Gregg's Security News Aggregator

Tue, 27 Jul 2004 02:17:09 GMT

---------------------------------------------------------------------- CNET News.com ----------------------------------------------------------------------
1.	Lawmakers look to curb e-mail eavesdropping. Members of House of Representatives hope to prevent repeat of court decision acquitting man accused of e-mail interception.
2.	Computer Sciences lands deal worth up to $1.3 billion. Technology services company snags seven-year outsourcing contract with Zurich Financial Services.
3.	BlackBerry-like service offered for other devices. Cingular offers two new business services that will let it sell BlackBerry pager-like services to users of devices that aren't BlackBerries.
4.	Philip Morris gets burned for trashing e-mail. Tobacco giant fined $2.75 million for deleting e-mail after judge ordered company to preserve it.
---------------------------------------------------------------------- Slashdot: ----------------------------------------------------------------------
5.	Visiting Every Latitude and Longitude Intersection
6.	Maybe Software Patents Won't Kill FOSS After All
---------------------------------------------------------------------- InfoWorld: Top News ----------------------------------------------------------------------
7.	IBM extends DB2 Content Manager with open standards. SAN JOSE, CALIF. -- IBM on Monday extolled the value of open standards as it revealed plans to expand Web services, XML, and Java interoperability in the next version of its DB2 Content Manager.
8.	New Web mail service launched. BuyDomains.com has launched a free Web-based e-mail service that shuns pop-up ads and gives users 150M bytes of in-box storage and the option of choosing from 130 pre-selected domain names for their e-mail address.
---------------------------------------------------------------------- SecurityFocus Vulns ----------------------------------------------------------------------
9.	BugTraq: [ GLSA 200407-20 ] Subversion: Vulnerability in mod_authz_svn. Sender: Joshua J dot Berry [condordes at gentoo dot org]
10.	BugTraq: OSX Panther Internet Connect - Local root. Sender: [br00t at blueyonder dot co dot uk]

Mon, 26 Jul 2004 14:24:00 GMT

---------------------------------------------------------------------- CNET News.com ----------------------------------------------------------------------
1.	Google sets its IPO price range. The search giant sets a price range of $108 to $135 a share, putting itself in line to be one of the largest-ever initial stock offerings.
2.	Apache's Java server delayed. Open-source developers won't have the Geronimo project's Java application server written on time to hit target date.
---------------------------------------------------------------------- Yahoo! News - Technology ----------------------------------------------------------------------
3.	WLANs Exposed by Hack (Ziff Davis). Ziff Davis - Aruba is set to publicize a RADIUS server attack that can thwart any WLAN infrastructure that keeps encryption keys housed in access points rather than on a central switch.
4.	'Cybernauts' Gather in Spain for Party (AP). AP - Close to 5,000 'cybernauts' gathered Monday for a weeklong computer party in the southeastern city of Valencia, giving participants a chance to play Internet games and study the latest industry developments together under one giant tent.
---------------------------------------------------------------------- Slashdot: ----------------------------------------------------------------------
5.	Celebrity Casting For LOTR
---------------------------------------------------------------------- InfoWorld: Top News ----------------------------------------------------------------------
6.	eEye lifts the lid on endpoint security product. EEye Digital Security Inc. announced a new end-point security product on Monday that it says will help organizations stop attacks launched from the Internet that use previously unknown, or "zero day," software vulnerabilities.
7.	EMC, FileNet blend content management, storage, BPM. The role of content management in the enterprise is expanding as vendors such as EMC and FileNet build new hooks into storage and business process management technologies.
8.	DataFlux launches Release 6.2. With the growing awareness of the importance of data quality, major data management companies are ramping up their real-time features and talking up the business value.
---------------------------------------------------------------------- LinuxSecurity.com ----------------------------------------------------------------------
9.	Cybersecurity experts wanted
---------------------------------------------------------------------- The Register ----------------------------------------------------------------------
10.	IBM 'readying dual-core G5'. PowerPC 970MP could get Apple to 3GHz at last...
11.	AMD knocks up to 30% off Athlon 64 prices. But FX and XP prices rise
12.	dabs.com owner goes on TV. Atherton broadcasts to the nation...
13.	Vegas braces for DEFCON. Preview Showtime
14.	IT industry warned over wasted money. UK biz not happy
15.	Seagate extends HDD warranties to five years. Mainstream drives now match enterprise products
---------------------------------------------------------------------- NewsIsFree: Security ----------------------------------------------------------------------
16.	Mozilla / Mozilla Firefox "onunload" SSL Certificate Spoofing
17.	Red Hat update for samba
18.	InstallAnywhere Insecure Temporary File Creation Vulnerability
19.	AbiWord "wv" Library Buffer Overflow Vulnerability
20.	Fedora update for abiword
21.	Fedora update for php
22.	EasyWeb FileManager "pathext" Directory Traversal
23.	OpenDocMan "commitchange.php" Unauthorised Commitment of Changes
24.	E-commerce attack tops McAfee's threat ranking

Mon, 26 Jul 2004 13:23:39 GMT

---------------------------------------------------------------------- BBC News \| Technology \| UK Edition ----------------------------------------------------------------------
1.	Olivier resurrected for film role. Footage of Sir Laurence Olivier will be used to create a villain in new fantasy film, Sky Captain and the World of Tomorrow.
2.	International sales boost eBay. The online auction firm, eBay, increases its revenues from outside the United States by 76% in the second quarter.
3.	U2 'may release on iTunes early'. Rock band U2 could rush-release their new album on iTunes if pirated material turns up on the internet.
4.	Customer boost at Vodafone. The mobile phone giant reports a bigger-than-expected rise in user numbers but problems remain at its Japanese unit.
5.	Sudan web appeal hits record high. Donations to a UK appeal to help the Sudan humanitarian crisis are flooding in over the internet.
---------------------------------------------------------------------- Yahoo! News - Technology ----------------------------------------------------------------------
6.	RealNetworks Says Files Can Play on IPod (AP). AP - RealNetworks Inc. says it has created technology that allows songs purchased through its online music services to be played on Apple Computer Inc.'s popular iPod player, just a few months after complaining that Apple was rebuffing attempts to form an alliance.
7.	Bloggers Offer Inside View of Convention (AP). AP - The food at receptions, the wonkish policy details debated over breakfast, the gossip on the convention floor — in an age when the personal is political, blogs and conventions are a natural fit.
---------------------------------------------------------------------- Slashdot: ----------------------------------------------------------------------
8.	Real Networks Hacks iPod; .rm & Real Store for iPod
9.	HP Releases New iPAQs
---------------------------------------------------------------------- LinuxSecurity.com ----------------------------------------------------------------------
10.	E-commerce attack is imminent, warn security experts
11.	An eye opener on open source Internet security
---------------------------------------------------------------------- The Register ----------------------------------------------------------------------
12.	Skype preps pre-pay service for the world. Anytime, anyplace, anywhere....
13.	Sage co-founder goes to Glasgow. Wylie picks up another reseller, and a chief exec
14.	IBM said to be readying dual-core G5. The PowerPC 970MP could finally get Apple to 3GHz
---------------------------------------------------------------------- NewsIsFree: Security ----------------------------------------------------------------------
15.	McAfee Names Worst Viruses (PC World)
16.	Success of Bagle Virus Puzzles Researchers

Mon, 26 Jul 2004 10:22:39 GMT

---------------------------------------------------------------------- Yahoo! News - Technology ----------------------------------------------------------------------
1.	Technology Secures Even Newfound Flaws (PC World). PC World - Security firm eEye crafts Blink software with the smarts to identify initial attacks.
---------------------------------------------------------------------- NewsIsFree: Security ----------------------------------------------------------------------
2.	Tech World: Completely secure networks get one step closer "Single photon research means quantum...
3.	Security Focus: Linux Kernel Unspecified Local Denial of Service Vulnerability "only affects ia6...

Mon, 26 Jul 2004 08:21:59 GMT

---------------------------------------------------------------------- Dilbert ----------------------------------------------------------------------
1.	Dilbert for 26 Jul 2004.
---------------------------------------------------------------------- BBC News \| Technology \| UK Edition ----------------------------------------------------------------------
2.	Customer number boost at Vodafone. The mobile phone giant reports a bigger-than-expected rise in user numbers but problems remain at its Japanese unit.
3.	Bloggers take on US conventions. While some traditional media are treating US political conventions with contempt, webloggers are being welcomed.
---------------------------------------------------------------------- Yahoo! News - Technology ----------------------------------------------------------------------
4.	HP Unveils New IPaqs (PC World). PC World - Pocket PC PDAs target everyone from digital entertainment enthusiasts to corporate travelers.
---------------------------------------------------------------------- Slashdot: ----------------------------------------------------------------------
5.	Unix's Founding Fathers

Mon, 26 Jul 2004 04:29:09 GMT

Mon, 26 Jul 2004 03:28:49 GMT

---------------------------------------------------------------------- CNET News.com ----------------------------------------------------------------------
1.	RealNetworks breaks Apple's hold on iPod. Real's Rob Glaser and Apple's Steve Jobs have feuded before. RealNetworks' iPod hack is likely to ruffle feathers again.
---------------------------------------------------------------------- Yahoo! News - Technology ----------------------------------------------------------------------
2.	RealNetworks Says Files Can Play on iPod (AP). AP - RealNetworks Inc. says it has created technology that allows songs purchased through its online music services to be played on Apple Computer Inc.'s popular iPod player, just a few months after complaining that Apple was rebuffing attempts to form an alliance.
---------------------------------------------------------------------- Slashdot: ----------------------------------------------------------------------
3.	Canadian Music Industry Drills Dentists

Mon, 26 Jul 2004 02:28:29 GMT

---------------------------------------------------------------------- CNET News.com ----------------------------------------------------------------------
1.	HP to Dick Tracy: Bet your phone can't do this. Gadget can switch from cellular networks to Wi-Fi. Also plays and stores MP3s, takes photos.

Mon, 26 Jul 2004 01:28:09 GMT

---------------------------------------------------------------------- Slashdot: ----------------------------------------------------------------------
1.	The Ultimate Nintendo Console
---------------------------------------------------------------------- NewsIsFree: Security ----------------------------------------------------------------------
2.	phpBB privmsg.php mode Variable XSS

Sun, 25 Jul 2004 22:27:09 GMT

---------------------------------------------------------------------- Slashdot: ----------------------------------------------------------------------
1.	Vaccinated Against Vices?
---------------------------------------------------------------------- SecurityFocus Vulns ----------------------------------------------------------------------
2.	Vulns: Sun ONE Application Server Plaintext Password Vulnerability. Sun ONE Application Server is the application server solution distributed and maintained by Sun Microsystems. It is available for the Unix, Linux, and Microsoft platform...
---------------------------------------------------------------------- NewsIsFree: Security ----------------------------------------------------------------------
3.	Vulns: HP Distributed Computing Environment Buffer Overrun Vulnerability

Sun, 25 Jul 2004 19:26:10 GMT

---------------------------------------------------------------------- Ars Technica ----------------------------------------------------------------------
1.	Et Cetera: Lance Armstrong delivers the whup-ass edition. Round up, including: Intel is delaying the Alviso and Sonoma chipsets, pushing "Centrino 2" back into 2005. By Ken "Caesar" Fisher.
2.	Sunday movie mania: Star Wars and Transformers news. This weekend we learned a few things that may be of interest to geek moviegoers everywhere. By Ken "Caesar" Fisher.
---------------------------------------------------------------------- Slashdot: ----------------------------------------------------------------------
3.	RIAA Continues Distributing Dud CDs to Satisfy Settlement

Sun, 25 Jul 2004 15:24:50 GMT

---------------------------------------------------------------------- Slashdot: ----------------------------------------------------------------------
1.	RMS Weighs In On SPF/Sender-ID License
---------------------------------------------------------------------- SecurityFocus Vulns ----------------------------------------------------------------------
2.	Vulns: Linux Kernel chown() System Call Group Ownership Alteration Vulnerability. The chown(2) system call is a POSIX standard system call allowing the modification of user and group ownership of files. Regular users are able to change group ownership ...
3.	Vulns: Linux Kernel Floating Point Register Contents Leak Vulnerability. The Linux kernel is reported prone to a data disclosure vulnerability. The issue is reported to exist because the Kernel context switch code checks only the psr.mfh bit a...
4.	Vulns: Linux VServer Project ProcFS Weak Sharing Permissions Vulnerability. The Linux VServer Project is implemented with a Linux kernel patch and a group of tools that facilitate the partition of a single Linux server into multiple virtual serve...
---------------------------------------------------------------------- NewsIsFree: Security ----------------------------------------------------------------------
5.	The Changing Threat Landscape
6.	ET first contact 'within 20 years'
7.	Windows XP Service Pack 2: Install With Care
8.	Virus purporting bin Laden suicide hits Web
9.	More Open-Source Morsels on Microsoft's Plate?
10.	US criticised over cyber-security
11.	Completely secure networks get one step closer

Sun, 25 Jul 2004 12:23:49 GMT

Sun, 25 Jul 2004 11:53:39 GMT

---------------------------------------------------------------------- Yahoo! News - Technology ----------------------------------------------------------------------
1.	Online Media Drop Gimmicks for Conventions (AP). AP - Gone from Internet coverage of the political conventions are most of the gimmicks, like 360-degree cameras that Web surfers can control from their homes. Also gone are television-style reports at USA Today's Web site and an original newscast from America Online Inc.
---------------------------------------------------------------------- Slashdot: ----------------------------------------------------------------------
2.	Attention Bonds Gain Momentum
---------------------------------------------------------------------- The Register ----------------------------------------------------------------------
3.	The Houston Airport Rangers. Opinion Perimeter security. On horseback
---------------------------------------------------------------------- NewsIsFree: Security ----------------------------------------------------------------------
4.	Security Focus: Lexmark Network Printer HTTP Server Denial Of Service Vulnerability

Sun, 25 Jul 2004 10:23:09 GMT

Sun, 25 Jul 2004 09:22:50 GMT

---------------------------------------------------------------------- NewsIsFree: Security ----------------------------------------------------------------------
1.	Collaboration in a Secure Development Process Part 1

Sun, 25 Jul 2004 09:22:49 GMT

---------------------------------------------------------------------- Dilbert ----------------------------------------------------------------------
1.	Dilbert for 25 Jul 2004.
---------------------------------------------------------------------- BBC News \| Technology \| UK Edition ----------------------------------------------------------------------
2.	Pushing computers to the limit. Computing power has risen phenomenally in the past 40 years and new approaches could help to keep it growing.
---------------------------------------------------------------------- Slashdot: ----------------------------------------------------------------------
3.	Operation Moon Bounce

Sun, 25 Jul 2004 06:21:49 GMT

---------------------------------------------------------------------- Slashdot: ----------------------------------------------------------------------
1.	Ethernet at 10 Gbps
---------------------------------------------------------------------- NewsIsFree: Security ----------------------------------------------------------------------
2.	More rss feeds from SecurityFocus
3.	BugTraq: eSeSIX Thintune thin client multiple vulnerabilities
4.	BugTraq: Re: eSafe: Could this be exploited?
5.	BugTraq: MS SMS DOS Proof-of-concept code and Snort sig
6.	BugTraq: Easyins Stadtportal
7.	Vulns: Leigh Business Enterprises Web HelpDesk SQL Injection Vulnerability
8.	Vulns: Mensajeitor Tag Board Authentication Bypass Vulnerability
9.	Vulns: Polar Helpdesk Cookie Based Authentication System Bypass Vulnerability
10.	Vulns: Dr.Cat Drcatd Multiple Local Buffer Overflow Vulnerabilities
11.	Collaboration in a Secure Development Process Part 1
12.	Serena TeamTrack LoginPage Arbitrary Record Disclosure
13.	SAP R/3 46C/D Brute Force Logins Bypass Account Locking

Sun, 25 Jul 2004 03:40:19 GMT

---------------------------------------------------------------------- BBC News \| Technology \| UK Edition ----------------------------------------------------------------------
1.	Bin Laden 'suicide' virus on net. A virus purporting to show images of Osama bin Laden's suicide has been unleashed on the internet, experts warn.
---------------------------------------------------------------------- Yahoo! News - Technology ----------------------------------------------------------------------
2.	Parents Reconsider Technology for Kids (AP). AP - Amanda Cunningham started her daughter on computers at 2 1/2 with "Reader Rabbit" software and Web sites like Sesame Street. Like any parent, she was proud Madeline could master the mouse so young. But Cunningham soon realized Madeline, now 4, wasn't really learning anything. She just kept clicking, dragging and playing the same games over and over. Now, she's in no rush to get her 1-year-old son, Liam, on computers or the Internet.
---------------------------------------------------------------------- Slashdot: ----------------------------------------------------------------------
3.	By Road and Rail?

Sun, 25 Jul 2004 01:09:28 GMT

---------------------------------------------------------------------- Slashdot: ----------------------------------------------------------------------
1.	Star Wars Episode III: Revenge of the Sith

Sun, 25 Jul 2004 00:09:09 GMT

---------------------------------------------------------------------- BBC News \| Technology \| UK Edition ----------------------------------------------------------------------
1.	Bin Laden 'suicide' virus appears. A virus purporting to show images of Osama bin Laden's suicide has been unleashed on the internet, experts warn.

Sun, 25 Jul 2004 00:09:08 GMT

---------------------------------------------------------------------- Penny Arcade! ----------------------------------------------------------------------
1.	San Diego Sketchbook: The Pain Of Rob Liefeld.
2.	San Diego Sketchbook: Adult Content.
---------------------------------------------------------------------- Slashdot: ----------------------------------------------------------------------
3.	FreeBSD Moves to X.Org
---------------------------------------------------------------------- SecurityFocus Vulns ----------------------------------------------------------------------
4.	Vulns: APC PowerChute Business Edition Unspecified Denial Of Service Vulnerability. APC PowerChute Business Edition is a software package that will safely shutdown computer systems when UPS power starts to fail. It is intended for use with Unix and Linux...

Sat, 24 Jul 2004 17:06:49 GMT

---------------------------------------------------------------------- Yahoo! News - Technology ----------------------------------------------------------------------
1.	Online Media Drop Gimmicks for Conventions (AP). AP - Gone from Internet coverage of the political conventions are most of the gimmicks, like 360-degree cameras that Web surfers can control from their homes. Also gone are television-style reports at USA Today's Web site and an original newscast from America Online Inc.
---------------------------------------------------------------------- Slashdot: ----------------------------------------------------------------------
2.	Marian The Robot Librarian
---------------------------------------------------------------------- SecurityFocus Vulns ----------------------------------------------------------------------
3.	BugTraq: EasyWeb FileManager Directory Traversal. Sender: [sullo at cirt dot net]
4.	BugTraq: Re: eSafe: Could this be exploited?. Sender: Nick FitzGerald [nick at virus-l dot demon dot co dot uk]
5.	BugTraq: eSeSIX Thintune thin client multiple vulnerabilities. Sender: Loss, Dirk [Dirk dot Loss at it-consult dot net]
6.	BugTraq: MS SMS DOS Proof-of-concept code and Snort sig. Sender: [wang at readyresponse dot org]
7.	Vulns: Moodle Language Setting Unspecified Vulnerability. Moodle is an open source course management system (CMS) implemented in PHP and designed for online courseware and e-learning. It is freely available under the GNU Genera...

Sat, 24 Jul 2004 16:37:23 GMT

---------------------------------------------------------------------- Slashdot: ----------------------------------------------------------------------
1.	Peter Gabriel: Digital Music Downloading's Future

Sat, 24 Jul 2004 15:56:26 GMT

---------------------------------------------------------------------- Slashdot: ----------------------------------------------------------------------
1.	Peter Gabriel: Digital Music Downloading's Future