NIST IT Security: Password Reset

NIST Site Search

Product Research

Advertise on this site

Headlines

eEye Digital Security - Zero-Day Tracker

»	Mac OS X ARDAgent Local Privilege Escalation ARDAgent in Apple Mac OS X 10.5 and 10.4 allows local users to gain privileges via an osascript tell ...
»	Creative Software AutoUpdate Engine ActiveX stack buffer overflow The Creative Software AutoUpdate Engine ActiveX control is a component that provides automatic updat ...
»	Internet Connection Sharing DoS A denial of service vulnerability exists within the Internet Connection Sharing service in Microsoft ...
»	RPC Memory Exhaustion The three referenced exploits take advantage of an inherent problem in RPC, in which an attacker get ...

Date published: Tue, 6 Jan 2009 14:56:00 PST
Details

Date published: not known
Details

US-CERT Current Activity

»	Rogue MD5 SSL Certificate Vulnerability
»	Worm Exploiting Vulnerability described in MS08-067
»	Malware Spreading via Malicious Ecards
»	Mozilla Releases Thunderbird 2.0.0.19
»	Trend Micro Releases Updates for HouseCall
»	Microsoft Releases Security Advisory (961040)
»	Microsoft Releases Security Bulletin MS08-078
»	Mozilla has released Firefox 3.0.5
»	Opera Software releases Opera Version 9.63
»	Microsoft Releases Advance Notification

Date published: not known
Details

SecurityFocus News

»	News: Group attacks flaw in browser crypto security Group attacks flaw in browser crypto security
»	News: Commission calls for cybersecurity czar Commission calls for cybersecurity czar
»	News: Microsoft hopes free security means less malware Microsoft hopes free security means less malware >> Advertisement << Ca ...
»	News: Researchers find more flaws in wireless security Researchers find more flaws in wireless security
»	Brief: Researchers claim flaws in Intel's trusted platform Researchers claim flaws in Intel's trusted platform

Date published: not known
Details

ha.ckers.org web application security lab

»	HTTP Verb Brute Forcing I read a few interesting posts here and here regarding brute forcing HTTP verbs. The F5 post sugges ...
»	ToS Abuse Abuse Sorry I haven’t posted in a while. Not for lack of wanting to, but alas, the real world keeps ...
»	Browser Power Consumption This isn’t like most the other posts I do on here since it’s only tangentially security ...
»	HTTPOnly Fix In MSXML I’m happy to announce that Microsoft has released MS08-069 today. It’s got a lot of cha ...
»	Lifelock Protects You from Clickjacking Well, now I’ve seen everything. Just when I didn’t think I could ever be amazed more by ...
»	Security Expert Rehabilitation In light of my last gloom and doom post, I wanted to turn the tables and add some humor. A while ba ...
»	Apocalyptic Vulnerability Percentages - FUD 101 I’ve spent a long time in the trenches and recently I’ve been getting more and more jade ...
»	More McAfee Snakeoil Ranting I know a lot of people are just tired of the same old PCI ASV rant that really surfaced last year, b ...
»	Clickjacking Details Today is the day we can finally start talking about clickjacking. This is just meant to be a quick ...
»	Tomcat SSL Fingerprinting I ran into this a few weeks ago and I thought it was just so silly I had to post it. If you telnet ...

Date published: not known
Details

CIAC Updates

»	T-025: Vulnerabilities in Microsoft XML Core Services A remote code execution vulnerability exists in the way that Microsoft XML Core Services parses XML ...
»	T-024: Vulnerability in Server Message Block (SMB) A remote code execution vulnerability exists in the way that Microsoft Server Message Block (SMB) Pr ...
»	T-023: Multiple Vulnerabilities in Cisco PIX and Cisco ASA Multiple vulnerabilities exist in the Cisco ASA 5500 Series Adaptive Security Appliances and Cisco P ...
»	T-022: OpenOffice.org Security Vulnerabilities Several vulnerabilities have been discovered in the OpenOffice.org office suite, in the WMF file par ...
»	T-021: libspf2 DNS TXT Vulnerability libspf2 contains a buffer overflow vulnerability in code that parses DNS TXT records. An SPF record ...
»	T-020: Security Update for Adobe Reader 8 and Acrobat 8 Critical vulnerabilities have been identified in Adobe Reader and Acrobat 8.1.2 and earlier versions ...
»	T-019: libxml2 Vulnerability It was discovered that libxml2, the GNOME XML library, didn't correctly handle long entity names. T ...
»	T-018: Vulnerability in Server Service A remote code execution vulnerability exists in the Server service on Windows systems. The vulnerabi ...
»	T-017: Gear Software CD DVD Filter Vulnerability The Gear Software CD DVD Filter driver contains a privilege escalation vulnerability, which can allo ...
»	T-016: iseemedia / Roxio / MGI Software LPViewer ActiveX Vulnerabilities The iseemedia LPViewer ActiveX control contains multiple stack buffer overflows, which can allow a r ...
»	T-015: InstallShield / Macrovision / Acresso FLEXnet Connect Vulnerabilities Acresso FLEXnet Connect executes scripts that are insecurely retrieved from a remote web server, whi ...
»	CIACTech08-003: Understanding Cross-Site Scripting (XSS) Cross-Site Scripting has become an increasingly prevalent attack vector that can be leveraged to per ...
»	CIACTech08-002: Understanding Windows Hash Dumpers and Crackers Windows hash dumping tools are often spotlighted as hacker tools that can somehow magically extract ...
»	CIACTech08-001: Understanding PHP Exploits Many websites use the PHP programming language to build web pages on the fly from individual files a ...
»	CIACTech07-001: MOICE - Microsoft Office Isolated Conversion Environment A common cyber attack is to send a user an Office document (Word, Excel, PowerPoint) containing mal ...