SANS unveils Top 20 security vulnerabilities
24345
IT security and research organization The SANS Institute is set to release its annual Top 20 list of Internet security vulnerabilities on Friday, with the intention of offering organizations at least a starting point for addressing critical issues.
507569
InfoWorld - On Aug. 14, IT security training and research authority SANS Institute will convene its inaugural set of exams for software developers seeking to attain its new secure coding certifications. The rise of such initiatives -- and increasing adoption of source code vulnerability scanning tools among internal software development teams -- are finally making a difference in overall applications security, some end users and industry experts contend.
726659
(InfoWorld) - Security experts are warning of a zero-day vulnerability withÂ Sun Microsystems' SolarisÂ 10 and 11 OSes. Exploit code has been posted on the Internet, and no special tools are required to take advantage of it, according to an advisory from the SANS Institute. The problem lies within Telnet, a networking protocol. The Telnet daemon -- a process that runs in the background and waits for another Telnet client to connect -- can allow a hacker to log in without a password. SANS suggests a couple of solutions: disable Telnet or limit the IP (Internet Protocol) addresses that can connect to Telnet through the firewall. In the past, SANS has warned that using Telnet poses a risk because data transferred between clients may not be encrypted. Telnet is also a frequent target for port scanners. "In my opinion, no one should be running Telnet open to the Internet," wrote Donald Smith of SANS. Â
541400
Microsoft today released a dozen security updates to fix a score of vulnerabilities in various products, including a "critical" patch for its own security software.
605863
com staff. Danish security firm Secunia has reported a &quot;moderately critical&quot; window injection vulnerability in Firefox, Internet Explorer, Opera, Netscape, Safari and Konqueror.
142347
p2pnet.net News:- Windows XP Service Pack 2 (SP2) has ten unpatched vulnerabilities, says Finjan Software. &quot;Microsoft, however, ardently disputed the claims and said that they were &#39;potentially misleading and possibly erroneous&#39;,&quot; says a TechWeb story.
472677
Zero-day flaw, which is could let attacker gain remote access to a system, affects Word 2000, 2002 and 2003 and Word Viewer 2003.
663829
The FrSIRT site has posted a new advisory for users of the Vivvo Article Management CMS software about potential holes that could allow for some very large-scale damage to be done.    Multiple vulnerabilities have been identified in Vivvo Article Management CMS, which could be exploited by remote attackers to compromise a vulnerable server.   The first issue is due to an input validation error in the "pdf_version.php" script that does not validate the "id" parameter before being used in SQL statements, which could be exploited by malicious people to conduct SQL injection attacks.   The second vulnerability is due to an input validation error in the "index.php" script that do not validate the "classified_path" parameter, which may be exploited by remote attackers to include local or remote scripts with the privileges of the web server.    Versions 3.2 and higher of the software are effected, and, unfortunately, there has been no patch issued for the issue.
640592
PC Magazine - The update addresses at least nine high-risk vulnerabilities affecting Windows, Mac and Linux machines.
745940
InfoWorld - The SANS Internet Storm Center on Friday raised its threat level to yellow after observing an increase in the number of Internet-based attempts to exploit a zero-day vulnerability discovered earlier in the week.
86222
In brief Exploit circulating for unpatched vuln
111115
Blog: The most serious vulnerabilities allow attackers to run code on compromised machines.
549959
Microsoft Corp. today released an unprecedented number of software security updates to plug flaws in its products, including seven &quot;critical&quot; defects that it said hackers could use to hijack
15069
Security researchers discover a serious vulnerability in older version of ICQ IM software.
58134
Mozilla Foundation releases new versions of two browsers and an e-mail reader, addressing vulnerabilities that could allow attackers to run malicious code on a user's PC.
203799
Microsoft Corp. today released a dozen software patches to cover 16 security flaws -- half of which it deemed "critical" -- in all versions of the Windows operating system and a broad range of popular Microsoft applications such as its Internet chat and media player products.
376860
Security advisory service Secunia said that it has discovered a highly critical vulnerability in Microsoft Word 2000 and 2002 that can be exploited to cause a denial of service attack and compromise a user&#39;s system.