Serious Flaw Kills Bind 8 Domain Server Software
500878
Users of the widely-used addressing system software are urged to update to Bind 9.2.
291753
Apache and the Domino Effect Poor configuration of Apache servers allowed multiple websites hosted on the same physical server to become infected in last month's Mpack compromise.â¦
424439
10.3.7 fixes bugs, fills security holes
78443
Flaw in the way the Net phone software handles Web links could enable an attacker to launch arbitrary code on some Macs.
300950
Update addresses potential denial-of-service vulnerabilities as well as a flaw in QuickTime.
349775
A new class at Vulnerability High Flaws in ActiveX controls are being increasingly used to run security exploits.â¦
150857
Microsoft describes unpatched flaw that could corrupt PC memory and allow intruders.
444532
Ten security flaws found in Firefox browser, Thunderbird e-mail client.
347402
In this new post on the PHP Security Blog, Stefan Esser brings up an interesting issue when dealing with web applications - being able to bind a script/application to a different port on the local machine.   Unfortunately the ability to bind yourself to a port and receive connections is a threat to webapplications installed on different virtual hosts on the same IP, even if other security measures in place, like tight filesystem permissions or executing PHP script with the permission of the owner.   He gives an example in PHP of how this can happen and one of the scary side effects of having it in the same domain - the cookie information is passed in. It's a simple concept that could have very bad consequences in the wrong hands.    Additionally, you don't even have to create it in PHP either. As cyberlot mentions, it could be created in any language that has socket functions. Be sure to check out the comments for more thoughts and comments on the post.
295779
Blog: Low ransom request and a self-termination date on the code suggest this is a test attack.
42081
Blog: Popular add-ons could have their update process hijacked by man-in-the-middle attacks.
155358
Help! Flaws in an ActiveX component incorporated in many technical support support packages create a risk of hacking attacks, security watchers warn.â¦
338253
A flaw in Microsoft&#39;s security server software could allow an attacker to fool business users into thinking that malicious content can be trusted, the software giant warned on Tuesday.
406027
Microsoft ISA and Proxy Server are prone to an Internet domain name spoofing vulnerability that could allow an attacker to spoof Internet sites.
769056
New software addresses a vulnerability that allowed previous versions to crash and execute arbitrary code.
472677
Zero-day flaw, which is could let attacker gain remote access to a system, affects Word 2000, 2002 and 2003 and Word Viewer 2003.
386657
Company's eTrust software detects a Windows file as a virus and deletes it, causing some servers to crash and fail to reboot.