!+!+!+!+!+!+!+!+!+!+!+!+!+!+!+!+!+!+!+!+!+!+!+!+!+!+!+
CryptoMail provides free end-to-end message encryption.
http://www.cryptomail.org/ Ensure your right to privacy.
Traditional email messages are not secure. They are sent as
clear-text and thus are readable by anyone with the motivation
to acquire a copy.
!+!+!+!+!+!+!+!+!+!+!+!+!+!+!+!+!+!+!+!+!+!+!+!+!+!+!+

——————————————————————————
FREE WHITE PAPER - Wireless LAN Security: What Hackers Know That You Don’t

Learn the hacker’s secrets that compromise wireless LANs. Secure your
WLAN by understanding these threats, available hacking tools and proven
countermeasures. Defend your WLAN against man-in-the-Middle attacks and
session hijacking, denial-of-service, rogue access points, identity
thefts and MAC spoofing. Request your complimentary white paper at:

http://www.securityfocus.com/sponsor/AirDefense_pen-test_050801
——————————————————————————-

Vs-ftp is considered good if patches (like everything)

IIS FTP has had numerous vulnerabilities, especially in the past - the
default proxy forwarding was a good one

CSW

—–Original Message—–
From: Roger A. Grimes [mailto:roger@banneretcs.com]
Sent: 23 July 2005 2:54
To: Leon; security-basics@securityfocus.com
Subject: RE: ftp server windows

IIS’s FTP is an excellent, secure FTP server. I don’t know of any
exploits against it ever other than one obscure client-side
cross-scripting type of attack that was never publicly exploited.

I’ve been running it for years and never a single problem.

Roger

************************************************************************
***
*Roger A. Grimes, Banneret Computer Security, Computer Security
Consultant *CPA, CISSP, MCSE: Security (NT/2000/2003/MVP), CNE (3/4),
CEH, CHFI
*email: roger@banneretcs.com
*cell: 757-615-3355
*Author of Malicious Mobile Code: Virus Protection for Windows by
O’Reilly *http://www.oreilly.com/catalog/malmobcode
*Author of Honeypots for Windows (Apress)
*http://www.apress.com/book/bookDisplay.html?bID=281
************************************************************************
****

—–Original Message—–
From: Leon [mailto:roastin@yahoo.com]
Sent: Thursday, July 21, 2005 8:19 PM
To: security-basics@securityfocus.com
Subject: ftp server windows

Does anyone know of a good ftp sever for windows with a good security
track record. WS_FTP is out because of the last vuln where not only did
they not address the issue when it was posted on bugtraq but it took
them close to 3 weeks to come up with a patch.

I have been told about serv-u and bulletproof. Are there any others
that I should be aware of (with a good history any can google ftp server
windows).

Thanks

____________________________________________________
Start your day with Yahoo! - make it your home page
http://www.yahoo.com/r/hs

Sony’s legal issues
by Mark Rasch
2005-11-14

Sony is in the spotlight over the rootkit they distribute on some of
their music CDs, and it bring up interesting legal issues relating to
EULAs and enforcement by the FTC.

http://www.securityfocus.com/columnists/369

Sophos has issued protection for W32/Rbot-AXG.

At the time of writing, Sophos has received a small number of
reports of this worm from the wild.

Customers using EM Library, Enterprise Console, PureMessage or
any of our Sophos small business solutions will be automatically
protected at their next scheduled update.

Information about W32/Rbot-AXG can be found at:
http://www.sophos.com/virusinfo/analyses/w32rbotaxg.html

The W32/Rbot-AXG virus identity file (IDE) includes detection for:

Troj/BWCon-A
http://www.sophos.com/virusinfo/analyses/trojbwcona.html
Troj/Dupa-B
http://www.sophos.com/virusinfo/analyses/trojdupab.html
Dial/Dialprog-C
http://www.sophos.com/virusinfo/analyses/dialdialprogc.html
Dial/Dialprog-B
http://www.sophos.com/virusinfo/analyses/dialdialprogb.html
Troj/BagleDl-AD
http://www.sophos.com/virusinfo/analyses/trojbagledlad.html
Troj/Neclipse-A
http://www.sophos.com/virusinfo/analyses/trojneclipsea.html
Troj/Rezim-A
http://www.sophos.com/virusinfo/analyses/trojrezima.html
Troj/VBbot-E
http://www.sophos.com/virusinfo/analyses/trojvbbote.html
Troj/LdPinch-UE
http://www.sophos.com/virusinfo/analyses/trojldpinchue.html
W32/Sober-U
http://www.sophos.com/virusinfo/analyses/w32soberu.html
W32/Rbot-AXH
http://www.sophos.com/virusinfo/analyses/w32rbotaxh.html

Customers with 3.xx or lower versions of Sophos Anti-Virus,

who are not running EM Library, can manually download the IDE

for W32/Rbot-AXG from:

http://www.sophos.com/downloads/ide/rbot-axg.ide

Read about how to use IDE files at

http://www.sophos.com/support/knowledgebase/article/363.html

———————————————————————
To unsubscribe, email: notification-unsubscribe@lists.sophos.com
For additional commands, email: notification-faq@lists.sophos.com

ServerString “”

jskumar67@gmail.com wrote:

>Hi folks,
>Any idea how to configure Sun One web server to hide its banner.
>
>
>

——————————-
This email message and any attachment(s) is intended only for the
person(s) or entity(entities) to whom it is addressed. The
information it contains may be classified as IN CONFIDENCE and may be
legally privileged. If you are not the intended recipient any use,
disclosure or copying of the message or attachment(s) is strictly
prohibited. If you have received this message in error please
notify us immediately and destroy it and any attachment(s).
Thank you. The Ministry of Social Development accepts no
responsibility for changes made to this message or to any
attachment(s) after transmission from the Ministry.
——————————-

SUPPORT COMMUNICATION - SECURITY BULLETIN

Document ID: c00555516
Version: 1

HPSBUX02075 SSRT051074 - HP-UX Running xterm Local Unauthorized
Access

NOTICE: The information in this Security Bulletin should be acted
upon as soon as possible.

Release Date: 2005-11-11
Last Updated: 2005-11-13

Potential Security Impact: Local unauthorized access

Source: Hewlett-Packard Company,
HP Software Security Response Team

VULNERABILITY SUMMARY
A potential security vulnerability has been identified with HP-UX
running xterm. The vulnerability could be exploited by a local
user to gain unauthorized access.

References: none

SUPPORTED SOFTWARE VERSIONS*: ONLY impacted versions are listed.
HP-UX B.11.00, B.11.11, B.11.23.

BACKGROUND

To determine if an HP-UX system has an affected version,
search the output of “swlist -a revision -l fileset”
for one of the filesets listed below. For affected systems
verify that the recommended action has been taken.

AFFECTED VERSIONS

HP-UX B.11.00
=============
X11.X11-RUN-CL
action: remove PHSS_32109 if installed

HP-UX B.11.11
=============
X11.X11-RUN-CL
action: remove PHSS_30791 if installed

HP-UX B.11.11
=============
X11.X11-RUN-CL
action: remove PHSS_33589 if installed

HP-UX B.11.23
=============
X11.X11-RUN-CL
action: remove PHSS_31833 if installed

HP-UX B.11.23
=============
X11.X11-RUN-CL
action: remove PHSS_32366 if installed

END AFFECTED VERSIONS

RESOLUTION

Until patches are provided to resolve the issue avoid using the
potentially vulnerable versions of /usr/bin/X11/xterm.

One solution is to remove the patches listed in the Background
section (above). The patches listed are the only patches
containing the potentially vulnerable xterm.

An alternative to removing the patches is to use
/usr/contrib/bin/X11R5/xterm.

For example:

cp /usr/bin/X11/xterm /usr/bin/X11/xterm.nosuid
chmod 555 /usr/bin/X11/xterm.nosuid
cp /usr/contrib/bin/X11R5/xterm /usr/bin/X11/xterm

MANUAL ACTIONS: Yes - NonUpdate
Remove the patches listed in the Background section
or use /usr/contrib/bin/X11R5/xterm.

PRODUCT SPECIFIC INFORMATION

HP-UX Security Patch Check: Security Patch Check revision B.02.00
analyzes all HP-issued Security Bulletins to provide a subset of
recommended actions that potentially affect a specific HP-UX
system. For more information:
http://www.software.hp.com/cgi-bin/swdepot_parser.cgi/cgi
displayProductInfo.pl?productnumber=B6834AAtN

UPDATE HISTORY
Initial release: 13 November 2005

Support: For further information, contact normal HP Services
support channel.

Report: To report a potential security vulnerability with any HP
supported product, send Email to: security-alert@hp.com. It is
strongly recommended that security related information being
communicated to HP be encrypted using PGP, especially exploit
information. To get the security-alert PGP key, please send an
e-mail message as follows:
To: security-alert@hp.com
Subject: get key

Subscribe: To initiate a subscription to receive future HP
Security Bulletins via Email:
http://h30046.www3.hp.com/driverAlertProfile.php?regioncode=NA&
langcode=USENG&jumpid=in_SC-GEN__driverITRC&topiccode=ITRC

On the web page: ITRC security bulletins and patch sign-up
Under Step1: your ITRC security bulletins and patches
- check ALL categories for which alerts are required and
continue.
Under Step2: your ITRC operating systems
- verify your operating system selections are checked and
save.

To update an existing subscription:
http://h30046.www3.hp.com/subSignIn.php
Log in on the web page:
Subscriber’s choice for Business: sign-in.
On the web page:
Subscriber’s Choice: your profile summary
- use Edit Profile to update appropriate sections.

To review previously published Security Bulletins visit:
http://www.itrc.hp.com/service/cki/secBullArchive.do

* The Software Product Category that this Security Bulletin
relates to is represented by the 5th and 6th characters of the
Bulletin number in the title:

GN = HP General SW,
MA = HP Management Agents,
MI = Misc. 3rd party SW,
MP = HP MPE/iX,
NS = HP NonStop Servers,
OV = HP OpenVMS,
PI = HP Printing & Imaging,
ST = HP Storage SW,
TL = HP Trusted Linux,
TU = HP Tru64 UNIX,
UX = HP-UX,
VV = HP Virtual Vault

System management and security procedures must be reviewed
frequently to maintain system integrity. HP is continually
reviewing and enhancing the security features of software products
to provide customers with current secure solutions.

“HP is broadly distributing this Security Bulletin in order to
bring to the attention of users of the affected HP products the
important security information contained in this Bulletin. HP
recommends that all users determine the applicability of this
information to their individual situations and take appropriate
action. HP does not warrant that this information is necessarily
accurate or complete for all user situations and, consequently, HP
will not be responsible for any damages resulting from user’s use
or disregard of the information provided in this Bulletin. To the
extent permitted by law, HP disclaims all warranties, either
express or implied, including the warranties of merchantability
and fitness for a particular purpose, title and non-infringement.”

(c)Copyright 2005 Hewlett-Packard Development Company, L.P.
Hewlett-Packard Company shall not be liable for technical or
editorial errors or omissions contained herein. The information
provided is provided “as is” without warranty of any kind. To the
extent permitted by law, neither HP nor its affiliates,
subcontractors or suppliers will be liable for incidental, special
or consequential damages including downtime cost; lost profits;
damages relating to the procurement of substitute products or
services; or damages for loss of data, or software restoration.
The information in this document is subject to change without
notice. Hewlett-Packard Company and the names of Hewlett-Packard
products referenced herein are trademarks of Hewlett-Packard
Company in the United States and other countries. Other product
and company names mentioned herein may be trademarks of their
respective owners.

—–BEGIN PGP SIGNATURE—–
Version: PGP 8.1

iQA/AwUBQ3h8SOAfOvwtKn1ZEQL6wACffte15IwZ6jsPyDyXqSgZjHJewfwAn2FE
KwTYRaYJm6FFCnsglWA5N06N
=N5A/
—–END PGP SIGNATURE—–

I’m looking to get blunt feedback from security analysts on beta product
releases, but before I describe the product or make a call for beta
testers I have a few general questions:

* Who are the leading contracted security testing companies, and
what’s the advantage of using them?
* Who are the leading non-contracted security testing companies?
* Are there lists dedicated to testing security products?
* On which lists is it permissible to post calls for beta testers?

Thanks in advance,

Bill Stout

www.greenborder.com

MD4 collisions can be generated almost instantly, MD5 can be generated in
approximately 45 minutes on my p4 1.6ghz (on average).

http://www.stachliu.com/collisions.html

Enjoy
-Patrick Stach

PS. Please do not reply to this address.