Further Information

ESB-2004.0483 -- iDEFENSE Security Advisory 08.02.04 -- Netscape/Mozilla SOAPParameter Constructor Integer Overflow Vulnerability - (05/08/2004)

ESB-2004.0482 -- US-CERT Technical Cyber Security Alert TA04-217A -- Multiple Vulnerabilities in libpng - (05/08/2004)

ESB-2004.0485 -- Sun Alert Notification - Sun Alert ID: 57613 -- Java Runtime Environment May Allow Untrusted Applets to Escalate Privileges - (05/08/2004)

AL-2004.23 -- User Interface Spoofing in Mozilla and Firefox - A working proof of concept code has now been published for a vulnerability in all versions of Mozilla and Firefox. This exploit code could be utilised to facilitate identify fraud (aka "phishing") which may capture sensitive account details. (04/08/2004)

ESB-2004.0453 -- iDEFENSE Security Advisory 07.12.04 -- Adobe Reader 6.0 Filename Handler Buffer Overflow Vulnerability - (13/07/2004)

ESB-2004.0452 -- CIAC BULLETIN REVISED O-101 -- OpenSSL Denial of Service Vulnerability - (13/07/2004)

ESB-2004.0451 -- CIAC BULLETIN O-174 -- Ethereal Multiple Problems in 0.10.4 - (12/07/2004)

ESB-2004.0446 -- NGSSoftware Insight Security Research Advisory -- MySQL Authentication Bypass - This advisory details a bug that allows a remote user to entirely bypass the MySQL password authentication mechanism. (06/07/2004)

ESB-2004.0440 -- iDEFENSE Security Advisory 06.21.04 -- GNU Radius SNMP Invalid OID Denial of Service Vulnerability - (05/07/2004)

ESB-2004.0428 -- US-CERT Technical Cyber Security Alert TA04-174A -- Multiple Vulnerabilities in ISC DHCP 3 - Two vulnerabilities in the ISC DHCP allow a remote attacker to cause a denial of the DHCP service on a vulnerable system. It may be possible to exploit these vulnerabilities to execute arbitrary code on the system. (23/06/2004)

ESB-2004.0419 -- iDEFENSE Security Advisory 06.08.04 -- Squid Web Proxy Cache NTLM Authentication Helper Buffer Overflow Vulnerability - (17/06/2004)

ESB-2004.0378 -- MIT krb5 Security Advisory 2004-001 -- buffer overflows in krb5_aname_to_localname - (02/06/2004)

AL-2004.15 -- CVS Heap Overflow Vulnerability - A heap overflow vulnerability in the Concurrent Versions System (CVS) could allow a remote attacker to execute arbitrary code on a vulnerable system. (28/05/2004)

ESB-2004.0352 -- Sun Alert Notification - Sun Alert ID: 57560 -- Java Secure Socket Extention (JSSE) May Incorrectly Validate Server Certificate - (19/05/2004)

ESB-2004.0295 -- US-CERT Technical Cyber Security Alert TA04-111A -- Vulnerabilities in TCP - There is a vulnerability in TCP which allows remote attackers to terminate network sessions. Sustained exploitation of this vulnerability could lead to a denial of service condition. (22/04/2004)

AL-2004.12 -- NISCC Vulnerability Advisory 236929 - Vulnerability Issues in TCP - There is a vulnerability in TCP which allows remote attackers to terminate network sessions. The Border Gateway Protocol (BGP) is judged to be potentially most affected by this vulnerability. (21/04/2004)

AL-2004.11 -- Exploit activity targeting academic computing resources - AusCERT has received reports of attackers specifically targeting high performance computing resources at educational and research organisations. (16/04/2004)

ESB-2004.0216 -- UNIRAS ALERT - 12/04 -- Denial of Service Vulnerabilities in OpenSSL - Updated versions of OpenSSL are now available which correct three Denial of Service vulnerabilities. (18/03/2004)

ESB-2004.0204 -- HP SECURITY BULLETIN HPSBMA01003 -- SSRT4679 - HP Web-enabled Management Software certificate compromise using HP HTTP Server - (15/03/2004)

AU-2004.006 -- AusCERT Update - Exploit activity for Linux kernel memory management problem via mremap() - AusCERT advises that working exploit code has been published for the Linux kernel memory management code inside the mremap(2) system call. (27/02/2004)

ESB-2004.0117 -- The Samba Team -- Samba 3.0.2 Security Bug-Fixes - It has been confirmed that previous versions of Samba 3.0 are susceptible to a password initialization bug that could grant an attacker unauthorized access to a user account created by the mksmbpasswd.sh shell script. (11/02/2004)

ESB-2004.0116 -- iDEFENSE Security Advisory 02.10.04 -- XFree86 Font Information File Buffer Overflow - Exploitation of a buffer overflow in The XFree86 Project Inc.'s XFree86 X Window System allows local attackers to gain root privileges. (11/02/2004)

ESB-2004.0096 -- iDEFENSE Security Advisory 02.04.04 -- GNU Radius Remote Denial of Service Vulnerability - (05/02/2004)

ESB-2004.0002 -- CVS Security Bulletin -- Possible root Compromise in Concurrent Versions System (CVS) - (05/01/2004)

ESB-2003.0855 -- Ethereal Security Advisory -- Security problems in Ethereal 0.9.16 - (16/12/2003)

ESB-2003.0850 -- bind-announce -- BIND 8.4.3 deprecated - (12/12/2003)

AL-2003.24 -- rsync Security Advisory - The rsync team has received evidence that a vulnerability in rsync was recently used in combination with a Linux kernel vulnerability to compromise the security of a public rsync server. (05/12/2003)

ESB-2003.0820 -- GnuPG Security Advisory -- GnuPG's ElGamal signing keys compromised - (28/11/2003)

ESB-2003.0819 -- ISC Announcement - BIND 8.4.3 maintenance release -- Security Fix: Negative Cache Poison Fix - BIND DNS server version 8.4.3 is available, fixing a Negative Cache Poison vulnerability which may allow a remote attacker to cause a denial of service for specific domains. (28/11/2003)

ESB-2003.0814 -- CERT Summary -- CERT Summary CS-2003-04 - (25/11/2003)

ESB-2003.0774 -- RHSA-2003:323-01 -- Updated Ethereal packages fix security issues - (11/11/2003)

ESB-2003.0698 -- CERT Advisory CA-2003-26 -- Multiple Vulnerabilities in SSL/TLS Implementations - (03/10/2003)

ESB-2003.0687 -- CERT Advisory Notice -- Clarifications regarding recent vulnerabilities in OpenSSH - Clarifications regarding several recent vulnerabilities affecting OpenSSH (30/09/2003)

AL-2003.17 -- Sendmail prescan() buffer overflow vulnerability - New sendmail buffer overflow vulnerability that could allow a remote attacker to execute arbitrary code (potentially as root) or cause a denial of service. (18/09/2003)

AL-2003.16 -- Buffer Management Vulnerability in OpenSSH - Sites running OpenSSH prior to 3.7, and any implementations of code derived from OpenSSH prior to 3.7, to evaluate their exposure to this vulnerabilities and to apply the vendor patches, and/or network filters as deemed necessary. (17/09/2003)


Previous  1, 2, 3 ... 150, 151, 152, 153  Next denotes AusCERT member only content.