securityadmin's blog

Vulnerabilities in Adobe Flash Player 6 Provided in Windows XP Could Allow Remote Code Execution

http://www.microsoft.com/technet/security/advisory/979267.mspx

"Microsoft is aware of reports of vulnerabilities in Adobe Flash Player
6 provided in Windows XP. We are not aware of attacks that try to use
the reported vulnerabilities or of customer impact at this time but
recommend that users install the latest version of Flash Player provided
by Adobe."

MIT Kerberos AES and RC4 Decryption Integer Underflow Vulnerabilities

http://www.securityfocus.com/bid/37749

"MIT Kerberos is prone to multiple integer-underflow vulnerabilities
because it fails to properly handle malformed encrypted data.

Attackers can exploit these issues to execute arbitrary code with
SYSTEM-level privileges. Failed attacks will result in denial-of-service
conditions.

Versions prior to Kerberos 5 1.6.4 and 1.7.1 are vulnerable."

Sun Java System Directory Server 'core_get_proxyauth_dn' Denial of Service Vulnerability

http://www.securityfocus.com/bid/37699

"Sun Java System Directory Server is prone to a denial-of-service
vulnerability.

An attacker can exploit this issue to crash the effected application,
denying service to legitimate users.

Directory Server 7.0 is vulnerable; other versions may also be affected."

No patches have been released at this time.

Sun Java System Directory Server 'core_get_proxyauth_dn' Denial of Service Vulnerability

http://www.securityfocus.com/bid/37699

"Sun Java System Directory Server is prone to a denial-of-service
vulnerability.

An attacker can exploit this issue to crash the effected application,
denying service to legitimate users.

Directory Server 7.0 is vulnerable; other versions may also be affected."

No patches have been released at this time.

Open season on tax-payers

http://www.viruslist.com/en/weblog?weblogid=208188001

As tax season approaches, users should use caution when choosing their
online tax preparer. Some security analysts are predicting a surge of
malicious tax phishing sites targeted at stealing PII (Personally
Identifiable Information) which could lead to identity theft.

It is recommended to verify the URL in the location bar, and choose a
trusted Tax Preparation site.

Thanks,
ep

Open season on tax-payers

http://www.viruslist.com/en/weblog?weblogid=208188001

As tax season approaches, users should use caution when choosing their
online tax preparer. Some security analysts are predicting a surge of
malicious tax phishing sites targeted at stealing PII (Personally
Identifiable Information) which could lead to identity theft.

It is recommended to verify the URL in the location bar, and choose a
trusted Tax Preparation site.

Thanks,
ep

Pages