Skip to main content

Networking

Building an E-mail Virus Detection System for Your Network

posted onNovember 22, 2001
by hitbsecnews

The basic outline of the system consists of using Bash scripts, metamail, grep, the Obtuse Systems' smtpd product, Samba and a command-line virus scanner. A flowchart-style diagram can be found in Figure 1. The Obtuse Systems' SMTP store and forward package is freely available at www.obtuse.com/smtpd.html. The current version as of this writing is version 2.0. The virus scanner I chose was McAfee Virus Scan for UNIX/Linux, but there are quite a few others to choose from. Some are free and some are not.

MS victim of humorous DNS non-hack

posted onNovember 21, 2001
by hitbsecnews

Source: The Register

Someone has again associated at least fifty (probably more) domain names with microsoft.com, and given them humorous titles tending to disparage the mighty Redmond Leviathan.

A DNS lookup of "microsoft.com" at SamSpade.org yields a list of domains such as:

MICROSOFT.COM.IS.SO.VERY.SKANKY.NET
MICROSOFT.COM.IS.HOPELESSLY.INSECURE.ORG
MICROSOFT.COM.IS.SECRETLY.RUN.BY.ILLUMINATI.TERRORISTS.NET
MICROSOFT.COM.SHOULD.GIVE.UP.BECAUSE.LINUXISGOD.COM

Hackers access Playboy.com's credit card data

posted onNovember 21, 2001
by hitbsecnews

L33tdawg: Can you say 'got pr0n?!' hehehehe :)

Source: CNN

Computer hackers broke into the Playboy Enterprises' Web site -- playboy.com -- gaining access to the credit card numbers of several customers, a company spokeswoman said Tuesday.

The company's technology team discovered the breach last weekend before the hackers sent threatening e-mails to the company's customers, said Playboy spokeswoman Laura Sigman. Consumers began alerting Playboy about the violation Sunday evening.

New Worm Targets Microsoft SQL Servers

posted onNovember 21, 2001
by hitbsecnews

A new Internet worm that targets poorly secured systems running Microsoft's SQL Server software is on the loose but unlikely to spread widely, security experts reported today. The worm, which has not yet been named, appears to target Microsoft SQL servers which have no password on the system administrator account, according to a preliminary analysis of the code by participants on Incidents, a mailing list for tracking computer intrusions.

ProCheckUp Identifies Multiple Vulnerabilities in Linux-Mandrake

posted onNovember 20, 2001
by hitbsecnews

CERT are set to publish details of the vulnerabilities discovered by Internet Security Company ProCheckUp Ltd in Linux-Mandrake, the leading Linux distribution, by volume.

1. Apache Mandrake has supplied a number of Apache sample programs, which provide detailed configuration information to attackers about the Apache server configuration (CERT Reference VU#898480).

Top 10 Security Threats for Windows 2000 and Windows NT

posted onNovember 20, 2001
by hitbsecnews

Source: Xatrix

L33tdawg: NT more secure than Linux eh? Check this out.

Some appreciated world security experts realesed "Top 10 Security Threats" for Windows 2000 and Windows NT. First place was reserved for IIS RDS vulnerability, which especially was popular by Eastern European hackers to break into over 40 banks in the United States and around the world...

London Firms Risk Drive-by Hacks

posted onNovember 16, 2001
by hitbsecnews

Source: AnywhereYouGo

City [of London] and financial institutions are at risk from 'drive-by' hackers because they have not secured their wireless networks.

A group of security experts have revealed how easy it is to access data from outside a company building. Consultants from Orthus picked up signals from 124 company wireless local area networks (Lans) in and around the City.

Ideas for Selling Security

posted onNovember 16, 2001
by hitbsecnews

By Dana Blankenhorn

ISPworld News

Selling security as a service is a continuing theme here, and ISP Executive recently got a chance to discuss the subject with an expert.

Ashok Kalle is president of Pathway Communications, a Toronto company that has offered management services to local and wide area networks since 1995, and has since become one of the largest privately-owned Canadian ISPs, both in terms of revenues and customer base.

IE Security Hole Found - potential to expose personal info

posted onNovember 15, 2001
by hitbsecnews

Source: ABCNews

Microsoft has warned users that versions of its Internet Explorer browser could leave their personal information, such as passwords and credit card numbers, exposed.
The flaw in IE 5.5 and 6.0, which the company rated as a "high" risk, could allow an outsider to break into users' cookies — small electronic files used by websites as a way to store information on hard drives — and steal or alter information such as e-mail user names, passwords, and credit card numbers.