazy by default and I see it honestly as their fault for
  not taking simple precautions or god forbid reading up a bit.
  
• 

  Re: Linksys Routers still Vulnerable to Wps vulnerability.

  Posted: February 12th, 2012, 2:31pm PST

  Tags:   

  Posted by Derek on Feb 12

  They should at least consider providing an option to disable the static pin only or disable it after an hour if the
  future is activated by the user.
  
  Seems to be something that could be included in a future firmware update.
  
  For a vendor to provide another mechanism for a user to get remotely hacked (within wireless TX/RX range) and not
  address it in a reasonable amount of time, exposes the less technical user, who is was intended to help in...
  
• 

  Re: Linksys Routers still Vulnerable to Wps vulnerability.

  Posted: February 12th, 2012, 1:55pm PST

  Tags:   

  Posted by Dan Kaminsky on Feb 12

  Interesting. Do you know if they stop advertising WPS support after they
  disable it?
  
• 

  [ MDVSA-2012:017 ] firefox

  Posted: February 12th, 2012, 12:23pm PST

  Tags:   

  Posted by security on Feb 12

  _______________________________________________________________________
  
  Mandriva Linux Security Advisory MDVSA-2012:017
  http://www.mandriva.com/security/
  _______________________________________________________________________
  
  Package : firefox
  Date : February 12, 2012
  Affected: 2010.1, 2011.
  _______________________________________________________________________
  
  Problem Description:
  
  Use-after-free...
  
• 

  Re: Trustwave and Mozilla

  Posted: February 12th, 2012, 7:59am PST

  Tags:   

  Posted by Valdis . Kletnieks on Feb 12

  On Sun, 12 Feb 2012 05:54:30 EST, Jeffrey Walton said:
  
  Maybe I'm not sufficiently caffienated, but that link doesn't seem to
  mention Mozilla at all, much less anything they did to "subvert" pinning.
  (Note that I don't consider "doesn't happen to support the feature yet"
  as "subversion" - that requires an active decision to take some action
  that undermines the feature)
  
• 

  Re: Linksys Routers still Vulnerable to Wps vulnerability.

  Posted: February 12th, 2012, 7:17am PST

  Tags:   

  Posted by Rob Fuller on Feb 12

  I've tested a 6 models of Linksys, all of them appear to disable WPS
  completely as soon as a single wireless setting is set. I assume this
  would be the reason Cisco/Linksys aren't putting much stock in
  'fixing' it further. If anyone has any experience to contradict this
  or have a modification to current tools to circumvent what I've
  perceived as disabled, I, as I'm sure Craig, would be very interested.
  
• 

  Re: Iran is doing ip-and-port filtering of SSL

  Posted: February 12th, 2012, 7:03am PST

  Tags:   

  Posted by adam on Feb 12

  In case the OP hasn't seen this:
  
  http://boingboing.net/2012/02/10/iran-attacks-internet-access-o.html
  https://lists.torproject.org/pipermail/tor-talk/2012-February/023070.html
  
• 

  Re: [Off-Spanish] Webinario gratuito - Ataques DoS en latino america

  Posted: February 12th, 2012, 5:59am PST

  Tags:   

  Posted by Dcdave on Feb 12

  Agree.
  
• 

  Re: Iran is doing ip-and-port filtering of SSL

  Posted: February 12th, 2012, 4:45am PST

  Tags:   

  Posted by Sebastian Rakowski on Feb 12

  thought they filtered specific URLs, but now they filter all SSL (to defeat
  VPNs, Tor, etc).
  
• 

  Re: [Off-Spanish] Webinario gratuito - Ataques DoS en latino america

  Posted: February 12th, 2012, 4:44am PST

  Tags:   

  Posted by Sergio Arcos on Feb 12

  It should be marked as spam.
  
  We do not care about "exploitpack.com" ... do not send more message
  with this business.
  
• 

  Re: Iran is doing ip-and-port filtering of SSL

  Posted: February 12th, 2012, 4:42am PST

  Tags:   

  Posted by Sai on Feb 12

  I'm no historian, sorry.
  
  Partially. A lot of it gets dropped by DPI, including various uses of
  SSH and normal Tor, even using with bridges.
  
  The new obfsproxy Tor works very well, though. Also, some SSL does go
  through (which implies some Tor could get through too); not really
  clear yet what the pattern is.
  
  - Sai
  
• 

  Re: [Full-disclosure] Linksys Routers still Vulnerable to W ps vulnerability.

  Posted: February 12th, 2012, 4:41am PST

  Tags:   

  Posted by farthvader on Feb 12

  
  
• 

  eFront Community++ v3.6.10 - SQL Injection Vulnerability

  Posted: February 12th, 2012, 4:40am PST

  Tags:   

  Posted by research () vulnerability-lab com on Feb 12

  Title:
  ======
  eFront Community++ v3.6.10 - SQL Injection Vulnerability
  
  Date:
  =====
  2012-02-11
  
  References:
  ===========
  http://www.vulnerability-lab.com/get_content.php?id=422
  
  VL-ID:
  =====
  422
  
  Introduction:
  =============
  Tailored with larger organizations in mind, eFront Community ++ offers solutions for the management of companies most
  valued asset - the people. Based on a coherent approach to human capital management which keeps the...
  
• 

  Yahoo! Messenger v11.5 - Buffer Overflow Vulnerability

  Posted: February 12th, 2012, 4:38am PST

  Tags:   

  Posted by research () vulnerability-lab com on Feb 12

  Title:
  ======
  Yahoo! Messenger v11.5 - Buffer Overflow Vulnerability
  
  Date:
  =====
  2012-02-11
  
  References:
  ===========
  http://www.vulnerability-lab.com/get_content.php?id=434
  
  VL-ID:
  =====
  434
  
  Introduction:
  =============
  Der Yahoo Messenger (eigene Schreibung Yahoo! Messenger, kurz auch Y!M, YIM oder Yim) ist ein verbreiteter
  Instant-Messaging-Client, sowie ein Protokoll von Yahoo. Der Yahoo Messenger ist kostenlos und kann mit
  einem gültigen...
  
• 

  Trustwave and Mozilla

  Posted: February 12th, 2012, 2:54am PST

  Tags:   

  Posted by Jeffrey Walton on Feb 12

  Hi All,
  
  https://www.infoworld.com/d/security/trustwave-admits-issuing-man-in-the-middle-digital-certificate-185972
  
  In case folks are interested in the following Mozilla's response to
  active MitM attacks that were facilitated by Trustwave, the bug report
  is here: http://bugzilla.mozilla.org/show_bug.cgi?id=724929.
  
  For what its worth, pinning the certificate can usually remediate
  these sorts of MitM attacks, but Mozilla subverted it:...
  
• 

  Re: Iran is doing ip-and-port filtering of SSL

  Posted: February 12th, 2012, 1:18am PST

  Tags:   

  Posted by Derek on Feb 12

  maybe it's time to get the old school substitution code books out.
  
  http://www.forbes.com/sites/andygreenberg/2012/02/10/as-iran-cracks-down-online-tor-tests-undetectable-encrypted-connections/
  
  Thanks
  Derek