HD Moore of Metasploit has tested a serious problem with Debian-based implementations — including Knoppix, Finnix, Mepis, Ubuntu and its derivatives, et al. — dating to September 17, 2006, of OpenSSL due to removal of code that was responsible for seeding random number generation (which is used to calculate encryption keys). This makes random number [...]
lucky13
web technologies, open source, and security
linux 2.6 vulnerability watch
Secunia Advisories
- [3/5] ScriptsEz Easy Image Downloader "id" File Disclosure Vulnerability
- [3/5] Built2go Real Estate Listings "event_id" SQL Injection
- [4/5] Sun Java System Web Proxy Server FTP Subsystem Buffer Overflow
- [3/5] Red Hat update for cups
- [4/5] DFF PHP Framework API "DFF_config[dir_include]" File Inclusion Vulnerabilities
- [1/5] FUJITSU Interstage Products Apache Tomcat Security Bypass
- [3/5] Apple Mac OS X Security Update Fixes Multiple Vulnerabilities
- [3/5] Fedora update for condor
- [3/5] CUPS Multiple Vulnerabilities
- [1/5] Gentoo Portage Insecure Python Module Search Path Security Issue
- [3/5] Fedora update for ruby
- [1/5] Fedora update for dbus
Secunia Watchdog
- Secunia is part of a nation-wide campaign for promoting patching
- One Stop Exploit Shop
- A new face - The same reliable intelligence
- Secunia PSI reaches 500,000 users
- Secunia NSI 2.0 Final Release - try it for free
- Free Public Beta test of Secunia NSI version 2
- When does poor design become a vulnerability?
- A rough 24 hours for Windows users - 81.01% affected
- Secunia PSI Reaches Milestone
- Interesting Statistics from the Secunia PSI
US CERT
- TA08-260A: Apple Updates for Multiple Vulnerabilities
- TA08-253A: Microsoft Updates for Multiple Vulnerabilities
- TA08-225A: Microsoft Updates for Multiple Vulnerabilities
- TA08-193A: Sun Java Updates for Multiple Vulnerabilities
- TA08-190B: Multiple DNS implementations vulnerable to cache poisoning
- TA08-190A: Microsoft Updates for Multiple Vulnerabilities
- TA08-189A: Microsoft Office Snapshot Viewer ActiveX Vulnerability
- TA08-162B: Microsoft Updates for Multiple Vulnerabilities
- TA08-162C: Apple Quicktime Updates for Multiple Vulnerabilities
- TA08-162A: SNMPv3 Authentication Bypass Vulnerability
FrSIRT Linux Advisories
- FrSIRT - SuSE Security Update Fixes Mozilla Code Execution Vulnerabilities
- FrSIRT - Debian Security Update Fixes Iceweasel Code Execution Vulnerabilities
- FrSIRT - Debian Security Update Fixes Mon Insecure Temporary File Issue
- FrSIRT - Redhat Security Update Fixes Condor Buffer Overflow Security Bypass
- FrSIRT - Redhat Security Update Fixes Kernel Security Bypass and DoS Issues
- FrSIRT - Gentoo Security Update Fixes WordNet Code Execution Vulnerabilities
- FrSIRT - SuSE Security Update Fixes Multiple Security Bypass Vulnerabilities
- FrSIRT - Fedora Security Update Fixes MediaWiki Cross Site Scripting Issue
- FrSIRT - Debian Security Update Fixes PHP5 Buffer Overflow and DoS Issues
- FrSIRT - Debian Security Update Fixes Squid Denial of Service Vulnerability
CNET Security News
- World Bank under cyberattack?
- Video: Daily Debrief: Web 2.0 casualties?
- High-tech bank robbers phone it in
- Apple's October update fixes 20 security flaws
- Microsoft to issue 11 security patches on Tuesday
- Parity provides free online identity management
- Symantec eyes pay-per-use software
- Being smart about Web mail
- How botnets use 'bullet-proof' domains
- Former 'cyberczar' goes corporate
Blogroll
Links
Support...
