Zero-day Flaw in Solaris Allows Remote Attacks
342998
Security experts are warning of a zero-day vulnerability with Sun Microsystems Inc.'s Solaris 10 and 11 OSes.
694818
According to the security company, the flaws mean that &quot;attackers can silently and remotely take over an SP2 machine when the user simply browses a web page&quot;.
464075
Security researchers have uncovered "critical" security flaws in a version of the Linux kernel used by a large number of popular distributions.The three bugs allow unauthorized users to read or write to kernel memory locations or to access certain resources in certain servers, according to a SecurityFocus advisory.They could be exploited by malicious, local users to cause denial of service attacks, disclose potentially sensitive information, or gain "root" privileges, according to security experts.The bug affects all versions of the Linux kernel up to version 2.6.24.1, which contains a patch. Distributions such as Ubuntu, Turbolinux, SuSE, Red Hat, Mandriva, Debian and others are affected.The problems are within three functions in the system call fs/splice.c, according to an advisory from Secunia."In the 2.6.23 kernel, the system call functionality has been further extended resulting in ... critical vulnerabilities," said iSEC Security Research in an advisory.Secunia disagreed about the bugs' seriousness, giving them a less critical ranking.Exploit code for the vulnerabilities has been released publicly on the hacker site milw0rm.com, and Core Security Technologies has also developed a commercial exploit for the bugs, researchers said.Researchers advised system administrators to update their kernels immediately.Last month, a U.S. Department of Homeland Security bug-fixing scheme uncovered an average of one security glitch per 1,000 lines of code in 180 widely used open-source software projects.Secunia also previously discovered that the number of security bugs in open-source Red Hat Linux operating system and Firefox browsers, far outstripped comparable products from Microsoft last year.
70700
A remote attacker could take complete control over computers running many versions of Microsoft software by inserting malicious code in a JPEG image that executes through an unchecked buffer
632100
The IcePack hacker exploit toolkit has three new tools in its collection, including one that targets a zero-day flaw in Microsoft's DirectX software development kit.
620122
Sivar writes &quot;Ace&#39;s Hardware and news.com.com.com report Solaris that 10 has been released. Improvements include a performance-enhanced TCP-IP stack to shed the &quot;Slowaris&quot; moniker and their much-vaunted ZFS (Z File System).
35985
Virtualized rootkits - Part 1 &gt;&gt; Advertisement &lt;&lt;  ALERT: "How A Hacker Launches A Blind SQL Injection Attack Step-by-Step"!" - White Paper  Blind SQL Injection can deliver total control of your server to a hacker giving them the ability to read, write and manipulate all data stored in your backend systems! Download this *FREE* white paper from SPI Dynamics for a complete guide to protection! https://download.spidynamics.com/1/ad/bsq.asp?Campaign_ID=701600000004c29
376456
Vulnerability, rated as highly critical, could enable an attacker to compromise a user's machine.
554195
Sun Microsystems has disclosed a serious vulnerability in the Java Plug-in technology within the Software Developersâ Kit (SDK) and the Java Run-time Environment (JRE) that allows attackers to bypass the Java sandbox and Java applet security.ADVERTISEMENTSolaris 10(TM) OS: Position your business ten moves ahead.Solaris 10 OS has arrived and provides even more reasons for the world's most demanding businesses to operate on this, the leading UNIX platform. Like the fact you can run Linux and Solaris applications side-by-side and run the same OS on SPARC(R), AMD Opteron(TM), and Intel processor-based systems. Discover more reasons and how Solaris 10 OS can move your business ahead today.
38008
Vulnerabilities could allow attackers to gain remote control of a system, security company says.
297722
(InfoWorld) - A new worm targeting a flaw in Sun Microsystems Inc.'s Solaris 10 OS delivers crude artsy payloads, including a drawing of a turkey in ASCII text. The use of an ASCII drawing by a hacker is "a bit old school," said Graham Cluley, senior technology consultant for Sophos PLC. The worm -- called Unix/Froot-A or Wanuk -- takes advantage of a zero-day flaw that was patched by Sun three days after exploit code was published last month. The vulnerability lies within the Telnet daemon, a process that runs in the background and waits for another Telnet client to connect, which can allow a hacker to log in without a password. An attacker could eventually gain complete control over the machine. The worm scans port 23 to see if Telnet is running, then sends data to exploit the vulnerability, Cluley said. Infected computers then scan for more vulnerable machines, he said. The drawings -- some of which are more offensive than the turkey -- can appear on the monitors of other machines connected to the infected machine, Cluley said. Sophos hasn't heard of any companies being affected. Users of Solaris are advised to apply the patch and disable Telnet, Cluley said. Â
52789
The flaw exploited by the most recent versions of the worm such as Santy.C or Santy.E is more general than the original, and can occur anywhere a site designer has left the door open for the inclusion of arbitrary files into PHP scripts, reports IDG News
472677
Zero-day flaw, which is could let attacker gain remote access to a system, affects Word 2000, 2002 and 2003 and Word Viewer 2003.
164678
If you were expecting a sneak peak of an open source Solaris or to buy the new commercial version next week, don&#39;t hold your breath.
565269
Sun Microsystems Inc. has patched a critical bug that could let attackers take control of Solaris 10 systems by sending simple commands to the Telnet daemon.
590366
Virtualized rootkits - Part 2 &gt;&gt; Advertisement &lt;&lt;  ALERT: "How A Hacker Launches A Blind SQL Injection Attack Step-by-Step"!" - White Paper  Blind SQL Injection can deliver total control of your server to a hacker giving them the ability to read, write and manipulate all data stored in your backend systems! Download this *FREE* white paper from SPI Dynamics for a complete guide to protection! https://download.spidynamics.com/1/ad/bsq.asp?Campaign_ID=701600000004c29
682593
(InfoWorld) - A new version of the IcePack hacker exploit tool kit has been released, security researchers warned Tuesday, and for the first time it includes attack code designed to exploit an unpatched, or zero-day, Microsoft vulnerability. Three of IcePack's eight exploit tools are new, said Roger Thompson, chief technology officer at Exploit Prevention Labs. That's noteworthy in and of itself, Thompson said. "The mix of old and new exploits is to be expected, but three new ones in one update is pretty impressive," he noted. But the new tool kit also sports a first. "The latest iteration has done something original," said Thompson, pointing to an exploit that attacks a zero-day vulnerability in Microsoft's DirectX software development kit (SDK). "The closest to a tool-kit zero-day exploit [before] was for the ANI [animated cursor] vulnerability." He was referring to a Windows bug that surfaced in early April. By the time that Mpack, an IcePack predecessor, added the ANI exploit, however, Microsoft had patched the vulnerability with an emergency out-of-cycle update. The DirectX SDK bug was disclosed by Polish researcher Krystian Kloskowski in a post to the milw0rm.com site in mid-August. Microsoft did not release a fix for the flaw in the regularly scheduled updates issued earlier Tuesday. IcePack is only one of several click-to-attack malware tool kits in circulation. Derived from the earlier Mpack, IcePack joins others boasting monikers such as NeoSploit and WebAttacker that cater to what Thompson called "lazy crooks." "Originally there was just WebAttacker, but they screwed up and then NeoSploit came along," Thompson said as he rattled off the exploit tool kit genealogy. "Then there was Mpack, which everyone at first thought was just WebAttacker, but it wasn't. Now there's IcePack." He estimated that nine to 12 malware tool kits are currently in use. "They all use very similar code, and they're all trying to make a buck out of selling to lazy crooks," said Thompson. Even though the just-updated IcePack features the first zero-day attack code seen in a malware kit, Thompson downplayed the threat. Sort of. "This is not an end-of-the-world kind of thing, since not many people will have the [DirectX] SDK. But no one knows what other software packages use that [vulnerable] ActiveX control. It's a little like Russian roulette that way." Other researchers confirmed Thompson's assessment. Symantec, for instance, warned customers of its DeepSight threat network that it had spotted in-the-wild attacks using the DirectX exploit. Symantec's researchers also confirmed that the other two exploits new to IcePack target vulnerabilities in Yahoo Messenger and Yahoo Widgets. Both of those bugs, however, have been patched. Taking aim at patched vulnerabilities is a common characteristic of multistrike kits, even though it might seem counterintuitive, said Thompson. "They usually go after lesser-known vulnerabilities," he said.