ep's blog

Microsoft Security Advisory (979352) Vulnerability in Internet Explorer Could Allow Remote Code Execution


This is the flaw that was key in the 'Operation Aurora' attack on Google
last week. There are several workarounds that could be employed to help
mitigate the attack.

Running with Internet zone set to High, running with Data Execution
Prevention (DEP) or not running Internet Explorer at all will help to
avoid this issue.

Top Ten Web Hacking Techniques of 2009 - Jeremiah Grossman


"The diversity, volume, and innovation of the research was impressive. Competition was as fierce as ever and the judges had their work cut out. Rich Mogull, Dinis Cruz, Chris Hoff, HD Moore, Billy Rios, Dan Kaminsky, Romain Gaucher, Steven Christey, Jeff Forristal, and Michal Zalewski were tasked with ranking the field based upon novelty, impact, and overall pervasiveness."

Vulnerabilities in Adobe Flash Player 6 Provided in Windows XP Could Allow Remote Code Execution


"Microsoft is aware of reports of vulnerabilities in Adobe Flash Player
6 provided in Windows XP. We are not aware of attacks that try to use
the reported vulnerabilities or of customer impact at this time but
recommend that users install the latest version of Flash Player provided
by Adobe."

MIT Kerberos AES and RC4 Decryption Integer Underflow Vulnerabilities


"MIT Kerberos is prone to multiple integer-underflow vulnerabilities
because it fails to properly handle malformed encrypted data.

Attackers can exploit these issues to execute arbitrary code with
SYSTEM-level privileges. Failed attacks will result in denial-of-service

Versions prior to Kerberos 5 1.6.4 and 1.7.1 are vulnerable."

FBI warns of Haitian Earthquake relief fund fraud


"The FBI today reminds Internet users who receive appeals to donate money in the aftermath of Tuesday's earthquake in Haiti to apply a critical eye and do their due diligence before responding to those requests."

As always, when natural disaster strikes, there are people who try to profit off of it.  For any place you donate to, make sure to check on them to make sure they are legit.  I like using the following resources before I donate.

Sun Java System Directory Server 'core_get_proxyauth_dn' Denial of Service Vulnerability


"Sun Java System Directory Server is prone to a denial-of-service

An attacker can exploit this issue to crash the effected application,
denying service to legitimate users.

Directory Server 7.0 is vulnerable; other versions may also be affected."

No patches have been released at this time.