::C-BIT Information-Center : Test Newsfeed cache and homogenisizer : 07.09.2010 19:13 (visited: 76.057 times) http://www.c-bit.net/frame.news-feed/ Nachrichten nicht nur aus der Welt der Computer de Verschiedenes Tue, 07 Sep 2010 17:13:58 GMT self-written PHP4-source Vuln: Kayako eSupport "s_query" Parameter HTML Injection Vulnerability http://www.securityfocus.com/bid/37563 Fri, 31 Dec 2010 11:26:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Vuln: Xerox WorkCentre PJL Daemon Buffer Overflow Vulnerability http://www.securityfocus.com/bid/38010 Fri, 31 Dec 2010 11:22:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Vuln: Discuz! "referer" Parameter Cross Site Scripting Vulnerability http://www.securityfocus.com/bid/37562 Fri, 31 Dec 2010 10:05:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Vuln: Joomla! "com_rsgallery2" Component "catid" Parameter SQL Injection Vulnerability http://www.securityfocus.com/bid/38009 Fri, 31 Dec 2010 09:07:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Vuln: Joomla! "com_countries" Component "locat" Parameter SQL Injection Vulnerability http://www.securityfocus.com/bid/37561 Fri, 31 Dec 2010 08:17:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Vuln: "com_abbrev" Joomla! Component "controller" Parameter Local File Include Vulnerability http://www.securityfocus.com/bid/37560 Fri, 31 Dec 2010 07:23:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Vuln: TYPO3 Diocese of Portsmouth Calendar Unspecified SQL Injection Vulnerability http://www.securityfocus.com/bid/37618 Wed, 15 Dec 2010 01:14:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Vuln: Mundi Mail Multiple Remote Command Execution Vulnerabilities http://www.securityfocus.com/bid/41957 Tue, 07 Sep 2010 21:24:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Sony sperrt PS3-Hacks aus http://www.heise.de/security/meldung/Sony-sperrt-PS3-Hacks-aus-1074590.html/from/atom10 Tue, 07 Sep 2010 16:50:00 GMT Heise Security Heise Security Bugtraq: Security problems in Zenphoto version 1.3 http://www.securityfocus.com/archive/1/513525 Tue, 07 Sep 2010 16:24:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: [USN-983-1] Sudo vulnerability http://www.securityfocus.com/archive/1/513519 Tue, 07 Sep 2010 16:24:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: XSS in Horde Application Framework http://www.securityfocus.com/archive/1/513512 Tue, 07 Sep 2010 15:03:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: Re: KeePass version 2.12 http://www.securityfocus.com/archive/1/513513 Tue, 07 Sep 2010 15:03:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: [ GLSA 201009-03 ] sudo: Privilege Escalation http://www.securityfocus.com/archive/1/513516 Tue, 07 Sep 2010 15:03:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: [TEHTRI-Security Training + 0days] "Hunting Web Attackers" at HITBSecConf http://www.securityfocus.com/archive/1/513514 Tue, 07 Sep 2010 15:03:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Vuln: Todd Miller Sudo Runas Group Local Privilege Escalation Vulnerability http://www.securityfocus.com/bid/43019 Tue, 07 Sep 2010 15:03:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Vuln: DynPage "dynpage_load.php" Local File Disclosure Vulnerability http://www.securityfocus.com/bid/43018 Tue, 07 Sep 2010 13:15:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Microsoft stellt SteadyState ein http://www.heise.de/security/meldung/Microsoft-stellt-SteadyState-ein-1074066.html/from/atom10 Tue, 07 Sep 2010 10:22:00 GMT Heise Security Heise Security ACTA: Neuer Entwurf an die Öffentlichkeit geraten http://www.datenschutz.de/news/detail/?nid=4480 07.09.2010 - Eine neuere an die Öffentlichkeit geratene Entwurfsfassung des Anti Counterfeiting Trade Agreement (ACTA) enthält weiterhin Bestimmungen, die Netzsperren nach dem [...] Tue, 07 Sep 2010 10:20:02 GMT Virtuelles Datenschutzbuero Virtuelles Datenschutzbuero Ziercke für Wiedereinführung der Vorratsdatenspeicherung http://www.datenschutz.de/news/detail/?nid=4481 07.09.2010 - Bundeskriminalamtspräsident (BKA) Jörg Ziercke betreibt weiterhin Lobby-Arbeit für die Wiedereinführung der Vorratsdatenspeicherung von Telekommunikationsverkehrsdaten. "60 Prozent der Ermittlungen gehen ins Leere" [...] Tue, 07 Sep 2010 10:20:02 GMT Virtuelles Datenschutzbuero Virtuelles Datenschutzbuero Google einigt sich außergerichtlich zu Privatsphärenverstößen bei "Buzz" http://www.datenschutz.de/news/detail/?nid=4479 07.09.2010 - Google hat eine Klage wegen des Dienstes "Buzz", der den E-Mail-Dienst Google Mail zu einem sozialen Netzwerk erweiterte, außergerichtlich beigelegt. [...] Tue, 07 Sep 2010 09:53:02 GMT Virtuelles Datenschutzbuero Virtuelles Datenschutzbuero Armeechef sieht Cyberwar als größte Gefahr für die Schweiz http://www.heise.de/security/meldung/Armeechef-sieht-Cyberwar-als-groesste-Gefahr-fuer-die-Schweiz-1073851.html/from/atom10 Tue, 07 Sep 2010 09:22:00 GMT Heise Security Heise Security Vuln: Weborf HTTP "modURL()" Function Directory Traversal Vulnerability http://www.securityfocus.com/bid/43016 Tue, 07 Sep 2010 09:12:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Scareware jetzt mit Browser-Weiche http://www.heise.de/security/meldung/Scareware-jetzt-mit-Browser-Weiche-1073681.html/from/atom10 Tue, 07 Sep 2010 07:55:00 GMT Heise Security Heise Security Vuln: Quagga bgpd Route-Refresh Message Stack Buffer Overflow Vulnerability http://www.securityfocus.com/bid/42635 Mon, 06 Sep 2010 21:03:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Vuln: Quagga bgpd Null Pointer Deference Denial Of Service Vulnerability http://www.securityfocus.com/bid/42642 Mon, 06 Sep 2010 21:03:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Vuln: Oracle MySQL Prior to 5.1.49 "DDL" Statements Denial Of Service Vulnerability http://www.securityfocus.com/bid/42643 Mon, 06 Sep 2010 15:12:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Vuln: Oracle MySQL "HANDLER" interface Denial Of Service Vulnerability http://www.securityfocus.com/bid/42633 Mon, 06 Sep 2010 15:12:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Vuln: Oracle MySQL Prior to 5.1.49 "JOIN" Statement Denial Of Service Vulnerability http://www.securityfocus.com/bid/42646 Mon, 06 Sep 2010 15:12:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Vuln: phpMyAdmin Multiple Cross Site Scripting Vulnerabilities http://www.securityfocus.com/bid/42584 Mon, 06 Sep 2010 14:18:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Internet Explorer: Datenklau durch zwei Jahre alte Lücke http://www.heise.de/security/meldung/Internet-Explorer-Datenklau-durch-zwei-Jahre-alte-Luecke-1073060.html/from/atom10 Mon, 06 Sep 2010 13:25:00 GMT Heise Security Heise Security DSA-2104 quagga - several vulnerabilities http://www.debian.org/security/2010/dsa-2104 Several remote vulnerabilities have been discovered in the BGP implementation of Quagga, a routing daemon. Mon, 06 Sep 2010 12:36:01 GMT Debian-Sicherheit Debian-Sicherheit TR/Kryptik.FU http://www.avira.com/de/threats/section/details/id_vir/5538/tr_kryptik_fu.html Danger Level: Low to Medium Threat VDF Version: 7.10.11.70 Erstellt am: Mon, 06 Sep 2010 13:13 +0200 Complete description for this threat can be found hier . Mon, 06 Sep 2010 11:13:02 GMT Avira Avira Flash-Player als Spionagesystem http://www.heise.de/security/meldung/Flash-Player-als-Spionagesystem-1073058.html/from/atom10 Mon, 06 Sep 2010 10:41:00 GMT Heise Security Heise Security Vuln: Python "PySys_SetArgv" Remote Command Execution Vulnerability http://www.securityfocus.com/bid/40862 Mon, 06 Sep 2010 10:15:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities BKA und Bitkom: 17 Millionen Euro Schäden durch Phishing http://www.heise.de/security/meldung/BKA-und-Bitkom-17-Millionen-Euro-Schaeden-durch-Phishing-1073002.html/from/atom10 Mon, 06 Sep 2010 09:55:00 GMT Heise Security Heise Security Stadler: Verfallsdatum für Informationen in sozialen Netzwerken? http://www.datenschutz.de/news/detail/?nid=4477 06.09.2010 - Justizstaatssekretär Max Stadler (FDP) hat ein Verfallsdatum für Daten in sozialen Netzwerken angeregt, wie heise online und ORF Futurezone berichten. Nach [...] Mon, 06 Sep 2010 07:47:01 GMT Virtuelles Datenschutzbuero Virtuelles Datenschutzbuero Offenes soziales Netzwerk Diaspora soll im Oktober in Testbetrieb gehen http://www.datenschutz.de/news/detail/?nid=4478 06.09.2010 - Das offene soziale Netzwerk Diaspora soll im Herbst im Testbetrieb starten, wie ORF Futurezone berichtet. Am 15. September soll der [...] Mon, 06 Sep 2010 07:47:01 GMT Virtuelles Datenschutzbuero Virtuelles Datenschutzbuero BayLfD: Google Analytics - Datenschutzverstoß durch zahlreiche bayer. Behörden http://www.datenschutz.de/news/detail/?nid=4475 06.09.2010 - Der Bayerische Landesbeauftragte für den Datenschutz, Dr. Thomas Petri, hat heute zahlreiche bayerische Behörden aufgefordert, auf den Einsatz von Google [...] Mon, 06 Sep 2010 07:47:01 GMT Virtuelles Datenschutzbuero Virtuelles Datenschutzbuero Google vereinfacht Datenschutzbestimmungen http://www.datenschutz.de/news/detail/?nid=4476 06.09.2010 - Google will seine Datenschutzerklärungen vereinfachen, wie heise online berichtet. Insgesamt sollen 12 Dienst-spezifische Datenschutzerklärungen gestrichen werden. Bisher sind die Datenschutzbestimmungen für [...] Mon, 06 Sep 2010 07:20:02 GMT Virtuelles Datenschutzbuero Virtuelles Datenschutzbuero Vuln: FreeType Stack Buffer Overflow and Memory Corruption Vulnerabilities http://www.securityfocus.com/bid/42285 Mon, 06 Sep 2010 07:06:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities DSA-2103 smbind - sql injection http://www.debian.org/security/2010/dsa-2103 It was discovered that smbind, a PHP-based tool for managing DNS zones for BIND, does not properly validating input. An unauthenticated remote attacker could execute arbitrary SQL commands or gain access to the admin account. Sun, 05 Sep 2010 00:36:02 GMT Debian-Sicherheit Debian-Sicherheit DSA-2102 barnowl - unchecked return value http://www.debian.org/security/2010/dsa-2102 It has been discovered that in barnowl, a curses-based instant-messaging client, the return codes of calls to the ZPending and ZReceiveNotice functions in libzephyr were not checked, allowing attackers to cause a denial of service (crash of the application), and possibly execute arbitrary code. Fri, 03 Sep 2010 20:24:01 GMT Debian-Sicherheit Debian-Sicherheit Vuln: HP-UX Software Distributor Unspecified Local Privilege Escalation Vulnerability http://www.securityfocus.com/bid/42755 Fri, 03 Sep 2010 20:09:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: Re: Re: IIS5.1 Directory Authentication Bypass by using ?:$I30:$Index_Allocation? http://www.securityfocus.com/archive/1/513503 Fri, 03 Sep 2010 19:14:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Vuln: KSP ".m3u" File Buffer Overflow Vulnerability http://www.securityfocus.com/bid/42069 Fri, 03 Sep 2010 19:14:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Vuln: Apache "mod_proxy_http" 2.2.9 for Unix Timeout Handling Information Disclosure Vulnerability http://www.securityfocus.com/bid/42102 Fri, 03 Sep 2010 18:20:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: [security bulletin] HPSBMA02572 SSRT100082 rev.1 - HP Operations Agent Running on Windows, Local Elevation of Privileges and Remote Execution of Arbitrary Code http://www.securityfocus.com/archive/1/513492 Fri, 03 Sep 2010 16:05:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: [ MDVSA-2010:170 ] wget http://www.securityfocus.com/archive/1/513493 Fri, 03 Sep 2010 16:05:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: [SECURITY] [DSA-2102-1] New barnowl packages fix arbitrary code execution http://www.securityfocus.com/archive/1/513495 Fri, 03 Sep 2010 16:05:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: VUPEN Security Research - Google Chrome Focus Processing Memory Corruption Vulnerability (VUPEN-SR-2010-249) http://www.securityfocus.com/archive/1/513494 Fri, 03 Sep 2010 16:05:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities EGMR: GPS-Überwachung in Deutschland rechtens http://www.datenschutz.de/news/detail/?nid=4473 03.09.2010 - Der Europäische Gerichtshof für Menschenrechte (EGMR) hat die GPS-Überwachung im strafrechtlichen Ermittlungsverfahren in Deutschland für rechtens erklärt, wie heise online [...] Fri, 03 Sep 2010 15:25:01 GMT Virtuelles Datenschutzbuero Virtuelles Datenschutzbuero ACTA: Unterzeichnung noch im September? http://www.datenschutz.de/news/detail/?nid=4474 03.09.2010 - Das Anti-Piraterie-Abkommen Anti-Counterfeiting Trade Agreement (ACTA) soll anscheinend noch in diesem Monat beschlossen werden, wie Netzpolitik.org berichtet. Die von Geheimniskrämerei umgebenden [...] Fri, 03 Sep 2010 15:25:01 GMT Virtuelles Datenschutzbuero Virtuelles Datenschutzbuero Vuln: Trend Micro Internet Security Pro ActiveX Control Remote Code Execution Vulnerability http://www.securityfocus.com/bid/42717 Fri, 03 Sep 2010 14:17:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities TR/Renos.AB.4 http://www.avira.com/de/threats/section/details/id_vir/5537/tr_renos_ab_4.html Danger Level: Low Threat VDF Version: 7.10.11.65 Erstellt am: Fri, 03 Sep 2010 13:28 +0200 Complete description for this threat can be found hier . Fri, 03 Sep 2010 11:28:01 GMT Avira Avira Microsoft-Härtungstool mit grafischer Oberfläche http://www.heise.de/security/meldung/Microsoft-Haertungstool-mit-grafischer-Oberflaeche-1072007.html/from/atom10 Fri, 03 Sep 2010 11:06:00 GMT Heise Security Heise Security Vuln: Adobe Flash Player and AIR (CVE-2010-2214) Unspecified Memory Corruption Vulnerability http://www.securityfocus.com/bid/42358 Fri, 03 Sep 2010 09:20:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Vuln: Linux Kernel Controller Area Network Protocol Local Privilege Escalation Vulnerability http://www.securityfocus.com/bid/42585 Fri, 03 Sep 2010 07:05:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Vuln: phpMyAdmin Debug Backtrace Cross Site Scripting Vulnerability http://www.securityfocus.com/bid/42874 Thu, 02 Sep 2010 18:02:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Vuln: PDF-XChange Viewer "wintab32.dll" DLL Loading Arbitrary Code Execution Vulnerability http://www.securityfocus.com/bid/42858 Thu, 02 Sep 2010 17:08:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Chrome 6 ist erschienen http://www.heise.de/security/meldung/Chrome-6-ist-erschienen-1071648.html/from/atom10 Thu, 02 Sep 2010 16:15:00 GMT Heise Security Heise Security Bugtraq: [USN-982-1] Wget vulnerability http://www.securityfocus.com/archive/1/513482 Thu, 02 Sep 2010 16:14:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: [ MDVSA-2010:169 ] mozilla-thunderbird http://www.securityfocus.com/archive/1/513484 Thu, 02 Sep 2010 16:14:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: Vulnerabilities in CMS WebManager-Pro http://www.securityfocus.com/archive/1/513485 Thu, 02 Sep 2010 16:14:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: {PRL} Novell Netware OpenSSH Remote Stack Overflow http://www.securityfocus.com/archive/1/513483 Thu, 02 Sep 2010 16:14:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Datenschutz aus erster Hand http://www.datenschutz.de/news/detail/?nid=4471 02.09.2010 - Der Landesbeauftragte für den Datenschutz Rheinland-Pfalz: Datenschutz aus erster Hand "Mit Datenschützern lernen" unter diesem Motto startete der Landesbeauftragte für den [...] Thu, 02 Sep 2010 14:40:01 GMT Virtuelles Datenschutzbuero Virtuelles Datenschutzbuero Kontroverse Diskussion zum Entwurf eines Beschäftigtendatenschutzgesetzes http://www.datenschutz.de/news/detail/?nid=4472 02.09.2010 - Der Landesbeauftragte für den Datenschutz Rheinland-Pfalz: Kontroverse Diskussion zum Entwurf eines Beschäftigtendatenschutzgesetzes In Anwesenheit von Herrn Ministerpräsident Kurt Beck diskutierten am Abend [...] Thu, 02 Sep 2010 14:40:01 GMT Virtuelles Datenschutzbuero Virtuelles Datenschutzbuero Vuln: Microsoft Windows Media Encoder 9 DLL Loading Arbitrary Code Execution Vulnerability http://www.securityfocus.com/bid/42855 Thu, 02 Sep 2010 12:11:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Wireshark mit zahlreichen Verbesserungen http://www.heise.de/security/meldung/Wireshark-mit-zahlreichen-Verbesserungen-1071390.html/from/atom10 Thu, 02 Sep 2010 12:06:00 GMT Heise Security Heise Security TR/Renos.AT http://www.avira.com/de/threats/section/details/id_vir/5536/tr_renos_at.html Danger Level: Low Threat VDF Version: 7.10.11.68 Erstellt am: Thu, 02 Sep 2010 13:51 +0200 Complete description for this threat can be found hier . Thu, 02 Sep 2010 11:51:01 GMT Avira Avira Vuln: PGP Desktop DLL Loading Arbitrary Code Execution Vulnerability http://www.securityfocus.com/bid/42856 Thu, 02 Sep 2010 11:17:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities TR/Fakealert.MA.591 http://www.avira.com/de/threats/section/details/id_vir/5535/tr_fakealert_ma_591.html Danger Level: Low to Medium Threat VDF Version: 7.10.09.190 Erstellt am: Thu, 02 Sep 2010 12:55 +0200 Complete description for this threat can be found hier . Thu, 02 Sep 2010 10:55:01 GMT Avira Avira TR/Agent.321536 http://www.avira.com/de/threats/section/details/id_vir/5534/tr_agent_321536.html Danger Level: Low Threat VDF Version: 7.10.11.65 Erstellt am: Thu, 02 Sep 2010 12:33 +0200 Complete description for this threat can be found hier . Thu, 02 Sep 2010 10:33:01 GMT Avira Avira Vuln: dBpowerAMP Audio Player M3U Buffer Overflow Vulnerability http://www.securityfocus.com/bid/27635 Thu, 02 Sep 2010 10:23:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Kanada: Datenschutz- und Informationsfreiheitsbeauftragte für Open Government http://www.datenschutz.de/news/detail/?nid=4470 02.09.2010 - Die kanadischen Datenschutz- und Informationsfreiheitsbeauftragten sprechen sich in einer Resolution für Open Government aus. "Regierungen rund um die Welt erkennen den [...] Thu, 02 Sep 2010 09:16:02 GMT Virtuelles Datenschutzbuero Virtuelles Datenschutzbuero Vuln: WebKit "use" Element Handling Remote Memory Corruption Vulnerability http://www.securityfocus.com/bid/42041 Thu, 02 Sep 2010 09:02:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Vuln: WebKit JavaScript Array Signedness Error Remote Code Execution Vulnerability http://www.securityfocus.com/bid/42045 Thu, 02 Sep 2010 09:02:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Vuln: WebKit Regular Expression Handling Remote Memory Corruption Vulnerability http://www.securityfocus.com/bid/42042 Thu, 02 Sep 2010 09:02:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Kommissionsvorschläge für EU-USA-Datenschutzabkommen http://www.datenschutz.de/news/detail/?nid=4469 02.09.2010 - In der EU wird zur Zeit über ein allgemeines Datenschutzabkommen mit den USA für die Übermittlung von personenbezogenen Daten zur [...] Thu, 02 Sep 2010 08:49:01 GMT Virtuelles Datenschutzbuero Virtuelles Datenschutzbuero PKS: Mit Vorratsdatenspeicherung weniger Internet-Delikten als ohne aufgeklärt http://www.datenschutz.de/news/detail/?nid=4468 02.09.2010 - Die im Jahr 2009 durchgeführte Vorratsdatenspeicherung von Interneteinwahlen und E-Mails hat nicht zu einer gestiegenen Aufklärungsquote bei Internetdelikten geführt, wie [...] Thu, 02 Sep 2010 08:22:01 GMT Virtuelles Datenschutzbuero Virtuelles Datenschutzbuero 13 Lücken in iTunes geschlossen http://www.heise.de/security/meldung/13-Luecken-in-iTunes-geschlossen-1071109.html/from/atom10 Thu, 02 Sep 2010 08:11:00 GMT Heise Security Heise Security Vuln: Red Hat lvm2-cluster "clvmd" Local Privilege Escalation Vulnerability http://www.securityfocus.com/bid/42033 Thu, 02 Sep 2010 07:14:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Vuln: Fedora SSSD LDAP Unauthenticated Bind Security Bypass Vulnerability http://www.securityfocus.com/bid/42757 Thu, 02 Sep 2010 07:14:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Vuln: Fedora SSSD Kerberos Authentication Security Bypass Vulnerability http://www.securityfocus.com/bid/37747 Thu, 02 Sep 2010 00:20:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Vuln: Wireshark 0.10.8 to 1.0.14 and 1.2.0 to 1.2.9 Multiple Vulnerabilities http://www.securityfocus.com/bid/42618 Thu, 02 Sep 2010 00:20:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Vuln: Linux Kernel GFS2 Directory Rename NULL Pointer Dereference Local Denial of Service Vulnerability http://www.securityfocus.com/bid/42124 Wed, 01 Sep 2010 23:26:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Neue Zahlen zur Online-Wirtschaftskriminalität http://www.heise.de/security/meldung/Neue-Zahlen-zur-Online-Wirtschaftskriminalitaet-1070929.html/from/atom10 Wed, 01 Sep 2010 17:53:00 GMT Heise Security Heise Security Bugtraq: XSS vulnerability in Rumba CMS http://www.securityfocus.com/archive/1/513462 Wed, 01 Sep 2010 16:23:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: XSS vulnerability in Amiro.CMS FAQ http://www.securityfocus.com/archive/1/513460 Wed, 01 Sep 2010 16:23:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: XSS vulnerability in ArtGK CMS forum http://www.securityfocus.com/archive/1/513459 Wed, 01 Sep 2010 16:23:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: Online Binary Planting Exposure Test http://www.securityfocus.com/archive/1/513464 Wed, 01 Sep 2010 16:23:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Source Code des PS3-Hacks veröffentlicht http://www.heise.de/security/meldung/Source-Code-des-PS3-Hacks-veroeffentlicht-1070859.html/from/atom10 Wed, 01 Sep 2010 16:15:00 GMT Heise Security Heise Security Bugtraq: [SECURITY] [DSA 2101-1] New wireshark packages fix several vulnerabilities http://www.securityfocus.com/archive/1/513454 Wed, 01 Sep 2010 15:02:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: [ MDVSA-2010:167 ] perl-libwww-perl http://www.securityfocus.com/archive/1/513455 Wed, 01 Sep 2010 15:02:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: VMSA-2010-0013 http://www.securityfocus.com/archive/1/513456 Wed, 01 Sep 2010 15:02:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: VMSA-2010-0013 VMware ESX third party updates for Service Console http://www.securityfocus.com/archive/1/513457 Wed, 01 Sep 2010 15:02:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Windows-Tool gegen Update-Nerverei http://www.heise.de/security/meldung/Windows-Tool-gegen-Update-Nerverei-1070656.html/from/atom10 Wed, 01 Sep 2010 13:35:00 GMT Heise Security Heise Security Datenschutz-Gütesiegel für TNT-Postdienstleistungen http://www.datenschutz.de/news/detail/?nid=4467 01.09.2010 - Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein (ULD): Datenschutz-Gütesiegel für TNT-Postdienstleistungen Die TNT Post GmbH & Co KG (TNT Post) erhielt für ihr [...] Wed, 01 Sep 2010 12:07:02 GMT Virtuelles Datenschutzbuero Virtuelles Datenschutzbuero TR/Agent2.loa http://www.avira.com/de/threats/section/details/id_vir/5525/tr_agent2_loa.html Danger Level: Low to Medium Threat VDF Version: 7.10.11.62 Erstellt am: Wed, 01 Sep 2010 13:56 +0200 Complete description for this threat can be found hier . Wed, 01 Sep 2010 11:56:01 GMT Avira Avira DLL-Lücke: Microsoft doktert weiter an Workaround herum http://www.heise.de/security/meldung/DLL-Luecke-Microsoft-doktert-weiter-an-Workaround-herum-1070416.html/from/atom10 Wed, 01 Sep 2010 10:34:00 GMT Heise Security Heise Security Kalifornien: RFID-Überwachung in Vorschule http://www.datenschutz.de/news/detail/?nid=4466 01.09.2010 - In einem Bezirk im US-Bundesstaat Kalifornien sollen Vorschüler mit RFID-Chips verfolgt werden, wie die Electronic Frontier Foundation (EFF) berichtet. Die Chips [...] Wed, 01 Sep 2010 10:19:01 GMT Virtuelles Datenschutzbuero Virtuelles Datenschutzbuero Verfassungsbeschwerde gegen BSI-Gesetz eingereicht http://www.datenschutz.de/news/detail/?nid=4465 01.09.2010 - Bürgerrechtler haben eine Verfassungsbeschwerde gegen das Gesetz zur Stärkung der Sicherheit in der Informationstechnik des Bundes (BSI-Gesetz) eingelegt. Dies berichten [...] Wed, 01 Sep 2010 09:52:01 GMT Virtuelles Datenschutzbuero Virtuelles Datenschutzbuero Sommerakademie 2010: Grundrechtsschutz in der digitalen Welt ist ungenügend http://www.datenschutz.de/news/detail/?nid=4464 30.08.2010 - Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein (ULD): Sommerakademie 2010: Grundrechtsschutz in der digitalen Welt ist ungenügend Unter dem Titel Wed, 01 Sep 2010 07:37:02 GMT Virtuelles Datenschutzbuero Virtuelles Datenschutzbuero Vuln: Novell Netware SSH Remote Buffer Overflow Vulnerability http://www.securityfocus.com/bid/42875 Tue, 31 Aug 2010 22:14:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: [ MDVSA-2010:166 ] libgdiplus http://www.securityfocus.com/archive/1/513443 Tue, 31 Aug 2010 21:29:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: ZDI-10-168: Apple QuickTime ActiveX _Marshaled_pUnk Remote Code Execution Vulnerability http://www.securityfocus.com/archive/1/513444 Tue, 31 Aug 2010 21:29:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: KeePass version 2.12 http://www.securityfocus.com/archive/1/513446 Tue, 31 Aug 2010 21:29:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: ApPHP Calendar XSS - CSRF http://www.securityfocus.com/archive/1/513445 Tue, 31 Aug 2010 21:29:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: Tortoise SVN DLL Hijacking Vulnerability http://www.securityfocus.com/archive/1/513442 Tue, 31 Aug 2010 19:14:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: [security bulletin] HPSBMA02571 SSRT100034 rev.1 - HP Insight Diagnostics Online Edition, Remote Cross Site Scripting (XSS) http://www.securityfocus.com/archive/1/513441 Tue, 31 Aug 2010 18:20:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: django in combination with mod wsgi on apache on default debian and ubuntu installations does not place any bounds on the maximum size of a file upload http://www.securityfocus.com/archive/1/513436 Tue, 31 Aug 2010 15:11:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: [USN-980-1] bogofilter vulnerability http://www.securityfocus.com/archive/1/513434 Tue, 31 Aug 2010 15:11:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: [USN-981-1] libwww-perl vulnerability http://www.securityfocus.com/archive/1/513435 Tue, 31 Aug 2010 15:11:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Backdoor in Quicktime entdeckt http://www.heise.de/security/meldung/Backdoor-in-Quicktime-entdeckt-1069969.html/from/atom10 Tue, 31 Aug 2010 14:50:00 GMT Heise Security Heise Security Bugtraq: [security bulletin] HPSBUX02552 SSRT100062 rev.1 - HP-UX running Software Distributor (sd), Local Privilege Increase, Unauthorized Access http://www.securityfocus.com/archive/1/513432 Tue, 31 Aug 2010 14:17:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: [security bulletin] HPSBMA01212 SSRT5998 rev.4 - HP System Management Homepage Running PHP, Remote Denial of Service (DoS), Cross Site Scripting (XSS), Execution of Arbitrary Code http://www.securityfocus.com/archive/1/513433 Tue, 31 Aug 2010 14:17:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities 3M kauft im Sicherheitssegment kräftig zu http://www.heise.de/security/meldung/3M-kauft-im-Sicherheitssegment-kraeftig-zu-1070062.html/from/atom10 Tue, 31 Aug 2010 14:05:00 GMT Heise Security Heise Security Ungepatchte Sicherheitslücken: IBM rudert zurück http://www.heise.de/security/meldung/Ungepatchte-Sicherheitsluecken-IBM-rudert-zurueck-1069369.html/from/atom10 Tue, 31 Aug 2010 10:30:00 GMT Heise Security Heise Security Zwei Monate Atempause für indische Blackberry-Nutzer http://www.heise.de/security/meldung/Zwei-Monate-Atempause-fuer-indische-Blackberry-Nutzer-1069644.html/from/atom10 Tue, 31 Aug 2010 07:09:00 GMT Heise Security Heise Security TR/Obfuscated.IX.125 http://www.avira.com/de/threats/section/details/id_vir/5533/tr_obfuscated_ix_125.html Danger Level: Low to Medium Threat VDF Version: 7.10.06.56 Erstellt am: Tue, 31 Aug 2010 06:00 +0200 Complete description for this threat can be found hier . Tue, 31 Aug 2010 04:00:01 GMT Avira Avira TR/Obfuscated.IX.124 http://www.avira.com/de/threats/section/details/id_vir/5532/tr_obfuscated_ix_124.html Danger Level: Low to Medium Threat VDF Version: 7.10.06.56 Erstellt am: Tue, 31 Aug 2010 05:48 +0200 Complete description for this threat can be found hier . Tue, 31 Aug 2010 03:48:01 GMT Avira Avira Worm/Palevo.aemh http://www.avira.com/de/threats/section/details/id_vir/5531/worm_palevo_aemh.html Danger Level: Low to Medium Threat VDF Version: 7.10.08.63 Erstellt am: Tue, 31 Aug 2010 05:43 +0200 Complete description for this threat can be found hier . Tue, 31 Aug 2010 03:43:01 GMT Avira Avira DSA-2101 wireshark - several vulnerabilities http://www.debian.org/security/2010/dsa-2101 Several implementation errors in the dissector of the Wireshark network traffic analyzer for the ASN.1 BER protocol and in the SigComp Universal Decompressor Virtual Machine may lead to the execution of arbitrary code. Tue, 31 Aug 2010 00:53:01 GMT Debian-Sicherheit Debian-Sicherheit DSA-2100 openssl - double free http://www.debian.org/security/2010/dsa-2100 George Guninski discovered a double free in the ECDH code of the OpenSSL crypto library, which may lead to denial of service and potentially the execution of arbitrary code. Mon, 30 Aug 2010 20:23:02 GMT Debian-Sicherheit Debian-Sicherheit Bugtraq: {Lostmon - Groups} Safari for windows Invalid SGV text style Webkit.dll DoS http://www.securityfocus.com/archive/1/513423 Mon, 30 Aug 2010 20:15:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: [ MDVSA-2010:165 ] libHX http://www.securityfocus.com/archive/1/513425 Mon, 30 Aug 2010 20:15:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: Re: [Full-disclosure] QtWeb Browser version 3.3 build 043 Insecure DLL Hijacking Vulnerability (wintab32.dll) http://www.securityfocus.com/archive/1/513424 Mon, 30 Aug 2010 20:15:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: [SECURITY] [DSA 2100-1] New openssl packages fix double free http://www.securityfocus.com/archive/1/513426 Mon, 30 Aug 2010 20:15:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: [0day] Apple QuickTime "_Marshaled_pUnk" backdoor param arbitrary code execution http://www.securityfocus.com/archive/1/513421 Mon, 30 Aug 2010 19:21:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: R7-0036: FCKEditor.NET File Upload Code Execution http://www.securityfocus.com/archive/1/513422 Mon, 30 Aug 2010 19:21:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities DSA-2099 openoffice.org - buffer overflows http://www.debian.org/security/2010/dsa-2099 Charlie Miller has discovered two vulnerabilities in OpenOffice.org Impress, which can be exploited by malicious people to compromise a user"s system and execute arbitrary code. Mon, 30 Aug 2010 16:26:01 GMT Debian-Sicherheit Debian-Sicherheit Bugtraq: [SECURITY] [DSA 2099-1] New OpenOffice.org packages fix arbitrary code execution http://www.securityfocus.com/archive/1/513420 Mon, 30 Aug 2010 16:12:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: EC2ND 2010, Call for Participation http://www.securityfocus.com/archive/1/513412 Mon, 30 Aug 2010 15:18:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: ekoparty Security Conference 2010 Announcements http://www.securityfocus.com/archive/1/513417 Mon, 30 Aug 2010 15:18:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: [ MDVSA-2010:163 ] phpmyadmin http://www.securityfocus.com/archive/1/513409 Mon, 30 Aug 2010 15:18:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: [ MDVSA-2010:164 ] phpmyadmin http://www.securityfocus.com/archive/1/513416 Mon, 30 Aug 2010 15:18:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: [SECURITY] [DSA 2097-1] New phpmyadmin packages fix several vulnerabilities http://www.securityfocus.com/archive/1/513407 Mon, 30 Aug 2010 14:24:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: [SECURITY] [DSA 2098-1] New typo3-src packages fix several vulnerabilities http://www.securityfocus.com/archive/1/513408 Mon, 30 Aug 2010 14:24:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Datenleck: Schlecker entschädigt Kunden http://www.heise.de/security/meldung/Datenleck-Schlecker-entschaedigt-Kunden-1069232.html/from/atom10 Mon, 30 Aug 2010 13:32:00 GMT Heise Security Heise Security Finanzinvestor will RFID-Spezialisten Smartrac übernehmen http://www.heise.de/security/meldung/Finanzinvestor-will-RFID-Spezialisten-Smartrac-uebernehmen-1069304.html/from/atom10 Mon, 30 Aug 2010 13:17:00 GMT Heise Security Heise Security TR/Obfuscated.IX.123 http://www.avira.com/de/threats/section/details/id_vir/5530/tr_obfuscated_ix_123.html Danger Level: Low to Medium Threat VDF Version: 7.10.06.56 Erstellt am: Mon, 30 Aug 2010 14:51 +0200 Complete description for this threat can be found hier . Mon, 30 Aug 2010 12:51:01 GMT Avira Avira VxWorks Cert bündelt Wind Rivers sicherheitskritische Plattformen http://www.heise.de/security/meldung/VxWorks-Cert-buendelt-Wind-Rivers-sicherheitskritische-Plattformen-1069264.html/from/atom10 Mon, 30 Aug 2010 12:27:00 GMT Heise Security Heise Security Microsoft-Tool gegen DLL-Lücke stört Programme http://www.heise.de/security/meldung/Microsoft-Tool-gegen-DLL-Luecke-stoert-Programme-1069075.html/from/atom10 Mon, 30 Aug 2010 10:11:00 GMT Heise Security Heise Security TR/Agent.axg http://www.avira.com/de/threats/section/details/id_vir/5524/tr_agent_axg.html Danger Level: Low to Medium Threat VDF Version: 7.10.11.28 Erstellt am: Mon, 30 Aug 2010 11:42 +0200 Complete description for this threat can be found hier . Mon, 30 Aug 2010 09:42:01 GMT Avira Avira Blackberry-Ultimatum in Indien: RIM droht Blockade http://www.heise.de/security/meldung/Blackberry-Ultimatum-in-Indien-RIM-droht-Blockade-1069070.html/from/atom10 Mon, 30 Aug 2010 07:32:00 GMT Heise Security Heise Security Blackberry-Ultimatums in Indien: RIM droht Blockade http://www.heise.de/security/meldung/Blackberry-Ultimatums-in-Indien-RIM-droht-Blockade-1069070.html/from/atom10 Mon, 30 Aug 2010 07:32:00 GMT Heise Security Heise Security DSA-2097 phpmyadmin - insufficient input sanitising http://www.debian.org/security/2010/dsa-2097 Several remote vulnerabilities have been discovered in phpMyAdmin, a tool to administer MySQL over the web. The Common Vulnerabilities and Exposures project identifies the following problems: Sun, 29 Aug 2010 20:10:01 GMT Debian-Sicherheit Debian-Sicherheit DSA-2098 typo3-src - several vulnerabilities http://www.debian.org/security/2010/dsa-2098 Several remote vulnerabilities have been discovered in the TYPO3 web content management framework: cross-site Scripting, open redirection, SQL injection, broken authentication and session management, insecure randomness, information disclosure and arbitrary code execution. More details can be found in the Typo3 security advisory . Sun, 29 Aug 2010 20:10:01 GMT Debian-Sicherheit Debian-Sicherheit Cisco IOS XR Software Border Gateway Protocol Vulnerability http://www.cisco.com/en/US/products/products_security_advisory09186a0080b4411f.shtml Cisco IOS XR Software contains a vulnerability in the Border Gateway Protocol (BGP) feature. The vulnerability manifests itself when a BGP peer announces a prefix with a specific, valid but unrecognized transitive attribute. On receipt of this prefix, the Cisco IOS XR device will corrupt the attribute before sending it to the neighboring devices. Neighboring devices that receive this corrupted update may reset the BGP peering session. Sat, 28 Aug 2010 00:00:00 GMT Cisco Security Advisories Cisco Security Advisories Bugtraq: [USN-974-2] Linux kernel regression http://www.securityfocus.com/archive/1/513394 Fri, 27 Aug 2010 16:11:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: [USN-979-1] okular vulnerability http://www.securityfocus.com/archive/1/513395 Fri, 27 Aug 2010 16:11:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: Flash Player 9 DLL Hijacking Exploit (schannel.dll) http://www.securityfocus.com/archive/1/513397 Fri, 27 Aug 2010 16:11:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: wp-10-0001: Multiple Browser Wildcard Cerficate Validation Weakness http://www.securityfocus.com/archive/1/513396 Fri, 27 Aug 2010 16:11:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Angreifer nutzen DLL-Lücke in Office und Co. [Update] http://www.heise.de/security/meldung/Angreifer-nutzen-DLL-Luecke-in-Office-und-Co-Update-1068169.html/from/atom10 Fri, 27 Aug 2010 12:55:00 GMT Heise Security Heise Security Angreifer nutzen DLL-Lücke in Office und Co. http://www.heise.de/security/meldung/Angreifer-nutzen-DLL-Luecke-in-Office-und-Co-1068169.html/from/atom10 Fri, 27 Aug 2010 12:55:00 GMT Heise Security Heise Security Zugänglichkeit von Kundendaten der Firma Schlecker im Internet http://www.datenschutz.de/news/detail/?nid=4463 27.08.2010 - Der Landesbeauftragte für den Datenschutz Rheinland-Pfalz: Zugänglichkeit von Kundendaten der Firma Schlecker im Internet Am 26. August 2010 wurde bekannt, dass [...] Fri, 27 Aug 2010 11:56:01 GMT Virtuelles Datenschutzbuero Virtuelles Datenschutzbuero TR/Agent.ATU.2 http://www.avira.com/de/threats/section/details/id_vir/5523/tr_agent_atu_2.html Danger Level: Low to Medium Threat VDF Version: 7.10.11.18 Erstellt am: Fri, 27 Aug 2010 12:11 +0200 Complete description for this threat can be found hier . Fri, 27 Aug 2010 10:11:01 GMT Avira Avira Microsofts Security Development Lifecycle unter Creative-Commons-Lizenz http://www.heise.de/security/meldung/Microsofts-Security-Development-Lifecycle-unter-Creative-Commons-Lizenz-1068002.html/from/atom10 Fri, 27 Aug 2010 09:25:00 GMT Heise Security Heise Security Statistik über veröffentlichungskritische Fehler für das kommende Release http://www.debian.org/News/project/2010/10/index.de.html#8 Nach dem inoffiziellen Zähler für veröffentlichungskritische Fehler hat die kommende Veröffentlichung Debian 6.0 »Squeeze« 302 veröffentlichungskritische Fehler. Wenn man einfach zu behebende oder gerade auf dem Weg der Korrektur befindliche Fehler nicht miteinbezieht, bleiben grob 128 veröffentlichungskritische Fehler übrig, die noch bis zur nächsten Veröffentlichung behoben werden müssen. Fri, 27 Aug 2010 08:36:02 GMT Debian Weekly News Debian Weekly News Weitere Neuigkeiten http://www.debian.org/News/project/2010/10/index.de.html#7 Valessio Brito fragt , ob die Webchat-Schnittstelle, wie sie bei der letzten Debian-Konferenz verwendet wurde, nicht grundsätzlich zur Verfügung gestellt werden könnte. Diese würde IRC unerfahrenen BenutzerInnen den Zugang erleichtern. Fri, 27 Aug 2010 08:36:02 GMT Debian Weekly News Debian Weekly News Infos vom MIA-Team http://www.debian.org/News/project/2010/10/index.de.html#6 Jan Hauke Rahm hat einige Informationen zum MIA -Team verfasst. Das Team versucht PaketbetreuerInnen aufzuspüren, die leider inaktiv geworden sind. Er beschrieb, wie man auf Pakete, die vom Betreuenden vernachlässigt wurden, zu reagieren habe und stellte die Bedeutung seines Teams für die Qualitätssicherung von Debian heraus. Fri, 27 Aug 2010 08:36:02 GMT Debian Weekly News Debian Weekly News Fortschritt der Debian-GNU/kFreeBSD-Portierung http://www.debian.org/News/project/2010/10/index.de.html#5 Verschiedene Aspekte der Portierung von Debian auf den FreeBSD-Kernel haben groà Fri, 27 Aug 2010 08:36:02 GMT Debian Weekly News Debian Weekly News Unterstützung für das DebConf-Team http://www.debian.org/News/project/2010/10/index.de.html#4 Richard Darst hat eine Serie von Blogs zur Organisation der jährlichen Debiankonferenz gestartet, in denen er die kürzliche »DebConf & Debian«-Diskussion auf der DebConf10 in New York kommentierte. Er sehe keinen Unterschied zwischen den beiden und lud alle Interessieren ein, sich in der DebConf-Team Mailingliste einzutragen und den IRC-Kanal #debconf-team auf irc.debian.org zu nutzen. In seinem zweiten Beitrag erläuterte er den Zeitplan für die DebConf. Fri, 27 Aug 2010 08:36:02 GMT Debian Weekly News Debian Weekly News Infos von den ARM-Portierern http://www.debian.org/News/project/2010/10/index.de.html#3 Für die von ARM und Canonical gesponserte neue Maschine bedankte sich Riku Voipio in den »inoffiziellen Infos der ARM-Portierer« . Mit dem dreimal schnelleren Rechner kann die Buildd-Infrastruktur jetzt auch automatisch neue Pakete für spezielle Architekturen bauen und Pakete, die aus den Paketquellen experimental, volatile , non-free und von backports.org stammen, erstellen. Auà Fri, 27 Aug 2010 08:36:02 GMT Debian Weekly News Debian Weekly News Bildschirmfotos auf packages.debian.org http://www.debian.org/News/project/2010/10/index.de.html#2 Häufig ist ein Bildschirmfoto aussagekräftiger als der beschreibende Text einer Anwendung: Gerfried Fuchs hat den Dienst screenshots.debian.net in die Paketinformationsseite packages.debian.org integriert, wie am Beispiel von extremetuxracer zu sehen ist. Fri, 27 Aug 2010 08:36:02 GMT Debian Weekly News Debian Weekly News Debian wird 17 Jahre alt http://www.debian.org/News/project/2010/10/index.de.html#1 Debian hat zum 17. Geburtstag mediale Aufmerksamkeit und viele G l ü c k w ü n s c h e erhalten . Fri, 27 Aug 2010 08:36:02 GMT Debian Weekly News Debian Weekly News Debian Project News 2010/10 http://www.debian.org/News/project/2010/10/index.de.html#0 Willkommen zur zehnten Ausgabe der Debian Projekt News in diesem Jahr. Diese Ausgabe umfasst folgende Themen: Fri, 27 Aug 2010 08:36:02 GMT Debian Weekly News Debian Weekly News Datenpanne bei Schlecker: Kundendaten frei zugänglich [Update] http://www.heise.de/security/meldung/Datenpanne-bei-Schlecker-Kundendaten-frei-zugaenglich-Update-1067919.html/from/atom10 Fri, 27 Aug 2010 08:24:00 GMT Heise Security Heise Security Datenpanne bei Schlecker: Kundendaten frei zugänglich http://www.heise.de/security/meldung/Datenpanne-bei-Schlecker-Kundendaten-frei-zugaenglich-1067919.html/from/atom10 Fri, 27 Aug 2010 08:24:00 GMT Heise Security Heise Security Bugtraq: BugTracker.net 3.4.3 SQL Injection http://www.securityfocus.com/archive/1/513385 Thu, 26 Aug 2010 20:22:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: ZDI-10-166: RealNetworks RealPlayer Malformed IVR Object Index Code Execution Vulnerability http://www.securityfocus.com/archive/1/513381 Thu, 26 Aug 2010 19:01:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: ZDI-10-167: RealNetworks RealPlayer FLV Parsing Multiple Integer Overflow Vulnerabilities http://www.securityfocus.com/archive/1/513383 Thu, 26 Aug 2010 19:01:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: SQL injection vulnerability in CompuCMS http://www.securityfocus.com/archive/1/513376 Thu, 26 Aug 2010 18:07:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: SQL injection vulnerability in CompuCMS http://www.securityfocus.com/archive/1/513377 Thu, 26 Aug 2010 18:07:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: [HITB-Announce] HITB2010 SIGNINT Sessions http://www.securityfocus.com/archive/1/513378 Thu, 26 Aug 2010 18:07:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: SQL injection vulnerability in TCMS http://www.securityfocus.com/archive/1/513372 Thu, 26 Aug 2010 17:13:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: SQL injection vulnerability in TCMS http://www.securityfocus.com/archive/1/513373 Thu, 26 Aug 2010 17:13:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: SQL injection vulnerability in TCMS http://www.securityfocus.com/archive/1/513374 Thu, 26 Aug 2010 17:13:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: File Content Disclosure in TCMS http://www.securityfocus.com/archive/1/513375 Thu, 26 Aug 2010 17:13:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: XSS vulnerability in TCMS http://www.securityfocus.com/archive/1/513366 Thu, 26 Aug 2010 16:19:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: XSS vulnerability in TCMS http://www.securityfocus.com/archive/1/513363 Thu, 26 Aug 2010 16:19:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: XSS vulnerability in Auto CMS http://www.securityfocus.com/archive/1/513361 Thu, 26 Aug 2010 16:19:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: XSRF (CSRF) in Webmatic http://www.securityfocus.com/archive/1/513360 Thu, 26 Aug 2010 16:19:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: Apple CoreGraphics (Preview) Memory Corruption Vulnerability - CVE-2010-1801 http://www.securityfocus.com/archive/1/513355 Thu, 26 Aug 2010 15:25:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: XSS vulnerability in Webmatic http://www.securityfocus.com/archive/1/513359 Thu, 26 Aug 2010 15:25:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: XSS vulnerability in CompuCMS http://www.securityfocus.com/archive/1/513358 Thu, 26 Aug 2010 15:25:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: SQL injection vulnerability in CompuCMS http://www.securityfocus.com/archive/1/513357 Thu, 26 Aug 2010 15:25:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Kritische Lücken bleiben immer öfter ungepatcht http://www.heise.de/security/meldung/Kritische-Luecken-bleiben-immer-oefter-ungepatcht-1067172.html/from/atom10 Thu, 26 Aug 2010 12:03:00 GMT Heise Security Heise Security US-Verteidigungsministerium bestätigt Virusangriff http://www.heise.de/security/meldung/US-Verteidigungsministerium-bestaetigt-Virusangriff-1067302.html/from/atom10 Thu, 26 Aug 2010 11:30:00 GMT Heise Security Heise Security Java/ClassLoader.AZ http://www.avira.com/de/threats/section/details/id_vir/5520/java_classloader_az.html Danger Level: Medium Threat VDF Version: 7.10.11.04 Erstellt am: Thu, 26 Aug 2010 11:54 +0200 Complete description for this threat can be found hier . Thu, 26 Aug 2010 09:54:01 GMT Avira Avira Reaktionen auf Entwurf zum Arbeitnehmerdatenschutz http://www.datenschutz.de/news/detail/?nid=4461 26.08.2010 - Nachdem das Bundeskabinett gestern einen Entwurf für ein Arbeitnehmerdatenschutzgesetz beschloss, gibt es kritische Reaktionen aus Opposition und Wirtschaft. Dies berichten [...] Thu, 26 Aug 2010 08:54:01 GMT Virtuelles Datenschutzbuero Virtuelles Datenschutzbuero BayLfD: Beschäftigtendatenschutz: Gesetzesentwurf geht in die richtige Richtung http://www.datenschutz.de/news/detail/?nid=4462 26.08.2010 - Die Bundesregierung hat mit gestrigem Beschluss einem Gesetzentwurf zum Datenschutz in Beschäftigungsverhältnissen zugestimmt. Dieser Entwurf wird erhebliche Auswirkungen auch auf [...] Thu, 26 Aug 2010 08:54:01 GMT Virtuelles Datenschutzbuero Virtuelles Datenschutzbuero TR/Crypt.XPACK.Gen3 http://www.avira.com/de/threats/section/details/id_vir/5506/tr_crypt_xpack_gen3.html Danger Level: Low Threat Erstellt am: Thu, 26 Aug 2010 09:53 +0200 Complete description for this threat can be found hier . Thu, 26 Aug 2010 07:53:01 GMT Avira Avira Adobe patcht Shockwave Player http://www.heise.de/security/meldung/Adobe-patcht-Shockwave-Player-1066778.html/from/atom10 Thu, 26 Aug 2010 07:43:00 GMT Heise Security Heise Security TR/Spy.148529 http://www.avira.com/de/threats/section/details/id_vir/5519/tr_spy_148529.html Danger Level: Low to Medium Threat VDF Version: 7.10.06.116 Erstellt am: Thu, 26 Aug 2010 07:05 +0200 Complete description for this threat can be found hier . Thu, 26 Aug 2010 05:05:01 GMT Avira Avira Worm/Koobface.aek http://www.avira.com/de/threats/section/details/id_vir/5518/worm_koobface_aek.html Danger Level: Low to Medium Threat VDF Version: 7.01.04.183 Erstellt am: Thu, 26 Aug 2010 06:42 +0200 Complete description for this threat can be found hier . Thu, 26 Aug 2010 04:42:01 GMT Avira Avira TR/PSW.Magania.dblc http://www.avira.com/de/threats/section/details/id_vir/5522/tr_psw_magania_dblc.html Danger Level: Low to Medium Threat VDF Version: 7.10.02.137 Erstellt am: Thu, 26 Aug 2010 06:17 +0200 Complete description for this threat can be found hier . Thu, 26 Aug 2010 04:17:02 GMT Avira Avira Bugtraq: Re: Web Tool Announcement: ismymailsecure.com http://www.securityfocus.com/archive/1/513347 Wed, 25 Aug 2010 21:25:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: Adobe Illustrator CS4 DLL Hijacking Exploit (aires.dll) http://www.securityfocus.com/archive/1/513335 Wed, 25 Aug 2010 19:10:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: Adobe InDesign CS4 DLL Hijacking Exploit (ibfs32.dll) http://www.securityfocus.com/archive/1/513340 Wed, 25 Aug 2010 19:10:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: Adobe On Location CS4 DLL Hijacking Exploit (ibfs32.dll) http://www.securityfocus.com/archive/1/513332 Wed, 25 Aug 2010 19:10:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: Adobe Premier Pro CS4 DLL Hijacking Exploit (ibfs32.dll) http://www.securityfocus.com/archive/1/513336 Wed, 25 Aug 2010 19:10:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: Adobe Device Central CS5 DLL Hijacking Exploit (qtcf.dll) http://www.securityfocus.com/archive/1/513323 Wed, 25 Aug 2010 18:16:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: Cisco Security Advisory: Cisco Unified Communications Manager Denial of Service Vulnerabilities http://www.securityfocus.com/archive/1/513325 Wed, 25 Aug 2010 18:16:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: Cisco Security Advisory: Cisco Unified Presence Denial of Service Vulnerabilities http://www.securityfocus.com/archive/1/513326 Wed, 25 Aug 2010 18:16:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: ZDI-10-165: Trend Micro Internet Security Pro 2010 ActiveX extSetOwner Remote Code Execution Vulnerability http://www.securityfocus.com/archive/1/513327 Wed, 25 Aug 2010 18:16:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: Nagios XI users.php SQL Injection http://www.securityfocus.com/archive/1/513314 Wed, 25 Aug 2010 17:22:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: iDefense Security Advisory 08.24.10: Adobe Shockwave Player Memory Corruption Vulnerability http://www.securityfocus.com/archive/1/513315 Wed, 25 Aug 2010 17:22:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: DLL hijacking on Linux http://www.securityfocus.com/archive/1/513316 Wed, 25 Aug 2010 17:22:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: TeamViewer http://www.securityfocus.com/archive/1/513317 Wed, 25 Aug 2010 17:22:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: TPTI-10-14: Adobe Shockwave Director rcsL Chunk Pointer Offset Remote Code Execution Vulnerability http://www.securityfocus.com/archive/1/513299 Wed, 25 Aug 2010 16:01:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: TPTI-10-15: Adobe Shockwave Director mmap Trusted Chunk Size Remote Code Execution Vulnerability http://www.securityfocus.com/archive/1/513303 Wed, 25 Aug 2010 16:01:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: ZDI-10-160: Adobe Shockwave Player Director File FFFFFF45 Record Processing Remote Code Execution Vulnerability http://www.securityfocus.com/archive/1/513305 Wed, 25 Aug 2010 16:01:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: ZDI-10-161: Adobe Shockwave Director PAMI Chunk Remote Code Execution Vulnerability http://www.securityfocus.com/archive/1/513306 Wed, 25 Aug 2010 16:01:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Mobilfunkblocker im Gefängnis – Baden-Württemberg sieht "vollen Erfolg" http://www.heise.de/security/meldung/Mobilfunkblocker-im-Gefaengnis-Baden-Wuerttemberg-sieht-vollen-Erfolg-1066539.html/from/atom10 Wed, 25 Aug 2010 15:50:00 GMT Heise Security Heise Security Cisco Unified Communications Manager Denial of Service Vulnerabilities http://www.cisco.com/en/US/products/products_security_advisory09186a0080b43908.shtml Cisco Unified Communications Manager contains two denial of service (DoS) vulnerabilities that affect the processing of Session Initiation Protocol (SIP) messages. Exploitation of these vulnerabilities could cause an interruption of voice services. Wed, 25 Aug 2010 15:40:00 GMT Cisco Security Advisories Cisco Security Advisories Cisco Unified Presence Denial of Service Vulnerabilities http://www.cisco.com/en/US/products/products_security_advisory09186a0080b43909.shtml Cisco Unified Presence contains two denial of service (DoS) vulnerabilities that affect the processing of Session Initiation Protocol (SIP) messages. Exploitation of these vulnerabilities could cause an interruption of presence services. Wed, 25 Aug 2010 15:30:00 GMT Cisco Security Advisories Cisco Security Advisories Bugtraq: [SECURITY] [DSA 2096-1] New zope-ldapuserfolder packages fix authentication bypass http://www.securityfocus.com/archive/1/513294 Wed, 25 Aug 2010 15:07:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: TPTI-10-09: Adobe Shockwave CSWV Chunk Memory Corruption Remote Code Execution Vulnerability http://www.securityfocus.com/archive/1/513296 Wed, 25 Aug 2010 15:07:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: TPTI-10-10: Adobe Shockwave tSAC Chunk Invalid Seek Memory Corruption Remote Code Execution Vulnerability http://www.securityfocus.com/archive/1/513298 Wed, 25 Aug 2010 15:07:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: TPTI-10-11: Adobe Shockwave tSAC Chunk Pointer Offset Memory Corruption Remote Code Execution Vulnerability http://www.securityfocus.com/archive/1/513297 Wed, 25 Aug 2010 15:07:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities DLL-Sicherheitsproblem zieht weite Kreise [Update] http://www.heise.de/security/meldung/DLL-Sicherheitsproblem-zieht-weite-Kreise-Update-1066132.html/from/atom10 Wed, 25 Aug 2010 14:12:00 GMT Heise Security Heise Security DLL-Sicherheitsproblem zieht weite Kreise http://www.heise.de/security/meldung/DLL-Sicherheitsproblem-zieht-weite-Kreise-1066132.html/from/atom10 Wed, 25 Aug 2010 14:12:00 GMT Heise Security Heise Security BfDI: Regierungsentwurf bringt substanzielle Verbesserungen beim BeschäftigtenDS http://www.datenschutz.de/news/detail/?nid=4460 25.08.2010 - Der Bundesbeauftragte für den Datenschutz und die Informationsfreiheit: Schaar: Regierungsentwurf bringt substanzielle Verbesserungen beim Beschäftigtendatenschutz Nach den Datenschutzskandalen der vergangenen Jahre hat [...] Wed, 25 Aug 2010 13:06:01 GMT Virtuelles Datenschutzbuero Virtuelles Datenschutzbuero TR/Drop.Agent.AA.4 http://www.avira.com/de/threats/section/details/id_vir/5501/tr_drop_agent_aa_4.html Danger Level: Low to Medium Threat VDF Version: 7.10.10.101 Erstellt am: Wed, 25 Aug 2010 12:28 +0200 Complete description for this threat can be found hier . Wed, 25 Aug 2010 10:28:01 GMT Avira Avira TR/Spy.188416.128 http://www.avira.com/de/threats/section/details/id_vir/5502/tr_spy_188416_128.html Danger Level: Low to Medium Threat VDF Version: 7.10.10.242 Erstellt am: Wed, 25 Aug 2010 12:01 +0200 Complete description for this threat can be found hier . Wed, 25 Aug 2010 10:01:01 GMT Avira Avira Java/Dldr.Agent.W http://www.avira.com/de/threats/section/details/id_vir/5503/java_dldr_agent_w.html Danger Level: Medium Threat VDF Version: 7.10.11.04 Erstellt am: Wed, 25 Aug 2010 11:50 +0200 Complete description for this threat can be found hier . Wed, 25 Aug 2010 09:50:01 GMT Avira Avira Apple schließt kritische Sicherheitslücken in Mac OS X http://www.heise.de/security/meldung/Apple-schliesst-kritische-Sicherheitsluecken-in-Mac-OS-X-1065635.html/from/atom10 Wed, 25 Aug 2010 09:18:00 GMT Heise Security Heise Security Nacktscanner-Test in Hamburg kommt http://www.datenschutz.de/news/detail/?nid=4459 25.08.2010 - Der für September angesetzte Test von Nacktscannern am Flughafen Hamburg soll wie geplant durchgeführt werden, wie heise online berichtet. Der Test [...] Wed, 25 Aug 2010 09:03:01 GMT Virtuelles Datenschutzbuero Virtuelles Datenschutzbuero OpenSSH erreicht Version 5.6 http://www.heise.de/security/meldung/OpenSSH-erreicht-Version-5-6-1064708.html/from/atom10 Wed, 25 Aug 2010 07:35:00 GMT Heise Security Heise Security Bugtraq: t2â?²10 Challenge to be released 2010-08-28 10:00 EEST http://www.securityfocus.com/archive/1/513287 Tue, 24 Aug 2010 21:07:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: WinAppDbg 1.4 is out! http://www.securityfocus.com/archive/1/513286 Tue, 24 Aug 2010 20:13:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Elektronischer Personalausweis: Wissens- oder Sicherheitsdefizite? [Update] http://www.heise.de/security/meldung/Elektronischer-Personalausweis-Wissens-oder-Sicherheitsdefizite-Update-1065519.html/from/atom10 Tue, 24 Aug 2010 17:09:00 GMT Heise Security Heise Security Elektronischer Personalausweis: Wissens- oder Sicherheitsdefizite? http://www.heise.de/security/meldung/Elektronischer-Personalausweis-Wissens-oder-Sicherheitsdefizite-1065519.html/from/atom10 Tue, 24 Aug 2010 17:09:00 GMT Heise Security Heise Security DSA-2096 zope-ldapuserfolder - missing input validation http://www.debian.org/security/2010/dsa-2096 Jeremy James discovered that in zope-ldapuserfolder, a Zope extension used to authenticate against an LDAP server, the authentication code does not verify the password provided for the emergency user. Malicious users that manage to get the emergency user login can use this flaw to gain administrative access to the Zope instance, by providing an arbitrary password. Tue, 24 Aug 2010 16:34:02 GMT Debian-Sicherheit Debian-Sicherheit Bugtraq: [security bulletin] HPSBGN02569 SSRT100200 rev.1 - HP MagCloud iPad App, Remote Unauthorized Access to Data http://www.securityfocus.com/archive/1/513275 Tue, 24 Aug 2010 16:10:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: [security bulletin] HPSBST02536 SSRT100057 rev.3 - HP StorageWorks Storage Mirroring, Local Unauthorized Access http://www.securityfocus.com/archive/1/513273 Tue, 24 Aug 2010 16:10:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: [ MDVSA-2010:160 ] cacti http://www.securityfocus.com/archive/1/513282 Tue, 24 Aug 2010 16:10:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: London DEFCON - DC4420 - August meet - Wednesday 25th August 2010 http://www.securityfocus.com/archive/1/513280 Tue, 24 Aug 2010 16:10:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: [ MDVSA-2010:159 ] gv http://www.securityfocus.com/archive/1/513267 Tue, 24 Aug 2010 15:16:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: [ MDVSA-2010:159 ] gv http://www.securityfocus.com/archive/1/513269 Tue, 24 Aug 2010 15:16:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: Re: Google Chrome: HTTP AUTH Dialog Spoofing through Realm Manipulation (Restated) http://www.securityfocus.com/archive/1/513268 Tue, 24 Aug 2010 15:16:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Microsoft warnt vor DLL-Lücke in Anwendungen http://www.heise.de/security/meldung/Microsoft-warnt-vor-DLL-Luecke-in-Anwendungen-1064330.html/from/atom10 Tue, 24 Aug 2010 12:35:00 GMT Heise Security Heise Security TR/Agent.KD.28072 http://www.avira.com/de/threats/section/details/id_vir/5504/tr_agent_kd_28072.html Danger Level: Low to Medium Threat VDF Version: 7.10.11.01 Erstellt am: Tue, 24 Aug 2010 12:18 +0200 Complete description for this threat can be found hier . Tue, 24 Aug 2010 10:18:01 GMT Avira Avira TR/Hosts.BD http://www.avira.com/de/threats/section/details/id_vir/5505/tr_hosts_bd.html Danger Level: Medium Threat VDF Version: 7.10.11.01 Erstellt am: Tue, 24 Aug 2010 11:51 +0200 Complete description for this threat can be found hier . Tue, 24 Aug 2010 09:51:01 GMT Avira Avira Plusminus: Sicherheitslücken im neuen Personalausweis http://www.datenschutz.de/news/detail/?nid=4458 24.08.2010 - Das ARD-Magazin Plusminus hat Lücken im Sicherheitskonzept des neuen Personalausweises, der ab dem 1. November kommen soll, festgestellt. Dies berichtet [...] Tue, 24 Aug 2010 09:12:02 GMT Virtuelles Datenschutzbuero Virtuelles Datenschutzbuero Elektronischer Personalausweis: Sicherheitsdefizite bei Lesegeräten [Update] http://www.heise.de/security/meldung/Elektronischer-Personalausweis-Sicherheitsdefizite-bei-Lesegeraeten-Update-1064338.html/from/atom10 Tue, 24 Aug 2010 08:34:00 GMT Heise Security Heise Security Elektronischer Personalausweis: Sicherheitsdefizite bei Lesegeräten http://www.heise.de/security/meldung/Elektronischer-Personalausweis-Sicherheitsdefizite-bei-Lesegeraeten-1064338.html/from/atom10 Tue, 24 Aug 2010 08:34:00 GMT Heise Security Heise Security Bugtraq: Secunia Research: Mono libgdiplus Image Processing Three Integer Overflows http://www.securityfocus.com/archive/1/513259 Mon, 23 Aug 2010 18:07:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: [SECURITY] [DSA 2095-1] New lvm2 packages fix denial of service http://www.securityfocus.com/archive/1/513255 Mon, 23 Aug 2010 17:13:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities DSA-2095 lvm2 - insecure communication protocol http://www.debian.org/security/2010/dsa-2095 Alasdair Kergon discovered that the cluster logical volume manager daemon (clvmd) in lvm2, The Linux Logical Volume Manager, does not verify client credentials upon a socket connection, which allows local users to cause a denial of service. Mon, 23 Aug 2010 16:34:02 GMT Debian-Sicherheit Debian-Sicherheit Bugtraq: Directory Traversal in 3D FTP Client http://www.securityfocus.com/archive/1/513244 Mon, 23 Aug 2010 16:19:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: [Bkis-04-2010] Multiple Vulnerabilities in OpenBlog http://www.securityfocus.com/archive/1/513249 Mon, 23 Aug 2010 16:19:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: Google Chrome: HTTP AUTH Dialog Spoofing through Realm Manipulation (Restated) http://www.securityfocus.com/archive/1/513243 Mon, 23 Aug 2010 16:19:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: [ MDVSA-2010:158 ] squirrelmail http://www.securityfocus.com/archive/1/513252 Mon, 23 Aug 2010 16:19:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities phpMyAdmin-Update schließt Sicherheitslücken http://www.heise.de/security/meldung/phpMyAdmin-Update-schliesst-Sicherheitsluecken-1063875.html/from/atom10 Mon, 23 Aug 2010 16:10:00 GMT Heise Security Heise Security phpMyAdmin-Update behebt Sicherheitslücken http://www.heise.de/security/meldung/phpMyAdmin-Update-behebt-Sicherheitsluecken-1063875.html/from/atom10 Mon, 23 Aug 2010 16:10:00 GMT Heise Security Heise Security Chaos Computer Club ruft zur Demonstration "Freiheit statt Angst" auf http://www.ccc.de/de/updates/2010/fsa-2010 In Berlin findet am Samstag, den 11. September 2010, die inzwischen traditionelle Großdemonstration für eine lebenswerte und überwachungsarme Gesellschaft statt. Zusammen mit über 150 Organisationen ruft der Chaos Computer Club (CCC) zur Teilnahme am Protestumzug unter dem Motto "Freiheit statt Angst" auf. Der Aufmarsch startet um 13 Uhr am Potsdamer Platz. Mon, 23 Aug 2010 15:57:00 GMT CCC Newsticker CCC Newsticker TR/Agent.atw.1 http://www.avira.com/de/threats/section/details/id_vir/5495/tr_agent_atw_1.html Danger Level: Low to Medium Threat VDF Version: 7.10.10.243 Erstellt am: Mon, 23 Aug 2010 14:24 +0200 Complete description for this threat can be found hier . Mon, 23 Aug 2010 12:24:02 GMT Avira Avira TR/FraudPack.hub.14 http://www.avira.com/de/threats/section/details/id_vir/5496/tr_fraudpack_hub_14.html Danger Level: Low to Medium Threat VDF Version: 7.10.10.235 Erstellt am: Mon, 23 Aug 2010 14:09 +0200 Complete description for this threat can be found hier . Mon, 23 Aug 2010 12:09:02 GMT Avira Avira Polizei beschlagnahmt Hardware bei VPN-Betreiber http://www.heise.de/security/meldung/Polizei-beschlagnahmt-Hardware-bei-VPN-Betreiber-1063552.html/from/atom10 Mon, 23 Aug 2010 11:58:00 GMT Heise Security Heise Security TR/Spy.Zbot.gay http://www.avira.com/de/threats/section/details/id_vir/5497/tr_spy_zbot_gay.html Danger Level: Medium to High Threat VDF Version: 7.10.11.01 Erstellt am: Mon, 23 Aug 2010 13:05 +0200 Complete description for this threat can be found hier . Mon, 23 Aug 2010 11:05:02 GMT Avira Avira Java/Agent.AJ.2 http://www.avira.com/de/threats/section/details/id_vir/5499/java_agent_aj_2.html Danger Level: Low to Medium Threat VDF Version: 7.10.10.232 Erstellt am: Mon, 23 Aug 2010 12:53 +0200 Complete description for this threat can be found hier . Mon, 23 Aug 2010 10:53:01 GMT Avira Avira USA: Streit um Regelungen bei Datenverlusten im Gesundheitssektor http://www.datenschutz.de/news/detail/?nid=4456 23.08.2010 - In den USA hat das Gesundheitsministerium vorgeschlagene neue Regeln zum Umgang mit Datenverlusten im Gesundheitssektor zurückgezogen, wie die New York [...] Mon, 23 Aug 2010 08:27:02 GMT Virtuelles Datenschutzbuero Virtuelles Datenschutzbuero Koalition einigt sich auf Arbeitnehmerdatenschutzgesetz http://www.datenschutz.de/news/detail/?nid=4457 23.08.2010 - Die Bundesregierung hat sich auf einen Entwurf für ein Arbeitnehmerdatenschutzgesetz geeinigt. Die heimliche Videoüberwachung am Arbeitsplatz soll verboten werden. Dies [...] Mon, 23 Aug 2010 08:27:02 GMT Virtuelles Datenschutzbuero Virtuelles Datenschutzbuero Schad-Software möglicherweise Mitverursacher bei Flugzeug-Absturz http://www.heise.de/security/meldung/Schad-Software-moeglicherweise-Mitverursacher-bei-Flugzeug-Absturz-1063252.html/from/atom10 Sat, 21 Aug 2010 12:16:00 GMT Heise Security Heise Security Bugtraq: Re: ACROS Security: Remote Binary Planting in Apple iTunes for Windows (ASPR #2010-08-18-1) http://www.securityfocus.com/archive/1/513224 Fri, 20 Aug 2010 18:26:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Vuln: Sourcefabric Campsite Multiple Cross Site Scripting Vulnerabilities http://www.securityfocus.com/bid/42107 Fri, 20 Aug 2010 18:26:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bundesregierung: Weiter Dissens in Sachen Vorratsdatenspeicherung http://www.datenschutz.de/news/detail/?nid=4455 20.08.2010 - In der Bundesregierung gibt es weiterhin Uneinigkeit über eine Neuregelung der Vorratsdatenspeicherung von Telekommunikationsdaten, wie heise online berichtet. Bundesinnenminister Thomas de [...] Fri, 20 Aug 2010 17:21:02 GMT Virtuelles Datenschutzbuero Virtuelles Datenschutzbuero Bugtraq: [security bulletin] HPSBMA02477 SSRT090177 rev.5 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code, Denial of Service (DoS) http://www.securityfocus.com/archive/1/513223 Fri, 20 Aug 2010 17:05:03 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Datenleck bei Versicherung: Tausende Kundendaten im Netz http://www.heise.de/security/meldung/Datenleck-bei-Versicherung-Tausende-Kundendaten-im-Netz-1062979.html/from/atom10 Fri, 20 Aug 2010 15:40:00 GMT Heise Security Heise Security Zunahme bei Online-Delikten in der Schweiz http://www.heise.de/security/meldung/Zunahme-bei-Online-Delikten-in-der-Schweiz-1063128.html/from/atom10 Fri, 20 Aug 2010 15:25:00 GMT Heise Security Heise Security Vuln: Freeciv Lua Runtime Environment Remote Command Execution Vulnerability http://www.securityfocus.com/bid/40598 Fri, 20 Aug 2010 14:23:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities WPA-Key von Speedport-Routern zu einfach http://www.heise.de/security/meldung/WPA-Key-von-Speedport-Routern-zu-einfach-1062911.html/from/atom10 Fri, 20 Aug 2010 12:55:00 GMT Heise Security Heise Security Google beseitigt kritische Schwachstellen in Chrome http://www.heise.de/security/meldung/Google-beseitigt-kritische-Schwachstellen-in-Chrome-1062521.html/from/atom10 Fri, 20 Aug 2010 10:27:00 GMT Heise Security Heise Security Kritische Lücken in Adobe Reader und Acrobat geschlossen http://www.heise.de/security/meldung/Kritische-Luecken-in-Adobe-Reader-und-Acrobat-geschlossen-1062447.html/from/atom10 Fri, 20 Aug 2010 10:05:00 GMT Heise Security Heise Security BDS/Protector.CF http://www.avira.com/de/threats/section/details/id_vir/5500/bds_protector_cf.html Danger Level: Low to Medium Threat VDF Version: 7.10.08.239 Erstellt am: Fri, 20 Aug 2010 10:33 +0200 Complete description for this threat can be found hier . Fri, 20 Aug 2010 08:33:01 GMT Avira Avira Mexiko: Stadt will flächendeckend Iris-Scanner einsetzen http://www.datenschutz.de/news/detail/?nid=4453 20.08.2010 - Die mexikanische Stadt Leon will flächendeckend Iris-Scanner einsetzen, wie ORF Futurezone berichtet. Man wolle Leon zur "sichersten Stadt der Welt" [...] Fri, 20 Aug 2010 08:21:01 GMT Virtuelles Datenschutzbuero Virtuelles Datenschutzbuero Facebook: Kritik an "Places" http://www.datenschutz.de/news/detail/?nid=4454 20.08.2010 - Nachdem Facebook den Lokalisierungsdienst "Places" angekündigt hat, kommt von Datenschutzgruppen Protest, wie Ars Technica berichtet. "Es gibt kein allgemeines Opt-Out, um [...] Fri, 20 Aug 2010 08:21:01 GMT Virtuelles Datenschutzbuero Virtuelles Datenschutzbuero Worm.AutoIt.YH http://www.avira.com/de/threats/section/details/id_vir/5490/worm_autoit_yh.html Danger Level: Medium Threat VDF Version: 7.10.10.208 Erstellt am: Fri, 20 Aug 2010 10:00 +0200 Complete description for this threat can be found hier . Fri, 20 Aug 2010 08:00:01 GMT Avira Avira Widerspruchsfrist für Google Street View verlängert http://www.datenschutz.de/news/detail/?nid=4451 20.08.2010 - Die Einspruchsfrist, um die eigene Wohnung bei Google Street View unkenntlich machen zu lassen, wird bis zum 15. Oktober verlängert. [...] Fri, 20 Aug 2010 07:54:01 GMT Virtuelles Datenschutzbuero Virtuelles Datenschutzbuero Telekom-Spitzelaffäre: Prozess kommt http://www.datenschutz.de/news/detail/?nid=4452 20.08.2010 - In der Telekom-Spitzelaffäre kommt es nun doch zu einem Prozess, wie heise online berichtet. Die Affäre begann, als im Jahr 2005 [...] Fri, 20 Aug 2010 07:54:01 GMT Virtuelles Datenschutzbuero Virtuelles Datenschutzbuero Vuln: SlideShowPro Director "p.php" Directory Traversal Vulnerability http://www.securityfocus.com/bid/42566 Thu, 19 Aug 2010 23:01:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Vuln: CMS Made Simple "modules/Printing/output.php" CMS Local File Include Vulnerability http://www.securityfocus.com/bid/36005 Thu, 19 Aug 2010 19:02:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities "Das sicherste Dokument auf dem Planeten" http://www.heise.de/security/meldung/Das-sicherste-Dokument-auf-dem-Planeten-1062365.html/from/atom10 Thu, 19 Aug 2010 17:37:00 GMT Heise Security Heise Security DSA-2093 ghostscript - several vulnerabilities http://www.debian.org/security/2010/dsa-2093 Two security issues have been discovered in Ghostscript, the GPL PostScript/PDF interpreter. The Common Vulnerabilities and Exposures project identifies the following problems: Thu, 19 Aug 2010 16:28:01 GMT Debian-Sicherheit Debian-Sicherheit DSA-2094 linux-2.6 - privilege escalation/denial of service/information leak http://www.debian.org/security/2010/dsa-2094 Several vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service or privilege escalation. The Common Vulnerabilities and Exposures project identifies the following problems: Thu, 19 Aug 2010 16:28:01 GMT Debian-Sicherheit Debian-Sicherheit Bugtraq: Flock Browser 3.0.0.3989 Malformed Bookmark XSS and script insertion http://www.securityfocus.com/archive/1/513214 Thu, 19 Aug 2010 16:20:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: NSOADV-2010-005: SonicWALL E-Class SSL-VPN ActiveX Control format string overflow http://www.securityfocus.com/archive/1/513210 Thu, 19 Aug 2010 15:26:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: [SECURITY] [DSA 2093-1] New ghostscript packages fix several vulnerabilities http://www.securityfocus.com/archive/1/513212 Thu, 19 Aug 2010 15:26:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: [security bulletin] HPSBST02536 SSRT100057 rev.2 - HP StorageWorks Storage Mirroring, Remote Unauthorized Access http://www.securityfocus.com/archive/1/513211 Thu, 19 Aug 2010 15:26:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: [security bulletin] HPSBMA02424 SSRT080125 rev.3 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code http://www.securityfocus.com/archive/1/513213 Thu, 19 Aug 2010 15:26:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Vuln: FreeBSD mbuf Handling Local Privilege Escalation Vulnerability http://www.securityfocus.com/bid/41577 Thu, 19 Aug 2010 14:05:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Intel kauft McAfee http://www.heise.de/security/meldung/Intel-kauft-McAfee-1062127.html/from/atom10 Thu, 19 Aug 2010 13:26:00 GMT Heise Security Heise Security Rheinland-Pfalz vor Quellen-TKÜ und Online-Durchsuchung http://www.heise.de/security/meldung/Rheinland-Pfalz-vor-Quellen-TKUe-und-Online-Durchsuchung-1062123.html/from/atom10 Thu, 19 Aug 2010 13:10:00 GMT Heise Security Heise Security Neue Windows-Schwachstelle: Anwendungen laden Schadcode aus dem Netz nach http://www.heise.de/security/meldung/Neue-Windows-Schwachstelle-Anwendungen-laden-Schadcode-aus-dem-Netz-nach-1061934.html/from/atom10 Thu, 19 Aug 2010 12:44:00 GMT Heise Security Heise Security Vuln: SonicWALL E-Class SSL-VPN Format String Vulnerability http://www.securityfocus.com/bid/42548 Thu, 19 Aug 2010 12:17:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Vuln: Open-Realty "title" Parameter HTML Injection Vulnerability http://www.securityfocus.com/bid/41947 Thu, 19 Aug 2010 10:02:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Facebook start Lokalisierungsdienst http://www.datenschutz.de/news/detail/?nid=4449 19.08.2010 - Facebook startet einen Lokalisierungsdienst. Dies berichten die New York Times, ORF Futurezone und heise online. "Das ist kein Dienst, der [...] Thu, 19 Aug 2010 09:24:02 GMT Virtuelles Datenschutzbuero Virtuelles Datenschutzbuero Bundesländer fordern schnelleres Vorgehen bei Google Street View http://www.datenschutz.de/news/detail/?nid=4450 19.08.2010 - Aus den Bundesländern kommt Kritik am Vorgehen der Bundesregierung in Sachen Google Street View, wie heise online, RP Online und [...] Thu, 19 Aug 2010 09:24:02 GMT Virtuelles Datenschutzbuero Virtuelles Datenschutzbuero USA: Keine strafrechtlichen Ermittlungen in Webcam-Affäre http://www.datenschutz.de/news/detail/?nid=4446 19.08.2010 - In der Affäre um die Webcam-Überwachung von Schüler in den USA werden keine strafrechtlichen Ermittlungen eingeleitet, wie Threat Level berichtet. Bei [...] Thu, 19 Aug 2010 08:57:01 GMT Virtuelles Datenschutzbuero Virtuelles Datenschutzbuero Niederlande: Illegaler Zugriff auf Telekommunikations-Bestandsdaten http://www.datenschutz.de/news/detail/?nid=4447 19.08.2010 - In den Niederlanden wurde massenhaft illegal auf eine Datenbank aller Inhaber von Festnetz-, Handy- und Internetanschlüssen zugegriffen, wie Daten-Speicherung.de berichtet. Einer [...] Thu, 19 Aug 2010 08:57:01 GMT Virtuelles Datenschutzbuero Virtuelles Datenschutzbuero Umfrage: Zwei Drittel für offeneren Zugang zu Regierungsdaten http://www.datenschutz.de/news/detail/?nid=4448 19.08.2010 - Gut zwei Drittel der Deutschen wünschen sich einen offeneren Zugang zu Regierungsdaten, wie Zeit Online berichtet. Bei einer im Auftrag der [...] Thu, 19 Aug 2010 08:57:01 GMT Virtuelles Datenschutzbuero Virtuelles Datenschutzbuero Java/ClassLoader.AB http://www.avira.com/de/threats/section/details/id_vir/5498/java_classloader_ab.html Danger Level: Low to Medium Threat VDF Version: 7.10.11.00 Erstellt am: Thu, 19 Aug 2010 10:50 +0200 Complete description for this threat can be found hier . Thu, 19 Aug 2010 08:50:02 GMT Avira Avira Java/ClassLoader.AX http://www.avira.com/de/threats/section/details/id_vir/5484/java_classloader_ax.html Danger Level: Low to Medium Threat VDF Version: 7.10.10.208 Erstellt am: Thu, 19 Aug 2010 10:43 +0200 Complete description for this threat can be found hier . Thu, 19 Aug 2010 08:43:01 GMT Avira Avira Java/ClassLoader.AV http://www.avira.com/de/threats/section/details/id_vir/5486/java_classloader_av.html Danger Level: Medium Threat VDF Version: 7.10.10.186 Erstellt am: Thu, 19 Aug 2010 10:34 +0200 Complete description for this threat can be found hier . Thu, 19 Aug 2010 08:34:01 GMT Avira Avira TR/Renos.pbw.1 http://www.avira.com/de/threats/section/details/id_vir/5482/tr_renos_pbw_1.html Danger Level: Low Threat VDF Version: 7.10.10.208 Erstellt am: Thu, 19 Aug 2010 10:06 +0200 Complete description for this threat can be found hier . Thu, 19 Aug 2010 08:06:01 GMT Avira Avira Worm/Autorun.aaer http://www.avira.com/de/threats/section/details/id_vir/5488/worm_autorun_aaer.html Danger Level: Low to Medium Threat VDF Version: 7.10.09.33 Erstellt am: Thu, 19 Aug 2010 06:33 +0200 Complete description for this threat can be found hier . Thu, 19 Aug 2010 04:33:01 GMT Avira Avira Worm/Autorun.bhdd http://www.avira.com/de/threats/section/details/id_vir/5487/worm_autorun_bhdd.html Danger Level: Low to Medium Threat VDF Version: 7.10.07.90 Erstellt am: Thu, 19 Aug 2010 06:21 +0200 Complete description for this threat can be found hier . Thu, 19 Aug 2010 04:21:01 GMT Avira Avira Vuln: Databay MAXcms Multiple File Include Vulnerabilities http://www.securityfocus.com/bid/42534 Thu, 19 Aug 2010 00:26:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Vuln: Tuniac ".m3u" File Version 100723 Buffer Overflow Vulnerability http://www.securityfocus.com/bid/42569 Thu, 19 Aug 2010 00:26:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: Web Tool Announcement: ismymailsecure.com http://www.securityfocus.com/archive/1/513191 Wed, 18 Aug 2010 17:23:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: Better Security Through Sacrificing Maidens http://www.securityfocus.com/archive/1/513192 Wed, 18 Aug 2010 17:23:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: ACROS Security: Remote Binary Planting in Apple iTunes for Windows (ASPR #2010-08-18-1) http://www.securityfocus.com/archive/1/513190 Wed, 18 Aug 2010 16:02:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: [SECURITY] [DSA 1919-2] New smarty packages fix regression http://www.securityfocus.com/archive/1/513187 Wed, 18 Aug 2010 14:14:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: Re: Geolocation spoofing and other UI woes http://www.securityfocus.com/archive/1/513188 Wed, 18 Aug 2010 14:14:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: Medium security hole in Rekonq web browser http://www.securityfocus.com/archive/1/513189 Wed, 18 Aug 2010 14:14:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Root-Rechte durch Linux-Kernel-Bug [Update] http://www.heise.de/security/meldung/Root-Rechte-durch-Linux-Kernel-Bug-Update-1061153.html/from/atom10 Wed, 18 Aug 2010 13:25:00 GMT Heise Security Heise Security Root-Rechte durch Linux-Kernel-Bug http://www.heise.de/security/meldung/Root-Rechte-durch-Linux-Kernel-Bug-1061153.html/from/atom10 Wed, 18 Aug 2010 13:25:00 GMT Heise Security Heise Security Vuln: PHP "ibase_gen_id()" Function off-by-one Buffer Overflow Vulnerability http://www.securityfocus.com/bid/42516 Wed, 18 Aug 2010 13:20:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Java/Agent.FF http://www.avira.com/de/threats/section/details/id_vir/5473/java_agent_ff.html Danger Level: Low to Medium Threat VDF Version: 7.10.09.249 Erstellt am: Wed, 18 Aug 2010 11:59 +0200 Complete description for this threat can be found hier . Wed, 18 Aug 2010 09:59:01 GMT Avira Avira Java/Agent.AN http://www.avira.com/de/threats/section/details/id_vir/5474/java_agent_an.html Danger Level: Low to Medium Threat VDF Version: 7.10.10.182 Erstellt am: Wed, 18 Aug 2010 10:54 +0200 Complete description for this threat can be found hier . Wed, 18 Aug 2010 08:54:01 GMT Avira Avira TR/Agent.220672 http://www.avira.com/de/threats/section/details/id_vir/5470/tr_agent_220672.html Danger Level: Low to Medium Threat VDF Version: 7.10.10.171 Erstellt am: Wed, 18 Aug 2010 10:43 +0200 Complete description for this threat can be found hier . Wed, 18 Aug 2010 08:43:01 GMT Avira Avira Java/Agent.M.3 http://www.avira.com/de/threats/section/details/id_vir/5472/java_agent_m_3.html Danger Level: Low to Medium Threat VDF Version: 7.10.10.21 Erstellt am: Wed, 18 Aug 2010 10:18 +0200 Complete description for this threat can be found hier . Wed, 18 Aug 2010 08:18:01 GMT Avira Avira TR/Dldr.Zlob.AT.18 http://www.avira.com/de/threats/section/details/id_vir/5471/tr_dldr_zlob_at_18.html Danger Level: Low to Medium Threat VDF Version: 7.10.10.203 Erstellt am: Wed, 18 Aug 2010 10:09 +0200 Complete description for this threat can be found hier . Wed, 18 Aug 2010 08:09:01 GMT Avira Avira TR/Dldr.Zbot.AT.17 http://www.avira.com/de/threats/section/details/id_vir/5469/tr_dldr_zbot_at_17.html Danger Level: Low to Medium Threat VDF Version: 7.10.10.203 Erstellt am: Wed, 18 Aug 2010 09:56 +0200 Complete description for this threat can be found hier . Wed, 18 Aug 2010 07:56:01 GMT Avira Avira Vuln: Pico MP3 Player Multiple Remote Buffer Overflow Vulnerabilities http://www.securityfocus.com/bid/40303 Wed, 18 Aug 2010 00:08:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Vuln: Websense "Via" HTTP Header Web Filtering Security Bypass Vulnerability http://www.securityfocus.com/bid/40465 Tue, 17 Aug 2010 23:14:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: [USN-972-1] FreeType vulnerabilities http://www.securityfocus.com/archive/1/513183 Tue, 17 Aug 2010 21:07:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: [USN-973-1] KOffice vulnerabilities http://www.securityfocus.com/archive/1/513185 Tue, 17 Aug 2010 21:07:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: Geolocation spoofing and other UI woes http://www.securityfocus.com/archive/1/513184 Tue, 17 Aug 2010 21:07:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: [SECURITY] [DSA 2092-1] New lxr-cvs packages fix cross-site scripting http://www.securityfocus.com/archive/1/513186 Tue, 17 Aug 2010 21:07:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Vuln: strongSwan IETF Attribute or Identification Parsing Multiple Remote Code Execution Vulnerabilities http://www.securityfocus.com/bid/42444 Tue, 17 Aug 2010 21:07:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Vuln: WebKit Custom Vertical Positioning Remote Code Execution Vulnerability http://www.securityfocus.com/bid/40659 Tue, 17 Aug 2010 20:13:03 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Vuln: WebKit "history.replaceState" Cross-Origin Information Disclosure Vulnerability http://www.securityfocus.com/bid/41051 Tue, 17 Aug 2010 20:13:03 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Vuln: WebKit SVG Image Pattern Cross Domain Security Bypass Vulnerability http://www.securityfocus.com/bid/40714 Tue, 17 Aug 2010 20:13:03 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Vuln: WebKit CSS-Styled HTML Handling Remote Code Execution Vulnerability http://www.securityfocus.com/bid/40672 Tue, 17 Aug 2010 20:13:03 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: CVE-2010-2234: Apache CouchDB Cross Site Request Forgery Attack http://www.securityfocus.com/archive/1/513174 Tue, 17 Aug 2010 17:04:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: Triologic Media Player 8 (.m3u) Local Universal Unicode Buffer Overflow [SEH] http://www.securityfocus.com/archive/1/513175 Tue, 17 Aug 2010 17:04:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Statistik über veröffentlichungskritische Fehler für das kommende Release http://www.debian.org/News/project/2010/09/index.de.html#17 Nach dem inoffiziellen Zähler für veröffentlichungskritische Fehler hat die kommende Veröffentlichung Debian 6.0 »Squeeze« 245 veröffentlichungskritische Fehler. Wenn man einfach zu behebende oder gerade auf dem Weg der Besserung befindliche Fehler nicht miteinbezieht, bleiben grob 145 veröffentlichungskritische Fehler übrig, die noch bis zur nächsten Veröffentlichung behoben werden müssen. Tue, 17 Aug 2010 16:17:02 GMT Debian Weekly News Debian Weekly News Neue Entwickler und Maintainer http://www.debian.org/News/project/2010/09/index.de.html#16 Sechs Bewerbungen als Debian-Entwickler sind seit der letzten Ausgabe der Debian News akzeptiert worden. Bitte heià Tue, 17 Aug 2010 16:17:02 GMT Debian Weekly News Debian Weekly News Weitere Neuigkeiten http://www.debian.org/News/project/2010/09/index.de.html#15 Die 23. Ausgabe der Tue, 17 Aug 2010 16:17:02 GMT Debian Weekly News Debian Weekly News Alle Dateien aus dem Quellcode bauen http://www.debian.org/News/project/2010/09/index.de.html#14 Nach mehreren Fehlern, bei denen keine Flashdateien gebaut werden konnten, aber vorkompilierte Dateien mitgeliefert wurden, fragte sich Charlie Smotherman, ob es wirklich nötig sei, alle in einem Debianpaket mitgelieferten Dateien aus dem Quellcode bauen zu können. Dies würde gegen die Qualitätszusicherung in à Tue, 17 Aug 2010 16:17:02 GMT Debian Weekly News Debian Weekly News Verschiedene Statistiken über Debian http://www.debian.org/News/project/2010/09/index.de.html#13 Anthony Towns veröffentlichte verschiedene Statistiken über Debian, inklusive der durchschnittlichen Zeit, die ein Fehler braucht, bis er behoben wird, und der Zahl der veröffentlichungskritischen Fehler. Die Diagramme werden mit JavaScript generiert, womit verschiedene Filter und Vergröà Tue, 17 Aug 2010 16:17:02 GMT Debian Weekly News Debian Weekly News Wann sollten von init.d gestartete Dienste betriebsbereit sein? http://www.debian.org/News/project/2010/09/index.de.html#12 Petter Reinholdtsen fragte sich , ob ein von init.d gestarteter Dienst betriebsbereit sein sollte, wenn das Skript erfolgreich beendet ist. Da die Abfolge der Ausführung auf den Abhängigkeiten der Skripte basiert, kann es zu schwierig zu lösenden Problemen kommen (zum Beispiel: #585966 oder #589915 ), wenn die Skripte fertig ausgeführt sind, bevor ihr Dienst vollständig betriebsbereit ist. Ein abhängiger Dienst könnte versuchen, benutzt zu werden, während er noch startet. Josselin Mouette merkte an , dass dies für alle init.d-Skripte zuträfe, die start-stop-daemon mit der Option --background benutzen. Josef Spillner fügte hinzu , dass Skripte bei zeitweiser Unerreichbarkeit eines abhängigen Dienstes in der Lage sein sollten, diese Probleme beispielsweise mit einem späteren Verbindungsversuch zu lösen. Tue, 17 Aug 2010 16:17:02 GMT Debian Weekly News Debian Weekly News DebConf11-Logowettbewerb http://www.debian.org/News/project/2010/09/index.de.html#11 Während die Debian-Entwicklerkonferenz 2010 gerade zu Ende gegangenen ist, haben die Vorbereitungen für die Konferenz 2011 schon begonnen. Ein Beispiel ist der DebConf11-Logo-Wettbewerb , der Ideen und Logos für die in Banja Luka, Bosnien-Herzegowina, stattfindende Konferenz sammelt. Tue, 17 Aug 2010 16:17:02 GMT Debian Weekly News Debian Weekly News DebiChem wird Metapakete für »Squeeze« veröffentlichen http://www.debian.org/News/project/2010/09/index.de.html#10 Das Projekt DebiChem hat ebenfalls Metapakete für »Squeeze« veröffentlicht, die auf Debian Pure Blends aufsetzen. Einen à Tue, 17 Aug 2010 16:17:02 GMT Debian Weekly News Debian Weekly News Debian-GIS wird für »Squeeze« Metapakete für Blends veröffentlichen http://www.debian.org/News/project/2010/09/index.de.html#9 Das Debian-GIS Projekt hat jetzt eine Reihe von Metapaketen veröffentlicht, die Debian-Pure-Blends-Werkzeuge verwenden und in »Testing« verfügbar sind (und somit auch mit »Squeeze« veröffentlicht werden). Der Web Sentinel bietet einen à Tue, 17 Aug 2010 16:17:02 GMT Debian Weekly News Debian Weekly News Debian-Accessibility benutzt Debian Pure Blends Web Sentinel http://www.debian.org/News/project/2010/09/index.de.html#8 Das Debian-Accessibility -Projekt benutzt jetzt einen Web-Dienst von Debian Pure Blends (Web Sentinel), um den Benutzern seine bisherige Arbeit vorzustellen. Dieser Dienst stellt die für ein bestimmtes Blend oder Projekt vorhandenen bzw. benötigten Pakete, sowie deren Abhängigkeiten und Fortschritte dar. Interessierte erfahren mehr unter der Tue, 17 Aug 2010 16:17:02 GMT Debian Weekly News Debian Weekly News ZFS-Unterstützung in »Unstable« für kFreeBSD http://www.debian.org/News/project/2010/09/index.de.html#7 Dank der Bemühungen von Tuco Xyz, Petr Salinger und Aurelien Jarno sind die zfsutils nun, inklusive der relevanten Bibliotheken und einem udeb-Paket für den Debian-Installer für Debian GNU/kFreeBSD paketiert und in »Sid« benutzbar. Dies hat einige Fehler ans Licht gebracht, die aber mittlerweile behoben wurden. Damit wird ZFS jetzt vollständig von Debian GNU/kFreeBSD unterstützt. Tue, 17 Aug 2010 16:17:02 GMT Debian Weekly News Debian Weekly News Erste Testveröffentlichung von Debian Edu/Skolelinux 6.0.0 http://www.debian.org/News/project/2010/09/index.de.html#6 Das DebianEdu-Projekt, welches Debian an die speziellen Bedürfnisse von Schulen und ähnlichen Institutionen anpasst, hat seine erste Testversion veröffentlicht, die auf Debian »Squeeze« basiert. Viele Anwendungen wurden hinzugefügt und auf den neuesten Stand gebracht, sodass Tester extra vorsichtig mit der Paketauswahl sein sollten: fehlende, unnötige und nicht übersetzte Anwendungen sollten gemeldet werden . Tue, 17 Aug 2010 16:17:02 GMT Debian Weekly News Debian Weekly News CD-Images zur »Netzinstallation« mit Firmware verfügbar http://www.debian.org/News/project/2010/09/index.de.html#5 Seit ein paar Wochen sind die CD-Images zur »Netzinstallation« erhältlich. Sie enthalten alles für die Installation eines Basissystems und laden alles Weitere über das Internet herunter. Die Images beinhalten zum Teil nicht freie Firmware für Netzwerk- und WLAN-Komponenten. Nachdem die Images nun getestet sind, wurden sie an ihren endgültigen Platz verschoben und können jetzt von der offiziellen Downloadseite für i386, amd64, und powerpc oder auch als ein CD-Image für alle drei Architekturen heruntergeladen werden. Tue, 17 Aug 2010 16:17:02 GMT Debian Weekly News Debian Weekly News Zweite Alphaversion von »Squeeze« basierend auf Debian-Live-Images http://www.debian.org/News/project/2010/09/index.de.html#4 Daniel Baumann gab die Verfügbarkeit der zweiten Alphaversion von »Squeeze« basierend auf Debian-Live-Images bekannt. Diese kann ohne Installation benutzt und auch über das Netzwerk gestartet werden. Die Images enthalten die Architekturen amd64, i386 und powerpc und ein experimentelles Installationssystem. Tue, 17 Aug 2010 16:17:02 GMT Debian Weekly News Debian Weekly News Ein freies Debian-Buch ist in der Mache http://www.debian.org/News/project/2010/09/index.de.html#3 Die Debian-Entwickler Raphaël Hertzog und Roland Mas haben angekündigt, ihr französisches Debian-Buch ins Englische zu übersetzen. Der Bestseller bietet eine groà Tue, 17 Aug 2010 16:17:02 GMT Debian Weekly News Debian Weekly News Die jährliche Debian-Entwicklerkonferenz ist zu Ende http://www.debian.org/News/project/2010/09/index.de.html#2 Die jährlich stattfindende Debian-Entwicklerkonferenz, DebConf10, die dieses Jahr an der Columbia Universität in New York City tagte, ist am Samstag, 7. August 2010, zu Ende gegangen. Mit über 300 EntwicklerInnen, PaketbetreuerInnen und BenutzerInnen aus 40 Ländern war die Konferenz eine der produktivsten überhaupt. Die Anwesenden tauschten sich untereinander aus, arbeiteten an Projekten, tourten durch New York City und nahmen an Vorträgen teil. à Tue, 17 Aug 2010 16:17:02 GMT Debian Weekly News Debian Weekly News Das Debian Release Team gibt offiziell den Freeze für »Squeeze« bekannt http://www.debian.org/News/project/2010/09/index.de.html#1 Am 6. August gab Adam D. Barratt und der Rest des Debian-Release-Teams bei der DebConf10 in New York City den Freeze für »Squeeze« bekannt, um sich auf die kommende Veröffentlichung zu konzentrieren, welche noch für dieses Jahr vorgesehen ist. Wie Adam D. Barratt sagte, ist dies ein horizontaler à Tue, 17 Aug 2010 16:17:02 GMT Debian Weekly News Debian Weekly News Debian Project News 2010/09 http://www.debian.org/News/project/2010/09/index.de.html#0 Willkommen zur neunten Ausgabe der Debian Projekt News und der ersten deutschen à Tue, 17 Aug 2010 16:17:02 GMT Debian Weekly News Debian Weekly News Vuln: Microsoft Windows Kernel Double Free Local Privilege Escalation Vulnerability http://www.securityfocus.com/bid/42213 Tue, 17 Aug 2010 15:16:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Vuln: Microsoft Windows Kernel Access Control Lists Local Denial of Service Vulnerability http://www.securityfocus.com/bid/42221 Tue, 17 Aug 2010 15:16:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Vuln: Microsoft Windows Kernel Threads Creation Local Privilege Escalation Vulnerability http://www.securityfocus.com/bid/42211 Tue, 17 Aug 2010 15:16:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Polizeibehörden forcieren verdeckte und offene Online-Ermittlungen http://www.heise.de/security/meldung/Polizeibehoerden-forcieren-verdeckte-und-offene-Online-Ermittlungen-1060763.html/from/atom10 Tue, 17 Aug 2010 14:15:00 GMT Heise Security Heise Security Die Facebook-Falle mit dem Dislike-Button http://www.heise.de/security/meldung/Die-Facebook-Falle-mit-dem-Dislike-Button-1060596.html/from/atom10 Tue, 17 Aug 2010 13:40:00 GMT Heise Security Heise Security Hintergrund: Tatort Internet: Matrjoschka in Flash http://www.heise.de/security/artikel/Tatort-Internet-Matrjoschka-in-Flash-1052848.html/from/atom10 Tue, 17 Aug 2010 13:10:00 GMT Heise Security Heise Security Vuln: Spring Framework "class.classLoader" Code Injection Vulnerability http://www.securityfocus.com/bid/40954 Tue, 17 Aug 2010 13:01:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Vuln: Millennium Mp3 Studio ".m3u" File Stack Buffer Overflow Vulnerability http://www.securityfocus.com/bid/40602 Tue, 17 Aug 2010 11:13:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Vuln: Mp3 Millenium ".mpf" File Stack Buffer Overflow Vulnerability http://www.securityfocus.com/bid/40576 Tue, 17 Aug 2010 11:13:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Java/Agent.U http://www.avira.com/de/threats/section/details/id_vir/5468/java_agent_u.html Danger Level: Low Threat VDF Version: 7.10.10.175 Erstellt am: Tue, 17 Aug 2010 12:54 +0200 Complete description for this threat can be found hier . Tue, 17 Aug 2010 10:54:01 GMT Avira Avira Java/Agent.AE http://www.avira.com/de/threats/section/details/id_vir/5467/java_agent_ae.html Danger Level: Low Threat VDF Version: 7.10.10.18 Erstellt am: Tue, 17 Aug 2010 12:25 +0200 Complete description for this threat can be found hier . Tue, 17 Aug 2010 10:25:01 GMT Avira Avira Android-Spiel verschickt heimlich GPS-Koordinaten http://www.heise.de/security/meldung/Android-Spiel-verschickt-heimlich-GPS-Koordinaten-1060353.html/from/atom10 Tue, 17 Aug 2010 10:19:00 GMT Heise Security Heise Security Java/Agent.AJ.1 http://www.avira.com/de/threats/section/details/id_vir/5466/java_agent_aj_1.html Danger Level: Low Threat VDF Version: 7.10.10.171 Erstellt am: Tue, 17 Aug 2010 12:18 +0200 Complete description for this threat can be found hier . Tue, 17 Aug 2010 10:18:01 GMT Avira Avira TR/Renos.CR.1 http://www.avira.com/de/threats/section/details/id_vir/5465/tr_renos_cr_1.html Danger Level: Low to Medium Threat VDF Version: 7.10.10.185 Erstellt am: Tue, 17 Aug 2010 12:11 +0200 Complete description for this threat can be found hier . Tue, 17 Aug 2010 10:11:01 GMT Avira Avira ColdFusion-Lücke kritischer als ursprünglich angenommen http://www.heise.de/security/meldung/ColdFusion-Luecke-kritischer-als-urspruenglich-angenommen-1060214.html/from/atom10 Tue, 17 Aug 2010 09:25:00 GMT Heise Security Heise Security Vuln: Usagi Project mipv6-daemon Unicast Kernel Message Spoofing Vulnerability http://www.securityfocus.com/bid/41524 Tue, 17 Aug 2010 08:04:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Vuln: LXR Cross Referencer "title" Parameter Cross Site Scripting Vulnerability http://www.securityfocus.com/bid/39865 Tue, 17 Aug 2010 00:17:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Vuln: LXR Cross Referencer Version Prior to 0.9.7 Multiple Cross Site Scripting Vulnerabilities http://www.securityfocus.com/bid/41193 Tue, 17 Aug 2010 00:17:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: CVE-2010-3014: Coda Filesystem Kernel Memory Disclosure http://www.securityfocus.com/archive/1/513151 Mon, 16 Aug 2010 22:09:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: [ MDVSA-2010:152 ] apache http://www.securityfocus.com/archive/1/513145 Mon, 16 Aug 2010 21:15:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: [USN-971-1] OpenJDK vulnerabilities http://www.securityfocus.com/archive/1/513148 Mon, 16 Aug 2010 21:15:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: [ MDVSA-2010:153 ] apache http://www.securityfocus.com/archive/1/513146 Mon, 16 Aug 2010 21:15:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: [ MDVSA-2010:154 ] cabextract http://www.securityfocus.com/archive/1/513147 Mon, 16 Aug 2010 21:15:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Vuln: CMSQLite "admin/mediaAdmin.php" Arbitrary File Upload Vulnerability http://www.securityfocus.com/bid/42465 Mon, 16 Aug 2010 20:21:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Vuln: Retired: CruxCMS "login.php" Cross-Site Scripting Vulnerability http://www.securityfocus.com/bid/41501 Mon, 16 Aug 2010 20:21:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: XSS vulnerability in CMSimple http://www.securityfocus.com/archive/1/513137 Mon, 16 Aug 2010 18:06:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: XSRF (CSRF) in CMSimple http://www.securityfocus.com/archive/1/513133 Mon, 16 Aug 2010 17:12:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: XSS vulnerability in CMSimple http://www.securityfocus.com/archive/1/513134 Mon, 16 Aug 2010 17:12:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: XSS vulnerability in CMSimple http://www.securityfocus.com/archive/1/513135 Mon, 16 Aug 2010 17:12:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: Xilisoft Video Converter Wizard 3 ogg file processing DoS http://www.securityfocus.com/archive/1/513136 Mon, 16 Aug 2010 17:12:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: Re: XSS vulnerability in WebPress http://www.securityfocus.com/archive/1/513125 Mon, 16 Aug 2010 16:18:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: Re: XSS vulnerability in Theeta CMS http://www.securityfocus.com/archive/1/513126 Mon, 16 Aug 2010 16:18:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: Re: XSS vulnerability in Eden Platform http://www.securityfocus.com/archive/1/513127 Mon, 16 Aug 2010 16:18:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: Insecure secure cookie in Tornado http://www.securityfocus.com/archive/1/513128 Mon, 16 Aug 2010 16:18:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Schlammschlacht in der Warez-Szene http://www.heise.de/security/meldung/Schlammschlacht-in-der-Warez-Szene-1059385.html/from/atom10 Mon, 16 Aug 2010 15:35:00 GMT Heise Security Heise Security Bugtraq: iDefense Security Advisory 08.10.10: Microsoft Office RTF Parsing Engine Memory Corruption Vulnerability http://www.securityfocus.com/archive/1/513120 Mon, 16 Aug 2010 15:24:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities k9mail für Android mit OpenPGP-Unterstützung http://www.heise.de/security/meldung/k9mail-fuer-Android-mit-OpenPGP-Unterstuetzung-1059498.html/from/atom10 Mon, 16 Aug 2010 12:35:00 GMT Heise Security Heise Security Granada-Charta für verantwortungsvollen Datenschutz in der digitalen Welt http://www.datenschutz.de/news/detail/?nid=4445 16.08.2010 - Der Bundesbeauftragte für den Datenschutz und die Informationsfreiheit: Granada-Charta für verantwortungsvollen Datenschutz in der digitalen Welt Die Internationale Arbeitsgruppe für Datenschutz in [...] Mon, 16 Aug 2010 12:30:02 GMT Virtuelles Datenschutzbuero Virtuelles Datenschutzbuero Ruby-Update behebt XSS-Schwachstelle http://www.heise.de/security/meldung/Ruby-Update-behebt-XSS-Schwachstelle-1059435.html/from/atom10 Mon, 16 Aug 2010 11:25:00 GMT Heise Security Heise Security Authentifizierung unter Windows: Ein schwelendes Sicherheitsproblem http://www.heise.de/security/meldung/Authentifizierung-unter-Windows-Ein-schwelendes-Sicherheitsproblem-1059244.html/from/atom10 Mon, 16 Aug 2010 09:55:00 GMT Heise Security Heise Security Vuln: Ingress Database Server Multiple Remote Vulnerabilities http://www.securityfocus.com/bid/24585 Mon, 16 Aug 2010 09:06:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Java/Agent.AH http://www.avira.com/de/threats/section/details/id_vir/5464/java_agent_ah.html Danger Level: Low to Medium Threat VDF Version: 7.10.10.79 Erstellt am: Mon, 16 Aug 2010 10:51 +0200 Complete description for this threat can be found hier . Mon, 16 Aug 2010 08:51:01 GMT Avira Avira TR/Renos.247296 http://www.avira.com/de/threats/section/details/id_vir/5463/tr_renos_247296.html Danger Level: Low to Medium Threat VDF Version: 7.10.10.182 Erstellt am: Mon, 16 Aug 2010 10:29 +0200 Complete description for this threat can be found hier . Mon, 16 Aug 2010 08:29:01 GMT Avira Avira Vuln: Rosoft Media Player ".m3u" File Buffer Overflow Vulnerability http://www.securityfocus.com/bid/42338 Mon, 16 Aug 2010 08:12:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Vuln: Adobe Acrobat and Reader Font Parsing Remote Code Execution Vulnerability http://www.securityfocus.com/bid/42203 Mon, 16 Aug 2010 08:12:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Java/Agent.R http://www.avira.com/de/threats/section/details/id_vir/5461/java_agent_r.html Danger Level: Low Threat Erstellt am: Mon, 16 Aug 2010 09:12 +0200 Complete description for this threat can be found hier . Mon, 16 Aug 2010 07:12:02 GMT Avira Avira Java/Agent.M.1 http://www.avira.com/de/threats/section/details/id_vir/5462/java_agent_m_1.html Danger Level: Medium to High Threat VDF Version: 7.10.09.92 Erstellt am: Mon, 16 Aug 2010 08:49 +0200 Complete description for this threat can be found hier . Mon, 16 Aug 2010 06:49:02 GMT Avira Avira Vuln: libmikmod Information Disclosure Vulnerability http://www.securityfocus.com/bid/42464 Sun, 15 Aug 2010 22:09:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities RIM bietet Indien Überwachungswerkzeuge an http://www.heise.de/security/meldung/RIM-bietet-Indien-Ueberwachungswerkzeuge-an-1059169.html/from/atom10 Sun, 15 Aug 2010 12:01:00 GMT Heise Security Heise Security Vuln: Microsoft Word Record RTF Parsing Engine Remote Memory Corruption Vulnerability http://www.securityfocus.com/bid/42132 Fri, 13 Aug 2010 21:15:03 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Vuln: Liferay Enterprise Portal "exportFileName" File Creation Remote Code Execution Vulnerability http://www.securityfocus.com/bid/42429 Fri, 13 Aug 2010 20:21:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: Re: Correction to: ZDI-10-151: SAP Crystal Reports 2008 GIOP Message Size Integer Overflow Remote Code Execution Vulnerability http://www.securityfocus.com/archive/1/513103 Fri, 13 Aug 2010 19:27:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: XSS vulnerability in CMS Source http://www.securityfocus.com/archive/1/513099 Fri, 13 Aug 2010 18:06:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: XSS vulnerability in eazyCMS http://www.securityfocus.com/archive/1/513100 Fri, 13 Aug 2010 18:06:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: [MajorSecurity SA-080]WordPress 3.0.1 - Cross Site Scripting Issue http://www.securityfocus.com/archive/1/513101 Fri, 13 Aug 2010 18:06:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: Secunia Research: SWFTools Two Integer Overflow Vulnerabilities http://www.securityfocus.com/archive/1/513102 Fri, 13 Aug 2010 18:06:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: XSS vulnerability in eazyCMS http://www.securityfocus.com/archive/1/513091 Fri, 13 Aug 2010 17:12:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: XSS vulnerability in eazyCMS http://www.securityfocus.com/archive/1/513092 Fri, 13 Aug 2010 17:12:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: XSS vulnerability in eazyCMS http://www.securityfocus.com/archive/1/513093 Fri, 13 Aug 2010 17:12:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: Local File Inclusion in CMS Source http://www.securityfocus.com/archive/1/513094 Fri, 13 Aug 2010 17:12:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: XSS vulnerability in Onyx http://www.securityfocus.com/archive/1/513083 Fri, 13 Aug 2010 16:18:03 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: XSS vulnerability in Edit-X CMS http://www.securityfocus.com/archive/1/513084 Fri, 13 Aug 2010 16:18:03 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: Directory Traversal in SoftX FTP Client http://www.securityfocus.com/archive/1/513085 Fri, 13 Aug 2010 16:18:03 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: Re: Amblog 1.0 Joomla Component Multiple SQL Injection Vulnerabilities http://www.securityfocus.com/archive/1/513076 Fri, 13 Aug 2010 15:24:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: XSRF (CSRF) in Mystic http://www.securityfocus.com/archive/1/513077 Fri, 13 Aug 2010 15:24:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: XSS vulnerability in Mystic http://www.securityfocus.com/archive/1/513078 Fri, 13 Aug 2010 15:24:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: SQL injection vulnerability in SyntaxCMS http://www.securityfocus.com/archive/1/513079 Fri, 13 Aug 2010 15:24:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: Cisco Security Advisory: Cisco IOS Software TCP Denial of Service Vulnerability http://www.securityfocus.com/archive/1/513075 Fri, 13 Aug 2010 14:03:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Details zu Lücken in Palm Pre und Android veröffentlicht http://www.heise.de/security/meldung/Details-zu-Luecken-in-Palm-Pre-und-Android-veroeffentlicht-1058720.html/from/atom10 Fri, 13 Aug 2010 12:55:00 GMT Heise Security Heise Security Google Street View: Noch in diesem Jahr Bilder im Netz - Widerspruch einlegen! http://www.datenschutz.de/news/detail/?nid=4444 13.08.2010 - Der Landesbeauftragte für den Datenschutz Rheinland-Pfalz Pressemitteilung vom 13. August 2010 Google Street View: Noch in diesem Jahr sollen die ersten Bilder [...] Fri, 13 Aug 2010 10:15:01 GMT Virtuelles Datenschutzbuero Virtuelles Datenschutzbuero Vorab-Widerspruch gegen Veröffentlichungen in Street View: So funktioniert"s http://www.datenschutz.de/news/detail/?nid=4443 13.08.2010 - (hmbbfdi, 13.8.2010) Im Zuge der Verhandlungen über die Einführung des Internetdienstes Google Street View in Deutschland hat sich Google im [...] Fri, 13 Aug 2010 09:21:02 GMT Virtuelles Datenschutzbuero Virtuelles Datenschutzbuero TR/Spy.Agent.aam.1 http://www.avira.com/de/threats/section/details/id_vir/5458/tr_spy_agent_aam_1.html Danger Level: Low to Medium Threat VDF Version: 7.10.10.154 Erstellt am: Fri, 13 Aug 2010 10:35 +0200 Complete description for this threat can be found hier . Fri, 13 Aug 2010 08:35:01 GMT Avira Avira Apple patcht QuickTime für Windows http://www.heise.de/security/meldung/Apple-patcht-QuickTime-fuer-Windows-1058255.html/from/atom10 Fri, 13 Aug 2010 08:20:00 GMT Heise Security Heise Security TR/Hosts.AQ.1 http://www.avira.com/de/threats/section/details/id_vir/5456/tr_hosts_aq_1.html Danger Level: Medium to High Threat VDF Version: 7.10.10.121 Erstellt am: Fri, 13 Aug 2010 09:45 +0200 Complete description for this threat can be found hier . Fri, 13 Aug 2010 07:45:01 GMT Avira Avira TR/Obfuscate.IX.214 http://www.avira.com/de/threats/section/details/id_vir/5460/tr_obfuscate_ix_214.html Danger Level: Low to Medium Threat VDF Version: 7.10.03.235 Erstellt am: Fri, 13 Aug 2010 05:49 +0200 Complete description for this threat can be found hier . Fri, 13 Aug 2010 03:49:01 GMT Avira Avira Worm/Rimecud.B.312 http://www.avira.com/de/threats/section/details/id_vir/5459/worm_rimecud_b_312.html Danger Level: Low to Medium Threat VDF Version: 7.10.07.44 Erstellt am: Fri, 13 Aug 2010 05:40 +0200 Complete description for this threat can be found hier . Fri, 13 Aug 2010 03:40:01 GMT Avira Avira Worm/Palevo.aglo http://www.avira.com/de/threats/section/details/id_vir/5457/worm_palevo_aglo.html Danger Level: Low to Medium Threat VDF Version: 7.10.07.111 Erstellt am: Fri, 13 Aug 2010 05:32 +0200 Complete description for this threat can be found hier . Fri, 13 Aug 2010 03:32:01 GMT Avira Avira Vuln: sSMTP "standardize()" Buffer Overflow Vulnerability http://www.securityfocus.com/bid/41965 Thu, 12 Aug 2010 23:03:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Vuln: Drupal DRUPAL-SA-CORE-2010-002 Multiple Remote Vulnerabilities http://www.securityfocus.com/bid/42391 Thu, 12 Aug 2010 23:03:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Cisco IOS Software TCP Denial of Service Vulnerability http://www.cisco.com/en/US/products/products_security_advisory09186a0080b4095e.shtml Cisco IOS Software Release, 15.1(2)T is affected by a denial of service (DoS) vulnerability during the TCP establishment phase. The vulnerability could cause embryonic TCP connections to remain in a SYNRCVD or SYNSENT state. Enough embryonic TCP connections in these states could consume system resources and prevent an affected device from accepting or initiating new TCP connections, including any TCP-based remote management access to the device. Thu, 12 Aug 2010 21:30:00 GMT Cisco Security Advisories Cisco Security Advisories Bugtraq: [SECURITY] [DSA 2091-1] New squirrelmail packages fix cross-site request forgery http://www.securityfocus.com/archive/1/513061 Thu, 12 Aug 2010 21:24:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: [ MDVSA-2010:149 ] freetype2 http://www.securityfocus.com/archive/1/513058 Thu, 12 Aug 2010 20:03:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: [ MDVSA-2010:148 ] pidgin http://www.securityfocus.com/archive/1/513051 Thu, 12 Aug 2010 19:09:13 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Vuln: PrimeKey EJBCA Admin GUI Cross Site Scripting Vulnerability http://www.securityfocus.com/bid/41158 Thu, 12 Aug 2010 17:21:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Jailbreak-Community entwickelt eigenen iPhone-Patch http://www.heise.de/security/meldung/Jailbreak-Community-entwickelt-eigenen-iPhone-Patch-1057677.html/from/atom10 Thu, 12 Aug 2010 15:40:00 GMT Heise Security Heise Security Bugtraq: ZDI-10-153: Apple Webkit SVG Floating Text Element Remote Code Execution Vulnerability http://www.securityfocus.com/archive/1/513038 Thu, 12 Aug 2010 15:06:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: ZDI-10-154: Apple Webkit Button First-Letter Style Rendering Remote Code Execution Vulnerability http://www.securityfocus.com/archive/1/513039 Thu, 12 Aug 2010 15:06:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: Secunia Research: Opera "Download" Dialog File Execution Security Issue http://www.securityfocus.com/archive/1/513040 Thu, 12 Aug 2010 15:06:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Vuln: Apache HTTP Server Multiple Remote Denial of Service Vulnerabilities http://www.securityfocus.com/bid/41963 Thu, 12 Aug 2010 15:06:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Opera 10.61 schließt Sicherheitslücken http://www.heise.de/security/meldung/Opera-10-61-schliesst-Sicherheitsluecken-1057911.html/from/atom10 Thu, 12 Aug 2010 14:45:00 GMT Heise Security Heise Security Bugtraq: [USN-970-1] GnuPG2 vulnerability http://www.securityfocus.com/archive/1/513035 Thu, 12 Aug 2010 14:12:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: ZDI-10-151: Microsoft Office Word 2007 plcffldMom Parsing Remote Code Execution Vulnerability http://www.securityfocus.com/archive/1/513036 Thu, 12 Aug 2010 14:12:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: ZDI-10-152: Apple WebKit RTL LineBox Overflow Remote Code Execution Vulnerability http://www.securityfocus.com/archive/1/513037 Thu, 12 Aug 2010 14:12:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities TR/Drop.Wsgame.A http://www.avira.com/de/threats/section/details/id_vir/5450/tr_drop_wsgame_a.html Danger Level: Medium to High Threat VDF Version: 7.10.09.196 Erstellt am: Thu, 12 Aug 2010 15:31 +0200 Complete description for this threat can be found hier . Thu, 12 Aug 2010 13:31:01 GMT Avira Avira DSA-2091 squirrelmail - No user-specific token implemented http://www.debian.org/security/2010/dsa-2091 SquirrelMail, a webmail application, does not employ a user-specific token for webforms. This allows a remote attacker to perform a Cross Site Request Forgery (CSRF) attack. The attacker may hijack the authentication of unspecified victims and send messages or change user preferences among other actions, by tricking the victim into following a link controled by the offender. Thu, 12 Aug 2010 12:32:01 GMT Debian-Sicherheit Debian-Sicherheit An der Felge erkannt http://www.heise.de/security/meldung/An-der-Felge-erkannt-1057409.html/from/atom10 Thu, 12 Aug 2010 12:30:00 GMT Heise Security Heise Security Vuln: ZNC Multiple Denial Of Service Vulnerabilities http://www.securityfocus.com/bid/42314 Thu, 12 Aug 2010 12:24:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Worm/IrcBot.dyt http://www.avira.com/de/threats/section/details/id_vir/5455/worm_ircbot_dyt.html Danger Level: Medium Threat VDF Version: 7.10.09.33 Erstellt am: Thu, 12 Aug 2010 13:28 +0200 Complete description for this threat can be found hier . Thu, 12 Aug 2010 11:28:01 GMT Avira Avira Worm/Palevo.2 http://www.avira.com/de/threats/section/details/id_vir/5454/worm_palevo_2.html Danger Level: Medium Threat VDF Version: 7.10.09.11 Erstellt am: Thu, 12 Aug 2010 13:24 +0200 Complete description for this threat can be found hier . Thu, 12 Aug 2010 11:24:01 GMT Avira Avira TR/Agent.161280 http://www.avira.com/de/threats/section/details/id_vir/5441/tr_agent_161280.html Danger Level: Medium Threat VDF Version: 8.02.04.34 Erstellt am: Thu, 12 Aug 2010 13:22 +0200 Complete description for this threat can be found hier . Thu, 12 Aug 2010 11:22:01 GMT Avira Avira TR/Spy.Agent.144896 http://www.avira.com/de/threats/section/details/id_vir/5438/tr_spy_agent_144896.html Danger Level: Medium to High Threat VDF Version: 7.10.09.249 Erstellt am: Thu, 12 Aug 2010 13:07 +0200 Complete description for this threat can be found hier . Thu, 12 Aug 2010 11:07:01 GMT Avira Avira WORM/Esfury.A.91 http://www.avira.com/de/threats/section/details/id_vir/5442/worm_esfury_a_91.html Danger Level: Low to Medium Threat VDF Version: 7.10.03.196 Erstellt am: Thu, 12 Aug 2010 13:04 +0200 Complete description for this threat can be found hier . Thu, 12 Aug 2010 11:04:01 GMT Avira Avira Worm/Palevo.1 http://www.avira.com/de/threats/section/details/id_vir/5437/worm_palevo_1.html Danger Level: Medium Threat VDF Version: 7.10.09.11 Erstellt am: Thu, 12 Aug 2010 12:48 +0200 Complete description for this threat can be found hier . Thu, 12 Aug 2010 10:48:01 GMT Avira Avira Worm/Palevo.amzc http://www.avira.com/de/threats/section/details/id_vir/5440/worm_palevo_amzc.html Danger Level: Low to Medium Threat VDF Version: 7.10.08.153 Erstellt am: Thu, 12 Aug 2010 12:24 +0200 Complete description for this threat can be found hier . Thu, 12 Aug 2010 10:24:01 GMT Avira Avira Worm/IrcBot.96396 http://www.avira.com/de/threats/section/details/id_vir/5436/worm_ircbot_96396.html Danger Level: Medium Threat VDF Version: 7.10.06.198 Erstellt am: Thu, 12 Aug 2010 12:23 +0200 Complete description for this threat can be found hier . Thu, 12 Aug 2010 10:23:01 GMT Avira Avira Botnet greift SSH-Server an http://www.heise.de/security/meldung/Botnet-greift-SSH-Server-an-1057364.html/from/atom10 Thu, 12 Aug 2010 10:20:00 GMT Heise Security Heise Security Vuln: Microsoft Silverlight ActiveX Control Pointer Memory Corruption Vulnerability http://www.securityfocus.com/bid/42138 Thu, 12 Aug 2010 10:09:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities TR/FraudPack.I http://www.avira.com/de/threats/section/details/id_vir/5434/tr_fraudpack_i.html Danger Level: Medium to High Threat VDF Version: 7.10.09.88 Erstellt am: Thu, 12 Aug 2010 10:43 +0200 Complete description for this threat can be found hier . Thu, 12 Aug 2010 08:43:01 GMT Avira Avira TR/Bredolab.CM.1 http://www.avira.com/de/threats/section/details/id_vir/5435/tr_bredolab_cm_1.html Danger Level: Medium Threat VDF Version: 7.10.10.125 Erstellt am: Thu, 12 Aug 2010 10:43 +0200 Complete description for this threat can be found hier . Thu, 12 Aug 2010 08:43:01 GMT Avira Avira TR/Crypter.F.13 http://www.avira.com/de/threats/section/details/id_vir/5433/tr_crypter_f_13.html Danger Level: Medium to High Threat VDF Version: 7.10.09.252 Erstellt am: Thu, 12 Aug 2010 10:21 +0200 Complete description for this threat can be found hier . Thu, 12 Aug 2010 08:21:01 GMT Avira Avira Italien: Nacktscanner-Test abgebrochen http://www.datenschutz.de/news/detail/?nid=4442 12.08.2010 - In Italien wurde der Probeeinsatz von Nacktscannern an mehreren Flughäfen abgebrochen. Nach Behördenangaben waren die Bilder nicht scharf genug, wie [...] Thu, 12 Aug 2010 07:42:02 GMT Virtuelles Datenschutzbuero Virtuelles Datenschutzbuero Apple schließt Jailbreakme-Lücke [Update] http://www.heise.de/security/meldung/Apple-schliesst-Jailbreakme-Luecke-Update-1056807.html/from/atom10 Thu, 12 Aug 2010 07:35:00 GMT Heise Security Heise Security HTML/ExpKit.Gen2 http://www.avira.com/de/threats/section/details/id_vir/5424/html_expkit_gen2.html Danger Level: Low Threat Erstellt am: Thu, 12 Aug 2010 08:23 +0200 Complete description for this threat can be found hier . Thu, 12 Aug 2010 06:23:01 GMT Avira Avira Apple schließt Jailbreak-Lücken http://hoax-info.tubit.tu-berlin.de/blog/?10216 Neue iOS-Versionen für iPhone, iPod touch und iPad ... Thu, 12 Aug 2010 02:20:00 GMT Hoax-Info Hoax-Info Vuln: Sonique ".pls" File Remote Buffer Overflow Vulnerability http://www.securityfocus.com/bid/40306 Thu, 12 Aug 2010 00:06:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Vuln: SquirrelMail Remote Denial of Service Vulnerability http://www.securityfocus.com/bid/42399 Wed, 11 Aug 2010 23:12:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Vuln: WebKit Editable Containers Remote Code Execution Vulnerability http://www.securityfocus.com/bid/40646 Wed, 11 Aug 2010 22:18:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Vuln: WebKit HTML Tables Remote Code Execution Vulnerability http://www.securityfocus.com/bid/40671 Wed, 11 Aug 2010 22:18:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Vuln: WebKit Option Element "ContentEditable" Attribute Remote Code Execution Vulnerability http://www.securityfocus.com/bid/40647 Wed, 11 Aug 2010 22:18:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Vuln: Microsoft Windows SChannel Certificate Request Remote Code Execution Vulnerability http://www.securityfocus.com/bid/42246 Wed, 11 Aug 2010 20:12:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities MetaRheinMain ChaosDays 1001b http://www.ccc.de/de/updates/2010/metarheinmain-chaosdays-1001b Beyond Science Fiction Wed, 11 Aug 2010 19:22:00 GMT CCC Newsticker CCC Newsticker Vuln: Microsoft Internet Explorer "boundElements" Use-After-Free Error Remote Code Execution Vulnerability http://www.securityfocus.com/bid/42288 Wed, 11 Aug 2010 19:18:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Vuln: Microsoft Internet Explorer "OnPropertyChange_Src()" Remote Code Execution Vulnerability http://www.securityfocus.com/bid/42257 Wed, 11 Aug 2010 19:18:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: RE: Correction to: ZDI-10-151: SAP Crystal Reports 2008 GIOP Message Size Integer Overflow Remote Code Execution Vulnerability http://www.securityfocus.com/archive/1/513024 Wed, 11 Aug 2010 18:24:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Vuln: SEIL IPv6 Denial of Service Vulnerability http://www.securityfocus.com/bid/42330 Wed, 11 Aug 2010 18:24:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Vuln: myPhile "myuser" Parameter Authentication Bypass Vulnerability http://www.securityfocus.com/bid/42333 Wed, 11 Aug 2010 18:24:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Vuln: Microsoft Internet Explorer Table Element Use After Free Remote Code Execution Vulnerability http://www.securityfocus.com/bid/42292 Wed, 11 Aug 2010 18:24:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities lost+found: Verräterische Schmierereien auf Smartphones, Scanner findet veraltete Web-Apps http://www.heise.de/security/meldung/lost-found-Verraeterische-Schmierereien-auf-Smartphones-Scanner-findet-veraltete-Web-Apps-1054611.html/from/atom10 Wed, 11 Aug 2010 17:15:00 GMT Heise Security Heise Security Bugtraq: Cisco Security Advisory: Multiple Vulnerabilities in the Cisco ACE Application Control Engine Module and Cisco ACE 4710 Application Control Engine http://www.securityfocus.com/archive/1/513020 Wed, 11 Aug 2010 17:03:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: Cisco Security Advisory: SQL Injection Vulnerability in Cisco Wireless Control System http://www.securityfocus.com/archive/1/513021 Wed, 11 Aug 2010 17:03:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: Secunia Research: glpng PNG Processing Two Integer Overflow Vulnerabilities http://www.securityfocus.com/archive/1/513022 Wed, 11 Aug 2010 17:03:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: ZDI-10-151: SAP Crystal Reports 2008 GIOP Message Size Integer Overflow Remote Code Execution Vulnerability http://www.securityfocus.com/archive/1/513023 Wed, 11 Aug 2010 17:03:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Vuln: RETIRED: PHP Multi User Randomizer "getid3.php" Remote File Disclosure Vulnerability http://www.securityfocus.com/bid/42353 Wed, 11 Aug 2010 17:03:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Vuln: Microsoft Word "sprmCMajority" Record Parsing Remote Code Execution Vulnerability http://www.securityfocus.com/bid/42136 Wed, 11 Aug 2010 17:03:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Vuln: Microsoft Internet Explorer "CIframeElement" Use After Free Remote Code Execution Vulnerability http://www.securityfocus.com/bid/42289 Wed, 11 Aug 2010 17:03:01 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: VUPEN Security Research - Microsoft Internet Explorer Table Element Use-after-free Vulnerability (CVE-2010-2560) http://www.securityfocus.com/archive/1/513009 Wed, 11 Aug 2010 16:09:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: Microsoft Office Word HTML Linked Objects Memory Corruption Vulnerability - CVE-2010-1903 http://www.securityfocus.com/archive/1/513010 Wed, 11 Aug 2010 16:09:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: PR10-07: Unauthenticated File Retrieval (traversal) within ColdFusion administration console http://www.securityfocus.com/archive/1/513006 Wed, 11 Aug 2010 16:09:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Bugtraq: Collisions in PDF signatures http://www.securityfocus.com/archive/1/513011 Wed, 11 Aug 2010 16:09:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities SQL Injection Vulnerability in Cisco Wireless Control System http://www.cisco.com/en/US/products/products_security_advisory09186a0080b4091e.shtml Cisco Wireless Control System (WCS) contains a SQL injection vulnerability that could allow an authenticated attacker full access to the vulnerable device, including modification of system configuration; create, modify and delete users; or modify the configuration of wireless devices managed by WCS. Wed, 11 Aug 2010 16:00:00 GMT Cisco Security Advisories Cisco Security Advisories Multiple Vulnerabilities in the Cisco ACE Application Control Engine Module and Cisco ACE 4710 Application Control Engine http://www.cisco.com/en/US/products/products_security_advisory09186a0080b4091d.shtml The Cisco ACE Application Control Engine Module and Cisco ACE 4710 Application Control Engine contain the following DoS vulnerabilities: Real-Time Streaming Protocol (RTSP) inspection DoS vulnerability HTTP, RTSP, and Session Initiation Protocol (SIP) inspection DoS vulnerability Secure Socket Layer (SSL) DoS vulnerability SIP inspection DoS vulnerability Wed, 11 Aug 2010 16:00:00 GMT Cisco Security Advisories Cisco Security Advisories Vuln: RETIRED: Adobe Flash Player 10.1.53.64 and AIR 2.0.2.12610 Multiple Remote Vulnerabilities http://www.securityfocus.com/bid/42341 Wed, 11 Aug 2010 15:15:10 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities Vuln: Play! Framework Directory Traversal Vulnerability http://www.securityfocus.com/bid/42340 Wed, 11 Aug 2010 13:26:02 GMT SecurityFocus Vulnerabilities SecurityFocus Vulnerabilities