SANS Unveils 2004&#39;s Top 20 Internet Vulnerabilities
454135
The security research group The SANS Institute on Friday released its annual Top 20 list of the most critical Internet-related vulnerabilities to give organizations a way to prioritize their defensive efforts.
719439
Company says affected servers were running old, unpatched versions of Ubuntu as well as a number of insecure Web applications.
178847
A bug in Microsoft&#39;s Internet Security and Acceleration (ISA) Server 2000 and Proxy Server 2.0 can let hackers spoof Web content, such as a trusted site, with their own fake content, the Redmond
435582
Blog: Updates address some critical vulnerabilities in the popular browser.
127768
Third-party fix plugs a recently discovered browser flaw that's increasingly being exploited in cyberattacks.
250864
A trio of new and unpatched vulnerabilities in Microsoft Windows were made public on security mailing lists over the weekend. By Gregg Keizer.
421777
Equal-opportunity hacking Polish security researcher Michal Zalewski, known for his seemingly unending stream of browser vulnerability discoveries, has struck again. This time he's reported four flaws that are sure to get the attention of bug squashers in both Microsoft and Mozilla camps.â¦
408189
The SANS (SysAdmin, Audit, Network, Security) Institute has issued its latest list of 20 most critical Internet security vulnerabilities. Web servers top the list of ten vulnerabilities for Windows-based systems, and they fall second on the list for those that are Unix- or Linux-based.
320458
Web servers may be vulnerable to attack, security company warns.
305434
A vulnerability, which has been detected in Microsoft&#39;s flagship Internet Explorer, can be exploited by malicious users to conduct cross-site scripting attacks.
30517
The first malicious codes to exploit security flaws in Microsoft Windows&#39; handling of jpeg image files has appeared on internet newsgroups.
517744
A vulnerability that McAfee Avert Labs first warned about last week is now being exploited in the wild, according to VeriSign&#39;s iDefense. At issue are embedded objects in Rich Text Format (RTF) files.
265180
Microsoft has released bulletin MS04-039 reporting a security vulnerability in Internet Security and Acceleration (ISA) Server 2000 and in Proxy Server 2.0, and has also announced the availability of the patches to resolve these issues.
635724
In a new post on his blog, Christian Wenz mentions the latest results of the SANS Institute's Top 20 Internet Security Attack Targets list which both includes a new entry ("Users") and several mentions of PHP and PHP-related applications.   Of course you can debate how such a Top list came together and what the real value behind that is, but there are two specific points in this year's list that I found quite interesting.   There's two targets for the PHP community to worry about - sysadmin/hosting and things developers need to keep in mind. Items on these lists include:  Always test and deploy patches and new versions of PHP as they are released Use Intrusion Prevention/Detection Systems to block/alert on malicious HTTP requests. Consider using Apache's mod_security to block known PHP attacks If you use PHP, migrate your application to PHP 5.2 as a matter of urgency. Encode all output using htmlentities() or a similar mechanism to avoid XSS attacks  You can check out the full information over on the SANS Institute website.
148612
Attackers can trick browsers into releasing password information.
721903
On 20 December 2004, a fast-moving Internet worm called Santy began attacking Web servers using the popular Google search engine. The Santy worm exploits a security vulnerability in phpBB, an open-source bulletin
44372
A flaw in the way the Firefox and Opera browsers handle an image file could allow an attacker to see what Web sites a person has visited.