SELinux Gets Easier - Beta Version of Tresys Brickwall(TM) Enterprise Client Now Available; Solution Provides Intuitive Interface for Configuring Linux Application Security
529793
Tresys Technology, a leader in network security technology and services, and a primary contributor to Security Enhanced Linux (SELinux), today released a beta version of its Tresys Brickwall(TM) Enterprise Client for Red Hat Enterprise Linux (RHEL).
554195
Sun Microsystems has disclosed a serious vulnerability in the Java Plug-in technology within the Software Developersâ Kit (SDK) and the Java Run-time Environment (JRE) that allows attackers to bypass the Java sandbox and Java applet security.ADVERTISEMENTSolaris 10(TM) OS: Position your business ten moves ahead.Solaris 10 OS has arrived and provides even more reasons for the world's most demanding businesses to operate on this, the leading UNIX platform. Like the fact you can run Linux and Solaris applications side-by-side and run the same OS on SPARC(R), AMD Opteron(TM), and Intel processor-based systems. Discover more reasons and how Solaris 10 OS can move your business ahead today.
250312
This might be a big geeky but my favorite UNIX directory is /etc.  Whats yours? /proc? /usr/local is pretty good?  There always good stuff in /var!  What about /tmp?
466917
This third and final article in the Metasploit series covers the msfcli scripting interface as well as the intuitive web interface to the Framework. The article also discusses what's new with version 2.2, and then introduces the exploit development process through an example.
549718
The eagerly-awaited Ubuntu Studio has been released, adding another entry into the expanding list of multimedia-optimized Linux distributions. I haven't had a chance to try it yet, but interested readers can peruse some installation screenshots or check out the latest news and information on the Ubuntu Studio Wiki. I plan to review the distro in a future column, along with an update on the latest version of the venerable PlanetCCRMA, but in this entry I'm focused on another very exciting new release. Ardour 2.0 is now available for download. This version is a significant improvement over the 0.99 series (1.0 was never released), with many new features and enhancements to performance and stability. The following article profiles the new Ardour as I employed it for three projects, all involving the program in the processes of composition and arranging as well as the more typical tasks of recording and editing. I've described each project in some detail, and each description includes a link to the final audio output.
287143
Latest PECL Releases:syck 0.9ps 1.3.5syck 0.9.1imagick 2.0.0b3
35985
Virtualized rootkits - Part 1 &gt;&gt; Advertisement &lt;&lt;  ALERT: "How A Hacker Launches A Blind SQL Injection Attack Step-by-Step"!" - White Paper  Blind SQL Injection can deliver total control of your server to a hacker giving them the ability to read, write and manipulate all data stored in your backend systems! Download this *FREE* white paper from SPI Dynamics for a complete guide to protection! https://download.spidynamics.com/1/ad/bsq.asp?Campaign_ID=701600000004c29
464075
Security researchers have uncovered "critical" security flaws in a version of the Linux kernel used by a large number of popular distributions.The three bugs allow unauthorized users to read or write to kernel memory locations or to access certain resources in certain servers, according to a SecurityFocus advisory.They could be exploited by malicious, local users to cause denial of service attacks, disclose potentially sensitive information, or gain "root" privileges, according to security experts.The bug affects all versions of the Linux kernel up to version 2.6.24.1, which contains a patch. Distributions such as Ubuntu, Turbolinux, SuSE, Red Hat, Mandriva, Debian and others are affected.The problems are within three functions in the system call fs/splice.c, according to an advisory from Secunia."In the 2.6.23 kernel, the system call functionality has been further extended resulting in ... critical vulnerabilities," said iSEC Security Research in an advisory.Secunia disagreed about the bugs' seriousness, giving them a less critical ranking.Exploit code for the vulnerabilities has been released publicly on the hacker site milw0rm.com, and Core Security Technologies has also developed a commercial exploit for the bugs, researchers said.Researchers advised system administrators to update their kernels immediately.Last month, a U.S. Department of Homeland Security bug-fixing scheme uncovered an average of one security glitch per 1,000 lines of code in 180 widely used open-source software projects.Secunia also previously discovered that the number of security bugs in open-source Red Hat Linux operating system and Firefox browsers, far outstripped comparable products from Microsoft last year.
620122
Sivar writes &quot;Ace&#39;s Hardware and news.com.com.com report Solaris that 10 has been released. Improvements include a performance-enhanced TCP-IP stack to shed the &quot;Slowaris&quot; moniker and their much-vaunted ZFS (Z File System).
275619
Travis Swicegood is teasing us with some output from a script in his latest blog post:   So my free time of late (what there is of it) has been spent on a project that's getting really close to v0.1 release. In other words, its first functional release. If you've ever run a test using the PEAR installer or know what a .phpt file looks like, you might be able to guess what I've been up.   Keep an eye on his blog for more information on his "secret project".
385776
This article begins a series of three articles dedicated to configuring Apache 2.0 with SSL/TLS support, in order to ensure maximum security and optimal performance of secure web communication. This part introduces key aspects of SSL/TLS and then shows how to compile and configure Apache 2.0 with support for these protocols.
150840
Backdoor drafts, security moms and up-armoring
661352
Ziff Davis - Vulnerabilities in LibTIFF and Xpdf could allow remote system compromise.
90388
A distributed multi-protocol load testing tool.
610973
This article discusses the use of Libwhisker, a PERL module which allows for the creation of custom HTTP packets and can be used for penetration  testing various web applications.
556302
IPCop is a friendly firewall solution protecting  networks running on linux. It will be geared towards home and SOHO users. Interface is task based. Hardware requirement could be very minimal and grow with services used.   IPCop v1.4.14 is released.  This release update timezone to support US daylight saving time occuring March 11 and mainly update squid and snort. You are encouraged to update from previous releases once some bugs introduced in 1.4.14 are fixed on 1.4.15.  There is bugs with: - snort rules update, - squid.conf, - ipsec vpn 1.4.15 will be released soon to fix this issue. You could fix the problem in command line with: for snort chown -R nobody:nobody /etc/snort chown nobody:nobody /var/ipcop/snort/settings for squid chown nobody:nobody /var/ipcop/proxy/squid.conf  With ipsec VPN, il is not possible to workaouround without recompiling ipsecctrl. Please report any other problem that would require to be fixed on 1.4.15.  To face the issue with timezone if you can't update fast to 1.4.14, a separate ipcop-1.4-tz2007c package could be installed on any 1.4 version manually It install only updated timezone files and zdump to control the effect. Look in release notes for details.  As usual, this version can be installed as an update from previous v1.4.x  versions or with a ready-to-go ISO or usb bootable images for a fresh install.  Files are available at https://sourceforge.net/project/showfiles.php?group_id=40604 Changelog and documentation are at http://www.ipcop.org
408694
Via this Secunia advisory posted today, there's information about the update the Fedora Linux group has made to the PHP package included in their distribution. According to the release:   This fixes some vulnerabilities, which can be exploited by malicious, local users to bypass certain security restrictions and by malicious people to bypass certain security restrictions and cause a DoS (Denial of Service).   The original advisory post has more details on what the update fixes as well as the link to download the RPM packages to update your system. You can either manually download them or use the "yum" system to handle things a bit more automatically.