SecuriTeam http://www.securiteam.com Welcome to the SecuriTeam RSS Feed - sponsored by Beyond Security. Know Your Vulnerabilities! Visit BeyondSecurity.com for your web site, network and code security audit and scanning needs. en Copyright 1998-2008, SecuriTeam.com SecuriTeam.com http://www.securiteam.com/beyond-logo-small.png http://www.securiteam.com Motorola Timbuktu Pro Stack Based Buffer Overflow http://www.securiteam.com/securitynews/5XP0Q1PRFK.html Remote exploitation of a stack-based buffer overflow vulnerability in Motorola Inc.'s Timbuktu Pro could allow attackers to execute arbitrary code with SYSTEM privileges.]]> Remote exploitation of a stack-based buffer overflow vulnerability in Motorola Inc.'s Timbuktu Pro could allow attackers to execute arbitrary code with SYSTEM privileges.

-

Make your website safer. Use external penetration testing service. First report ready in one hour!

]]> http://www.securiteam.com/securitynews/5XP0Q1PRFK.html Fri, 26 Jun 2009 14:01 GMT Unisys Business Information Server Stack Buffer Overflow http://www.securiteam.com/securitynews/5VP0O1PRFO.html Remote exploitation of a stack based buffer overflow vulnerability in Unisys's Business Information Server could allow an attacker to execute arbitrary code with the privileges of the affected service.]]> Remote exploitation of a stack based buffer overflow vulnerability in Unisys's Business Information Server could allow an attacker to execute arbitrary code with the privileges of the affected service.

-

Make your website safer. Use external penetration testing service. First report ready in one hour!

]]> http://www.securiteam.com/securitynews/5VP0O1PRFO.html Fri, 26 Jun 2009 11:48 GMT Adobe Shockwave Player Director File Parsing Pointer Overwrite http://www.securiteam.com/securitynews/5SP0L1PRFQ.html This vulnerability allows remote attackers to execute code on vulnerable installations of Adobe's Shockwave Player. User interaction is required in that a user must visit a malicious web site.]]> This vulnerability allows remote attackers to execute code on vulnerable installations of Adobe's Shockwave Player. User interaction is required in that a user must visit a malicious web site.

-

Make your website safer. Use external penetration testing service. First report ready in one hour!

]]> http://www.securiteam.com/securitynews/5SP0L1PRFQ.html Fri, 26 Jun 2009 11:41 GMT Cisco Physical Access Gateway Denial of Service Vulnerability http://www.securiteam.com/securitynews/5ZP0S1PRFQ.html A denial of service (DoS) vulnerability exists in the Cisco Physical Access Gateway. There are no workarounds available to mitigate the vulnerability. This vulnerability has been corrected in Cisco Physical Access Gateway software version 1.1.]]> A denial of service (DoS) vulnerability exists in the Cisco Physical Access Gateway. There are no workarounds available to mitigate the vulnerability. This vulnerability has been corrected in Cisco Physical Access Gateway software version 1.1.

-

Make your website safer. Use external penetration testing service. First report ready in one hour!

]]> http://www.securiteam.com/securitynews/5ZP0S1PRFQ.html Thu, 25 Jun 2009 18:43 GMT Cisco ASA Web VPN Multiple Vulnerabilities http://www.securiteam.com/securitynews/5YP0R1PRFO.html The ASA's DOM wrapper can be rewritten in a manner to allow Cross-Site Scripting (XSS) attacks.]]> The ASA's DOM wrapper can be rewritten in a manner to allow Cross-Site Scripting (XSS) attacks.

-

Make your website safer. Use external penetration testing service. First report ready in one hour!

]]> http://www.securiteam.com/securitynews/5YP0R1PRFO.html Thu, 25 Jun 2009 14:56 GMT Netifera - Modular Open Source Platform for Security Tools http://www.securiteam.com/tools/5QP0B0KQUE.html -

Make your website safer. Use external penetration testing service. First report ready in one hour!

]]> http://www.securiteam.com/tools/5QP0B0KQUE.html Sun, 12 Apr 2009 14:01 GMT WarVOX - Tools for Exploring, Classifying, and Auditing Telephone Systems http://www.securiteam.com/tools/5RP012KQKA.html -

Make your website safer. Use external penetration testing service. First report ready in one hour!

]]> http://www.securiteam.com/tools/5RP012KQKA.html Mon, 09 Mar 2009 08:59 GMT Webshag - Web Server Audit Tool http://www.securiteam.com/tools/5QP0L0UQAI.html -

Make your website safer. Use external penetration testing service. First report ready in one hour!

]]> http://www.securiteam.com/tools/5QP0L0UQAI.html Mon, 23 Feb 2009 17:28 GMT Browser Fuzzer http://www.securiteam.com/tools/5OP0L00Q0Y.html -

Make your website safer. Use external penetration testing service. First report ready in one hour!

]]> http://www.securiteam.com/tools/5OP0L00Q0Y.html Tue, 20 Jan 2009 14:01 GMT FSpy - Linux Filesystem Activity Monitoring http://www.securiteam.com/tools/6D00V0ANFY.html -

Make your website safer. Use external penetration testing service. First report ready in one hour!

]]> http://www.securiteam.com/tools/6D00V0ANFY.html Wed, 31 Dec 2008 12:04 GMT Apple WebKit attr() Invalid Attribute Memory Corruption Vulnerability http://www.securiteam.com/unixfocus/5AP0T1PRFI.html This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple WebKit. User interaction is required to exploit this vulnerability in that the target must visit a malicious page.]]> This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple WebKit. User interaction is required to exploit this vulnerability in that the target must visit a malicious page.

-

Make your website safer. Use external penetration testing service. First report ready in one hour!

]]> http://www.securiteam.com/unixfocus/5AP0T1PRFI.html Thu, 25 Jun 2009 18:58 GMT Pivot Cross Site Scripting and HTML Injection http://www.securiteam.com/unixfocus/5JP0M1FRFK.html Pivot has been found to contain vulnerabilities in the following functions: url, menu, sort, check[], edituser, edit, blog, cat.]]> Pivot has been found to contain vulnerabilities in the following functions: url, menu, sort, check[], edituser, edit, blog, cat.

-

Make your website safer. Use external penetration testing service. First report ready in one hour!

]]> http://www.securiteam.com/unixfocus/5JP0M1FRFK.html Wed, 24 Jun 2009 11:40 GMT IBM AIX ToolTalk Database Server Buffer Overflow Vulnerability http://www.securiteam.com/unixfocus/5TP0N15RFO.html There exists a vulnerability within a function of the ToolTalk database server (rpc.ttdbserverd), which when properly exploited can lead to remote compromise of the vulnerable system.]]> There exists a vulnerability within a function of the ToolTalk database server (rpc.ttdbserverd), which when properly exploited can lead to remote compromise of the vulnerable system.

-

Make your website safer. Use external penetration testing service. First report ready in one hour!

]]> http://www.securiteam.com/unixfocus/5TP0N15RFO.html Mon, 22 Jun 2009 11:36 GMT Webmedia Explorer Cross Site Scripting Vulnerability http://www.securiteam.com/unixfocus/5JP0G2KRFS.html Webmedia Explorer's search, tag, bookmark parameters have been found to contain a security vulnerability that allows remote attackers to cause cross site scripting vulnerabilities.]]> Webmedia Explorer's search, tag, bookmark parameters have been found to contain a security vulnerability that allows remote attackers to cause cross site scripting vulnerabilities.

-

Make your website safer. Use external penetration testing service. First report ready in one hour!

]]> http://www.securiteam.com/unixfocus/5JP0G2KRFS.html Fri, 19 Jun 2009 10:17 GMT phpMyAdmin Code Injection http://www.securiteam.com/unixfocus/5IP0F2KRFS.html This vuln can only be exploited against environments where the administrator has chosen to install phpMyAdmin following the *wizard* method, rather than manual method.]]> This vuln can only be exploited against environments where the administrator has chosen to install phpMyAdmin following the *wizard* method, rather than manual method.

-

Make your website safer. Use external penetration testing service. First report ready in one hour!

]]> http://www.securiteam.com/unixfocus/5IP0F2KRFS.html Fri, 19 Jun 2009 10:16 GMT Microsoft Office Excel Malformed Records Stack Buffer Overflow (MS09-021) http://www.securiteam.com/windowsntfocus/5WP0P1PRFM.html A remotely exploitable vulnerability has been discovered in Microsoft Office Excel products. Specifically, the vulnerability is due to a design error encountered when parsing Excel files which contain malformed records. Remote attackers can exploit this vulnerability by enticing target users to open a malicious Excel file.]]> A remotely exploitable vulnerability has been discovered in Microsoft Office Excel products. Specifically, the vulnerability is due to a design error encountered when parsing Excel files which contain malformed records. Remote attackers can exploit this vulnerability by enticing target users to open a malicious Excel file.

-

Make your website safer. Use external penetration testing service. First report ready in one hour!

]]> http://www.securiteam.com/windowsntfocus/5WP0P1PRFM.html Thu, 25 Jun 2009 14:01 GMT Microsoft Excel Record Parsing Array Indexing Vulnerability (MS09-021) http://www.securiteam.com/windowsntfocus/5IP0L1FRFO.html Microsoft Excel can be exploited through an array-indexing error when processing certain records. This can be exploited to corrupt memory via a specially crafted Excel file. Successful exploitation may allow execution of arbitrary code.]]> Microsoft Excel can be exploited through an array-indexing error when processing certain records. This can be exploited to corrupt memory via a specially crafted Excel file. Successful exploitation may allow execution of arbitrary code.

-

Make your website safer. Use external penetration testing service. First report ready in one hour!

]]> http://www.securiteam.com/windowsntfocus/5IP0L1FRFO.html Thu, 25 Jun 2009 11:38 GMT Microsoft Excel String Parsing Integer Overflow Vulnerability (MS09-021) http://www.securiteam.com/windowsntfocus/5UP0N1PRFK.html The vulnerability is caused due to an integer overflow error when processing the number of strings in a file and can be exploited to cause a heap-based buffer overflow via a specially crafted Excel file. Successful exploitation allows execution of arbitrary code.]]> The vulnerability is caused due to an integer overflow error when processing the number of strings in a file and can be exploited to cause a heap-based buffer overflow via a specially crafted Excel file. Successful exploitation allows execution of arbitrary code.

-

Make your website safer. Use external penetration testing service. First report ready in one hour!

]]> http://www.securiteam.com/windowsntfocus/5UP0N1PRFK.html Mon, 22 Jun 2009 11:45 GMT libpurple MSN Protocol SLP Message Heap Overflow Vulnerability http://www.securiteam.com/windowsntfocus/5GP0D2KRFS.html This vulnerability allows remote attackers to execute arbitrary code on systems with vulnerable installations of messaging applications that make use of the libpurple library. User interaction is not required to exploit this vulnerability.]]> This vulnerability allows remote attackers to execute arbitrary code on systems with vulnerable installations of messaging applications that make use of the libpurple library. User interaction is not required to exploit this vulnerability.

-

Make your website safer. Use external penetration testing service. First report ready in one hour!

]]> http://www.securiteam.com/windowsntfocus/5GP0D2KRFS.html Fri, 19 Jun 2009 10:14 GMT CA ARCserve Backup Message Engine Denial of Service Vulnerabilities http://www.securiteam.com/windowsntfocus/5EP0C20RFS.html CA ARCserve Backup contains multiple vulnerabilities in the message engine that can allow a remote attacker to cause a denial of service.]]> CA ARCserve Backup contains multiple vulnerabilities in the message engine that can allow a remote attacker to cause a denial of service.

-

Make your website safer. Use external penetration testing service. First report ready in one hour!

]]> http://www.securiteam.com/windowsntfocus/5EP0C20RFS.html Wed, 17 Jun 2009 16:07 GMT Sun Java System Identiy Manager Users Enumeration http://www.securiteam.com/exploits/5EP0F0UQUO.html -

Make your website safer. Use external penetration testing service. First report ready in one hour!

]]> http://www.securiteam.com/exploits/5EP0F0UQUO.html Mon, 13 Apr 2009 15:36 GMT Microsoft Internet Explorer XML Buffer Overflow (Exploit) http://www.securiteam.com/exploits/6V00L2ANFS.html -

Make your website safer. Use external penetration testing service. First report ready in one hour!

]]> http://www.securiteam.com/exploits/6V00L2ANFS.html Sun, 28 Dec 2008 07:45 GMT Opera file:// Overflow http://www.securiteam.com/exploits/6X00E2AN5M.html -

Make your website safer. Use external penetration testing service. First report ready in one hour!

]]> http://www.securiteam.com/exploits/6X00E2AN5M.html Tue, 18 Nov 2008 19:49 GMT Stack-Based Buffer Overflow in the Network Manager of Castle Rock Computing (SNMPc) http://www.securiteam.com/exploits/6F00E0KN5O.html -

Make your website safer. Use external penetration testing service. First report ready in one hour!

]]> http://www.securiteam.com/exploits/6F00E0KN5O.html Wed, 12 Nov 2008 20:51 GMT PacketTrap TFTPD DoS http://www.securiteam.com/exploits/6T00L2KMUI.html -

Make your website safer. Use external penetration testing service. First report ready in one hour!

]]> http://www.securiteam.com/exploits/6T00L2KMUI.html Wed, 29 Oct 2008 09:24 GMT Why Silent Updates Boost Security http://www.securiteam.com/securityreviews/5NP0E00R5A.html -

Make your website safer. Use external penetration testing service. First report ready in one hour!

]]> http://www.securiteam.com/securityreviews/5NP0E00R5A.html Sun, 10 May 2009 18:35 GMT PDF Silent HTTP Form Repurposing Attacks http://www.securiteam.com/securityreviews/5MP0D00R5G.html -

Make your website safer. Use external penetration testing service. First report ready in one hour!

]]> http://www.securiteam.com/securityreviews/5MP0D00R5G.html Sun, 10 May 2009 18:29 GMT Frame Pointer Overwrite Demonstration (Linux) http://www.securiteam.com/securityreviews/6M0010UNFQ.html -

Make your website safer. Use external penetration testing service. First report ready in one hour!

]]> http://www.securiteam.com/securityreviews/6M0010UNFQ.html Wed, 03 Dec 2008 16:24 GMT Format String Exploitation Demonstration (Linux) http://www.securiteam.com/securityreviews/6E0030KNFO.html -

Make your website safer. Use external penetration testing service. First report ready in one hour!

]]> http://www.securiteam.com/securityreviews/6E0030KNFO.html Tue, 02 Dec 2008 16:22 GMT Hacking SOHO Routers http://www.securiteam.com/securityreviews/6D00C0KN5S.html -

Make your website safer. Use external penetration testing service. First report ready in one hour!

]]> http://www.securiteam.com/securityreviews/6D00C0KN5S.html Wed, 12 Nov 2008 17:54 GMT