Further Information

ESB-2007.0212 -- [Win][UNIX/Linux] -- Multiple Vendor ImageMagick DCM and XWD Buffer Overflow Vulnerabilities - (03/04/2007)

AU-2007.0011 -- AusCERT Update - [Win] - New worms exploiting the Animated Cursor vulnerability - Reports have been published regarding new worms exploiting the Windows Animated Cursor vulnerability. (02/04/2007)

AU-2007.0010 -- AusCERT Update - [Win] - Updated information relating to Microsoft Windows Animated Cursor vulnerability - Microsoft has confirmed that restricting viewing email in plain text will not protect against the Animated Cursor vulnerability in Outlook Express. (30/03/2007)

AA-2007.0021 -- [Win][UNIX/Linux] -- Multiple browsers handling of PASV FTP responses may allow port scanning - (28/03/2007)

AA-2007.0020 -- [Win] -- Multiple vulnerabilities in various OPC Server implementations - Two sever implementations of the OPC (OLE for Process Control) specification have been found to contain vulnerabilities. (27/03/2007)

ESB-2007.0197 -- [Win][Linux] -- DataRescue IDA Pro Remote Debugger Server Authentication Bypass Vulnerability - (26/03/2007)

ESB-2007.0189 -- [Win][UNIX/Linux][Debian] -- New openafs packages fix remote privilege escalation bug - (22/03/2007)

ESB-2007.0188 -- [Win][UNIX/Linux][Debian] -- New OpenOffice.org packages fix several vulnerabilities - (22/03/2007)

ESB-2007.0181 -- [Win][UNIX/Linux][Cisco] -- Cisco Security Response: Cross-Site Scripting Vulnerability in Online Help System - A cross-site scripting (XSS) vulnerability in the online help system distributed with several Cisco products has been reported to Cisco. This would allow an attacker to execute arbitrary scripting code in a user's web browser if the attacker is successful in enticing the user to follow a specially crafted, malicious URL. (20/03/2007)

ESB-2007.0178 -- [Win][UNIX/Linux] -- New patches fix vulnerabilities in ColdFusion MX 7 and JRun 4 - (20/03/2007)

ESB-2007.0172 -- [Win] -- Trend Micro Antivirus UPX Parsing Kernel Divide by Zero Vulnerability - (15/03/2007)

AA-2007.0018 -- [Win][UNIX/Linux] -- MySQL 5.0.37 released - (13/03/2007)

AL-2007.0033 -- [Win] -- "Your new password" and "Hot Australian News" trojan emails - AusCERT has observed emails with subject lines of "Hot Australian News" and "Your new password" which contain malicious links. A user visiting these links may be infected with a malicious program. (13/03/2007)

AU-2007.0008 -- AusCERT Update - [Win][UNIX/Linux] - Firefox 2.0.0.1 and 1.5.0.9 additional vulnerability allows remote compromise - This most recently disclosed vulnerability can not be mitigated by turning off JavaScript. (08/03/2007)

ESB-2007.0149 -- [Win] -- Microsoft Windows Explorer fails to properly handle malformed OLE documents - The vulnerability is triggered by accessing a folder containing a specially crafted Office document. The complete impact of this memory corruption vulnerability is not clear, but may potentially include execution of arbitrary code. (08/03/2007)

ESB-2007.0143 -- [Win][UNIX/Linux] -- GnuPG and GnuPG clients unsigned data injection vulnerability - An attacker may prepend or append arbitrary content to an existing signed message. The recipient using a mail client cannot tell that this is not a genuine signed message with signature covering all content. (06/03/2007)

ESB-2007.0141 -- [Win][UNIX/Linux][RedHat] -- Thunderbird security update - (05/03/2007)

AL-2007.0029 -- [Win] -- Citrix Presentation Server Client for Windows vulnerability allows remote compromise - A remote attacker may execute arbitrary code when the user visits a malicious web page. (02/03/2007)

ESB-2007.0132 -- [Win][UNIX/Linux] -- Server and client software using NSS SSL libraries vulnerable to remote compromise - Both the server and client SSLv2 code contains buffer overflow vulnerabilities. This library is used by third party products including Sun ONE Application Server and Sun Java System Web Server. (26/02/2007)

ESB-2007.0131 -- [Win] -- Google Desktop remote cross-site scripting vulnerability - (26/02/2007)

ESB-2007.0130 -- [Win][UNIX/Linux][RedHat] -- Critical: seamonkey security update - (26/02/2007)

AL-2007.0028 -- [Win][UNIX/Linux] -- Critical: Firefox security update - Firefox 2.0.0.2 and 1.5.0.10 have been released fixing serious vulnerabilities with impacts including remote code execution. (26/02/2007)

ESB-2007.0128 -- [Win] -- Multiple Vendor SupportSoft SmartIssue ActiveX Control Buffer Overflow Vulnerability - (23/02/2007)

ESB-2007.0127 -- [Win][Linux][Solaris] -- Security Vulnerability in RSA Signature Verification Affects Java 2 Platform, Standard Edition - (22/02/2007)

AA-2007.0010 -- [Win][UNIX/Linux] -- Inappropiate access to JBoss application server management functionality - A vulnerability in the JBoss application server has been publicly disclosed. Successful exploitation of this vulnerability may result in unauthenticated access to administrive functions of the JBoss server. (21/02/2007)

AA-2007.0009 -- [Win] -- Vulnerability in Trend Micro OfficeScan - (20/02/2007)

AU-2007.0006 -- AusCERT Update - [Win] - Variations on the "Prime Minister heart attack" trojan run - AusCERT has observed additional variations of yesterday's "Prime Minister heart attack" trojan. (19/02/2007)

AL-2007.0027 -- [Win][UNIX/Linux] -- Vulnerability in Snort DCE/RPC Preprocessor - A serious vulnerability has been disclosed in the Snort IDS, which may result in the remote execution of arbitrary code. (19/02/2007)

ESB-2007.0118 -- [Win][UNIX/Linux] -- Snort: Denial of Service - (19/02/2007)

AA-2007.0008 -- [Win] -- Vulnerability in utorrent may allow the remote execution of code - A flaw in processing of .torrent files may allow a remote attacker to execute arbitrary code. (19/02/2007)

ESB-2007.0050 -- [Win][UNIX/Linux] -- Vulnerabilities in BIND 9 may allow remote Denial of Service - (19/02/2007)

ESB-2007.0774 -- [Win][Linux][HP-UX] -- HP System Management Homepage (SMH) Remote Cross Site Scripting (XSS) - (18/02/2007)

AL-2007.0026 -- [Win] -- "Prime Minister heart attack" trojan - AusCERT has observed malicious emails which claim to link to a news article about the Prime Minister of Australia suffering from a heart attack. (18/02/2007)

ESB-2007.0115 -- [Win][UNIX/Linux] -- Multiple Vendor ClamAV CAB File Denial of Service Vulnerability - (16/02/2007)

AL-2007.0025 -- [Win] -- New unpatched Microsoft Word vulnerability - A new unpatched vulnerability has been reported in Microsoft Word 2000 and XP that allows a remote attacker to execute arbitrary code. (16/02/2007)


Previous  1, 2, 3 ... 112, 113, 114, 115  Next denotes AusCERT member only content.