[Full-disclosure] PBNJ 2.04 - a suite of tools to monitor changes on a network over time.

2006-12-04 Thread Joshua D. Abraham
Hey, I just wanted to announce that PBNJ 2.04 was released. There were various updates to the documentation as well as removing the need to pass -s/--scan when performing a scan. PBNJ is a network suite to monitor changes that occur on a network over time. It does this by checking for changes on

Re: [Full-disclosure] Financial firms warned of Qaeda cyber attack

2006-12-04 Thread ninjadaito
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Bah!! Al-Qaeda this, Al-Qaeda that, links to Al-Qaeda - pfft! Seems that Al-Qaeda is as much under everybody's bed as Joseph McCarthy's communists once were. Whenever anything remotely whiffy happens, Al-Qaeda is behind it. If your peanuts are a

[Full-disclosure] TSRT-06-14: IBM Tivoli Storage Manager Mutiple Buffer Overflow Vulnerabilities

2006-12-04 Thread TSRT
TSRT-06-14: IBM Tivoli Storage Manager Mutiple Buffer Overflow Vulnerabilities http://www.tippingpoint.com/security/advisories/TSRT-06-14.html December 4, 2006 -- CVE ID: CVE-2006-5855 -- Affected Vendor: IBM -- Affected Products: Tivoli Storage Manager <5.2.9 Tivoli Storage Manager

[Full-disclosure] [USN-391-1] libgsf vulnerability

2006-12-04 Thread Kees Cook
=== Ubuntu Security Notice USN-391-1 December 04, 2006 libgsf vulnerability CVE-2006-4514 === A security issue affects the following Ubuntu releases: Ubuntu 5.10 Ubuntu 6.06 L

[Full-disclosure] [USN-392-1] xine-lib vulnerability

2006-12-04 Thread Kees Cook
=== Ubuntu Security Notice USN-392-1 December 04, 2006 xine-lib vulnerability CVE-2006-6172 === A security issue affects the following Ubuntu releases: Ubuntu 5.10 Ubuntu 6.06

Re: [Full-disclosure] Financial firms warned of Qaeda cyber attack

2006-12-04 Thread Zub By
Since when did web servers share resources with the rest of the bank networks? So a bank turns off its online banking system for a few hours for "maintenance", this isn't the end of the world! On 12/4/06, TheGesus <[EMAIL PROTECTED]> wrote: On 12/3/06, Dave No, not that one Korn <[EMAIL PROTEC

[Full-disclosure] rPSA-2006-0211-2 doxygen libpng

2006-12-04 Thread rPath Update Announcements
rPath Security Advisory: 2006-0211-2 Published: 2006-11-15 Updated: 2006-12-04 added doxygen to advisory Products: rPath Linux 1 Rating: Minor Exposure Level Classification: Indirect Deterministic Denial of Service Updated Versions: libpng=/[EMAIL PROTECTED]:devel//1/1.2.13-0.1-1 do

Re: [Full-disclosure] Financial firms warned of Qaeda cyber attack

2006-12-04 Thread TheGesus
On 12/3/06, Dave No, not that one Korn <[EMAIL PROTECTED]> wrote: > TheGesus wrote: > > > More and more people are hearing the recommendation to "withdraw a > > little extra cash out of the banks" to prepare for cyber attacks. If > > as many as 1.32% of bank depositors take their advice and withdra

[Full-disclosure] [ MDKSA-2006:214-1 ] - Updated gv packages fix buffer overflow vulnerability

2006-12-04 Thread security
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 ___ Mandriva Linux Security Advisory MDKSA-2006:214-1 http://www.mandriva.com/security/ ___

[Full-disclosure] F-Prot Antivirus for Unix: heap overflow and Denial of Service

2006-12-04 Thread research
Name: F-Prot Antivirus for Unix: heap overflow and Denial of Service Vendor: http://www.f-prot.com Release date: 4 Dec, 2006 URL: http://gleg.net/fprot.txt Author: Evgeny Legerov <[EMAIL PROTECTED]> I. DESCRIPTION Two vulnerabilities in F-Prot Antivirus 4.6.6 for Unix

[Full-disclosure] [SECURITY] [DSA 1227-1] New Mozilla Thunderbird packages fix several vulnerabilities

2006-12-04 Thread Martin Schulze
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 - -- Debian Security Advisory DSA 1227-1[EMAIL PROTECTED] http://www.debian.org/security/ Martin Schulze December 4th, 2006