Sans list warns of Unix version control risk
623164
New threats to Unix users include a widely used software development aid known as concurrent version control, according to the latest annual Sans Top 20 vulnerability report.
611203
Researchers' suggestions of using wormlike software to distribute patches draws security concerns.
87931
Latest worm poses a risk to many Web sites using the PHP scripting language.
92344
Blog: The most serious involves poisoned PDF files. The update also includes patches for Bind, Fetchmail, and GNU Screen.
501371
Ziff Davis - Security researchers at Immunity say they have discovered several vulnerabilities in Darwin, the Unix core of Mac OS X.
155358
Help! Flaws in an ActiveX component incorporated in many technical support support packages create a risk of hacking attacks, security watchers warn.â¦
363180
Floor by flaw The latest versions of Internet Explorer and Firefox on Windows and (in the case of Firefox) Unix systems are vulnerable to attacks that could reveal the contents of sensitive files residing on a victim's hard drives.â¦
7285
According to an advisory published on security firm Secuniaâs website, a critical vulnerability exists in Microsoft Word, which can be exploited by a malicious code to cause a DoS (Denial of Service) and potentially compromise a user&#39;s system.
464075
Security researchers have uncovered "critical" security flaws in a version of the Linux kernel used by a large number of popular distributions.The three bugs allow unauthorized users to read or write to kernel memory locations or to access certain resources in certain servers, according to a SecurityFocus advisory.They could be exploited by malicious, local users to cause denial of service attacks, disclose potentially sensitive information, or gain "root" privileges, according to security experts.The bug affects all versions of the Linux kernel up to version 2.6.24.1, which contains a patch. Distributions such as Ubuntu, Turbolinux, SuSE, Red Hat, Mandriva, Debian and others are affected.The problems are within three functions in the system call fs/splice.c, according to an advisory from Secunia."In the 2.6.23 kernel, the system call functionality has been further extended resulting in ... critical vulnerabilities," said iSEC Security Research in an advisory.Secunia disagreed about the bugs' seriousness, giving them a less critical ranking.Exploit code for the vulnerabilities has been released publicly on the hacker site milw0rm.com, and Core Security Technologies has also developed a commercial exploit for the bugs, researchers said.Researchers advised system administrators to update their kernels immediately.Last month, a U.S. Department of Homeland Security bug-fixing scheme uncovered an average of one security glitch per 1,000 lines of code in 180 widely used open-source software projects.Secunia also previously discovered that the number of security bugs in open-source Red Hat Linux operating system and Firefox browsers, far outstripped comparable products from Microsoft last year.
430013
Slashdot has a warning posted about the existence of a phishing scam directed toward Red Hat users. Read more to see the post. rixdaffy writes &quot;I just received an email from the &#39;Redhat Security Team&#39; telling
444532
Ten security flaws found in Firefox browser, Thunderbird e-mail client.
562926
A software vulnerability in some Cisco Systems Inc. routers and switches could allow an attacker to cause the devices to hang, the vendor warned this week.
331980
InfoWorld - A security researcher has found a serious vulnerability in an aging yet widely used software program used for the Internet&#39;s addressing system, prompting the software&#39;s maintainers to retire the affected version.
719439
Company says affected servers were running old, unpatched versions of Ubuntu as well as a number of insecure Web applications.
691931
Several major websites are brought down by the largest denial-of-service attacks ever staged. Compiled by Tony Long.
661352
Ziff Davis - Vulnerabilities in LibTIFF and Xpdf could allow remote system compromise.
83975
Three different ActiveX vulnerabilities affect Yahoo Instant Messenger version 3.5,  and Yahoo Messenger versions 4.0, 5.0, and 5.5