Further Information

ESB-2004.0404 -- NGSSoftware Insight Security Research Advisory NISR11062004 -- REAL One Player code execution through malformed media file - (15/06/2004)

ESB-2004.0407 -- US-CERT Technical Cyber Security Alert TA04-163A -- Cross-Domain Redirect Vulnerability in Internet Explorer - A cross-domain vulnerability in Internet Explorer (IE) could allow an attacker to execute arbitrary code with the privileges of the user running IE. (15/06/2004)

ESB-2004.0402 -- UNIRAS ALERT - 25/04 -- Malicious Software Report - W32/Zafi.b - Reports are coming in of a new virus known as W32/Zafi.B. The indications are that the rate of infections being reported to antivirus suppliers is increasing. Some vendors have raised their threat assessment to MEDIUM. (15/06/2004)

ESB-2004.0392 -- Microsoft Security Bulletin MS04-016 -- Vulnerability in DirectPlay Could Allow Denial of Service - (09/06/2004)

ESB-2004.0352 -- Sun Alert Notification - Sun Alert ID: 57560 -- Java Secure Socket Extention (JSSE) May Incorrectly Validate Server Certificate - (19/05/2004)

ESB-2004.0348 -- Symantec Security Advisory -- Symantec Client Firewall Remote Access and Denial of Service Issues - (17/05/2004)

ESB-2004.0336 -- Microsoft Security Bulletin MS04-015 -- Vulnerability in Help and Support Center Could Allow Remote Code Execution (840374) - (12/05/2004)

ESB-2004.0335 -- Microsoft Security Bulletin MS04-014 (REVISED) -- Vulnerability in the Microsoft Jet Database Engine Could Allow Code Execution - (12/05/2004)

ESB-2004.0333 -- Sun Alert Notification - Sun Alert ID: 57555 -- Java Runtime Environment Remote Denial of Service(DoS) Vulnerability - (10/05/2004)

ESB-2004.0313 -- Apple Product Security Alert -- APPLE-SA-2004-04-30 QuickTime 6.5.1 - (04/05/2004)

AL-2004.14 -- WORM_SASSER.A - The W32.Sasser worm is known to exploit the Windows LSASS vulnerability, which is a buffer overrun that allows remote code execution and enables an attacker to gain full control of the affected system. (03/05/2004)

ESB-2004.0310 -- Trend Micro MEDIUM Risk Virus Alert -- WORM_NETSKY.AB and WORM_BAGLE.Z - (30/04/2004)

ESB-2004.0295 -- US-CERT Technical Cyber Security Alert TA04-111A -- Vulnerabilities in TCP - There is a vulnerability in TCP which allows remote attackers to terminate network sessions. Sustained exploitation of this vulnerability could lead to a denial of service condition. (22/04/2004)

AU-2004.008 -- AusCERT Update - Exploit Code Publicly Available For Microsoft Vulnerability MS04-011 - AusCERT advises that unverified exploit code has now been published for a recent vulnerability in Microsoft's IIS web server, which may result in the execution of arbitrary code with SYSTEM level privileges. (22/04/2004)

AL-2004.12 -- NISCC Vulnerability Advisory 236929 - Vulnerability Issues in TCP - There is a vulnerability in TCP which allows remote attackers to terminate network sessions. The Border Gateway Protocol (BGP) is judged to be potentially most affected by this vulnerability. (21/04/2004)

ESB-2004.0282 -- Macromedia Security Bulletin - MPSB 04-06 -- Security Patch available for ColdFusion MX 6.1 File Upload Denial of service - (16/04/2004)

ESB-2004.0278 -- US-CERT Technical Cyber Security Alert TA04-104A -- Multiple Vulnerabilities in Microsoft Products - (15/04/2004)

ESB-2004.0270 -- Microsoft Security Bulletin Re-releases -- MS00-082 MS01-041 MS02-011 MS03-046 - (14/04/2004)

ESB-2004.0269 -- Microsoft Security Bulletin MS04-014 -- Vulnerability in the Microsoft Jet Database Engine Could Allow Code Execution (837001) - (14/04/2004)

ESB-2004.0267 -- Microsoft Security Bulletin MS04-012 -- Cumulative Update for Microsoft RPC/DCOM (828741) - (14/04/2004)

ESB-2004.0266 -- Microsoft Security Bulletin MS04-011 -- Security Update for Microsoft Windows (835732) - (14/04/2004)

AA-2004.01 -- Recent Important Microsoft Vulnerabilities and Patches for Windows (LSASS) and Outlook Express - Microsoft has recently released security bulletins warning of several vulnerabilities most notable of these being those affecting the Local Security Authority Subsystem Service (LSASS) in Windows 2000 and Windows XP, and MHTML URL processing in Outlook Express. (14/04/2004)

ESB-2004.0268 -- Microsoft Security Bulletin MS04-013 -- Cumulative Security Update for Outlook Express (837009) - This is a cumulative update that includes the functionality of all the previously-released updates for Outlook Express 5.5 and Outlook Express 6. Microsoft recommends that this update be installed immediately on all systems. Any systems where e-mail is read or where Internet Explorer is used frequently are at the most risk from this vulnerability. (14/04/2004)

ESB-2004.0261 -- US-CERT Technical Cyber Security Alert TA04-099A -- Vulnerability in Internet Explorer ITS Protocol Handler - A cross-domain scripting vulnerability in Microsoft Internet Explorer (IE) could allow an attacker to execute arbitrary code with the privileges of the user running IE. This vulnerability is the same one discussed in AusCERT Update AU-2004.007. (09/04/2004)

ESB-2004.0260 -- NGSSoftware Insight Security Research Advisory -- REAL One Player R3T File Format Stack Overflow - (08/04/2004)

ESB-2004.0258 -- Foundstone Labs Advisory -- Citrix MetaFrame Password Manager 2.0 credentials not encrypted under certain configurations - (07/04/2004)

ESB-2004.0253 -- iDEFENSE Security Advisory 04.05.04 -- Perl win32_stat Function Buffer Overflow Vulnerability - (06/04/2004)

ESB-2004.0252 -- NGSSoftware Insight Security Research Advisory -- Nullsoft Winamp 'in_mod.dll' Heap Overflow - A buffer overflow vulnerability in the Winamp module 'in_mod.dll' may allow for the execution of arbitrary code. Winamp version 5.02 and prior are vulnerable. (06/04/2004)

ESB-2004.0248 -- Macromedia Security Bulletin - MPSB 04-05 -- Potential Risk in Dreamweaver Remote Database Connectivity - (05/04/2004)

AU-2004.007 -- AusCERT Update - Vulnerability in Internet Explorer Allows Program Execution - A vulnerability in the handling of "Windows Help" files by Internet Explorer allows the remote execution of arbitrary code on a local computer by a malicious web site. This vulnerability is currently being exploited against Australian users using the bogus bank email reported in AusCERT Alert AL-2004.10 (05/04/2004)

AL-2004.10 -- AUSCERT ALERT -- Bogus Banking Email Allows Trojan Infection for Outlook Users - A vulnerability in Microsoft Internet Explorer and Outlook Express is being used to trick online banking customers into visiting a malicious web site. The vulnerability[2] allows a URL to be spoofed by manipulating the information displayed in the status bar using an embedded form. (04/04/2004)

AL-2004.09 -- W32/Netsky.P@mm spreading with new attack methods - A new variant of the mass-mailing worm "Netsky" is spreading. The indications are that the rate of infections of W32/Netsky.P@mm being reported to antivirus suppliers is increasing. (23/03/2004)

ESB-2004.0216 -- UNIRAS ALERT - 12/04 -- Denial of Service Vulnerabilities in OpenSSL - Updated versions of OpenSSL are now available which correct three Denial of Service vulnerabilities. (18/03/2004)

ESB-2004.0214 -- Sun(sm) Alert Notification - Sun Alert ID: 57517 -- Sun Java System Application Server Denial-of-Service Vulnerability - (17/03/2004)

ESB-2004.0212 -- Macromedia Security Bulletin -- Security Patch available for ColdFusion MX and JRun 4.0 Web Services DoS - (16/03/2004)


Previous  1, 2, 3 ... 148, 149, 150, 151  Next denotes AusCERT member only content.